Question : Restrict acces to Computer Management

Is it possible to restrict users from accesing the Computer Management via right click - My computer - Manage ???

Either via GPO og Regisrty????

Regards.

/Jesper

Answer : Restrict acces to Computer Management

Yes - use a software restriction polict in GPO

restrict access to  Compmgmt.msc

Software Restriction Policies
Blocking Programs, Executables and scripts
2K/XP/2003

Software restriction policies can be applied to just about any program script or file, the big advantage to using this method is, it digitally fingerprints the file so if you have a “clever user” even changing the executable or file name wont let them run it.

As With all policies you can deploy them locally on each machine (start > run > gpedit.msc) or for everyone at once via the Domain Group Policy (AD users and computers or GPMC (group policy management console)

Whilst in The Policy Manager (either local or domain)

Navigate to

Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies

By Default there is nothing there

Click Action  > Create New Policy
Right Click Additional Rules > Create Hash Rule
Click the Browse Button
Navigate to the Executable/Program you want to stop users using.
Click OK
Set the Security Level to “Disallowed”
Click Apply > OK


References
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx#EKAA
http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch06.mspx