Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Having started with, and later abandoning Novell, we do NOT have a domain. We have about 50 - 70 uses that log in to a 2003 server dedicated to RDC connections.
Regular users that belong to no groups other than USERS and REMOTE DESKTOP USERS can get to computer management and see everything that's there.

How can I stop this?

share|improve this question

1 Answer 1

No domains, no group policies...you can change permissions on the snap-ins to only allow your username, but you might have to look at programs that whitelist executables to fully prevent users from running things they're not supposed to get into.

If they're not very advanced users you could remove the tools from any menus (are they poking around where they're not supposed to?)

You might also need to have a company policy that outlines what is acceptable and not acceptable use.

Personally I'd look at a whitelisting of executables solution or migrate to active directory where you can get finer grained control over permissions, which may also help with your mapping of shares and such as well.

share|improve this answer
    
Hey thanks for the reply. One of my main concerns is Computer Management which anyone can get to by right clicking my computer and choosing "Manage". Can you tell me how to prevent users from doing that? Thanks again! -Rick –  R P Sep 4 '11 at 18:45
    
cancel that! I just changed permissions on mmc.exe to admins only, and it works great! –  R P Sep 4 '11 at 20:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.