up vote 1 down vote favorite
share [g+] share [fb]

Having started with, and later abandoning Novell, we do NOT have a domain. We have about 50 - 70 uses that log in to a 2003 server dedicated to RDC connections.
Regular users that belong to no groups other than USERS and REMOTE DESKTOP USERS can get to computer management and see everything that's there.

How can I stop this?

link|improve this question
feedback

1 Answer

up vote 0 down vote

No domains, no group policies...you can change permissions on the snap-ins to only allow your username, but you might have to look at programs that whitelist executables to fully prevent users from running things they're not supposed to get into.

If they're not very advanced users you could remove the tools from any menus (are they poking around where they're not supposed to?)

You might also need to have a company policy that outlines what is acceptable and not acceptable use.

Personally I'd look at a whitelisting of executables solution or migrate to active directory where you can get finer grained control over permissions, which may also help with your mapping of shares and such as well.

link|improve this answer
Hey thanks for the reply. One of my main concerns is Computer Management which anyone can get to by right clicking my computer and choosing "Manage". Can you tell me how to prevent users from doing that? Thanks again! -Rick – R P Sep 4 '11 at 18:45
cancel that! I just changed permissions on mmc.exe to admins only, and it works great! – R P Sep 4 '11 at 20:47
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.