Is there a way to restrict access for specific (non admin) users to cmd, windows tools, explorer on an Wim XP system?
Partially I consider to do this through group policy & logon script 1. deny access to cmd, local disks, registry editor, etc from group policy (allow batch) 2. configure a logon script which for admin users removes this restriction from registry, for non admin users it will not be able to remove restrictions because it does not have rights.
Is there a better and which should also cover more restriction items?