pipi
asked on
prevent password change under xp home edition
We have WindowsXp home edition on some computers here at school. These computers will be used by different
students. I have to give them all the same loginname and password, for some reasons I can not do else.
Now my question is: can I prevent this useracount to change his password to log in, because when he
does, the next user can't log in anymore. I don't want to use the account guest. I already looked around
on the Internet but I can't find something like policy editor for the Home edition. Is there anyone
who knows a solution for this.
Thanks already;
students. I have to give them all the same loginname and password, for some reasons I can not do else.
Now my question is: can I prevent this useracount to change his password to log in, because when he
does, the next user can't log in anymore. I don't want to use the account guest. I already looked around
on the Internet but I can't find something like policy editor for the Home edition. Is there anyone
who knows a solution for this.
Thanks already;
ASKER
Steenlewis,
I visited the 3 web sites you suggested and the second one solved halve off my problem. I first had to give the user administrator-rights, let him change the registry key ( actually I did this in his name ) and then switched him back to user with restricted rights.Now when he pesses Alt-Ctrl-Del, the button change password' is disabled. So that's just fine. But he still can change his password in 'Control Panel - User accounts' or something like that ( I have the dutch version). Do you also know how I can prevent the user from accessing this item in contrl panel?
I visited the 3 web sites you suggested and the second one solved halve off my problem. I first had to give the user administrator-rights, let him change the registry key ( actually I did this in his name ) and then switched him back to user with restricted rights.Now when he pesses Alt-Ctrl-Del, the button change password' is disabled. So that's just fine. But he still can change his password in 'Control Panel - User accounts' or something like that ( I have the dutch version). Do you also know how I can prevent the user from accessing this item in contrl panel?
If you go to start | run and type mmc then go to file -- add/remove snapin add 'local computer policy'
Then go to:
user configuration | windows settings | administrative templates | control panel
click on 'hide specified control panel applets'
the name for the password applet is: NUSRMGR
Then go to:
user configuration | windows settings | administrative templates | control panel
click on 'hide specified control panel applets'
the name for the password applet is: NUSRMGR
Save as Console1
ASKER
shekerra,
I also had been thinking to try this but we have the Home edition and this is only possible in the Professional. That's what I know about it, if you think there is another way to accomplish the same in the Home edition, I would be happy to here about it. Thanks anyway.
I also had been thinking to try this but we have the Home edition and this is only possible in the Professional. That's what I know about it, if you think there is another way to accomplish the same in the Home edition, I would be happy to here about it. Thanks anyway.
so in other words, make the students accounts standard or limited
ASKER
I did logged out and on again after changing the type of account for the student. But they still can change / delete their own password by control panel - useraccounts. I think with policy editor the administrator can hide or disable this option in the control panel, but this editor does not exist in XP Home edition. So maybe it just isn't possible ( but I doubt, maybe by changing some key-value in the regitor - but which one? ).
You would have to do this with each user logged in:
Paste this into notepad and once they are logged in have them (or you double-click this reg file and it will disable control panel.)
************begin here - copy everything below this line
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar e\Microsof t\Windows\ CurrentVer sion\Polic ies\Explor er]
"NoDriveTypeAutoRun"=dword :00000091
"DisallowCpl"=dword:000000 01
"NoControlPanel"=dword:000 00001
[HKEY_CURRENT_USER\Softwar e\Microsof t\Windows\ CurrentVer sion\Polic ies\Explor er\Disallo wCpl]
"1"="userpasswords2"
*************end here - copy everthing above this line
then save as "NCP.reg" with the quotations and not as a text file.
Paste this into notepad and once they are logged in have them (or you double-click this reg file and it will disable control panel.)
************begin here - copy everything below this line
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar
"NoDriveTypeAutoRun"=dword
"DisallowCpl"=dword:000000
"NoControlPanel"=dword:000
[HKEY_CURRENT_USER\Softwar
"1"="userpasswords2"
*************end here - copy everthing above this line
then save as "NCP.reg" with the quotations and not as a text file.
ASKER
Thanks shekerra,
I hope I will be able to try this today, if I have some minutes time.I let you know the result.
Has this to be done every time the user logs in, or can it be set to prevent the user forever to change his password?
till soon.
I hope I will be able to try this today, if I have some minutes time.I let you know the result.
Has this to be done every time the user logs in, or can it be set to prevent the user forever to change his password?
till soon.
You should only have to do it one time - then it will remain with the user. (Well you will have to do it for every new user - but only once should suffice.)
ASKER
I'm very curious to try it out and see the result.
Maybe this afternoon.
Maybe this afternoon.
ASKER
Shekerra,
Yes,Yes,Yes
I just tried it out and it worked perfect. The whole control panel is unavailable for the user. That 's more then I wanted, but I think it's safer this way, and will take me some work out of my hands.
So about the points, I think for the not so experienced user the solution that stevenlewis proposed was satisfying ( disable the button ' change password when the user hits crtl-alt-del), but for the more experienced user this is not enough and your solution helps here. So you both gave me a part of the solution.
I would like to give you both 300 points, if this is possible. If not would sombody let me know.
Thanks again both off you.
Yes,Yes,Yes
I just tried it out and it worked perfect. The whole control panel is unavailable for the user. That 's more then I wanted, but I think it's safer this way, and will take me some work out of my hands.
So about the points, I think for the not so experienced user the solution that stevenlewis proposed was satisfying ( disable the button ' change password when the user hits crtl-alt-del), but for the more experienced user this is not enough and your solution helps here. So you both gave me a part of the solution.
I would like to give you both 300 points, if this is possible. If not would sombody let me know.
Thanks again both off you.
Thanks pipi - glad the teamwork solution worked for you :)
You can award one expert the points in this particular Queue - then make a new question in XP awarding the other person 300 points.
Example:
300 points for thenameoftheexpert
then inside the question:
For your contribution to:
https://www.experts-exchange.com/winxp/Q.20282412.html
You can award one expert the points in this particular Queue - then make a new question in XP awarding the other person 300 points.
Example:
300 points for thenameoftheexpert
then inside the question:
For your contribution to:
https://www.experts-exchange.com/winxp/Q.20282412.html
pipi, glad we were able to help
Bev, teamwork rulez!
Steve
Bev, teamwork rulez!
Steve
ASKER
shekerra,
do you mean I give one expert the 300 points, ask a new question with the text you proposed inside and then wait until the second expert answers to give him the other 300 points?
do you mean I give one expert the 300 points, ask a new question with the text you proposed inside and then wait until the second expert answers to give him the other 300 points?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If you go to start | run and type mmc then go to file -- add/remove snapin add 'local computer policy'
Then go to:
user configuration | windows settings | administrative templates | control panel
click on 'hide specified control panel applets'
the name for the password applet is: NUSRMGR
Comment from shekerra 03/28/2002 01:00PM PST
Save as Console1
Comment from pipi 03/28/2002 11:44PM PST
shekerra,
I also had been thinking to try this but we have the Home edition and this is only possible in the Professional. That's what I know about it, if you think there is another way to accomplish the same in the Home edition, I would be happy to here about it. Thanks anyway.
Comment from stevenlewis 03/29/2002 03:02AM PST
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q288391
Comment from stevenlewis 03/29/2002 03:04AM PST
so in other words, make the students accounts standard or limited
Comment from pipi 03/29/2002 03:42AM PST
I did logged out and on again after changing the type of account for the student. But they still can change / delete their own password by control panel - useraccounts. I think with policy editor the administrator can hide or disable this option in the control panel, but this editor does not exist in XP Home edition. So maybe it just isn't possible ( but I doubt, maybe by changing some key-value in the regitor - but which one? ).
Comment from shekerra 03/29/2002 03:12PM PST
You would have to do this with each user logged in:
Paste this into notepad and once they are logged in have them (or you double-click this reg file and it will disable control panel.)
************begin here - copy everything below this line
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar e\Microsof t\Windows\ CurrentVer sion\Polic ies\Explor er]
"NoDriveTypeAutoRun"=dword :00000091
"DisallowCpl"=dword:000000 01
"NoControlPanel"=dword:000 00001
[HKEY_CURRENT_USER\Softwar e\Microsof t\Windows\ CurrentVer sion\Polic ies\Explor er\Disallo wCpl]
"1"="userpasswords2"
*************end here - copy everthing above this line
then save as "NCP.reg" with the quotations and not as a text file.
Comment from pipi 04/01/2002 10:41PM PST
Thanks shekerra,
I hope I will be able to try this today, if I have some minutes time.I let you know the result.
Has this to be done every time the user logs in, or can it be set to prevent the user forever to change his password?
till soon.
Comment from shekerra 04/01/2002 10:47PM PST
You should only have to do it one time - then it will remain with the user. (Well you will have to do it for every new user - but only once should suffice.)
Comment from pipi 04/02/2002 01:01AM PST
I'm very curious to try it out and see the result.
Maybe this afternoon.
Comment from pipi 04/02/2002 06:08AM PST
Shekerra,
Yes,Yes,Yes
I just tried it out and it worked perfect. The whole control panel is unavailable for the user. That 's more then I wanted, but I think it's safer this way, and will take me some work out of my hands.
So about the points, I think for the not so experienced user the solution that stevenlewis proposed was satisfying ( disable the button ' change password when the user hits crtl-alt-del), but for the more experienced user this is not enough and your solution helps here. So you both gave me a part of the solution.
I would like to give you both 300 points, if this is possible. If not would sombody let me know.
Thanks again both off you.
Comment from shekerra 04/02/2002 08:38AM PST
Thanks pipi - glad the teamwork solution worked for you :)
You can award one expert the points in this particular Queue - then make a new question in XP awarding the other person 300 points.
Example:
300 points for thenameoftheexpert
then inside the question:
For your contribution to:
https://www.experts-exchange.com/winxp/Q.20282412.html
Comment from stevenlewis 04/02/2002 03:34PM PST
pipi, glad we were able to help
Bev, teamwork rulez!
Steve
Comment from pipi 04/02/2002 10:39PM PST
shekerra,
do you mean I give one expert the 300 points, ask a new question with the text you proposed inside and then wait until the second expert answers to give him the other 300
Then go to:
user configuration | windows settings | administrative templates | control panel
click on 'hide specified control panel applets'
the name for the password applet is: NUSRMGR
Comment from shekerra 03/28/2002 01:00PM PST
Save as Console1
Comment from pipi 03/28/2002 11:44PM PST
shekerra,
I also had been thinking to try this but we have the Home edition and this is only possible in the Professional. That's what I know about it, if you think there is another way to accomplish the same in the Home edition, I would be happy to here about it. Thanks anyway.
Comment from stevenlewis 03/29/2002 03:02AM PST
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q288391
Comment from stevenlewis 03/29/2002 03:04AM PST
so in other words, make the students accounts standard or limited
Comment from pipi 03/29/2002 03:42AM PST
I did logged out and on again after changing the type of account for the student. But they still can change / delete their own password by control panel - useraccounts. I think with policy editor the administrator can hide or disable this option in the control panel, but this editor does not exist in XP Home edition. So maybe it just isn't possible ( but I doubt, maybe by changing some key-value in the regitor - but which one? ).
Comment from shekerra 03/29/2002 03:12PM PST
You would have to do this with each user logged in:
Paste this into notepad and once they are logged in have them (or you double-click this reg file and it will disable control panel.)
************begin here - copy everything below this line
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar
"NoDriveTypeAutoRun"=dword
"DisallowCpl"=dword:000000
"NoControlPanel"=dword:000
[HKEY_CURRENT_USER\Softwar
"1"="userpasswords2"
*************end here - copy everthing above this line
then save as "NCP.reg" with the quotations and not as a text file.
Comment from pipi 04/01/2002 10:41PM PST
Thanks shekerra,
I hope I will be able to try this today, if I have some minutes time.I let you know the result.
Has this to be done every time the user logs in, or can it be set to prevent the user forever to change his password?
till soon.
Comment from shekerra 04/01/2002 10:47PM PST
You should only have to do it one time - then it will remain with the user. (Well you will have to do it for every new user - but only once should suffice.)
Comment from pipi 04/02/2002 01:01AM PST
I'm very curious to try it out and see the result.
Maybe this afternoon.
Comment from pipi 04/02/2002 06:08AM PST
Shekerra,
Yes,Yes,Yes
I just tried it out and it worked perfect. The whole control panel is unavailable for the user. That 's more then I wanted, but I think it's safer this way, and will take me some work out of my hands.
So about the points, I think for the not so experienced user the solution that stevenlewis proposed was satisfying ( disable the button ' change password when the user hits crtl-alt-del), but for the more experienced user this is not enough and your solution helps here. So you both gave me a part of the solution.
I would like to give you both 300 points, if this is possible. If not would sombody let me know.
Thanks again both off you.
Comment from shekerra 04/02/2002 08:38AM PST
Thanks pipi - glad the teamwork solution worked for you :)
You can award one expert the points in this particular Queue - then make a new question in XP awarding the other person 300 points.
Example:
300 points for thenameoftheexpert
then inside the question:
For your contribution to:
https://www.experts-exchange.com/winxp/Q.20282412.html
Comment from stevenlewis 04/02/2002 03:34PM PST
pipi, glad we were able to help
Bev, teamwork rulez!
Steve
Comment from pipi 04/02/2002 10:39PM PST
shekerra,
do you mean I give one expert the 300 points, ask a new question with the text you proposed inside and then wait until the second expert answers to give him the other 300
If you go to start | run and type mmc then go to file -- add/remove snapin add 'local computer policy'
Then go to:
user configuration | windows settings | administrative templates | control panel
click on 'hide specified control panel applets'
the name for the password applet is: NUSRMGR
Comment from shekerra 03/28/2002 01:00PM PST
Save as Console1
Comment from pipi 03/28/2002 11:44PM PST
shekerra,
I also had been thinking to try this but we have the Home edition and this is only possible in the Professional. That's what I know about it, if you think there is another way to accomplish the same in the Home edition, I would be happy to here about it. Thanks anyway.
Comment from stevenlewis 03/29/2002 03:02AM PST
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q288391
Comment from stevenlewis 03/29/2002 03:04AM PST
so in other words, make the students accounts standard or limited
Comment from pipi 03/29/2002 03:42AM PST
I did logged out and on again after changing the type of account for the student. But they still can change / delete their own password by control panel - useraccounts. I think with policy editor the administrator can hide or disable this option in the control panel, but this editor does not exist in XP Home edition. So maybe it just isn't possible ( but I doubt, maybe by changing some key-value in the regitor - but which one? ).
Comment from shekerra 03/29/2002 03:12PM PST
You would have to do this with each user logged in:
Paste this into notepad and once they are logged in have them (or you double-click this reg file and it will disable control panel.)
************begin here - copy everything below this line
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar e\Microsof t\Windows\ CurrentVer sion\Polic ies\Explor er]
"NoDriveTypeAutoRun"=dword :00000091
"DisallowCpl"=dword:000000 01
"NoControlPanel"=dword:000 00001
[HKEY_CURRENT_USER\Softwar e\Microsof t\Windows\ CurrentVer sion\Polic ies\Explor er\Disallo wCpl]
"1"="userpasswords2"
*************end here - copy everthing above this line
then save as "NCP.reg" with the quotations and not as a text file.
Comment from pipi 04/01/2002 10:41PM PST
Thanks shekerra,
I hope I will be able to try this today, if I have some minutes time.I let you know the result.
Has this to be done every time the user logs in, or can it be set to prevent the user forever to change his password?
till soon.
Comment from shekerra 04/01/2002 10:47PM PST
You should only have to do it one time - then it will remain with the user. (Well you will have to do it for every new user - but only once should suffice.)
Comment from pipi 04/02/2002 01:01AM PST
I'm very curious to try it out and see the result.
Maybe this afternoon.
Comment from pipi 04/02/2002 06:08AM PST
Shekerra,
Yes,Yes,Yes
I just tried it out and it worked perfect. The whole control panel is unavailable for the user. That 's more then I wanted, but I think it's safer this way, and will take me some work out of my hands.
So about the points, I think for the not so experienced user the solution that stevenlewis proposed was satisfying ( disable the button ' change password when the user hits crtl-alt-del), but for the more experienced user this is not enough and your solution helps here. So you both gave me a part of the solution.
I would like to give you both 300 points, if this is possible. If not would sombody let me know.
Thanks again both off you.
Comment from shekerra 04/02/2002 08:38AM PST
Thanks pipi - glad the teamwork solution worked for you :)
You can award one expert the points in this particular Queue - then make a new question in XP awarding the other person 300 points.
Example:
300 points for thenameoftheexpert
then inside the question:
For your contribution to:
https://www.experts-exchange.com/winxp/Q.20282412.html
Comment from stevenlewis 04/02/2002 03:34PM PST
pipi, glad we were able to help
Bev, teamwork rulez!
Steve
Comment from pipi 04/02/2002 10:39PM PST
shekerra,
do you mean I give one expert the 300 points, ask a new question with the text you proposed inside and then wait until the second expert answers to give him the other 300
Then go to:
user configuration | windows settings | administrative templates | control panel
click on 'hide specified control panel applets'
the name for the password applet is: NUSRMGR
Comment from shekerra 03/28/2002 01:00PM PST
Save as Console1
Comment from pipi 03/28/2002 11:44PM PST
shekerra,
I also had been thinking to try this but we have the Home edition and this is only possible in the Professional. That's what I know about it, if you think there is another way to accomplish the same in the Home edition, I would be happy to here about it. Thanks anyway.
Comment from stevenlewis 03/29/2002 03:02AM PST
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q288391
Comment from stevenlewis 03/29/2002 03:04AM PST
so in other words, make the students accounts standard or limited
Comment from pipi 03/29/2002 03:42AM PST
I did logged out and on again after changing the type of account for the student. But they still can change / delete their own password by control panel - useraccounts. I think with policy editor the administrator can hide or disable this option in the control panel, but this editor does not exist in XP Home edition. So maybe it just isn't possible ( but I doubt, maybe by changing some key-value in the regitor - but which one? ).
Comment from shekerra 03/29/2002 03:12PM PST
You would have to do this with each user logged in:
Paste this into notepad and once they are logged in have them (or you double-click this reg file and it will disable control panel.)
************begin here - copy everything below this line
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar
"NoDriveTypeAutoRun"=dword
"DisallowCpl"=dword:000000
"NoControlPanel"=dword:000
[HKEY_CURRENT_USER\Softwar
"1"="userpasswords2"
*************end here - copy everthing above this line
then save as "NCP.reg" with the quotations and not as a text file.
Comment from pipi 04/01/2002 10:41PM PST
Thanks shekerra,
I hope I will be able to try this today, if I have some minutes time.I let you know the result.
Has this to be done every time the user logs in, or can it be set to prevent the user forever to change his password?
till soon.
Comment from shekerra 04/01/2002 10:47PM PST
You should only have to do it one time - then it will remain with the user. (Well you will have to do it for every new user - but only once should suffice.)
Comment from pipi 04/02/2002 01:01AM PST
I'm very curious to try it out and see the result.
Maybe this afternoon.
Comment from pipi 04/02/2002 06:08AM PST
Shekerra,
Yes,Yes,Yes
I just tried it out and it worked perfect. The whole control panel is unavailable for the user. That 's more then I wanted, but I think it's safer this way, and will take me some work out of my hands.
So about the points, I think for the not so experienced user the solution that stevenlewis proposed was satisfying ( disable the button ' change password when the user hits crtl-alt-del), but for the more experienced user this is not enough and your solution helps here. So you both gave me a part of the solution.
I would like to give you both 300 points, if this is possible. If not would sombody let me know.
Thanks again both off you.
Comment from shekerra 04/02/2002 08:38AM PST
Thanks pipi - glad the teamwork solution worked for you :)
You can award one expert the points in this particular Queue - then make a new question in XP awarding the other person 300 points.
Example:
300 points for thenameoftheexpert
then inside the question:
For your contribution to:
https://www.experts-exchange.com/winxp/Q.20282412.html
Comment from stevenlewis 04/02/2002 03:34PM PST
pipi, glad we were able to help
Bev, teamwork rulez!
Steve
Comment from pipi 04/02/2002 10:39PM PST
shekerra,
do you mean I give one expert the 300 points, ask a new question with the text you proposed inside and then wait until the second expert answers to give him the other 300
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q305478
and this is for w2k, but should work in XP
http://www.winguides.com/registry/display.php/265/
and this one will log them on automatically (no logon screen, just boot right to windows, for xp)
http://www.winguides.com/registry/display.php/13/