Solved

Using gpedit.msc group policy editor to prevent the use of software in the Guest account.

Posted on 2004-10-16
5
852 Views
Last Modified: 2012-06-27
Can anyone explain how to use gpedit.msc group policy editor to prevent the use of software in the Guest account?  Thank you.
Mark 88
8-]
0
Comment
Question by:Mark O'Brien
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 4

Expert Comment

by:AZSanDiegoHB
ID: 12331378
In Control Panel > Users, add a password to your account, and enable the guest account if not already enabled.

The following excerpt is from this link:
http://support.microsoft.com/?kbid=323525

"Editing the Local Policy on a Windows 2000-Based Computer
To restrict users from running specific Windows programs on a standalone Windows 2000-based computer: 1. Click Start, and then click Run.
2. In the Open box, type gpedit.msc, and then click OK.
3. Expand User Configuration, expand Administrative Templates, and then expand System.
4. In the right pane, double-click Don't run specified Windows applications.
5. Click Enabled, and then click Show.
6. Click Add, and then type the executable file name of the program that you want to restrict users from running. For example, type iexplore.exe.
7. Click OK, click OK, and then click OK.
NOTE: If domain-level policy settings are defined, they may override this local policy setting.
8. Quit Group Policy Object Editor.
9. Restart the computer."

You will notice that there's also a "run only allowed windows applications" option, use whichever is less work!

I believe you will need to disable these options in order for you yourself to have full access to applications once again.
0
 

Author Comment

by:Mark O'Brien
ID: 12335037
Is there a way to apply this to the Guest account only, in XP Pro?  Im using XP Pro.  Is the answer that I deny all users the permission and then give myself access?  That seems to be too difficult in a way.
0
 
LVL 4

Expert Comment

by:AZSanDiegoHB
ID: 12335884
here's a thread that mirrors our conversation here, interestingly enough:
http://www.resellerratings.com/forum/t35489.html

...this thread discusses how you can possibly accomplish this through the registry (i want to research this more)...
...and how you can accomplish this through a program called 1st Security Agent http://www.softheap.com/newadmin.html (which incidentally gets 4/5 stars from CNET download.com). if this issue was important enough to me, i would pay the $49 for the program rather than play with the registry.

so, at least we know that we're not the only ones struggling with this, and we know there's a program out there that will do this for you (and it appeared to be the only one on CNET). i'll try to look into the registry method, though.
0
 
LVL 4

Accepted Solution

by:
AZSanDiegoHB earned 500 total points
ID: 12335940
i just spent a few scarry minutes looking into how to accomplish this directly through the registry. i'm not one who is scared to use the registry under certain circumstances, but this one was a little intimidating and i personally couldn't give you good advice as to how to do this through the registry (if it's even possible). good luck, that little program linked above seems to be an excellent and perfect tool for you, and my best recommendation.
0
 

Author Comment

by:Mark O'Brien
ID: 12336116
Ok AZ, that sounds fine.  I will research the site.  Yes, if you want to, feel free to post the way to make the registry change.  It is up to you however, since it seems it would be pretty tedious to do this.  I of course take full responsibility if i wreck something.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Hyper V vm 4 135
XP as a dual boot with Windows 10 10 109
from Windows mobile 10 fast ring to slow/preview release ring 5 94
Event ID: 1202 / Source: SceCli 6 143
Ok I have been working on this for some time having learned and gained certification in XenDesktop 4 along came version 5 which was released last month. Since then I have been working to deploy XenDesktop 5 in a small environment with only 2 virt…
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question