Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

How can i restrict software installation on an limited account only (windows xp pro)?

Posted on 2008-11-18
16
Medium Priority
?
2,960 Views
Last Modified: 2012-05-05
hi,

I have created a limited account and admin account on windows xp pro.

and i have create some restriction using group policy (gpedit.msc), but when i do the restriction, administrator account also cannot have permission to access.  

it's same with limited account.

can somebody tell me that how should i do for it?


Thanks..
0
Comment
Question by:4nyth1n6
  • 8
  • 4
  • 2
  • +1
15 Comments
 
LVL 13

Assisted Solution

by:leegclystvale
leegclystvale earned 160 total points
ID: 22982934
Ensure the limited account is only in the user group. (not power user, admin etc.). A User cannot install software. Admins can. If you restrict from the Gpedit side, it will aplly to all users depending on what you're restricting
0
 

Author Comment

by:4nyth1n6
ID: 22982947
ok, now how can i know that the limited account is in the user group? how should make admin have full access and limited account have specific access only through group policy?
0
 

Author Comment

by:4nyth1n6
ID: 22982949
for simple, i just want to make the limited account cannot install and run some specific software
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 13

Assisted Solution

by:leegclystvale
leegclystvale earned 160 total points
ID: 22983005
right click My computer>manage>expand local users and groups>users>double-click your user>select member of tab
this will show you what groups your user is in.
for specific software, take a screenshot of the settings you're changing in gpedit and post it here
0
 

Author Comment

by:4nyth1n6
ID: 22983027
what should i put in for the member of?


because inside the member of has stated as USER.


For example: i restrict the regedit access through group policy. but my admin account also cannot allow access to regedit. i just want to block it on limited account, for admin account still can access.

actually, how should i do for it?
0
 
LVL 5

Assisted Solution

by:two_people_hk
two_people_hk earned 320 total points
ID: 22983039
All the accounts that you created in Windows Xp should be in users group.
And users group will have limited access to the local computer.
On the other hand, administrators group already had full operation on the local computer.
What you need to do is assign the users into those groups, after that give the permission to users group to special folders, files or programs. By default users in users group are not able to install programs.
Any questions, please leave messages.
0
 

Author Comment

by:4nyth1n6
ID: 22983066
but now, what can i make my admin account can have full access,

because my problem is when i do restriction for regedit access, my admin account also cannot access to regedit. i just want to make the restriction for regedit in limited account only.

Can you teach me how can i do it?
0
 
LVL 5

Assisted Solution

by:two_people_hk
two_people_hk earned 320 total points
ID: 22983083
You should not do restriction on admin groups.
And please check the users in admins group are not existed in users groups.
0
 

Author Comment

by:4nyth1n6
ID: 22983128
Where can i go to check the users in admins group are not existed in users groups?

how can i do?

I don't understand about it.
0
 
LVL 17

Assisted Solution

by:Shanmuga Sundaram
Shanmuga Sundaram earned 80 total points
ID: 22983133
0
 
LVL 5

Assisted Solution

by:two_people_hk
two_people_hk earned 320 total points
ID: 22983154
right click "My Computer" -> "Manage"
Under "local users and groups"
Check the "Goups"
there should be "administrators" group and "Users" group.
0
 

Author Comment

by:4nyth1n6
ID: 22983187
yap, there are admin group and users group, and now what should i do?
0
 

Author Comment

by:4nyth1n6
ID: 22983194
i do the restriction for regedit using gpedit.msc, but admin still cannot access to the regedit, that stated disable by administrator, why?
0
 

Accepted Solution

by:
4nyth1n6 earned 0 total points
ID: 22983209
for example: if i disable run through gpedit.msc, admin also cannot access to run, same level with limited account.

how should i do?
0
 
LVL 5

Assisted Solution

by:two_people_hk
two_people_hk earned 320 total points
ID: 23000722
If your policy is setting correctly. admin account should be able to access regedit.
On the other hand, regedit not able to access also may affected by virus.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question