How to give limited access to client user in Window Server 2008?

07
2014-07
  • user3583473

    How can I control on my client Pc's. For example: I want that user cannot access internet, or user will unable to access control panel, my computer properties and other stuff like this. I hope you understand; what I am asking.

    Help will be appreciated!

    Thanks,

    • Answers
  • Joren

    There is an easy solution to this.

    Create your users in your AD, create groups and then add GPO to these groups. GPO stands for Group Policy Object, in which you can define many things.

    One of those things is not being able to open configuration panel. You can start the Group Policy Management Console with gpmc.msc or by going to All Programs > Administrative Tools > Group Policy Management.

    EDIT: This might come in handy for you http://technet.microsoft.com/en-us/library/hh147307(v=ws.10).aspx


    • Related Question

    How to disable prompt for running application in Windows Server 2008
  • David.Chu.ca

    I just installed an application in Windows Server 2008. When I run it, a dialog is displayed as warning to confirm it's running. Is there any way to disable the prompt?


    • Related Answers
  • Kenneth Cochran

    Its called UAC (user account control). Its a "feature" added since Vista.

    A little background:

    Windows wasn't originally designed as a true multiuser operating system. Until Windows 95, it basically had no security at all. With each sucessive version, Microsoft tried to improve the security but they were limited in how far they could go and still keep backwards compatibility.

    Most software developers got to used to the idea that the programs they wrote had unlimited access to the entire operating system. With Vista, Microsoft introduced UAC, which prompts the user anytime a program tries to access something that should really require administrative access. This is nothing new, other multiuser OSs have been doing this for years. In fact, most would require reentering your password every time you needed administrative access or even require you to login as a separate user with the necessary access rights. This isn't a big deal for other OSs because software developed for those systems only request administrative privledges if its really necessary.

    With Windows, there are still a ton of programs that demand administrative privileges simply because it was convenient for the programmer to write it that way. Yes, you can turn UAC off. You can find instruction for doing so here. But it isn't a good idea. As annoying as it is, UAC is one line of defense to protect the operating system from malicious programs intent on corrupting your computer.