W2K User Issue

[ChrisK2972]

I am somewhat new to W2K and am trying to set up users and sharing and the like. I have the following question about user groups: is there a way to prevent a restricted user (User Group) from having the ability to remove programs? I just assumed that if a user could not install a program that they would not be able to remove it either. However, I have found out that that is not true. I do not want someone (like my kids for instance) to be able to remove something off of my computer.

Also, when booting up, is there a way to get the logon dialog to list all the user accounts available, like XP does?

Thanks!

One temporary solution you can do you is install tweakui and just basically remove it from the control panel. of course this will remove it for everyone.

install tweakui
go to the control panel
load up tweak ui
click control panel
then remove the option to see add/remove programs

press f5 and presto its gone.

Now if you dont often uses add/remove this would be a wonderful solution


for your second question i dont believe there is a list. you have to type in the account name you want. Win2k is for a business enviroment with networking. It would be a huge secuirty rick to list the user names that you can try to use

[durante]

I am with GorundZero in that point...

To your second question, no, if you want it to display all the users you will need to get XP
But I personally prefer 2K instead of XP though

Hope this helps, but I doubt that

thanks for the attention

durante

[ChrisK2972]

Thanks for the suggestions. I like add and remove, but, I was kinda caught by surprise. It makes little sense that a user could remove a program. I mean, if this was setup in a network environment work place, and someone wanted to be malicious, they could start removing programs. right? As I see it, anything listed in Add/Remove is fair game. Unless, of course, you remove it completely, as you have suggested.

The security risk that you mentioned regarding logon makes sense. I just "upgraded" from XP Home and just miss that little function. Without it, it takes a bit longer to log on, but, that is no big deal.

[DVNT1]

There are ways to prevent Restricted users from Removing programs. I'm not at home nor work for serveral more days so I don't have my references now. Basically in an AD environment, you create a policy that removes access to Add/Remove Programs and you disable MSI functionality. There may be a few other things but again, I'm not near my references and I am short on time right now.