
	Home > Windows Server Tips > > Deny access to Windows system properties with GPOs

Windows Server Tips:

EMAIL THIS

TIPS & NEWSLETTERS TOPICS

Deny access to Windows system properties with GPOs

Brad Dinerman, Contributor
02.20.2008
Rating: -4.20- (out of 5)

Advice for securing Windows

Digg This! StumbleUpon Del.icio.us

Question: How can I prevent my users from accessing system properties with an Active Directory Group Policy Object (GPO)?

Brad Dinerman's answer: There are various options to accomplish your goal. In Group Policy, you can set the option to

Windows network rights management

Manage Windows network permissions and admin rights
When should I grant users Windows administrator rights?

prevent access to any control panel applet, which would include the system properties. You would do this within User Configuration > Administrative Templates > Control Panel, and then enable the option to Prohibit Access to the Control Panel.

If that option is too restrictive, however, you can set NTFS permissions just on the control panel applet (sysdm.cpl) by creating a GPO with settings at Computer Configuration > Windows Settings > Security Settings > File System. Right click on File System, select Add File, and then browse to c:windowssystem32sysdm.cpl. Set the permissions to deny read access for the desired users and then make certain that you apply the GPO to the appropriate OU.

Rate this Tip
To rate tips, you must be a member of SearchWindowsServer.com. Register now to start rating these tips. Log in if you are already a member.

Digg This!

StumbleUpon

Del.icio.us

RELATED CONTENT

	Microsoft Group Policy Management
	Group Policy management gets a boost with MDOP 2009 R2
	Using software restriction policies in Windows
	Group Policy makes strides in Windows Server 2008 R2
	Using Active Directory to manage Macs in a Windows environment
	Group Policy Object modeling simplifies network security
	Microsoft Group Policy Tutorial
	Is a Group Policy setting changing my user rights?
	Mastering account lockout values in Group Policy
	Group Policy Object security in Windows
	Advanced Group Policy for Windows Vista

RELATED GLOSSARY TERMS

Terms from Whatis.com − the technology online dictionary

Group Policy Object (SearchWindowsServer.com)

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

Server Room Design - Planning, Cooling, Maintenance

SEARCH

TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.


TechTarget Corporate Web Site \| Media Kits \| Site Map All Rights Reserved, Copyright 2004 - 2009, TechTarget \| Read our Privacy Policy