Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Setting up a secure set of restrictions for company user...

19 Apr 2013   #1

Windows 7 Ultimate x64
Setting up a secure set of restrictions for company user...

I am setting up some new laptops that will travel to dispatchers homes for them to work from home. But we are concerned about how to keep them from screwing things up too terribly. I used to use controls back in the day to limit things like right clicking on the desktop, accessing "All Programs" and to remove many things from the start menu.

My goal is:
Icons on Desktop for programs they need. IE, Firefox, Mapping and the program to manage the towing company.

Nearly total lockdown of the Start Menu - I have done this but only because I used Right Click on Start Button > Properties but since this can be changed just as easily to put it all back I need to restrict that. I can always install new programs and then manually put a link on their desktop!

No changing Clock, accessing any resolution settings etc. But I still need them to be able to join a wireless network at will. I dont want to have to give out a password or to travel to their homes to setup the wireless networks.

Thank you guys for anything you can lend to my little dilemma here. I was able to find the Group Policy Editor, but if I use that I have to grant admin level privs to their user name? Or is there a way to tell the GP Editor to apply the setting to a specified user?


My System SpecsSystem Spec
22 Apr 2013   #2

Windows 7 Pro x64

What operating systems will these laptops use? Your best option is to combine Local Security Policy and Group Policy. This thread may be of some help to you.
My System SpecsSystem Spec
22 Apr 2013   #3

Windows 7 Ultimate x64

Most of those things are also possible by using standard user accounts, that directly prevent any writing to system critical areas, but still can execute programs and connect to wifi networks. In the event of anything requiring admin permissions, UAC will popup, asking for a password that the user will not know, unable to proceed. Also, a firewall with strict settings, specially for outgoing connections may help in reducing authorized usage, and an antivirus is obviously a must, helping too in case something sneaks in.

The only problem I think you can have is that, the people having physical access to the machine, it's entirely possible to boot with an external OS, making possible to access everything, and even deleting an admin password (incredibly easy with Windows), thus getting full control of the OS.
My System SpecsSystem Spec

 Setting up a secure set of restrictions for company user...

Thread Tools

Similar help and support threads for2: Setting up a secure set of restrictions for company user...
Thread Forum
Enforce user logoff when time restrictions apply General Discussion
Solved User account control - restrictions System Security
Solved Standard User Account Restrictions General Discussion
Standard User Restrictions General Discussion
Setting high restrictions for a user account System Security
How to place restrictions on standard user accounts beyond parentals General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:27 AM.
Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App