Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Setting up a secure set of restrictions for company user...

19 Apr 2013   #1

Windows 7 Ultimate x64
Setting up a secure set of restrictions for company user...

I am setting up some new laptops that will travel to dispatchers homes for them to work from home. But we are concerned about how to keep them from screwing things up too terribly. I used to use controls back in the day to limit things like right clicking on the desktop, accessing "All Programs" and to remove many things from the start menu.

My goal is:
Icons on Desktop for programs they need. IE, Firefox, Mapping and the program to manage the towing company.

Nearly total lockdown of the Start Menu - I have done this but only because I used Right Click on Start Button > Properties but since this can be changed just as easily to put it all back I need to restrict that. I can always install new programs and then manually put a link on their desktop!

No changing Clock, accessing any resolution settings etc. But I still need them to be able to join a wireless network at will. I dont want to have to give out a password or to travel to their homes to setup the wireless networks.

Thank you guys for anything you can lend to my little dilemma here. I was able to find the Group Policy Editor, but if I use that I have to grant admin level privs to their user name? Or is there a way to tell the GP Editor to apply the setting to a specified user?


My System SpecsSystem Spec
22 Apr 2013   #2

Windows 7 Pro x64

What operating systems will these laptops use? Your best option is to combine Local Security Policy and Group Policy. This thread may be of some help to you.
My System SpecsSystem Spec
22 Apr 2013   #3

Windows 7 Ultimate x64

Most of those things are also possible by using standard user accounts, that directly prevent any writing to system critical areas, but still can execute programs and connect to wifi networks. In the event of anything requiring admin permissions, UAC will popup, asking for a password that the user will not know, unable to proceed. Also, a firewall with strict settings, specially for outgoing connections may help in reducing authorized usage, and an antivirus is obviously a must, helping too in case something sneaks in.

The only problem I think you can have is that, the people having physical access to the machine, it's entirely possible to boot with an external OS, making possible to access everything, and even deleting an admin password (incredibly easy with Windows), thus getting full control of the OS.
My System SpecsSystem Spec


 Setting up a secure set of restrictions for company user...

Thread Tools

Similar help and support threads
Thread Forum
Setting registry restrictions using RegEdit (Task Manager)
So I'm having some issues trying to set some restrictions using RegEdit. I'm trying to set a bunch of them and none of them are actually working. I've done a lot of reasearch on Google but I can't figure out why. So let's start with a example here. I'm using a .reg file to set these FYI. Here is...
User account control - restrictions
I have just installed & 32ibt Home Premium on an old Vista machine that I could not rectify the mess it was in. The problem is that my friends children accessed iTunes, free games, P2P stuff / sites. some unsavoury stuff from their friends phones etc and heaven knows what else and she is sick...
System Security
Standard User Account Restrictions
I want to stop my son from accessing 'my docs'. He has a basic account and I am administrator. How do I do this? Thanks.
General Discussion
Standard User Restrictions
I want to setup some type of parental control that when a user wants to install software they need to type in a password. How do i set this up? thanks in advance Maciek
General Discussion
Setting high restrictions for a user account
Hello all, I have two accounts on my computer and want to keep one locked down when my kids are on it. Of course I want my Admin account to have full control and my kids account to have very limited functions. I installed somes games for them to play and I don't want them messing around with...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:12.
Twitter Facebook Google+