Not parental control, lock out setting and access to certain programs?

[camd5pt0]

I've set up computers already imaged this was so I don't know how to do it.

How can I make a profile, that can't access anything unless they can access it on the desktop?

So this user is not using parental control. I want to be able to change settings in admin profile. But user profile they can not access anything unless it can be run from desktop. Thank you!!!

 

[Tookeri]

Hi and welcome to SevenForums!

Usually you do it with Group Policy, depending on what Windows version it is. In Pro and higher take a look at Software Restriction Policy and AppLocker. More info: http://www.sevenforums.com/system-security/359832-best-protection-against-malware.html

A good setup shouldn't restrict apps to only the desktop, but instead look at where the programs are located by the shortcuts on the desktop.

 

[camd5pt0]

Hi and welcome to SevenForums!

Usually you do it with Group Policy, depending on what Windows version it is. In Pro and higher take a look at Software Restriction Policy and AppLocker. More info: http://www.sevenforums.com/system-security/359832-best-protection-against-malware.html

A good setup shouldn't restrict apps to only the desktop, but instead look at where the programs are located by the shortcuts on the desktop.

Thanks I played with the Group Policy way, much easier way and does exactly what I want.
But some changes apply to the Admin profile. How do I just apply GP for the other profile I created? Btw the user profile I have set up as guest.

 

[Tookeri]

You should look for options to limit it to only certain users/groups.

For Software Restriction Policy for example there's a different setting(marked in red):

 

[camd5pt0]

You should look for options to limit it to only certain users/groups.

For Software Restriction Policy for example there's a different setting(marked in red):
View attachment 349459

Thanks that would've worked but I am not using applocker, or restricting apps. I found it easier to manage making it no possible to go anywhere or run any programs other than what I have on the desktop. How would I apply all the changes here to user profile and not local admin?

 

[Tookeri]

I've never applied "User Configuration" policies so I had to search a little. But found this

"By default the Local Group Policy Editor is applied to all users unless you use a specific users or groups, or all users except administrators Local Group Policy Editor to apply User Configuration policies."

from http://www.sevenforums.com/tutorials/3652-local-group-policy-editor-open.html

So I guess you have to undo your changes and then choose one of the two other approaches for the Group Policy Editor.