March 22, 2012

How to restrict person to make new users/ changing passwords of existing users on Windows XP


One of most common problem in computer lab is that students often create new User account or change the password of existing account. Providing Limited access to student Account is not a good solution because sometimes Administrative privilege is required for proper functioning of the applications like Oracle and NetBeans etc. Students with Administrative privilege changes passwords of other users. 
Solution:
In Windows XP , one Password is given to Administrator at the time of Installation. You must keep it secret. (Generally this Administrator account is not available in normal startup; however it can be used in Safe mode for maintenance purpose).  Two other user (One for yourself and other is for students) may be created for regular working.
After creating these two accounts just remove (hide) USER ACCOUNT Icon in Control panel. So that student can not create new user and can not change the password of others.
To remove (hide) the User Account Icon in Control Panel, do the following steps-

Step 1:  Open Group policy Editor in Windows XP, by-
            Start->Run and type gpedit.msc and press OK.

Step 2: Select User configuration-> administrative templates-> control panel


Step 3: Double click on Hide specified control panel applets, to get its property window.

Step 4: Select Enabled button and press Show button.
Step 5: Press Add button and type nusrmgr.cpl  and press OK


Step 6: Close the Group Policy Window.

Step 7: Just open and check Control panel… You have done it….no User Account Icon…

Expert Hint:
I   You can rollback this step by selecting Remove button or selecting Not Configured option.
I   You can use the following (.cpl) files to hide the specified Applets in the control panel.

Name of .cpl file
Purpose
Desk.cpl
To hide/ show Display (desktop properties window) Applet
Inetcpl.cpl
To hide/show Internet Options Applet
Addwiz.cpl
To hide/show Add or Remove Program 
Sysdm.cpl
To hide/show System Applet

Kindly Note:
Group Policy will hide Control Panel items from Control Panel, a professional user can type nusrmger.cpl  in Run dialog box and run System Properties.

No comments:

Post a Comment