Windows 2000 Quick Fixes

Prevent changes to your system

If other users share your computer, you might be concerned that they are able to make changes to it. In most cases, simply preventing the other users from logging on as Administrator will prevent them from making most changes. However, some changes are still possible depending on how you’ve configured permissions of folders and files, whether the Control Panel objects are accessible, and so on. You can use a combination of permissions and local security policy to prevent unwanted changes to your system’s configuration.

Prevent changes to your system

The procedures for accomplishing the lockdown of your computer have been covered either in this chapter or in earlier chapters. The following list summarizes the tasks you can perform to lock down your computer and where to go in Windows 2000 to accomplish those tasks:

Use NTFS and apply permissions to folders and files to prevent access or changes

Use the convert utility to convert your FAT volumes to NTFS (see Chapter 1). Then apply permissions as needed to prevent other users from reading or changing folders or files that should be off limits to them.

Prevent other users from logging on as a member of the Administrator or Power Users group

Use the Local Users and Groups console (right-click My Computer and choose Manage) to change group membership so that other users belong only to the Users group.

Disable the Control Panel

Use the domain or local group policy to disable the Control Panel for all accounts ...