Technical Note
PROBLEM: Controlling access to the Windows95 system settings

Are you looking for a way to prevent users from changing/corrupting the Windows Operating System settings as you have defined them?

SOLUTION:

This level of control can be accomplished using the Windows95 Policy Editor. The Policy Editor can be used to prevent users altering registry settings for certain files (e.g. command.com) or other configurations. Policy Editor can be found on the Windows 95 CD in the Admin Directory. A "public" account can be configured so that only the applications the user needs appear on the desktop, while Control Panel and other options are hidden or disabled. A "system" account has full access rights.

WARNING: before playing around with these features, backup your registry, and be sure you know how to restore from DOS.

Other measures include:

  • Disable booting to a floppy, only the hard disk

  • Password CMOS, so step one can't be bypassed

  • Edit msdos.sys so the F4 and F8 keys can't be used to interrupt the boot process into Win95. This disables the user from running in "Safe" mode or DOS

  • Configure User Profiles and System Policies: for example, allow only Network login authentication. A default user identity can be created in the event that the "Esc" key is pressed at login. The default user has no applications or desktop, with only options for either logining in under a new ID or shutting down.

WARNING: before playing around with these features, backup your registry, and be sure you know how to restore from DOS.

Monday, 02-Aug-99 13:27:18 Technical Note 0025

For additional assistance contact UserServices@uab.edu

Return to Main Help Desk

Disclaimer