XP PRo and User Accounts-Can I do this?

In the office I have 3 computers. All running WinXP Pro. What I want to do is restrict 2 computers to NOT be able to open Internet Explorer. Is this possible? DO I do it through limited user accounts or what?

thanks

I'm not very good with the security features in WindowsXP, however; I believe you can login as the Administrator, right click on IE's executable. Select properties, then security. Then highlight and/or add the user you want to restrict in the big white box, then uncheck read and read & write.

I believe there is some sort of dialog that allows you to customize the security, however; I am not sure where it is.

You can do this using the Group Policy Editor:

(you will need admin priv)

Start > Run
Type "gpedit.msc"
The group policy editor should be open
Under "Computer Configuration" > "Windows Settings" > "Security Settings" > "Software Restrictions" > "Additional Rules"

Right click in the white space and select "New Path Rule..."
Path: "C:\Program Files\Internet Explorer\iexplore.exe"

it it to disallowed and click ok and close.

This will be in effect for ALL users,including administrators. This can be changed so it only affects limited users by:

Under "Computer Configuration" > "Windows Settings" > "Security Settings" > "Software Restrictions"

Double click on "Enforcement" and change it to "All users Except Local administrators."


http://www.vbforums.com/attachment.p...postid=1831436