[2005] Making features restricted on a computer... like a school.

[noahssite]

Hello,
In most schools they restrict a lot of features weather if it is accessing files form the local disk C: or changing settings. Or even right-clicking on the desktop. Also they may restrict the command prompt from Run or Run itself.

How do i make all these restrictions?
If i wanted to write a program for a school, just saying, that makes the computer restricted of a lot of its major features. How is this done?

How do i disable right-click?
How do i disable the cmd?
etc....

[dave18]

The file restrictions are done mostly through ntfs file and folder permissions that are applied to the workstations. The right-clicking and the run restrictions are done through group policies that are applied to either the OU or the user in the domain.

[chris128]

Yeah I'm a network and server admin and the way we lock down things like that is through Group Policies like dave18 said.
Having said that,all Group Policies actually do in most cases are just create/modify registry keys so you can do all of these things by just editing the registry without using GPOs.
How exactly are you planning to use these restrictions? I mean is it just going to be on one computer where specific user accounts would have these restricions in place but other accounts wouldnt? Or is it aimed to be used on a network accross multiple PCs etc?

As for your example though, if you wanted to write a program for schools that made all these restrictions - well you just wouldnt really because they would have a domain controller that could just use group policies. Group Policies and Active Directory are something that Microsoft has spent years developing so in reality its very unlikely that your going to be able to make a better system..