How to prevent users from accessing the control panel

How to prevent users from accessing the control panel

Lets start with policy- 

• Inherited Policy
• Explicit Policy

A policy is a set of rules, principles, or guidelines established, by an organization to regulate action , ensure consistency and achieve specific goals, Policies provide a framework for decision making and help maintain order & compilance with a system.

What is Inherited Policy ?

Inherited policy permissions are automatically passed down from a parent object (such as a folder) to its child objects (sub-folder and files). They simplify permission management by ensuring consistency across an entire directory structure. 

Characterstics -

-- Automatically propaged from parent to child objects.

-- Reduce administrative overhead by providing consistent access.

-- Can be over-hidden by explicit policy

-- Can by disable if needed.

What is Explicit policy ?

 Explicit permissions are manually set or assigned to a file, folder or object by any administrator of system owner. They take priority over inherited permissions and apply on the specific object they are set on.

Characterstics - 

-- Applied directly to a resources (file ,folder ,registry key)

-- Not affected by changes in parent object.

 How to assign a permission on a local user in local machine (standalone)?

Standard User Account (Local User) - This account is having limited permission, allows basic task like running application and changing personal settings ,This cannot install software or change system wide settings. This account is allowed for doing its daily basic task, what it is allowed for.  

-- For doing this task you must have a user with administrative rights of administrator account. 

-- Press win + r and type "mmc" (microsoft management console) windows. Click on "files" & then click on "add/remove snap-In" 

-- Then on windows search "Group policy object editor" then click on "Add".

-- In the next windows, click on Browser and go to the "user" tab.

-- Click on the user, on which you need to assign permissions.

-- Then click on "OK" and then finish.

-- Click on "OK" and return on mmc windows.

-- then assign the permission and click on the close. It ask you to save the so click on the save button.

-- Open cmd prompt and run the "gpupdate / force"

-- Logout from the administrator 

-- Login to the user account & check whether the policy works or not.

Disclaimer