locked
Restrict program access for one user RRS feed

  • Question

  • My company is getting ready to use Skype for our clients to communicate with our employees in remote offices.  I would like to find a way to restrict access to only Skype on the computer that the clients will be using.

    That would be easy enough except that computer will also be used by other staff, so I want to restrict only the client account.

    We are running Windows 7 Professional.  It would be really nice if App Locker would work on Win7 pro, but it doesn't.

    I know I can go into the security properties of all of the executables and apply deny permissions but I would like something less labor intensive as we will be switching computers some time in the future.

    Does anyone know of any third party applications that will do the trick?

    thanks!

    Wednesday, April 10, 2013 10:03 PM

Answers

  • I looked at software restriction policies but did not see a way to limit only the one user account or group of users.

    What I ended up doing is this:  I unpinned everything from the taskbar and the start menu on the client's profile, deleted all shortcuts except for Skype under All Programs and then went into the toolbar properties. Then to the Start Menu tab then into the Customize button.  I set everything I could to Don't display this item and under search clicked on Don't search.

    I'm still testing but I think this is my solution.  I am unable to search anything or run cmd.exe and the desktop shows only Skype.

    Thanks for your help everyone.

    Create an OU and put that particular user account on that OU.

    Then apply the GPO to the OU, in this way you are applying the GPO to one user who is the only member of that OU.

    check out this link below, on how to create an OU:

    http://technet.microsoft.com/en-us/library/cc785077(v=ws.10).aspx


    Every second counts..make use of it.


    • Edited by cguan Friday, April 12, 2013 6:05 AM
    • Marked as answer by zirelda Friday, April 12, 2013 2:16 PM
    Friday, April 12, 2013 6:04 AM

All replies

  • Zirelda

    The obvious comes to mind.  Dont have Skype auto log in and only giver the user name & password to authorized users.  Make sure they log out and quit Skype.


    Wanikiya & Dyami -Team-ZigZag. www.ZigZag3143.com email Admin@zigzag3143.com

    Wednesday, April 10, 2013 10:41 PM
  • No, I actually only want the client to have access to skype and nothing else. I'm sorry if I wasn't clear.

    thanks,

    Wednesday, April 10, 2013 10:46 PM
  • try this one:

    http://www.catonmat.net/blog/disallow-windows-programs-via-gpo/

    Restricting what programs a user can run on Windows via Group Policy Objects



    Every second counts..make use of it.


    • Edited by cguan Thursday, April 11, 2013 9:25 AM
    • Proposed as answer by samcr0o Thursday, April 11, 2013 9:34 AM
    Thursday, April 11, 2013 9:25 AM
  • You can hide everything using group policy. OR you can use a third party tool like avecto : http://www.avecto.com/

    Arnav Sharma | Facebook | Twitter Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Thursday, April 11, 2013 10:49 AM
  • I looked at software restriction policies but did not see a way to limit only the one user account or group of users.

    What I ended up doing is this:  I unpinned everything from the taskbar and the start menu on the client's profile, deleted all shortcuts except for Skype under All Programs and then went into the toolbar properties. Then to the Start Menu tab then into the Customize button.  I set everything I could to Don't display this item and under search clicked on Don't search.

    I'm still testing but I think this is my solution.  I am unable to search anything or run cmd.exe and the desktop shows only Skype.

    Thanks for your help everyone.

    Thursday, April 11, 2013 2:32 PM
  • I looked at software restriction policies but did not see a way to limit only the one user account or group of users.

    What I ended up doing is this:  I unpinned everything from the taskbar and the start menu on the client's profile, deleted all shortcuts except for Skype under All Programs and then went into the toolbar properties. Then to the Start Menu tab then into the Customize button.  I set everything I could to Don't display this item and under search clicked on Don't search.

    I'm still testing but I think this is my solution.  I am unable to search anything or run cmd.exe and the desktop shows only Skype.

    Thanks for your help everyone.

    Create an OU and put that particular user account on that OU.

    Then apply the GPO to the OU, in this way you are applying the GPO to one user who is the only member of that OU.

    check out this link below, on how to create an OU:

    http://technet.microsoft.com/en-us/library/cc785077(v=ws.10).aspx


    Every second counts..make use of it.


    • Edited by cguan Friday, April 12, 2013 6:05 AM
    • Marked as answer by zirelda Friday, April 12, 2013 2:16 PM
    Friday, April 12, 2013 6:04 AM
  • You're right.  I should know that.

    Thanks cguan.  That's my answer.

    Friday, April 12, 2013 2:16 PM