locked
Steady State RRS feed

  • Question

  •  

    When using steady state and you come to the parental controls for the internet are you allowed to configure the administrator?

    I am actually using this on my work computers but there is a program that can only run under administrator therefore I need to restrict the internet

    Friday, September 21, 2007 5:36 PM

Answers

  • Hi Cnrplus4

     

    Yes, SteadyState can restrict an administrator from accessing the Internet. To do this:

    ---------------------------

    1. Open SteadyState with another administrator account

    2. Click the user account you would like to configure.

    3. In the Feature Restrictions tab, select the “Prevent Internet access (except Web sites below)”.

    4. Configure “Web Addresses Allowed” as you wish.

     

    Note: When you set the “Prevent Internet access (except Web Sites below)” option, the system will set the proxy server in IE to a non-exist one (NoInternetAccess) and add web sites allowed to the “Exceptions”. The “Use the same proxy server for all protocols” option is checked. In this way, all web site access except for those allowed sites are blocked. If there is already a proxy server in your network, this option will not work.

     

     

    In addition, basically, a user with administrator rights can do anything that he wants (including remove the restrictions).

                                

    As users with administrator rights can remove the restrictions from Internet Options, Registry Editor, GPEDIT.MSC or SteadyState, we can block users from accessing them with the following restrictions:

     

    1. Feature Restrictions\Internet Explorer Restrictions\Menu Options\”Remove Connections Tab in Internet Connections”

    2. Windows Restrictions\General Restrictions\”Prevent access to the registry editor”

    3. Windows Restrictions\General Restrictions\”Disable System Tools and other management programs”

    4. Under Block Programs tab, click Browser to locate SCTUI.exe under C:\Program Files\Windows SteadyState, click Block to add it to the block list.

     

    Please also understand that above steps just hide some interfaces from this user. Some high technical level users may remove restriction with other methods.

     

    For your reference, another workaround is create a shortcut with runas command for the program, and then edit it to let user run the program with an administrator account. For more information about runas command, please refer to the following article:

     

    http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/runas.mspx?mfr=true

     

    Best Regards,

    Monday, September 24, 2007 11:10 AM