Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Looking for particular software - Need Help!

Jul 28, 2014 7:05PM PDT

Hello,

I'm looking for a piece of software that will block local users from accessing Device Manager. Password protection if possible?

The people using the laptops are not allowed to use Webcams/Internet. We have already tried making the user non-administrators but this will cause hassle because they can install programs via USB/CD.

Before we used to just take out the Webcams/ WiFi cards and network ports but this will void the warranty and we don't want to keep doing it.

Is there any pieces of software out there that can do this? or is there a way to do it on the laptop itself?

Many Thanks for the help Happy

Discussion is locked

- Collapse -
Answer
Re" blocking device manager
Jul 28, 2014 7:32PM PDT

That seems like something you solve with group policies in Windows. Your system manager (assuming he had the right courses at Microsoft) knows all about them.

Kees

- Collapse -
Blocking device manager
Jul 28, 2014 7:44PM PDT

Thanks for the reply Happy

We have disabled the Device Manager in Local Group policies but we working on the fact the people who are going to using the laptops know how to enable it in group policies again therefore looking for a piece of software that will password protect Group Policies etc? I dont know if this is even possible

- Collapse -
Re: blocking device manager
Jul 28, 2014 8:54PM PDT

You can use file access permissions to block access to mmc.exe for everybody except kind of a super-admin-user only YOU know the password of. Or even deletre mmc.exe.

But anybody with administrator capability could run it from a USB-stick, I think. After all, it's just a Windows program. It might be better to switch to a (very) thin client, that can only communicate via a server you fully control yourself.

Kees