Windows 7 services, MMC, LAN configuration

February 14, 2010 at 16:09:00
Specs: Windows 7

I am needing some assistance. I have a Windows 7 equipped machine I use in a school. It sits in a protected room, however, we allow people to basically bring whatever they want with them into the room, making it open-free & fun to work with it. Trying to avoid putting cameras or something too supervised. :)

Can someone please help me understand, how I can configure the Windows software, so it prohibits any and all methods or ways to connect a second physical computer to it (locally). Also trying to avoid locking down the computer with software so users cannot run system commands, or whatnot. It needs some flexibility.

Right now everything is abouty OK... so I am focusing only on the Services in the MMC console right now. There are some services automatically running which look obvious, but not sure about others. In other words, which system services control LAN setup? So even if someone configures a New Network location, enables File Sharing, and connects a second computer --- because the service has stopped will not allow attached computers to connect.

Really, I want to lock access out of MMC. I don't know how to do this, but where I am now is trying to understand which services explicity enable LAN access situations. :) Can someone help? :))

:) Best wishes, Amy

See More: Windows 7 services, MMC, LAN configuration

February 14, 2010 at 17:04:15
Create a standard limited user account for public use, easy & straightforward.

Windows 7 News!

Report •

February 14, 2010 at 17:56:42
Thank you, I appreciate your kind response and understand what you are showing me. But, I didn't get into the deeper why of my original request.

A user account profile, limited account... is precisely what I am attempting to not have, .. due to various account privilege necessities that are required :()

So, I am still stuck trying to understand what services would be shut off, ... so local LAN setups are disabled while the services are off. :) It would be really helpful to know this.

The TCP/IP NetBIOS Helper (MMC > Service > lmhosts), definitely appears to be one... but not sure if I am missing others. :))

Report •

Report •

Related Solutions

February 14, 2010 at 22:23:53
Me thanks you!!!!, that is a solution for how to protect the MMC which I desperately need! Hopefully there are some takers out there on the other question about which services I need to disconnect to end LAN connections. I am so overwhelmed on the options and don't know what is right, ... services to stop on the big list of local MMC Services :)

Have a goood day Sabertooth! I hope I am one step closer to meeting my goals here :D

Report •

February 15, 2010 at 07:06:07
You're welcome. I'm a little confused though, that you do not know which specific services to disable to accomplish your "admin" goals but you are absolutely positive that you need to start shutting things off from Microsoft Management Console.

Are you the main person in charge of the machine & was this MMC suggestion from someone technical over there? On the one hand you stated that you want to lock out MMC, but you don't want to create a limited account. I'm not sure how you are going to accomplish that if you have to access MMC yourself from same "privileged" account, without demoting the user account so they at least get some sort of passworded admin token prompt.

It's all semantics, you might say you are NOT trying to create a limited account in the true sense, but that is more or less what you're looking to do. In Windows 7, the standard user account does come with administrator privileges assigned, with the catch being; applications that such users have access to do not automatically have administrator privileges, unless prior approved or through privilege elevation via UAC.

I suggest using the Group Policy Settings Editor for demoting or elevating access rights, but if you do not know what you are doing, you might want to have someone else set things up, so you don't end up doing more harm than good.

Windows 7 News!

Report •

February 15, 2010 at 11:06:07
Thank you. I have complete ownership (and responsibility) for the machine actually since it is mine and I am in kinda of a do-what-you-want to make it work atmosphere :) Windows 7 is something I want and just want to make sure, I am correctly considering everything for my unique circumstances. I am just hoping to save some time here in this forum & make it work the way I think I want it.

You are precisely right, there is a balance that I need to consider, but I think this is the path I want to experiment with. Hopefully I can reach those goals :))

Report •

February 17, 2010 at 10:42:46
Does anyone out there know the answer to my OP? :) :D

Report •

Ask Question