The bigger question here is not "how do I stop them from <FillInTheBlankHere>", but "what account type will be operating in this profile?" If this common profile is a local administrator on that machine, you can forget imposing any form of controls on their actions.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, March 26, 2007 8:44 AM To: [email protected] Subject: Multiple Profile ~ XP We have been using multiple profiles on our laptops since NT times. i.e. 1) Wireless 2) Wired 3) Modem Basic purpose was to enhance security and ease of use for the end user. I wanted to ask experts, what impact it makes if we create single profile and when user logs in XP will decide what type of connection is available. My main security concern apart from operability is: if we create a single profile, is it possible for a regular user to create bridge connection that makes the computer a routing device (intentionally or unintentionally). If possible can we restrict them through group policy. Problem we are facing in multiple profile is during the patch deployment, end user has to physically re-login on the machine, otherwise it stuck on profile selection screen. Although we could have created an automated timer for default profile, however different users have different default. I would appreciate any input. Thanks P.S: please let me know if I have posted this question in the wrong forum. All mail to and from this domain is GFI-scanned.
