Re: Allowing only IE and nothing else - possible?

Ok, quick google search turned up this:
http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/AdminTips/Miscellaneous/LockdownbygroupusingLocalComputerPolicywithoutActiveDirectory.html

Shows the details needed to lock down a Windows 2000 system using local
policy and changing the needed permissions to lock out specific user
accounts and allow full access to others.

This should cover everything you're looking for.

--
--
Mike Shepperd
MCSE NT4, 2000, 2003
NewFuture Consulting
Seattle, Washington


"Mike Shepperd" <mikesmobile_|_gmail> wrote in message
news:SrudndjdcP8wKFPfRVn-ig@xxxxxxxxxxxxxx
> Many of the Group Policy settings are available for the local policy on
> Windows 2000 Professional. The information is geared towards the
> enterprise, but can be very helpful in showing the changes that need to be
> made on a standalone machine.
>
> The suggestion I had given previously was incomplete regarding the
> alternate shell but the Microsoft docs showed the proper syntax of
> "iexplore.exe -k" which you should be able to set manually in the
> registry, or maybe through local policy.
>
> Unfortunately, I don't have a 2000 machine to play with here, so I can't
> put it together for you, but using the info on that page might get you the
> results you're looking for.
>
> Good luck,
>
> --
> --
> Mike Shepperd
> MCSE NT4, 2000, 2003
> NewFuture Consulting
> Seattle, Washington
>
>
> <nospam@xxxxxxxxxx> wrote in message
> news:dalvob$f5v$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>>> try this link
>>>
>>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/csws2003.mspx
>>
>> Thanks for the info - as its a Windows 2000 Pro machine with no domains,
>> etc, the link above really isn't suitable for a single two user account
>> pc - its all aimed at enterprise wide scenarios. Plus when I installed
>> the gpmc it told me to log in using a domain admin account, which
>> obviously I don't have...
>>
>> But thanks for the suggestions - a kiosk user with the ability to log off
>> and connect to internet to run ie is all I need, so I'll keep fishing
>> about.
>>
>
>


.

Relevant Pages

  • Re: problems to install inf files under windows xp automaticially
    ... is one policy missing in xp which exists in windows 2000. ... > The Policy you can find under Security Options, ... > driver installation behavior ... Anyway first check on what account the thing runs. ...
    (comp.os.ms-windows.nt.admin.security)
  • RE: XP (SP2) user passwords
    ... Windows passwords can't be cracked that easily. ... 2.a Get a case lock for your computer, so it can't be opened up. ... drive (Most password crackers work by having to boot to the media itself) ... your children should be using a different account ...
    (microsoft.public.windows.mediacenter)
  • Re: Need advice from expert
    ... Hope this will be fixed in the next release of Windows. ... >Local Security Policy applies equally to all accounts, ... >group policy is really a domain level control feature, ... This account will then not be affected by any ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Lock Out a User in Win XP home?
    ... > restricted user. ... The lock feature of XP is ... > want to delete the account and probably lose all it's settings even ... Windows XP Professional Edition. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: what is reset account?
    ... No I don't think that policy value was available in Windows 2000. ... I believe the policy was added in K3, but the reg value works in 2K as well as NT. ... windows 2000 server security options. ... deployed based on computer account. ...
    (microsoft.public.win2000.active_directory)
Loading