Re: Group Policy for locking down windows xp

Your best bet would be to use a combination of Group Policy and ntfs
permissions to restrict access. For Group Policy look at the options under
user configuration/administrative templates for the various options such as
for Desktop and Windows Explorer. You can also use the templates for XP Pro
on Windows 2000 domain controller to manage the extra options for XP Pro.
Keep in mind that some of the Group Policy options "hide" access to users
and ultimately you will need to rely on ntfs permission restrictions to
control user access. A user by default has full control to their user
profile and may be able to write to some subfolders on the all users
profile.

With XP Pro you can also use Software Restriction Policies to restrict what
applications a user can use and install. You can not however use Group
Policy to manage XP Home computers. --- Steve


"MMJII" <MMJII@xxxxxxxxxxxxx> wrote in message
news:OM%23lk1bQFHA.248@xxxxxxxxxxxxxxxxxxxxxxx
> Hello All,
> I have a network with a Win 2K Adv server, and 10 win xp pro & home pc's
> Could some one direct me to any info on using GP to lock the pc's down...
> i.e.
> no write access to hard drives, only removable media access,
> no changing the desktop option..etc.
>
> I have some info on locking down I.E.6 which is what I want to do also.
> If I could get this additional info I would greatly appreciate it.
> TIA
> MMJII
>
>


.

Relevant Pages

  • Re: Restricting user access to one file only
    ... > Using Windows XP, how can I restrict a user's access on ... NTFS permissions for their login ID and by doing Start, Run, MMC and add the ... You could also try using the Quotas feature to restrict how much space they ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Setting up new users
    ... could do is to let the users logon as the guest account. ... configured in permissions for a share folder so keep that in mind. ... Use Group Policy to restrict the users further. ...
    (microsoft.public.win2000.security)
  • Re: Read only account
    ... You can restrict a user account so that is only has read/list/execute ... services/client&server data redirection] to restrict redirection of ... to save their password for their TS client connection via Group Policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Disable regedit/registry
    ... executables so that regular users do not have execute permissions. ... There is also a setting in Group Policy user ... configuration/administrative templates/system to disable registry editing. ... However by default that will restrict all users on the local machine from ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Security on students workstations?
    ... Simply put you want to use group policy to restrict groups, services, NTFS, ... Registry Key, and Security settings. ...
    (microsoft.public.win2000.security)