Securing a Windows XP Workstation

From: Cary Kataoka (caryk_at_cjrk.com)
Date: 02/08/05 

Date: Mon, 7 Feb 2005 23:56:22 -0500

Hi.

Tried posting this to the XP group, but did not receive any response, so I'm
trying this one.

I am attempting to secure a XP workstation connected to a 2003 Server based
domain. The workstation (belonging to the CEO) has private information that
should not be accessible by anyone including the network administrator. I
have disabled remote desktop and have added the key
System\CurrentControlSet\Services\LanManServer\Parameters\AutoShareWks=0 to
HKLM. I have also disabled the remote registry service. Further, I have
removed all domain users except for the local user from local users and
groups (specifically, I removed domain admins from the local administrator
group).

I would like some further information: A.) Could these settings be
over-ridden via GPO? B.) Could these settings be modified if remote
network
profile is being used and the user is logging into different workstations
with the same account?

Thanks in advance for any advice.

Cary Kataoka (caryk@cjrk.com)
CJRK Computer Consulting Inc.

Relevant Pages

  • Re: 30 minute logon time - This is a rough one
    ... What are the DNS client settings on those workstations? ... We have a central location and multiple remote locations. ... and that subnet belongs to the site where the domain controller ... that when a user logs in at a workstation, an LDAP session is opened on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Securing a Windows XP Workstation
    ... Why not just use EFS to encrypt the private data? ... > I am attempting to secure a XP workstation connected to a 2003 Server ... I have also disabled the remote registry service. ... > removed all domain users except for the local user from local users and ...
    (microsoft.public.windows.server.general)
  • Disabling Administrative Shares
    ... I am attempting to secure a XP workstation connected to a 2003 Server based ... I have also disabled the remote registry service. ... Could these settings be modified if remote ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Remote Web Workplace Issue
    ... I had to "rebuild" my server. ... I could use RWW to a remote desktop on the ... I also am running a new workstation with Vista Ultimate that was never ... on that computer either but can use the remote desktop connection. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Web Workplace Issue
    ... RWW and Remote Desktop ... I had to "rebuild" my server. ... I also am running a new workstation with Vista Ultimate that was never ... on that computer either but can use the remote desktop connection. ...
    (microsoft.public.windows.server.sbs)
Quantcast