Client Lockdown

From: bobroq (bobroq_at_discussions.microsoft.com)
Date: 12/29/04 

Date: Tue, 28 Dec 2004 19:09:01 -0800

I was hoping that someone could shed some light on a configuration issue I am
having with my Server. One of the things that I really I was really hoping
to do when I switched to SBS was really limit what users can do with their
client computers.

Specificly I wanted to:
Deny their ability to browse the internet
Deny their ability to install their own programs
Deny their ability to write to any directory besides their my documents
folder or desktop

I must have done something really wrong when I configured the user accounts
because at this current point in time they all log into the client machines
with administrator privilages. (I really do not understand why because I
created the accounts with the lowest amount of privilages - using the to do
list add users screen)

I started reading about group policy objects and I realize that these might
be able to help me with limit what folders they can and cannot write to. I
was wondering if anyone had any suggestions on exacty what policies I can set
to obtain my goals.

I purchased the SBS Premium to get the ISA server 2000. This has worked
great to stop my users from browsing the internet, however I would like to
add one or two sites that they are allowed to go to. When I went to do this
today I realized that I can not (for the life of me) find the ISA managment
console. I know that this should be in Start->all programs->ISA ... However
their is no ISA ... entry in my all programs menu?!

Thank you very much for any help you can offer
Bob.

Relevant Pages

  • RE: SBS 2003 SP1 Upgrade - MSDE 2000 Service Pack 4 did not instal
    ... C:\Program Files\Microsoft SQL Server ... you can directly insert the ISA 2004 installation CD ... import the ISA configuration information to restore back all configurations. ... following registry subkey on the server, ...
    (microsoft.public.windows.server.sbs)
  • RE: Publish Sharepoint behind SBS2000
    ... Clear your Web cache when testing for a new result, otherwise ISA might ... key in your external domain name for the internal SharePoint server. ... >>Despite all the security issues with this configuration, ...
    (microsoft.public.windows.server.sbs)
  • RE: Sercond ISA on SBS Member Server
    ... ISA on a SBS member server. ... Without a good backup, it's difficult to have the server ... - This is often used for ISA server configuration recovery. ...
    (microsoft.public.windows.server.sbs)
  • Re: cannot access domain or internet with two nic cards active
    ... Are you're workstations joined to the SBS domain and do they have the ISA ... and I am showing ISA server updates as microsoft isa server 2004 service ... If the ISP is controlling the configuration of the Netopia ...
    (microsoft.public.windows.server.sbs)
  • Re: Noob question: ISA and IIS on the same server?
    ... what real security do you think you derive from the pix? ... Tom and Deb Shinder's Configuring ISA Server 2004 ... MVP -- ISA Firewalls ... good firewall configuration) is to place the internal interface of the ISA ...
    (microsoft.public.isa)