Re: Locking-down the desktop/computer--BIG TIME!
- From: "Larry Struckmeyer" <lstruckmeyer(at)mis-wizards(dot)com>
- Date: Fri, 28 Dec 2007 17:12:15 -0500
Hi:
The usual advice for an issue like this is to call them in and discuss it
with them. Second time is a written warning, third time is out. I myself
prefer to allow users some control over their environment, such as
background colors, screen savers, etc.
Having said that, there is much information on the web on this subject and
many books with explanations as to how this can be done. Just google
something like:
"Windows 2003 group policy lock desktop"
the above got over 70 thousand hits, some of which must be relevant. :-)
--
Larry
"zooeyhallne" <zooeyhallne@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DF7681F8-8319-44D0-8378-519769AD8974@xxxxxxxxxxxxxxxx
I need to be able to lock down 3 computers that my company has in our
warehouse. There is a company app that runs on these computers that
warehouse workers need to access. Unfortuantely, we have found out that
some
employees have been abusing the Internet and also messing with settings in
the display, control panel, etc.
Ideally, the only thing they should be able to do is to access the icon
for
the company app and start it. NO access to: control panel, display
properties, IE, network settings, instant messaging, RUN command, My
Computer, Network Neighborhood, etc.!
I need the lockdown settings to be applied to the login account that the
warehouse workers use. If I (the administrator) login, I need access to
everything.
The workstations are XP Pro SP2. They have computer accounts in the
domain.
The user accounts for the warehouse workers are on the domain, and are in
their own separate Organizational Unit in Active Directory.
I have had some experience with implementing Group Policy and knowledge
how
it works. But I am not too sure how to go about creating and applying a
strict lock-down like this. Can someone point me to some articles or give
advice on where I need to start? And thanks in advance for any help! I
have
received very welcome advice previously in this newsgroup.
Some have told me I need to buy a third-party solution (Fortress) to do
this, but I'd like to know if Microsoft's Group Policies can do it.
.
- Prev by Date: Re: SBS 2003 and Windows Server 2008 Beta 3 in the same network
- Next by Date: Re: Can I Login to Two SBS Domains from One PC
- Previous by thread: Re: How to allow client to disable firewall on XP/sp2 machine
- Next by thread: Re: Locking-down the desktop/computer--BIG TIME!
- Index(es):
Relevant Pages
|
