RE: Hardening Desktop
bob.r.bowden_at_bt.com
Date: 09/28/04
- Previous message: Thor: "Re: Serious Security Issue in Windows XP SP2's Firewall"
- Maybe in reply to: balyfix_at_tin.it: "Hardening Desktop"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 28 Sep 2004 16:46:13 +0100 To: <thor@hammerofgod.com>, <laurarobinson@earthlink.net>, <focus-ms@securityfocus.com>
You can use group policy to prevent redirecting to C: and use of the
taskbar.
You can also use it to specify logon and logoff scripts that could
disable a USB keyboard for example at logon, and then enable it again at
logoff. This policy could be set to only apply to your restricted users.
Rgds
Bob
-----Original Message-----
From: Thor [mailto:thor@hammerofgod.com]
Sent: 28 September 2004 02:37
To: Laura A. Robinson; focus-ms@securityfocus.com
Subject: Re: Hardening Desktop
The OP never really said anything about it being a kiosk setup-- I got
from
the "when a user logs into my machine, do this" kind of thing, meaning
he
wanted special behavior for a user or users, but not "him." Don't
know...
t
----- Original Message -----
From: "Laura A. Robinson" <laurarobinson@earthlink.net>
To: "'Thor'" <thor@hammerofgod.com>; <focus-ms@securityfocus.com>
Sent: Monday, September 27, 2004 6:08 AM
Subject: RE: Hardening Desktop
> My question is, why even attach a keyboard at all? Disable it in the
> BIOS and don't have it at all if this is supposed to be a mouse-only
> kiosk. If you need to troubleshoot it, remote in.
>
> Laura
>
>> -----Original Message-----
>> From: Thor [mailto:thor@hammerofgod.com]
>> Sent: Tuesday, September 21, 2004 3:30 PM
>> To: focus-ms@securityfocus.com
>> Subject: Re: Hardening Desktop
>>
>>
>> I guess my main question is, how do you expect to re-enable the
>> keyboard so that the next user can log on?
>>
>>
>> > On Fri, 17 Sep 2004 15:28:13 +0200, balyfix@tin.it
>> <balyfix@tin.it> wrote:
>> >> Hello,
>> >>
>> >> i need to hardening My windows 2000 desktop.
>> >>
>> >> When a user log on to my machine, start IE with a particular url
>> >> and the user can' t :
>> >> 1: Use the keyboard
>> >> 2: use taskbar
>> >> 3: Redirect the browser on C:\
>> >>
>> >> Is it possible ?
>> >>
>> >> I read some where that is possible with the registry command, but
>> >> i want to know if there is a white paper.
>> >>
>> >> Thanks very much
>> >>
>> >> --Filippo
>>
>>
>> --------------------------------------------------------------
>> -------------
>> --------------------------------------------------------------
>> -------------
>>
>
>
> ----------------------------------------------------------------------
> -----
>
------------------------------------------------------------------------
--- > > > ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- --------------------------------------------------------------------------- ---------------------------------------------------------------------------
- Previous message: Thor: "Re: Serious Security Issue in Windows XP SP2's Firewall"
- Maybe in reply to: balyfix_at_tin.it: "Hardening Desktop"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|