RE: Locking down a stand-alone 2000 Server with Group Poicy

From: McGill, Lachlan (mcgilll1_at_anz.com)
Date: 09/30/03

  • Next message: Dale Smith: "RE: Locking down a stand-alone 2000 Server with Group Policy"
    Date: Tue, 30 Sep 2003 09:17:41 +1000
    To: "Al Cook" <cookas@msn.com>, <security-basics@securityfocus.com>
    
    

    I remember having this same issue. I found a workaround posted in Microsoft's knowledge base. It involved renaming some files and playing around a bit but if you do a search on MS for something like, "policies workgroup administrator", then you should find it.

    -----Original Message-----
    From: Al Cook [mailto:cookas@msn.com]
    Sent: Tuesday, 30 September 2003 12:59 AM
    To: security-basics@securityfocus.com
    Subject: Locking down a stand-alone 2000 Server with Group Poicy

    Apologies if this is slightly off topic, but I have a stand-alone laptop
    running windows 2000 and it will be used for training external customers.
    I've setup a user account which they will use to log in to the machine and
    run our company application. I need to ensure that this user account can't
    do anything on the laptop other than run the application. Things like the
    run command, task manager, explorer, control panel etc all must be disabled.

    I was wondering what would be the best way to achieve this without
    purchasing external software, I've played around with the group policy
    editor snap in, but all the setting then apply to the administrator account
    also. Has anyone got any suggestions, I found windows help pretty confusing
    and geared towards group policy for domains rather than stand-alone
    machines.

    Many thanks, Al

    _________________________________________________________________
    Stay in touch with absent friends - get MSN Messenger
    http://www.msn.co.uk/messenger

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Dale Smith: "RE: Locking down a stand-alone 2000 Server with Group Policy"

    Relevant Pages

    • Locking down a stand-alone 2000 Server with Group Poicy
      ... Apologies if this is slightly off topic, but I have a stand-alone laptop ... running windows 2000 and it will be used for training external customers. ... I need to ensure that this user account can't ...
      (Security-Basics)
    • Words Recent list fails to show paths
      ... SR1-SP3 on a stand-alone ... PC running Windows 98SE. ... the 'File' drop-down menu. ...
      (microsoft.public.word.docmanagement)
    • Removing "Restoring Network Connections" option
      ... I am hoping someone out there will be able to help as I have tried alsorts with no luck... ... I have a stand-alone PC running Windows 2000 that connects into a domain by dialling through a modem to a RAS. ...
      (microsoft.public.win2000.networking)
    • Re: AD Attribute Update Tool
      ... This is a stand-alone application. ... user account objects that you have selected. ... > csv file that our MIS department maintains. ... > that will allow us to do this without having to be a script guru. ...
      (microsoft.public.win2000.active_directory)
    • User Account
      ... I utilized MicroSoft's automatic upadates and it ... installed a User Account. ... I have no need of this as I have a stand-alone PC in my ... Charles ...
      (microsoft.public.windowsxp.security_admin)