Re: What is best method for locking down WS

From: x y (levinson_k@despammed.com)
Date: 02/20/03


From: "x y" <levinson_k@despammed.com>
Date: Thu, 20 Feb 2003 08:56:28 -0500


You CAN remotely push out group policy for windows 2000 and XP, though this
becomes somewhat manual. I've described this over and over, so search this
newsgroup at www.google.com/advanced_group_search for something like
"gpedit.msc" Briefly, you want to use group policy, several MMC snap-ins
relating to security and policy, a batch file or logon script or the AT
command or the Task Scheduler folder to force the SECEDIT command to
remotely run and apply a group policy database to each computer, etc.

For locking down the internet, you'd really want to consider doing that at
an external device such as a firewall that does user authentication or a
proxy server like perhaps squid [which is free]. Other things you probably
want to consider:

http://securityadmin.info/faq.htm#firewall
http://securityadmin.info/faq.htm#harden

"FearMe" <pegt10@bellsouth.net> wrote in message
news:FeU4a.1662$Uo5.319@fe08.atl2.webusenet.com...
> Hello, We have client/server model. Server is a member server sharing a
> public folder to the clients which are win200 pro. I noticed that unless
we
> have Active Directory we cannot control gpo's at the member server for all
> users or groups. I enable gpo on computers and users and lock down the
pc.
> I did as a Admin. When I log back in to the WS, I noticed I could access
> any of the objects that configured for gpo. What would be the best way in
> restricting users at WS from internet and locking down the desktop. Users
> are only allowed to access public folder on Member Server.



Relevant Pages

  • RE: USERENV Even 1030 error on Member Server
    ... Enterprise-based Member Server. ... you cannot start Group Policy snap-ins. ... Please do the last windows update to the Windows 2003 Enterprise-based ... Enterprise-based Member Server has Dynamic Updates set to No. ...
    (microsoft.public.windows.server.sbs)
  • Re: applying settings to clients forcefully
    ... Yes it's member server of the infrasoft.lan domain and i am not using any terminal services of that machine, nor it's configured as terminal server. ... > Windows 2000 IP Configuration ... > Microsoft Windows Operating System Group Policy Result tool ...
    (microsoft.public.win2000.group_policy)
  • Re: Delegate authority
    ... Set up a group policy for the OU. ... Perform backups of the member server using Backup Exec. ... I have experimented by trying using the delegation wizard, ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Not updating Version numer Mismatch
    ... Can you see the gpttmpl.inf file getting updated in SYSVOL on the PDCe when you make the change from the member server? ... if you make a change to another policy area in that GPO while on the member server (like Admin. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ...
    (microsoft.public.windows.group_policy)
  • Re: Share exchange calandar
    ... it is clear for me:) but i need a group policy to manage this ... > You will create a calendar in the public folder and give everyone ... >> how can i share the calendar to se each bsb user to see eachother's ...
    (microsoft.public.windows.server.sbs)

Quantcast