Re: locking down Win2k

From: Steven L Umbach (n9rou@attbi.com)
Date: 03/06/03 

From: "Steven L Umbach" <n9rou@attbi.com>
Date: Thu, 06 Mar 2003 05:40:58 GMT

       You can use group policy and ntfs permissions (do NOT change ntfs
permissions on the winnt directory unless you know what you are doing) to
lock down a workstation. You will have to configure group policy on each
workstation by running mmc in the run box and adding the group policy snap
in. Administrative templates under user configuration will allow a lot of
configuration. Keep in mind that changes in group policy on a workstation
apply to ALL users including administrator, however you could configure
group policy remotely as an administrator (except security settings) from
another computer. Be sure to have locks on the computer cases, password
protect cmos, and do not allow booting into any drive but the hard drive.
Consider not having a floppy or cdrom if you do not need them and disable
any uneeded ports in cmos and in device manager. --- Steve

"zsolt" <zbrandt@ihug.co.nz> wrote in message
news:08f101c2e389$2d7a2700$3301280a@phx.gbl...
> we have a couple of workstations which require access to
> the public, or viceversa, and i am wanting to lock em down
> tight as poss, while still allowing net and tcp iop
> traffic for a couple of apps. anyone know an easy way to
> go about this, hide all control panels, etc etc, stop
> browsing etc? cheers in advance, Zsolt
>

Relevant Pages

  • Re: Automaticlly Lock Workstation
    ... There may be a way through group policy to cause this. ... determine if it might be the result of a user setting a timeout to lock the ... In a workgroup setting, they can be very difficult to deal ... >>Is this stand alone workstation in a workgroup or domain? ...
    (microsoft.public.win2000.security)
  • Re: Security Treats
    ... imagine that a malicious user wants to gain domain admin access. ... the administrator unwittingly gives away ... If you have group policy, ... Make sure your workstation accounts reside in an OU (rather than the default ...
    (microsoft.public.win2000.security)
  • Re: Getting Hacked
    ... >How do I change the lock setting to a maunual unlock etc ... >workstation to workstation ... >>The Administrator account can't be locked out by ...
    (microsoft.public.windows.server.sbs)
  • "please contact your system administrator"... I *am* the administrator
    ... son is a little bit funny and keeps trying to lock the rest of the family ... Group Policy via Start> run> "gpedit.msc" to enable security settings. ... Administrator, the system is not allowing access to the Console. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Remote Locking
    ... As far as I know, there is no API to lock a computer remotely, not even one ... > of time from a remote workstation using a code. ... > administrator account). ...
    (microsoft.public.platformsdk.security)