Re: Win2K Professional Lockdown w/o Domain

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/06/05


Date: Sun, 6 Feb 2005 13:25:35 -0700

You can use poledit in W2k for standalone config.
It is much more limited that group policy, but outside of
a domain local policy affects all account equally.
There are third-party alternatives, direct registy editing,
use of a deny on system32\GroupPolicy for the accounts
that should not be affected by local policy, and evolve
a practice similar to what is outlined in
http://support.microsoft.com/default.aspx?scid=kb;en-us;325351

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Derek" <dg364@juno.com> wrote in message
news:%23VGpzGIDFHA.228@tk2msftngp13.phx.gbl...
> Hey All,
>
> I think I'm just missing something simple, but how can I lock down a user
> profile on a Win2K Pro machine that is not part of a domain.  This profile
> will be used by random public and I don't want access to the desktop,
start
> menu, or network.  I only want the profile to run IE and only go to
certain
> sites.
>
> I seem to at a loss for doing this without a domain, and am willing to bet
> the answer is in front of my face but I can't find it.  This is realyl
easy
> on 98 with PolEditor, how is this done on 2K Pro?
>
> Thanks,
> Derek
>
>
>


Relevant Pages

  • Re: Regedit.exe is forbidden
    ... If you arejust interested then search for the tool called POLEDIT and open ... registry (your local policy) and make changes. ... Regedit tool could be blocked ... >>If you insist on not formatting, ...
    (microsoft.public.security)
  • Re: The Local Policy of the system does not permit you to Log on Inter
    ... I have logged onto 1 of these pc’s with a Domain Admin account and in Local Policy, I have ensured the deny Logon Locally” is not set, but still no joy. ... I have tested one of the accounts to ensure that remote access is functioning. ...
    (microsoft.public.windows.server.sbs)
  • Re: User Restictions on a Standalone Machine
    ... local policy has effect on all machine ... What I would like to do is have an administrator account, ... the system folders or control panel, or be able to change any settings ... make the necessary changes to a particular user/group. ...
    (microsoft.public.win2000.security)
  • Re: Logon as a batch job
    ... Don't set this setting in the local policy. ... > In looking through the docs it appears the account I'm ... > Where am I supposed to change this user access right if I ... > have done to fix that scheduled task problem? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Policy Does Not Permit You to Log On Interactively
    ... How do I recovery a lost local user profile? ... You receive the 'The local policy of this system does ... I logged on as my wife and see my account is still ... | running XP home on a small home peer network. ...
    (microsoft.public.windowsxp.security_admin)