Re: Locking Down A Computer Lab

From: mjfmn (mjfmn_at_discussions.microsoft.com)
Date: 05/14/05 

Date: Fri, 13 May 2005 15:22:05 -0700

Jerry, thanks for the response. Sadly, I don't have the opportunity to get
those books (we don't even have a book store in our little town), or that
much time. The lab goes into use on Tuesday, May 17th. If someone could
just tell me what I need to do to accomplish these two tasks (going to a
restricted user at boot and / or changing the default login to a restricted
user), that would get me far enough to lock it down by the time the doors
open.

Thanks again!
Mike

"Jerry" wrote:

> Try the Group Policy Editor and do some reading:
>
> Windows XP Booklist
>
> Microsoft Windows XP Inside Out 2nd ed ISBN 0-7356-2044-X
> Microsoft Windows XP Professional Resource Kit 2nd ed ISBN 0-7356-1974-3
> Microsoft Windows Command-Line ISBN 0-7356-2038-5
> Windows XP Pro 2nd ed The Missing Manual ISBN 0-596-00898-8
> Windows XP in a Nutshell, 2nd Edition ISBN 0-596-00900-3
> Windows XP Annoyances, 2nd ed ISBN 0-596-00876-7
> Windows XP Hacks, 2nd ed ISBN 0-596-0000918-6
> Windows XP Solutions ISBN 0-7645-6773-X
> Windows XP Speed Solutions ISBN 0-7645-7814-6
> Guide to Home Networking ISBN 0-7645-4473-X
>
> Downloadable Guides
>
> XP Tweak Guide (TweakGuides_XPTC.zip) from wwww.TweakGuides.com
> Windows Registry Guide (registryguide2003.exe) from www.winguides.com
> Error Message for Windows (MSWinErr.zip) from www.gregorybraun.com
>
> "mjfmn" <mjfmn@discussions.microsoft.com> wrote in message
> news:1B199E31-2849-4524-BA18-4C59387D6031@microsoft.com...
> > Hello! I have 16 XP SP2 machines I just installed in a computer lab, and
> > I
> > want to lock them down. I got each of them setup today, used a password
> > for
> > the administrator, then setup a new user for each one (lab01, lab02,
> > etc.).
> > When I was all done I wanted to change the permission on the user from
> > administrator level to restricted, so I rebooted, went into safe mode as
> > administrator. I was told I couldn't change the user from administrator
> > because there had to be one computer administrator (I thought the
> > "administrator" log in was that?). I created a new user that I would give
> > low rights to, but when the computer is booted up it gives the option of
> > choosing a users - that kind of negates what I'm trying to do! I'd just
> > like
> > it so the computer boots up to the restricted user.
> >
> > I need to lock down these computer so no one installs any software,
> > disables
> > antivirus or Adaware, etc. Does anyone have any tips I can use? Thanks
> > so
> > much!
> >
> > Mike, MIS Director
>
>
>

Relevant Pages

  • Re: Changing User Accounts
    ... > user accounts. ... When I first tried changing to a restricted user I had a few ... > back to administrator. ... access rights to the word document folder and the place where you ...
    (microsoft.public.windowsxp.general)
  • Changing User Accounts
    ... We have several computers in our office that were set up with Administrator ... user accounts. ... When I first tried changing to a restricted user I had a few ... Changed user to a power user and it fixed problem 1. ...
    (microsoft.public.windowsxp.general)
  • Re: Locking Down A Computer Lab
    ... > those books (we don't even have a book store in our little town), ... > restricted user at boot and / or changing the default login to a restricted ... HOW TO Set, View, Change, or Remove File and Folder Permissions ... How To Use the Group Policy Editor to Manage Local Computer Policy in ...
    (microsoft.public.windowsxp.security_admin)
  • use of HP scanner as restricted user
    ... using a scanner as XP restricted user is not ... I installed the HP Scanjet 2300C driver software ... correctly as administrator but it is only usable as ...
    (microsoft.public.windowsxp.security_admin)
  • LSP install access denied problem
    ... the WSCInstallProvider fails with an "Access denied Error" if the client is ... not logged in as an administrator. ... Is there a workaround for this problem? ... installed even by a restricted user, and this process is stalled if he is ...
    (microsoft.public.win32.programmer.networks)