Locking down XP machines on a peer to peer network



Hi,

We have a small XP network on a peer-to-peer basis that is going to be used
as an open access suite. I want to lock down these machines (such as
removing access to the control panel and restricting access to the C drive)
which I thought could be fairly simply done using the Local Computer Policy
via gpedit.msc.

However, I am used to working in a domain environment so being able to apply
different policies to different users or groups. We also want some users
(such as administrators) to be able to log on and access all features. It
seems that if I apply a Local Computer Policy, I cannot differentiate
between users. Is there a way to save a policy file (one with features
turned on, or one with them turned off) so that they can be simply applied
by an administrator, or is there a better way to do this?

In addition, I can remember vaguely that Microsoft used to provide example
settings of Group Policy for machines in certain situations; however, I can't
remember the link to the pages. Does anyone know the whereabouts of these
examples and if they can be applied out of a domain controlled environment?

Many Thanks

Chris


.



Relevant Pages

  • Re: Restricting access to a Domain Controller
    ... You can restrict the user right "Log on Locally" access through Group Policy ... or Local Computer Policy ... ... > unauthorized access to a Domain Controller. ...
    (microsoft.public.win2000.security)
  • Re: Snap-in failed to initialize
    ... does it have Local Computer Policy?? ... > The only snap -in I could not add was group policy. ... >> HOW TO Create Custom MMC Snap-in Tools Using Microsoft Management>> Console ... >> HOW TO Use the Group Policy Editor to Manage Local Computer Policy in>> Windows XP ...
    (microsoft.public.windowsxp.newusers)
  • Re: Workstation Protection
    ... How To Use the Group Policy Editor to Manage Local Computer Policy in Windows XP ... How to apply local policies to all users except administrators in a workgroup setting ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: restrict addition of software?
    ... How To Use the Group Policy Editor to Manage Local Computer Policy in Windows XP ... How to apply local policies to all users except administrators in a workgroup setting ...
    (microsoft.public.windowsxp.general)
  • Re: group policy settings
    ... Use the Group Policy Editor to Manage Local Computer Policy in Windows XP ... | is there any publication of all the settings you can use and what they ...
    (microsoft.public.windowsxp.security_admin)