Locking computers down so that users cannot change any settings

Locking computers down so that users cannot change any settings

Post by TmVlZHk » Sun, 31 Oct 2004 07:20:01


I do not want my users to make any setting chages in the workstations. I
want there to be a standard and people cannot change desktop settings. I
need to know which OU policies I need to enable or disable to secure my
network.

Please Help! Thanks.
 
 
 

Locking computers down so that users cannot change any settings

Post by Steven L U » Sun, 31 Oct 2004 07:54:04

If you look in Group Policy under user configuration/administrative
templates/desktop and configuration/administrative templates/start menu you
will see a lot of options you can try. For the desktop settings note that
they differ depending on if you are using Active Desktop or not. Other
options may be to use mandatory user profiles or changing the users
permissions to their desktop folder in their user profile under documents
and settings so that they have only read/list/execute. Restricting Desktop
settings alone, while it has it's merits, will not do much to secure your
network For that you also need to configure strong password policy,
restrict users to the users group if possible, apply the principle of least
needed permissions to resources such as shares, have a firewall, antivirus
protection, and take many other steps. If you have Windows XP Pro computers,
you will find Software Restriction Policies very helpful in preventing users
from installing or running unauthorized applications.The links below may be
helpful. --- Steve

http://www.yqcomputer.com/
http://www.yqcomputer.com/
Microsoft Small Business Security Guidance.