The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Looking for some help on a special XP config

    Discussion in 'Windows OS and Software' started by glenametz, Sep 12, 2008.

  1. glenametz

    glenametz Notebook Enthusiast

    Reputations:
    0
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    5
    I have 5 PCs to deploy in a production area. I am looking to lock them down quite a bit. They will be part of a Server 2003 domain, and I would like to use GP to restrict access to the following:
    -IE
    -Run dialog box
    -Install Software
    -Install Hardware
    -No removable devices (flash drives)
    -No DVD-ROM access
    -A locked profile (this I have plenty of experience with)

    I could also do this via local policy settings as I haven't finalized the image for these machines yet, but I'd rather not have to make a change down the line of 5 different machines if I don't have to.

    I've thought about using one of the MS published restricted GPO sets, but haven't had much experience with them. Does anyone have any quick fixes that I'm looking for? Thanks much folks.
     
    glenametz, Sep 12, 2008
    #1
  2. gerryf19

    gerryf19 I am the walrus

    Reputations:
    2,275
    Messages:
    3,990
    Likes Received:
    0
    Trophy Points:
    105
    Maybe I am not reading you right, but since these computers are part of a domain, why aren't you just using active directory group policy to apply to all member computers, or if there are specific users, create a group, add the users to the group, and apply the group policy object to the group?
     
    gerryf19, Sep 12, 2008
    #2
  3. glenametz

    glenametz Notebook Enthusiast

    Reputations:
    0
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    5
    They are already in a group, and I'll be using AD to apply the GP to the clients. Just wondering if someone has some baselines for restricted access PCs they've used before.
     
    glenametz, Sep 12, 2008
    #3
  4. Pitabred

    Pitabred Linux geek con rat flail!

    Reputations:
    3,300
    Messages:
    7,115
    Likes Received:
    3
    Trophy Points:
    206
    A limited user shouldn't have rights by default to install software or hardware (just don't make it a power user). IE and the Run dialog, you probably have to use the Group Policy Editor. It'll probably help with the drives, too.
     
    Pitabred, Sep 12, 2008
    #4