Locking Windows Down...

**merlinsghost** · August 14th, 2006, 01:01 PM

Hello,

I am working on a project for my company and for this project I am looking for thoughts and opinions on software that could lock down Windows to a point that only someone with an administrative password could:

1) Access the Internet
2) Access various Windows customization and system options and menus (i.e. change the screen resolution, can't right-click on anything or anywhere, etc.)
3) Have access to various network resources, etc.

Does anyone know of, or can anyone recommend a piece of software that does this?

Note: Budget is of no concern, but I would like as many price-points as possible.

Thanks!

**Gabriel** · August 14th, 2006, 01:12 PM

Hi,
The simplest (and complicated... depends who you ask) is to apply group policy.
You have to learn the subject a bit - but once you master it - life is easier (sys adimin life.... not the user

)

start here
http://www.microsoft.com/windowsserv...c/default.mspx

Cheers,
Gabriel

**BOB IROC** · August 14th, 2006, 06:59 PM

I have to agree with Gabriel. We use Group Policies on machines at my work to keep students out of areas such as that. In windows XP Professional you can launch gpedit.msc launched from the run on start menu to apply these settings. Unfortunately I am no expert and you may want to some reading on the subject. Gabriel's link should provide you the info you need.

**Guts3d** · August 15th, 2006, 07:37 AM

One thing to remember, lock down cmos with a password or they can boot from a cdrom or floppy and take control with a plethora of pirating tools...

**Lowland** · August 15th, 2006, 08:32 AM

Try www.***********.com

Their Desktop Authority is feature rich, much easier than AD (although has AD integration) and you can profile down to a single user or up to a global group.

Thay also have anumber of other tools available for compliance purposes.

I dont work for them but I do use it.

Good luck in your hunt

***DonJ*** · August 15th, 2006, 01:34 PM

This is what we use:

Sorry, I couldn't resist.

**slgrieb** · August 15th, 2006, 04:29 PM

Group Policy Objects are a little un-intuitive to use, but it's worth the time because almost any network administrative task can be done with Group Policy. For instance, you can deploy any software that installs with the Windows Installer (*.msi), pretty much whatever your heart desires.

**Lowland** · August 16th, 2006, 02:19 AM

DonJ that was disgaceful

Oh, and pane-ful. If the board owners charge you for that, don't tell em you was framed, just give em a glazed expression.

There, let that be a lesson to ya!

;p

**slgrieb** · August 16th, 2006, 03:55 AM

Very amusing post Lowland! Still, your motives are transparent and you should screen your sources more thoroughly. Never the less, ***********'s software looks good, so I think I'll latch on to it.

**Lowland** · August 16th, 2006, 04:03 AM

what monster have I created???????

**slgrieb** · August 16th, 2006, 04:32 AM

Lowland, no good deed goes unpunished.

**merlinsghost** · August 16th, 2006, 04:52 PM

Thanks for your responses, everyone!

And great post, DonJ. =D

**WebHead** · August 17th, 2006, 12:14 PM

Btw,.. For those who are unfamiliar with the concept of Group Policy, Microsoft has a Group Policy Virtual Lab.

Link: http://www.microsoft.com/technet/tra...erver2003.mspx

(scroll down a bit)

**slgrieb** · August 17th, 2006, 12:57 PM

Excellent link WebHead! Well worth checking out even if you are reasonably experienced. I remember the first time I set up MS's Software Update Service on a Server 2003 installation. The Technet whitepaper on this single activity was 103 pages! And tedious, I might add. The Virtual Lab is a much better experience.

**edball** · August 18th, 2006, 09:18 AM

Originally Posted by merlinsghost

Hello,

I am working on a project for my company and for this project I am looking for thoughts and opinions on software that could lock down Windows to a point that only someone with an administrative password could:

1) Access the Internet
2) Access various Windows customization and system options and menus (i.e. change the screen resolution, can't right-click on anything or anywhere, etc.)
3) Have access to various network resources, etc.

Does anyone know of, or can anyone recommend a piece of software that does this?

Note: Budget is of no concern, but I would like as many price-points as possible.

Thanks!

If you really want to lock it down tight, look into a terminal server and dumb terminals. The cost is less that pcs and there isn't anyplace the user can plug in a device to attempt to boot to.