Help needed to restrict users on laptops.?

  • Thread starter Thread starter DCF
  • Start date Start date
D

DCF

We have just taken delivery of 10 laptops which are for a students. The
laptops are XP Pro, what we want to do is use a policy of some kind to lock
the laptop down for the user, i.e so they have no access to control panel or
the C: drive etc. We already have this in place on our 2000 server and it
work well. We want to have something similar on the laptop but the laptop
will not be connected to the server and will be taken home by students to do
course work as and when they need to.

I have tried gpedit.msc (setting up a local computer policy)but this affects
the administrator as well. What we want is for
the user to log on and get the restrictions and when the administrator logs
on
he gets everything. Because the laptops are going to be used by a large
number of
different people we are only going to create one single user account on the
machine
that all users will use to log on. ie. (6user1)

I found that if you log them on to the server it will pick up the security
from the OU, even when people log off it keeps the security but as soon as
the computer shuts down it looses the settings. I even did a search for .cpl
extensions (control panel) and denied access to this to everyone except the
administrator. This worked to a certain extent but its a bit long winded.

an anyone give us ant tips for this or recommendations to what they do?
 
Use the security configuration and analysis tool to either
apply a security template to the machine or to create one.
You can setup the machien the way you want it locked down
and use the security configuration and analysis tool to
export a template wit hyour settings.
You can then import this template onto another machien and
it take over the same security characterists.
Steve
 
But will this also affect the administartor?
stevta said:
Use the security configuration and analysis tool to either
apply a security template to the machine or to create one.
You can setup the machien the way you want it locked down
and use the security configuration and analysis tool to
export a template wit hyour settings.
You can then import this template onto another machien and
it take over the same security characterists.
Steve
 
Back
Top