Local Policy

  • Thread starter Thread starter Jay
  • Start date Start date
J

Jay

I am looking for a way to apply multiple local policies to a stand
alone machine. In other words i want to completly lock down all
accounts from everything except internet but still allow the
administrator account full control. This machine is not going to see
the network just internet so assigning AD user GPO is not going to
work i was thinking possibly exporting 2 versions of the registry 1
locked down and the other not then write a script to apply the
registry for the appropiate user at logon.

Would this be an acceptable way of doing this or is there a better
method?

Thanks
Jay Bachiu
(e-mail address removed)
 
You can try this, it seems that it will work.

Make a user a local admin.

Log on as this user.

Lock down this profile using registry keys set in HKEY_Current_User
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explore
r

Log on as Admin and verify that you can access the box and the changes do
not effect you.

Remove the user from local admin.


198771 How to Lock Down Windows NT and Internet Explorer 4.01 Desktop
http://support.microsoft.com/?id=198771

143164 INF: How to Protect Windows NT Desktops in Public Areas
http://support.microsoft.com/?id=143164

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top