Local security on W2K Pro

  • Thread starter Thread starter Todd
  • Start date Start date
T

Todd

We have a workgroup of W2K Pro computers with no AD. How
can I "lock down" some of the computers like it was with
the old Policy Editor functions.

Functions to control,
use of diskette drive
CD
no access to certain control panel functions

Thank you,

Todd
 
Thank you
-----Original Message-----

Click start->run->type 'mmc'->Console->Add/Remove Snap In-
analysis->add->close->ok.

From there look down the various options on your left hand
side for ways to lock a machine down.

.
Click to expand...
 
Thanks but didn't see any items that pertain to what we
need to accomplish. These are primarily the Local
Security Policy settings but do not include locking down
drives, control panel, etc.

Todd
 
Todd said:
We have a workgroup of W2K Pro computers with no AD. How
can I "lock down" some of the computers like it was with
the old Policy Editor functions.

Functions to control,
use of diskette drive
CD
no access to certain control panel functions
Click to expand...

Hi

Note, some Windows XP links also below, but it is very much the same as for
Windows 2000...


Managing Desktops Without Active Directory
http://www.microsoft.com/technet/prodtechnol/winxppro/reskit/prda_dcm_godi.asp

Tip 3612 at http://www.jsiinc.com/reghack.htm
3612 » How do I distribute Local Group Policy to Windows 2000 clients in a
non-Active Directory domain or workgroup?

Group Policies for Windows 2000 Professional Clients in
Windows NT 4.0 Domain or Workgroups
http://support.microsoft.com/default.aspx?scid=kb;en-us;274478

HOW TO: Secure Windows in a Non-Domain Environment
http://support.microsoft.com/default.aspx?scid=KB;EN-US;269799


This is important, a mistake can require a format as Mark L. Ferguson states
in the newsgroup thread below.

From: Cazz ([email protected])
Subject: How to lock down almost everything for 1 user or group?
Newsgroups: microsoft.public.windowsxp.security_admin
Date: 2002-02-22 17:52:38 PST
http://groups.google.com/groups?th=59807abf6aa723ed


Some input/links:

From: Roger Abell [MVP] ([email protected])
Subject: Re: Easiest way to implement a lock-down policy? Suggestions welcome
Newsgroups: microsoft.public.windowsxp.security_admin
Date: 2002-08-09 00:15:54 PST
http://groups.google.com/groups?th=c207ccb603d968cb


Implementing Common Desktop Management Scenarios
http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolicy.asp

Online version of the one above (I think)
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/grppolsc.asp

Implementing Registry-Based Group Policy for Applications
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/regappgp.asp

Group Policy Registry Table
http://www.microsoft.com/windows200...indows2000/techinfo/reskit/en-us/gp/gpref.asp

Windows XP Professional > Security and administration > Security Templates
overview
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/sag_SCEwhatis.asp

Windows XP Professional > Security and administration > Security Settings
overview
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/SS_overview.asp

HOW TO: Set Up a File System for Secure Access in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;300691

SetACL.exe: SetACL - Windows permission management: Set permissions on
virtually anything
http://setacl.sourceforge.net/
 
Back
Top