XP Pro Desktop Lockdown

I wanted to post regarding the most efficient way to lock down a
Windows XP Pro desktop. Basically, I have 15 users connected to a
non-critical network (peer-to-peer) and would like to limit the
following items;

- disable access to drive letters other then A:
- disable access to display properties - (i.e.screen saver,
background, etc)
- disable access to most items within the control panel
- disable access to USB devices
- disable access to add/remove printers
- disable Windows function keys
- disable access to Windows explorer
- disable access to run cmd (i.e. - cmd prompt, msconfig cmd, etc,
etc)

There are other items that I would like to disable as well. I must
mention, the PC’s have two user logon options upon start up - Limited
User as well as, Administrator. I want full access to every item above
as a administrator.

I am having a issue trying to lock down items only for the limited
access user and NOT for the admin. It seems when certain items are
disabled, it is system wide rather then profile specific....

Can anyone lend some advice, perhaps a tool that has performed well...

Thanks in advance.



--
http://www.WindowsForumz.com/ This article was posted by author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.WindowsForumz.com/General...ict217827.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.WindowsForumz.com/eform.php?p=648239

You will get more help with this by posting to the networking newsgroup. Try
here
news://msnews.microsoft.com/microsof...xp.network_web


--

Harry Ohrn MS-MVP [Shell/User]
www.webtree.ca/windowsxp


"ITR000" wrote in message
...
| I wanted to post regarding the most efficient way to lock down a
| Windows XP Pro desktop. Basically, I have 15 users connected to a
| non-critical network (peer-to-peer) and would like to limit the
| following items;
|
| - disable access to drive letters other then A:
| - disable access to display properties - (i.e.screen saver,
| background, etc)
| - disable access to most items within the control panel
| - disable access to USB devices
| - disable access to add/remove printers
| - disable Windows function keys
| - disable access to Windows explorer
| - disable access to run cmd (i.e. - cmd prompt, msconfig cmd, etc,
| etc)
|
| There are other items that I would like to disable as well. I must
| mention, the PC's have two user logon options upon start up - Limited
| User as well as, Administrator. I want full access to every item above
| as a administrator.
|
| I am having a issue trying to lock down items only for the limited
| access user and NOT for the admin. It seems when certain items are
| disabled, it is system wide rather then profile specific....
|
| Can anyone lend some advice, perhaps a tool that has performed well...
|
| Thanks in advance.
|
|
|
| --
| http://www.WindowsForumz.com/ This article was posted by author's request
| Articles individually checked for conformance to usenet standards
| Topic URL:
http://www.WindowsForumz.com/General...ict217827.html
| Visit Topic URL to contact author (reg. req'd). Report abuse:
http://www.WindowsForumz.com/eform.php?p=648239

Combine the edits wanted from he
http://www.kellys-korner-xp.com/xp_tweaks.htm or script it. Added info:
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

--
All the Best,
Kelly

Microsoft-MVP Windows® XP-Shell/User
2004 Windows MVP "Winny" Award

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"ITR000" wrote in message
...
I wanted to post regarding the most efficient way to lock down a
Windows XP Pro desktop. Basically, I have 15 users connected to a
non-critical network (peer-to-peer) and would like to limit the
following items;

- disable access to drive letters other then A:
- disable access to display properties - (i.e.screen saver,
background, etc)
- disable access to most items within the control panel
- disable access to USB devices
- disable access to add/remove printers
- disable Windows function keys
- disable access to Windows explorer
- disable access to run cmd (i.e. - cmd prompt, msconfig cmd, etc,
etc)

There are other items that I would like to disable as well. I must
mention, the PC's have two user logon options upon start up - Limited
User as well as, Administrator. I want full access to every item above
as a administrator.

I am having a issue trying to lock down items only for the limited
access user and NOT for the admin. It seems when certain items are
disabled, it is system wide rather then profile specific....

Can anyone lend some advice, perhaps a tool that has performed well...

Thanks in advance.



--
http://www.WindowsForumz.com/ This article was posted by author's request
Articles individually checked for conformance to usenet standards
Topic URL:
http://www.WindowsForumz.com/General...ict217827.html
Visit Topic URL to contact author (reg. req'd). Report abuse:
http://www.WindowsForumz.com/eform.php?p=648239