Help locking down lab PCs

Hey, all.

I'll be administering a small public-access computer lab and am looking to
lockdown the workstations as much as possible. The PCs are running XP Pro
(soon to be SP2) in a SBS2003 domain.

Users will need access to installed applications and IE, and I'd like to
allow them to change the resolution settings (though this last bit is far
from critical). I DO NOT want to allow them modify rights to the local hard
drive.

Anyone out there able to point me toward information on how to do this?

How To Use the Group Policy Editor to Manage Local Computer Policy in Windows XP
http://support.microsoft.com/defaul...2&Product=winxp

Windows XP Security Checklist
http://www.labmice.net/articles/win...tychecklist.htm

How can I harden my computer or server to secure it from hackers?
http://securityadmin.info/faq4.asp#harden

This book provides comprehensive information about planning, designing, and implementing a secure core network
infrastructure:
http://www.microsoft.com/downloads/...&displaylang=en

SymantecT Client Security 2.0 with Groupware Protection
http://www.symantec.com/smallbiz/scs_gpw_sbe/index.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/sec...ct/default.aspx

----------------------------------------------------------------------------------------

"Bryce Alan Katz" wrote:

| Hey, all.
|
| I'll be administering a small public-access computer lab and am looking to
| lockdown the workstations as much as possible. The PCs are running XP Pro
| (soon to be SP2) in a SBS2003 domain.
|
| Users will need access to installed applications and IE, and I'd like to
| allow them to change the resolution settings (though this last bit is far
| from critical). I DO NOT want to allow them modify rights to the local hard
| drive.
|
| Anyone out there able to point me toward information on how to do this?

Thanks, Carey! Looks like exactly the stuff I was after.

"Carey Frisch [MVP]" <cnfrisch@nospamgmail.com> wrote in message
news:uRgfQXHrEHA.3988@tk2msftngp13.phx.gbl...
> How To Use the Group Policy Editor to Manage Local Computer Policy in
Windows XP
>
http://support.microsoft.com/defaul...2&Product=winxp
>
> Windows XP Security Checklist
> http://www.labmice.net/articles/win...tychecklist.htm
>
> How can I harden my computer or server to secure it from hackers?
> http://securityadmin.info/faq4.asp#harden
>
> This book provides comprehensive information about planning, designing,
and implementing a secure core network
> infrastructure:
>
http://www.microsoft.com/downloads/...&displaylang=en
>
> SymantecT Client Security 2.0 with Groupware Protection
> http://www.symantec.com/smallbiz/scs_gpw_sbe/index.html
>
> --
> Carey Frisch
> Microsoft MVP
> Windows XP - Shell/User
>
> Be Smart! Protect Your PC!
> http://www.microsoft.com/athome/sec...ct/default.aspx
>
> --------------------------------------------------------------------------
--------------
>
> "Bryce Alan Katz" wrote:
>
> | Hey, all.
> |
> | I'll be administering a small public-access computer lab and am looking
to
> | lockdown the workstations as much as possible. The PCs are running XP
Pro
> | (soon to be SP2) in a SBS2003 domain.
> |
> | Users will need access to installed applications and IE, and I'd like to
> | allow them to change the resolution settings (though this last bit is
far
> | from critical). I DO NOT want to allow them modify rights to the local
hard
> | drive.
> |
> | Anyone out there able to point me toward information on how to do this?
>