Desktop and Word Lockdown

[John Brubaker]

I'm working on locking down a Windows 2k desktop and Word
2000 for public computers in a library. I've used ADMs
to lockdown most but have a few questions.

Word 2000:
1) In the Open Dialog where it says "Look In", I want to
hide everything but the A:\ drive. I can't find where
to hide the Desktop and the FTP entries.
2) Disable the Office Assistant.
3) Hide any ability to access the local system

Desktop:
1) Lock the clock so it can't be modified.
2) Lock the icons on the desktop so they can't be renamed
or deleted.

Any help would be greatly appreciated.
John

 

[me]

www.gruppenrichtlinien.de

Unfortunately in German language, but it's some really good articles
on how to lock down systems. "Kiosk" might be something you'd like to
look in.

There should be some policy for hiding drives. At least I'm certain
those exist in the Group policy. You can set what drives to be hidden.
Otherwise there is some winfaq site that lists the needed registry
entries, so you can set it yourself.

Hint: This only works in Windows though. If the users open the dos
console, they can access all drives.

The office assistent just may not get installed to prevent him from
starting. you can set that during the installation process.

 

[Buz [MSFT]]

Here are some articles in conjunction with that info:

231289 Using Group Policy Objects to Hide Specified Drives in My Computer
for http://support.microsoft.com/?id=231289

307027 Drives That Are Blocked By a Group Policy Are Still Accessible By
Using
http://support.microsoft.com/?id=307027

278295 How to Lock Down a Windows 2000 Terminal Server Session
http://support.microsoft.com/?id=278295

143164 INF: How to Protect Windows NT Desktops in Public Areas
http://support.microsoft.com/?id=143164

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.