Lock Down XP Pro Stand Alone

[Dale]

XP Pro Stand Alone

I need to secure a single user on an XP Pro stand alone. I want to do
the following:
1 - Stop all downloads
2 - Prevent all installs
3 - Prevent any changes to the desktop
4 - Prevent any system changes

I believe that this can be done with registry settings but open to any
suggestions.

Thanks
Dale

 

[Brian A.]

XP Pro Stand Alone

I need to secure a single user on an XP Pro stand alone. I want to do
the following:
1 - Stop all downloads
2 - Prevent all installs
3 - Prevent any changes to the desktop
4 - Prevent any system changes

I believe that this can be done with registry settings but open to any
suggestions.

Thanks
Dale

Click Start > run, type in: gpedit.msc and press Enter.
Be careful what you set as policies so you don't lock yourself out from certain
tasks.

--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375

 

[NoConsequence]

XP Pro Stand Alone

I need to secure a single user on an XP Pro stand alone. I want to do
the following:
1 - Stop all downloads
2 - Prevent all installs
3 - Prevent any changes to the desktop
4 - Prevent any system changes

I believe that this can be done with registry settings but open to any
suggestions.

Thanks
Dale

This sounds like you are trying to stop your kids from screwing around
on a computer. If this is the case, how about just whipping their ass
if they do what you told them NOT to do?

 

[Dale]

This sounds like you are trying to stop your kids from screwing around
on a computer. If this is the case, how about just whipping their ass
if they do what you told them NOT to do?

No it's not my kids. I have 40 field laptops with XP Pro, 160
different users, all laptops are stand alone - no domain, all users
use a single universal logon, in our enviroment any user could
possibly be assigned any laptop on any day.

I need to secure these to prevent the things listed above. Local
policy applies to all users including administrator. I need to apply
these settings only to 1 login/user and still have full access when I
logon as administrator. I frequently use remote access to perform
maintenance and updates on these laptops so I do not need to have to
change policy settings when I remote in.

Surely this can be done with a logon script, registry settings, or
something.

Any help truely appreciated.
Dale