Lockdown Windows XP Pro

  • Thread starter Thread starter Matt Pollicove
  • Start date Start date
M

Matt Pollicove

I'm looking for some good on line or print articles on Windows XP group and
policy setup. I am running xp pro at home with all four members of my
family accessing the computer. I'd like to be able to give everyone access
to programs (if I set them up as regular users some programs cannot be run)
and basic customization but not let them run rampant through control panel
or the CMD level.

Ideally, I would like to set up groups a la NT or 2000, but I don't see that
functionality here.
 
The custom group capability is still in XP.
Have you shut off the Simple sharing mode yet (bottom of View tab
in the Folder Options)?

For applications that fail to run except as an admin, first email the
maker and let them know your "satisfaction" level, as it is they that
did not take the time to make their app to meet Windows cert specs.
Then, try loosening the permission on the app's install directory so
that Users group has change. If that does not do it then often it is
because the app is trying to write to the registry, most usually in its
own install keys (again, contrary to the Made For Windows spec).
Sometimes the app wants a temp file in a wierd place, or to twiddle
with a .ini file in the Windows directory. All of these can be handled
by adjusting permissions, once one finds where.
The regmon and filemon tools from www.sysinternals.com help.

As for locking down XP, check out the XP hardening guide on the
MS website. The issue you will face however is that outside of a
domain all use of the local policy will have affect on all accounts,
admins included.
http://go.microsoft.com/fwlink/?LinkId=15159

http://www.microsoft.com/downloads/...bc-f434-4cc6-a5a7-09a8a229f118&DisplayLang=en

http://www.microsoft.com/downloads/...ed-2e9c-44f9-bc50-d43d57e17078&DisplayLang=en
 
Back
Top