Locking down a workstation

[Jack Brown]

Hello,

I recently added a couple more windows 2000 pro systems
to the domain. I am running two Windows 2003 DC's. I like
the fact the users logging into the domain cannot install
software on their local machines. The only problem I have
noticed a few employees download mpegs, wmv and other
file types to the desktop/root directory. I have looked
in the group policy on the dc and I dont see anything
that will fix this issue. I was wondering if anybody has
a solution to this, or you happen to know if there is a
group policy I am missing.
Thank you

 

[Mark Renoden [MSFT]]

Hi Jack

I don't think there's anything specific. A general overview of some
lockdown scenarios can be found in:

http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/grppolsc.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Steven L Umbach]

There is no policy to disable downloading of specific file types. You can however
restrict ntfs permissions on the root/drive folder to allow users and everyone to
have only read/list/execute to that folder though they still can save files to their
profile folder. Another option that may help is to use Group Policy to configure the
internet Web Content Zone to prevent downloading of files from unauthorized sites and
ading authorized sites, if any, to the trusted Web Content Zone. Of course that will
only work for Internet Explorer. Configuring your firewall to allow outbound access
to only authorized ports may help in preventing downloads using unauthorized
applications. --- Steve

 

[Paddy]

Hello,
This tool www.disknetpro.com will give you the ability to prevent
users downloading / creating / modifying / deleting any type of file
you define.

Paddy