non-domain PC

[James]

I am trying to setup restrictions to my windows xp laptops. The laptops are
not on the network. Is there a way to rest restrictions on the laptops
without affecting the administrator account on the laptop? The restrictions
in question include: disabling the internet, restricting installtion of
programs, etc.

 

[Lanwench [MVP - Exchange]]

I am trying to setup restrictions to my windows xp laptops. The
laptops are not on the network. Is there a way to rest restrictions
on the laptops without affecting the administrator account on the
laptop? The restrictions in question include: disabling the
internet, restricting installtion of programs, etc.

If you have AD, you should definitely join these to the domain, put them in
their own OU with a group policy object linked to it (with loopback
processing if needed). In there you can do much of what you wish.

If you don't have AD (or, these laptops will *never* be on your network),
don't bother trying with policies - check out Windows Steady State and/or
Doug Knox's XP security console.

 

[James]

No they will not be a part of AD due to the fact that they are laptops that
sit in our cars. I'll give both of them a try. Thanks.