Policy Editor etc

[Eeyan]

Hi,

Am running a workgroup (no server / domain) , want to implement policy to
control users, but not sure how I can do it.
Is there a method where I can created the files locally and copy onto other
pc's or even better an editor that will access all the pc's and update the
policy changes?


TIA

 

[Doug Knox MS-MVP]

Not currently, but give me a week or so. If you're interested in testing a
brand new utility that I've written, see:

http://www.dougknox.com/xp/utils/xp_securityconsole.htm

This is the unlicensed version. You can contact me at (e-mail address removed)
for further information on the licensed version, which enables more
features.

 

[Kelly]

It works great, Eeyan! Hope it meets your needs.

 

[Eeyan]

Thanx Doug will give it try...........

Not currently, but give me a week or so. If you're interested in testing a
brand new utility that I've written, see:

http://www.dougknox.com/xp/utils/xp_securityconsole.htm

This is the unlicensed version. You can contact me at (e-mail address removed)
for further information on the licensed version, which enables more
features.

 

[Eeyan]

Ah, but will it access other machines to set the user policy/configs too?

 

[Doug Knox MS-MVP]

Fortunately, someone forwarded your response to me, since my reply, nor your
second message showed up.

Ah, but will it access other machines to set the user policy/configs too?

Not at this time. It may be considered for the next version of the utility.

 

[Torgeir Bakken (MVP)]

Am running a workgroup (no server / domain) , want to implement policy to
control users, but not sure how I can do it.
Is there a method where I can created the files locally and copy onto other
pc's or even better an editor that will access all the pc's and update the
policy changes?

Hi

Managing Desktops Without Active Directory
http://www.microsoft.com/technet/prodtechnol/winxppro/reskit/prda_dcm_godi.asp

Tip 3612 at http://www.jsiinc.com/reghack.htm
3612 » How do I distribute Local Group Policy to Windows 2000 clients in a
non-Active Directory domain or workgroup?

Group Policies for Windows 2000 Professional Clients in
Windows NT 4.0 Domain or Workgroups
http://support.microsoft.com/default.aspx?scid=kb;en-us;274478

HOW TO: Secure Windows in a Non-Domain Environment
http://support.microsoft.com/default.aspx?scid=KB;EN-US;269799


This is important, a mistake can require a format as Mark L. Ferguson states
in the newsgroup thread below.

From: Cazz ([email protected])
Subject: How to lock down almost everything for 1 user or group?
Newsgroups: microsoft.public.windowsxp.security_admin
Date: 2002-02-22 17:52:38 PST
http://groups.google.com/groups?th=59807abf6aa723ed


Some input/links:

From: Roger Abell [MVP] ([email protected])
Subject: Re: Easiest way to implement a lock-down policy? Suggestions welcome
Newsgroups: microsoft.public.windowsxp.security_admin
Date: 2002-08-09 00:15:54 PST
http://groups.google.com/groups?th=c207ccb603d968cb


Implementing Common Desktop Management Scenarios
http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolicy.asp

Online version of the one above (I think)
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/grppolsc.asp

Implementing Registry-Based Group Policy for Applications
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/regappgp.asp

Group Policy Registry Table
http://www.microsoft.com/windows200...indows2000/techinfo/reskit/en-us/gp/gpref.asp

Windows XP Professional > Security and administration > Security Templates
overview
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/sag_SCEwhatis.asp

Windows XP Professional > Security and administration > Security Settings
overview
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/SS_overview.asp

HOW TO: Set Up a File System for Secure Access in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;300691

SetACL.exe: SetACL - Windows permission management: Set permissions on
virtually anything
http://setacl.sourceforge.net/