Using Domain/Local GPO to lock down computer

[Jason Cochrane]

I have one W2k Pro SP4 client computer that will automatically logon when
started up. I need this computer to run only one application. I would
like to do the following to this client:

* Remove the "Start" button OR all items in the "Start" menu except for
"Programs"
* Remove all desktop icons except for the program application shortcut
* Disable "CTRL+ALT+DELETE"
* Disable right-clicking

In other words, lock it down so only the app shortcut can be clicked on.

Can this be done via Domain GPO/Local Security settings? I have researched
but have had no luck as of yet.

Any suggestions would be appreciated.

Thanks in advance,

Jason

 

[Steven L Umbach]

You could use local Group Policy if you want to apply the settings to all
users that logon to the computer. Most everything you want to do can be
found under user configuration/administrative templates. Look under Windows
components/Windows explorer for options that relate to "context menu" to
disable right click. Then look under start menu/taskbar for restriction
settings. I don't think you can disable CTRL+ALT+D but you can change the
user right [ Local Security Policy] for shut down system to stop that and
look at other options under system/logon&logoff to disable a lot of tasks
that can be done via CTRL+ALT+D. As far as as the desktop you can manage
shortcuts in the all users and user profile for autologon so that only the
shortcut you want exists and then change permissions on the desktop folders
to be only read/list/execute. --- Steve

 

[lforbes]

I have one W2k Pro SP4 client computer that will automatically logon

when started up. I need this computer to run only one application. I
would like to do the following to this client:

* Remove the "Start" button OR all items in the "Start" menu except
for
"Programs"
* Remove all desktop icons except for the program application shortcut

* Disable "CTRL+ALT+DELETE"
* Disable right-clicking

Can this be done via Domain GPO/Local Security settings? I have
researched but have had no luck as of yet.

Hi,

Are you running Active Directory with Group Policies. This can be done
pretty much using Group Policy settings. There is a setting to hide
all icons on desktop, disable ctrl-alt-del and remove all ability to
logoff or shutdown as well as disable right click.

However, if you are not in a domain it will be quite a bit more
tricky.

Cheers,

Lara