GPO ?

[andysk]

Hi,
Currently we have 3 sites with Computer around 400 (desktops and notebooks). We have vary OS starting from Windows 95, 98, ME, XP, etc. we are planning to implement security like no cdrom access are allowed, no software installation are allowed unless installed by IT Staffs, Saving document should be on the server only, Local drives (C drive) can't be accessed, etc.
How do i set the security ? Do i have to set on every single computer? i heard Windows 2003 server has a functionality call GPO, it's going to help? What are your suggestion for my case?

Thanks & Regards,
Andy

 

[Roadki11]

No GPO is not going to help you. Win95/98/ME have no practical, reliable, or useable security features that will provide any sense of security what so ever. you may find some 3rd party software that will lock down those devices but it probably wont run on a 95/98/ME machine. and if it does run it wont be manageable, cheap, or efficient. you really need to get all your machines up to 2k or xp and that is probably going require upgrading hardware on all current 95/98/ME machines. you are looking at a major hardware and software expense getting those machines up2date.

RoadKi11

 

[andysk]

Thanks roadki11 for your information. Without upgrading machine (meaning same as current OS), any other way to do it? Since upgrading PC can cause major expense.

 

[porkchopexpress]

Roady is correct there is no way without third party software to lock down these PC's. You could take a look at Deep Freeze i haven't used it in ages but it was pretty good.

http://www.faronics.com/html/deepfreeze.asp

 

[markdmac]

The very concept of locking down a 9x machine is really just a pipe dream. You need an OS that supports NTFS. As was suggested above, go with XP.

I would not advise going to 2000 since it is already out of support by Microsoft.

Even if there is considerable expense, you need to face the fact that what you have is VERY OLD and has no real security built in. If security is a real concern, then you need to upgrade.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[Odissey]

Hi andisk!
You may try Windows fundamentals for legacy PC instead old OS such as Win95/98/ME

http://en.wikipedia.org/wiki/Windows_Fundamentals_for_Legacy_PCs

WBR, Vadim V. Petukhov,
MCSE2003, CCEA4.0
vadimp@yandex.ru