How to install XP Pro in a school securely?

[grasshopper75]

Hi,

I have just started working in a school looking after their pcs. Its only an infant school, so these guys are cool about me picking a few things up as I go along (although Im a+, n+ and have one mcp, NOTHING substitutes experience!) So my question is this - I am using an NT4 server (sp6), that cant yet be upgraded. The clients are being upgraded to xp pro because we have to (I love my local council!). I want to secure the computers so that they cant be messed with, especially the desktops. I also want a generic desktop for all users, preferably deployed over the network so I dont have to keep setting up each pc with shortcuts etc as I go along. Is this possible? What would you regard as the best way to approach this? Please go slowish as this is my first real networking job, so I'm hoping to hit the ground running here! Go on, you remember what it was like when you started .....dont ya?? Help!

 

[drkhelmt]

Take a look at answer files. I think they should be able to solve most of the problem.

I assume the NT4 is a domain server, so you may investigate putting "domain users" in the guest or users group on the XP machines.

Hope this gets you closer to the solution.

Andrew
a.k.a. Dark Helmet

"What's the matter Colonel Sandurz? Chicken?

 

[grasshopper75]

Ive done that but things can still be changed like the desktop set up and things are still a bit insecure for me, bear in mind that these are kids so anything can happen! I locked things down a bit better using gpedit.msc, but now that I have one system setup the way I want it, can I export the setup Ive made on it, ie the gpedit settings basically? I think the main problem is the desktop, I want everyone to have the same desktop which is administered at the server, is this poss? any help would be appreciated from everyone, thanks.

 

[mmendes]

Group Policy would be best, but not an option if you can't upgrade your server.

You could also do this with mandatory roaming profiles.

 

[linney]

HOW TO: Create a Custom Default User Profile (Q305709)

http://support.microsoft.com/support/kb/articles/q305/7/09.asp

Q310516 HOW TO: Distribute Registry Changes to Computers in Windows XP

http://support.microsoft.com/support/kb/articles/q310/5/16.asp

Q310514 HOW TO: Distribute a Custom Desktop Theme to Users in Windows XP

http://support.microsoft.com/support/kb/articles/q310/5/14.asp

Force all XP users to use the Default User profile
thread779-334751

The Power of a Network Administrator: A Behind the Scenes Adventure

http://blogs.ittoolbox.com/networking/power/

 

[AmdExtreme]

excellent links, i definitely need to study and try these out,,thanks linney.....

4U-TECH. Technologies
http:

http://www.4utech.biz

Comp. Tia A+
Hardware
OS
Networking
Linux, In Progress
OEM System Builder