Locking down mobile Laptops

[PBXJay]

I am researching options on locking down about 8 laptops that my company uses.

I was wondering the best way to do that. I have been looking at Windows steadystate for XP-sp2 machines but was looking for feed back first.

Concerned with overhead as these are not the world's most robust machines and also Microsoft's previous attempt with shared computer toolkit was not so hot.

Thanks in advanced.

J

 

[lhuegele]

It really depends on what your definition of "locking down" is.....to me that's an easy question - get one of those laptop locking cables that you can use to secure it to a table leg, or something else - like a lock you use to lock up your bicycle.

 

[PBXJay]

*groan* no I mean with what the users can and can not modify....

 

[linney]

SteadyState is worth experimenting with but it is not yet mainstream (in my opinion) so expect unforeseen disasters when locking machines down with it (such as locking everyones access to a hard drive), and make sure image backups are available in case they are needed.

You might also get some more hands on advice in the Server Forums.

http://www.tek-tips.com/threadminder.cfm?pid=931

Also see the links at the end of this article.

How To Use the Group Policy Editor to Manage Local Computer Policy in Windows XP

http://support.microsoft.com/kb/307882

Using Software Restriction Policies to Protect Against Unauthorized Software

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

How To Use Software Restriction Policies in Windows Server 2003

http://support.microsoft.com/?id=324036

Microsoft Windows Server 2003 Software Restriction Policies

http://support.microsoft.com/default.aspx?scid=kb;en-us;824526&FR=1&PA=1&SD=HSCH

Description of the Software Restriction Policies in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;310791&FR=1&PA=1&SD=HSCH

Lock down Xp pro
thread779-562838

 

[gbaughma]

linney:

Do you have a database of those links or something? Good gravy; I can't believe you research all of those links for every response.



Just my 2¢
-Cole's Law: Shredded cabbage

--Greg

http://parallel.tzo.com

 

[linney]

Yes I have thousands of Tek-Tips replies saved on the machine, but I'm not clever enough to organize them other than alphabetically and have to rely on a failing memory to find the most relevant reply. Most of my replies are just copy and paste efforts, but I do spend a fair old time Googling and at the Microsoft Knowledge Base.

Once in a while I even know the answer just from my own experiences.

 

[SimonDavies]

What exactly are you wanting to stop the users from doing? Is this not something you could apply via a GPO (or local security policy)?

SimonD.

The real world is not about exam scores, it's about ability.