PC Lockdown

[bidon15]

Hi There,
I am attemping to lockdown certain group in here. We are still running the WinNT4.0 server and workstations NT and most stations are Win2k. I am using the poledit to lockdown, but Poledit does not give me enough restriction to lockdown the IE, and i don't want to use the LOCAL POLICY on each workstaion. I want to administer centrally without visiting the all those workstaion out there. what i really want to lock very tight on Internet Explore, so they can't download or spyware can not be installed on the PC as well locking those porn websites.
I know Active Directory does them all. However we are not there yet. If anyone has any better idea and have some experience of using third party software to do that. Please let me know. It would be much mmuch appreciated.
Thanks in advanced guys!

 

[JeffJS]

Hello

I am not an MS guru but there is a way of configuring a group policy using gpedit.msc (start>run>gpedit.msc) on your win2k pc. Set the parameteres you want to restrict from the list provided. You may need more expert advice to determine which objects need to be changed as I wouldnt want you to lock yourself out of anything. I am sure there are other people out there who know more than I do about this. One of the options on the View menu is DC Options, this will allow you to pick your DC to issue the policy from. (I think this works on NT but you'll have to try it and see.) Sorry I couldnt be much more help but check some other forums to cross ref this info.

 

[bcastner]

You can do likely all you want by just assembling a set of registry changes into a .reg file:

http://www.tek-tips.com/viewthread.cfm?SQID=89440&SPID=608&page=1

 

[bidon15]

Thank you very much guys!

Another question... ;-)

How do i block the spyware? What is the best methodology of this? Thanks again...
-Cheers

 

[bcastner]

Another thread is generally a better idea.
But, see:

http://www.computercops.biz/postt7736.html