Security policies on laptops?

[JPL910]

I have been asked to setup 10 laptops for users that will be working offsite. (XP Pro)
What is the best way to configure them so that the users are restricted from installing anything (they are not in the local admin group), they are not on the domain and all their settings need to be the same. (no access to modify their settings, toolbars, wallpaper, etc)

Do I need to modify the local policy on each laptop or can I create a template to apply to each of them? (if so, how do I accomplish that?)

What is the best way to allow me remote access to the laptop if they have problems while working off-site?


Thank you,
JP

 

[linney]

Have you looked at Windows SteadyState formerly the Shared Computer Toolkit?

http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

See if there is anything here that makes sense to you?

Importing Security Templates and Modifying Security Settings in a GPO

http://technet2.microsoft.com/Windo...12b226b9-489a-4758-a5af-2bc3d899840c1033.mspx

Apply a security template to local policy

http://technet.microsoft.com/en-us/library/cc780139.aspx

HOW TO: Create a Custom Default User Profile (Q305709)

http://support.microsoft.com/support/kb/articles/q305/7/09.asp

Q310516 HOW TO: Distribute Registry Changes to Computers in Windows XP

http://support.microsoft.com/support/kb/articles/q310/5/16.asp

Q310514 HOW TO: Distribute a Custom Desktop Theme to Users in Windows XP

http://support.microsoft.com/support/kb/articles/q310/5/14.asp

Disallow logon to lan unless up to date
thread779-854383

Perhaps using something like Messenger will be the easiest method of remote assistance?

 

[JPL910]

I will check these links out. Thanks for the help.