setting policies in domain trying to lock it down 1

[GBONGIOVANO]

I have a windows 2000 domain with 20 windows xp machines.
How do I set it up so that "regular users" cannot change the desktop settings and are not able shut the system down.
Thanks again for looking and for any and all help.
George

 

[ashpp]

1] Give all regular users the same profile - make that profile mandatory (rename ntuser.dat to ntuser.man)

2]
To edit a domain-wide policy to make the Shutdown button unavailable::
Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
In the console, right-click your domain, and then click Properties.
Click the Group Policy tab.
In the Group Policy Object Links box, click the group policy for which you want to apply this setting. For example, click Default Domain Policy.
Click Edit.
Expand User Configuration, expand Administrative Templates, and then click Start Menu & Taskbar.
In the right pane, double-click Disable and remove the Shut Down command.
Click Enabled, and then click OK.
Quit the Group Policy editor, and then click OK.

Ash.

 

[fujiphoneguy]

What if in this situation, you wanted the mandatory settings to apply at public computers only, but back at their workstation they could do whatever they wanted?

 

[ashpp]

> What if in this situation, you wanted the mandatory
> settings to apply at public computers only, but back at
> their workstation they could do whatever they wanted?

Profiles are user-specfic so that isn't possible.

You could

1] Give the machines a specific user to logon ie. machine1,machine2 etc and make these profiles mand.

or

2] Lock down these computers using GPOs. Remove access to control panel, display, etc. Then changing the desktop wouldn't be an issue because its their own profile there changing.

Ash.

 

[tencevaines]

This may not be a viable option, but if you add the domain user account to the local administrators group on thier regular PC, the shutdown option will be available.

cheers