User policies

[mcsereed]

I am looking for examples of User or Group policies to review to see If we can use to implement in our company. Right now we only allow our users to have Power user rights. We want to totally restrict users from installing anything. Alot of WEB sites allow users to install software with limited permissions. We have software that is finiky but we will get around that. Any suggestions will be appreciated.
For information purposes, we have the HD set for NTFS permissions.

 

[Andreh]

Mcsereed,

I think you might be interested in the HISECDC.INF security policy that is built in and available to implement on a Windows 2000 DC.

This may be a bit over the top as to what you need but it does the following:

-Users would not be able to install unsigned drivers onto win2k pc's.
-All users would be removed from the power users group.

It may be a problem if you have any other that Win2k Pro clients as they may not be able to access the network.

There are security policies that are not as restrictive so they may be worth investigating. I can't remember them off the top of my head at this time.

Cheers.

 

[mcsereed]

Thank you. We are in the middle of implementing Active Directory. I will look into it though. For now I am looking to setup a policy locally on machines till the upgrade goes into effect.