Locking Down a Workstation?

[Kelemvor]

We have some Walk-Up PCs at our building that people can use to chekc the internet or print things and things like that.

Does anyone know if any websites that list lots of registry keys or Group Policy settings that we can use so we can lock them down to restrict what people can do? We want to not let them install software, not delete any icons, no adding favorites, etc.

It's for Windows XP.

Thanks.

 

[tami]

run gpedit.msc and lock it down, baby!

 

[Linflas]

Google is your friend

 

[skace]

First you want a restricted user account. Second you want a mandatory profile (.man). Third, open up the policy editor and just walk through the settings and figure out which ones you want(gpedit.msc).

 

[ATLien247]

You might also want to lock it down physically. Like disabling USB and floppy drive, booting from removable media, etc. Then lock the case so nobody steals your RAM.

 

[Kelemvor]

Yeah I know we'd use Groip Policy Manager (gpedit) but didn't know if there were other tricks that aren't in there or are easily overlooked.

Is there a way to only apply Group Policies based on the Login? I'd like to have the local login get restricted but if I login it would not be. Not sure if it works that way or not.

 

[BigJ]

See this thread I started in the Software forum a couple of weeks ago.

http://forums.anandtech.com/messageview...atid=33&threadid=1680109&enterthread=y