• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Locking down w2k pro for public use

cnwk64

Banned
Well I post one in software, but I guess Off topic is where everyone hand out, so .....

I am task to put a w2k pro WS in front office for guest to view our web site and some marketing BS.
The workstation will not connect to our internet network, it will run by its own dsl line. so Group policy is out.
and company don't want guest to have any other access besides IE (no control panel, start menu, my computer, or right click to screen property, etc)
and the only Icon on the Desktop is IE plus whatever BS powerpoint files.
Does anyone know any software can do that?
 
You can control hundreds of settings on your Windows 2000 machine using the Group Policy Editor. Simply click Start, Run, then type "gpedit.msc" without the quotes, and click OK. You can change settings on your computer that are specific to a certain user, or that affect the whole machine.

If you are on a network, be aware that Domain, Site, and OU policies will all override any settings made using this editor. It is perfect for stand-alone computers, or computers where Group Policies are not applied over the network.
 
Originally posted by: vi_edit
You can control hundreds of settings on your Windows 2000 machine using the Group Policy Editor. Simply click Start, Run, then type "gpedit.msc" without the quotes, and click OK. You can change settings on your computer that are specific to a certain user, or that affect the whole machine.

If you are on a network, be aware that Domain, Site, and OU policies will all override any settings made using this editor. It is perfect for stand-alone computers, or computers where Group Policies are not applied over the network.

thanks, I needed this too
 
Thanks so much for the info, but it still can't lock all the way do to what I want.
I was in one of those Internet cofe in Taiwan, once user login, it only show a menu of different games, chats, and IE. you can't get to any other start menu, control panel, etc.
what is what I want to do.
anyone else got idea?

If I can get it right. may be I should open up my own internet cafe 🙂

 
I know that most of the libraries around here have purchased software solutions to do this though.
There is a way to do it through group policies... but I honestly haven't got the motivation to look it up right now.
Research group policies some more...

Andrew
 
I wish I could help. A couple years ago I worked at a public library and we had computers for the public to use. Since I'm out of the IT industry all together right now, I can't really offer much advice, other than it can be done. 🙂 Best of luck to you!
 
Also, I saw the post in the software/programming/games forum, and then the one here, but it's not in the Operating System forum. You should probably try there...or if you are really nice, the mods will move this post there 😉
 
You can do all of that using Group Policy Editor. I can help you with it, but like someone already mentioned.. SHOW ME THE MONEY!
 
Originally posted by: CallTheFBI
This dude is getting paid to do this by his company. We shouldn't be helping him without demanding a cut of the action!

Sorry I ask the question, I was hoping that someone will help others out.
I guess here is not the place to be.
 
Originally posted by: cnwk64
Originally posted by: CallTheFBI
This dude is getting paid to do this by his company. We shouldn't be helping him without demanding a cut of the action!

Sorry I ask the question, I was hoping that someone will help others out.
I guess here is not the place to be.

Relax dude. I think you are taking his comment the wrong way. Besides, we already gave you the answer. Do we need to spoon feed you the answer as well? You asked for help and we helped you. We are not going to do the work for you. Just poke around the Group Policy editor you'll find your answer.
 
Search google... use 'kiosk' as a search term with 'windows 2000'

I'd change the shell in hklm\software\microsoft\windows nt\currentversion\winlogon
I'd add autoadminlogon
I'd change the administrator account name
I'd create a strong admin password
I'd deny read/execute permissions to all sorts of files (cmd.exe? taskmgr.exe?) for the user account that'd be logging in

And that's just off the top of my head.
 
Originally posted by: CallTheFBI
This dude is getting paid to do this by his company. We shouldn't be helping him without demanding a cut of the action!



You are an idiot.He's a member of the guild and the guild hangs out here.


I read the OP's post, the WS is stand alone and not connecting to the company's intranet? vi_edit's answer should provide you the help you need.
 
Originally posted by: her209
You can allow the user to run only IE.

Please... tell us how to do that.
rolleye.gif
 
Create a group/user account that will logon to this computer. Then go to your Local Security Policy and set how you want that group/user access the computer. If the group/user is from a domain, then don't give that group/user local access. You could do the same thing from your domain policy as the local policy. good luck.
 
Back
Top