I'm building a computer to give to my brother who is living with some individuals of dubious character and intellect. I've seen to the physical security of the box (locking case screws, two pad locks, a hasp and a piece of chain), so now I'm looking to secure the operating system.
The computer is running windows xp pro, norton antivirus, and I'm hoping to set up spybot to update/scan regularly. I've already set a password on the bios and password protected all the other accounts. What I'd like to do now is strip everything non-essential from the user account. I want his roomates to be able to use the internet, play games, and maybe chat on IRC. I'd like to strip out the run command, control panel, prevent them from accessing any system files and make the registry read only if I can. Can I do this stuff in the group policy editor and have it only affect one account or user group?
Basically, I just want to make sure that his roomates using this account can't do any harm to the system.
thanks.
The computer is running windows xp pro, norton antivirus, and I'm hoping to set up spybot to update/scan regularly. I've already set a password on the bios and password protected all the other accounts. What I'd like to do now is strip everything non-essential from the user account. I want his roomates to be able to use the internet, play games, and maybe chat on IRC. I'd like to strip out the run command, control panel, prevent them from accessing any system files and make the registry read only if I can. Can I do this stuff in the group policy editor and have it only affect one account or user group?
Basically, I just want to make sure that his roomates using this account can't do any harm to the system.
thanks.
Facebook
Twitter