Block users from changing settings

[banorton]

I have a Win 2000 server and an 03 server running with about 35 XP Pro clients and about 20 XP home clients. The idiot IT guy before me couldn't convince the boss that pro was needed to correctly set-up and manage the network, so he half assed the network using a big workgroup and 2 servers as file/terminal svc servers. Now I took over and the whole system is a mess. I'd like to revamp everything so the 03 server works as a DC and everything is on lock down in terms of security and group policies. I have to convince the boss to splurge on 20 xp pro upgrade licenses first. In the mean time I want to get things under control. There was a utility I used to use a while back where you'd install this on the client pc and run an admin mode and just point and click on things and either allow or disallow from there and a big check list. For the life of me I can't remember what it was called... Any ideas?


Regards,

Joe

 

[jfp23]

you could just go into gpedit.msc and do it from there on one machine and than just copy the policy file to the other ones.

 

[banorton]

I can't find this file on my XP machines. Where is it located, and do I edit it with notepad?

Thanks,

Joe

 

[banorton]

Ok I found the file and was playing around with the settings on my xp pro test box... I changed some things and it applied to all users, I was under the impression that these settings would only apply to 'users' and not any administrator. I suppose I'm wrong, or did I miss a setting where I only apply the policy to the user group?

Thanks,

Joe

 

[FaiTHLeSS]

Create different OU's on your server 1 for admin 1 for users or maybe 1 for each group create a policy on the server and push the policy out from the server to all the client machines.