Restriction Policy, how can I do this?

[JamesMcguinness]

I am about to roll out a coupld hundered machines and would like to limit what the users can do. Stuff like, no changing the desktop resolution, no IE, no apps unless I say yes to them, no ability to install apps etc.

Any ideas on this? This will be domain-less so that's not an option, they will all be basically stand alone units, I don't want traffic involved.

 

[JamesMcguinness]

What...is this beyond you guys? Don't send me off the Brain Buzz please!

 

[linney]

Here's a bit of information, a mountain of it is available via Google, and don't forget, Help and Support. I have tried to arrange the links from basic to complex. Hope it helps you.

http://www.sans.org/rr/paper.php?id=313

http://www.theeldergeek.com/group_policy_for_windows_xp_prof.htm

http://www.microsoft.com/windowsxp/pro/techinfo/planning/security/whatsnew/propart3.asp

http://www.microsoft.com/windows2000/techinfo/planning/security/secconfsteps.asp

http://www.google.com/search?source...oe=UTF-8&q=Group+Policy+standalone+windows+xp

http://groups.google.com/groups?sou...oe=UTF-8&q=Group+Policy+standalone+windows+xp

 

[JamesMcguinness]

Thanks, these are great links! When I search I came up pretty much blank / useless. I must have searched for the wrong description!

 

[JamesMcguinness]

So ya these are great except for some reason the best one at theeldergeek.com is down so I hope they come back, I was half way through the guide and it went out on me! Only thing I can't figure out is how to specify which user account a policy is applied too. I created and edited a policy and it took effect by default on my account. Now I figured this would happen so I didn't change everything and screw myself but is there a way to specify the policy.

I know in Win2K you can just apply them to seperate users, I'm stuck trying to find it in WinXP!

 

[linney]

See if this explains it for a local computer user.

http://www.microsoft.com/technet/pr...s/standard/ctasks025.asp?FRAME=True#URA_local