GPO for complete lockdown of a PC except for a couple Inte..

[Gordon]

Archived from groups: microsoft.public.win2000.security (More info?)

I was looking for a way to put computers in an OU that will completely lock
down the computer except for access to a couple of mandatory Internet sites
and our intranet. I also do not want any software to be able to be installed
and for the user to have no control of settings for the computer at all.

Are there any examples of group policy settings that would accomplish this,
or does anyone have a template for one that would accomplish this well??

Thanks in advance
Gordon

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

"Gordon" <Gordon@discussions.microsoft.com> wrote in message
news:257CBF5B-1A1D-4490-9859-AA52F6FB10A1@microsoft.com...
> I was looking for a way to put computers in an OU that will completely
lock
> down the computer except for access to a couple of mandatory Internet
sites
> and our intranet. I also do not want any software to be able to be
installed
> and for the user to have no control of settings for the computer at all.
>
> Are there any examples of group policy settings that would accomplish
this,
> or does anyone have a template for one that would accomplish this well??
>

I don't have your answer -- it will be interesting to see the real answers.

In the mean time, you might investigate the Secure and High-Secure built
in templates and consider if they (or portions) would help you.

You can probably control/limit the Internet access best at the
Proxy/Firewall,
ISA is especially good for this in a Windows domain environment.


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

> Thanks in advance
> Gordon
>