RE: Locking down a stand-alone 2000 Server with Group Poicy

["Zachary Mutrux" <zmutrux () compumentor org>]

Microsoft describes this as an "app station" in the article below. Note that
the suggestions related to group policy can be applied to local Group Policy
on the server instead of Group Policy in AD.

Implementing Common Desktop Management Scenarios
http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/prodtechn
ol/windows2000serv/deploy/confeat/grppolsc.asp

Here is the installer for the scenarios described in the article:
Group Policy Common Scenarios Using GPMC
http://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-
9208-C681A7043292&displaylang=en

Zac


> -----Original Message-----
> From: Al Cook [mailto:cookas () msn com]
> Sent: Monday, September 29, 2003 7:59 AM
> To: security-basics () securityfocus com
> Subject: Locking down a stand-alone 2000 Server with Group Poicy
>
>
> I've setup a user account which they will use to log in to the
> machine and
> run our company application. I need to ensure that this user
> account can't
> do anything on the laptop other than run the application. Things like the
> run command, task manager, explorer, control panel etc all must
> be disabled.


---------------------------------------------------------------------------
----------------------------------------------------------------------------