RE: Locking down a stand-alone 2000 Server with Group Poicy

["McGill, Lachlan" <mcgilll1 () anz com>]

I remember having this same issue. I found a workaround posted in Microsoft's knowledge base. It involved renaming some 
files and playing around a bit but if you do a search on MS for something like, "policies workgroup administrator", 
then you should find it.

-----Original Message-----
From: Al Cook [mailto:cookas () msn com]
Sent: Tuesday, 30 September 2003 12:59 AM
To: security-basics () securityfocus com
Subject: Locking down a stand-alone 2000 Server with Group Poicy


Apologies if this is slightly off topic, but I have a stand-alone laptop 
running windows 2000 and it will be used for training external customers.  
I've setup a user account which they will use to log in to the machine and 
run our company application. I need to ensure that this user account can't 
do anything on the laptop other than run the application. Things like the 
run command, task manager, explorer, control panel etc all must be disabled.

I was wondering what would be the best way to achieve this without 
purchasing external software, I've played around with the group policy 
editor snap in, but all the setting then apply to the administrator account 
also.  Has anyone got any suggestions, I found windows help pretty confusing 
and geared towards group policy for domains rather than stand-alone 
machines.

Many thanks, Al

_________________________________________________________________
Stay in touch with absent friends - get MSN Messenger 
http://www.msn.co.uk/messenger


---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------