RE: What is the best way to lock a local box on a network?

[<peter.schaub () thomson com>]

Assuming that you are an admin on the node, the Sysinternals psshutdown
app is a standalone exe, no install needed.

C:>psshutdown \\computername -u domain\username -l

This will lock the remote node. Many other options with this utility
too.

http://www.microsoft.com/technet/sysinternals/utilities/psshutdown.mspx

~Peter

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Martin Tran
Sent: Wednesday, August 29, 2007 11:15
To: security-basics () securityfocus com
Subject: What is the best way to lock a local box on a network?

Hi guys, I was wondering the best way to lock a local box.  Things such
as, 1. Can't install unauthorized programs.
2. But can install programs/softwares on a list that is acceptable.

I went to gpedit.msc and gone through the options, but everything seems
really cut and dry.  For example, If I was to enable an option to stop
users from installing unwanted software and user tries to do windows
update, it wasn't allowed to proceed with the process saying they needed
administration rights to the box.

If you guys can shine some light as I continue to do some trial and
error on this test box, any suggestions would be great and appreciated!

--
Martin Tran