Security

Ask something
Discussion Locked

Windows 2000 Lockdown

0 helpful
1 reply

by jthompso

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to build a Windows 2000 PC that is bullet proof without using Active Directory. I have been able to point ny desktop out to a server and have made many regisrty hacks and have used some of the local group policies but I am not able to stop all holes! I cannot disable "My Computer" from the desktop and there are still things that can be done by right clicking on objects in the "start menu". If any one has any ideas or has done this already and has the solution I am open to suggestions.
Thanks,
John
jthompso@unch.unc.edu

1 reply

by beergod

You are on the right track with local security policies. Have you tried using the security templates that come with win2k? Open an MMC choose add snap-ins and load the security config and analysis tool and the templates. You can apply these very easily to make your machines more uniform than going into the registry. You'll have to drill down into them to see what all is available but be carefull. Local policies don't care what your status is as far as being an admin and you can lock yourself out of your machine if you don't have an AD GPO to reverse the affects. trust me :)

This discussion is closed to new replies.