General discussion

Locked

Locked Down Operating System

By jasonbis ·
What is the best method (preferrably free) to lock down Windows XP so users can't do anything to it except surf the internet. We don't want them saving files, installing software, or deleting or uninstalling anything. Just stripped down to surf the net and that's it. I guess Linux is an option but I would like to use Windows XP.

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to Locked Down Operating Sys ...

I'd recommend the XP Lockdown Guide:

http://www.windowsecurity.com/articles/Windows_XP_Your_Definitive_Lockdown_Guide.html

The NSA's XP Security Guide:

http://nsa2.www.conxion.com/winxp/

Microsoft's Security Guide:

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/default.mspx

The definitive answer is to make them just users and use group policy objects to deny them all other rights.

Note that you might run into issues if these users need to save file such as Word documents they created, print, etc.

Collapse -

by jasonbis In reply to

Thanks but all that stuff applies to the Administrator account as well when it is just a standalone machine. Those policies only work on a domain so you can specify which users or which groups.

Collapse -

by jasonbis In reply to Locked Down Operating Sys ...

This is a standalone Windows XP machine. I am familiar with gpedit.msc but anytime I make changes to the policy it also affects the administrator account. How do I avoid that and lock down just the users or power users group specifically?

Collapse -

by jasonbis In reply to Locked Down Operating Sys ...

OK I was thinking a better idea would be to just change the windows shell from explorer.exe to firefox or internet explorer. That way when Windows boots up it will start in a web browser and they are limited to that only. The only trouble is the last time I did that was in Windows 95 and I don't know where to begin in Windows XP. Any ideas? I am increasing the point value.

Collapse -

by jasonbis In reply to Locked Down Operating Sys ...

Point value changed by question poster.

Collapse -

by jasonbis In reply to Locked Down Operating Sys ...

OK Another change of plans. Since you guys are responding quick enough I already figured out how to change the shell to Internet Explorer. That parts works great but the last issue I want to address is the fact that if someone closes the IE window it doesn't restart. I need a failsafe way to make IE restart everytime someone closes it.

Collapse -

by Jacky Howe In reply to Locked Down Operating Sys ...

This might also be of value. The Shared Computer Toolkit.

http://www.microsoft.com/downloads/details.aspx?FamilyID=7256d456-e3da-42ea-857d-92b716077a84&displaylang=en


Regards Rob

Collapse -

by jasonbis In reply to

This is exactly the tool I needed. I did not know this existed. You can choose a specific profile to lock down and it works perfect. Thanks

Collapse -

by jasonbis In reply to Locked Down Operating Sys ...

This question was closed by the author

Back to Windows Forum
9 total posts (Page 1 of 1)  

Related Discussions

Related Forums