General discussion

  • Creator
    Topic
  • #2297892

    Locking down XP in a NT Domain

    Locked

    by gary5500 ·

    Currently have a NT Domain (which we a upgradin soon) with Win 98 clients. These clients are locked down (no control panel, run, display, etc.) using polices located on the PDC. I amaware that I cannot accomplice the same thing with tose policies on a XP box. However my question is How can I lock down XP Pro for all domain users except admin (without active directoy)?

All Comments

  • Author
    Replies
    • #2671894

      Reply To: Locking down XP in a NT Domain

      by w2ktechman ·

      In reply to Locking down XP in a NT Domain

      group policies

    • #2671647

      Reply To: Locking down XP in a NT Domain

      by gary5500 ·

      In reply to Locking down XP in a NT Domain

      Point value changed by question poster.

    • #2670578

      Reply To: Locking down XP in a NT Domain

      by mwc ·

      In reply to Locking down XP in a NT Domain

      On the local PC from run gpedit.msc. This will open the group policy editor. Most everything can be locked down from here. Is a little learning curve if your not familuar with this tool.

      • #2670573

        Reply To: Locking down XP in a NT Domain

        by gary5500 ·

        In reply to Reply To: Locking down XP in a NT Domain

        Locking down the PC would work if I wanted to do that for everyone that logs on to the PC, however I still need to have full rights if I logon as an Administrator.

    • #2672654

      Reply To: Locking down XP in a NT Domain

      by capabel ·

      In reply to Locking down XP in a NT Domain

      On the local PC from run gpedit.msc. This will open the group policy editor. Most everything can be locked down from here. Is a little learning curve if your not familuar with this tool.

      This is the correct answer, every lockdown option includes to exclude the Administrator. I have setup several machines this way and I’m still able to login as Admin with no lockdowns.

    • #3370919

      Reply To: Locking down XP in a NT Domain

      by w2ktechman ·

      In reply to Locking down XP in a NT Domain

      yes, group policies do work without active directory. They can be assigned on different levels, with the local machine overriding all other policies (unless a NO OVERRIDE was added from a higher source). At the local machine you can use, set, and administer group policies. To do this go to start — run — type “MMC.EXE” and press enter. A console will open. go to file — add\remove snap-in and add group policies for the local machine.

    • #2680543

      Reply To: Locking down XP in a NT Domain

      by cookie_monster ·

      In reply to Locking down XP in a NT Domain

      It should still be possible to use poledit for NT to create a policy which has different permissions for different user groups. This will create an NTConfig.pol file but you will have to do a little research into where to put this in order that XP recognises it. It has been a while since I attempted this as Active Directory is by far teh easiest method if they’re all on a domain.

Viewing 5 reply threads