General discussion

Locked

Locking down XP in a NT Domain

By gary5500 ·
Currently have a NT Domain (which we a upgradin soon) with Win 98 clients. These clients are locked down (no control panel, run, display, etc.) using polices located on the PDC. I amaware that I cannot accomplice the same thing with tose policies on a XP box. However my question is How can I lock down XP Pro for all domain users except admin (without active directoy)?

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by w2ktechman In reply to Locking down XP in a NT D ...

group policies

Collapse -

by gary5500 In reply to

Group Policies, without active directory? If this is possible please tell me how.

Collapse -

by gary5500 In reply to Locking down XP in a NT D ...

Point value changed by question poster.

Collapse -

by mwc In reply to Locking down XP in a NT D ...

On the local PC from run gpedit.msc. This will open the group policy editor. Most everything can be locked down from here. Is a little learning curve if your not familuar with this tool.

Collapse -

by gary5500 In reply to

Locking down the PC would work if I wanted to do that for everyone that logs on to the PC, however I still need to have full rights if I logon as an Administrator.

Collapse -

by capabel In reply to Locking down XP in a NT D ...

On the local PC from run gpedit.msc. This will open the group policy editor. Most everything can be locked down from here. Is a little learning curve if your not familuar with this tool.

This is the correct answer, every lockdown option includes to exclude the Administrator. I have setup several machines this way and I'm still able to login as Admin with no lockdowns.

Collapse -

by w2ktechman In reply to Locking down XP in a NT D ...

yes, group policies do work without active directory. They can be assigned on different levels, with the local machine overriding all other policies (unless a NO OVERRIDE was added from a higher source). At the local machine you can use, set, and administer group policies. To do this go to start -- run -- type "MMC.EXE" and press enter. A console will open. go to file -- add\remove snap-in and add group policies for the local machine.

Collapse -

by Cookie_Monster In reply to Locking down XP in a NT D ...

It should still be possible to use poledit for NT to create a policy which has different permissions for different user groups. This will create an NTConfig.pol file but you will have to do a little research into where to put this in order that XP recognises it. It has been a while since I attempted this as Active Directory is by far teh easiest method if they're all on a domain.

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums