Looking for a Software to Harden Windows Machines, Anybody?

By itbans ·
Hello Everyone,
I'm a network administrator of a small/medium network.

I'm looking for a software (Free or Not) which can harden Windows Computers (XP and Win7) for the propose of hardening standalone desktop computers (not in domain network).
Note: The computers that are needs to be hardened will be standalone computers (This is the requirement) which means it needs to be completely isolated from the network, so using Active directory/ Group Policy is not relevant.

Moreover, there are too many restrictions that need to be applied, so it is not particle to set it up manual (one by one) by using the registry or Group Policy.
Basically what I???m looking for is software that can restrict and disable access for specific user accounts on the system.

For Example:
1. User john can only open one application and nothing else -- He don???t need to see icons on the desktop or on the start menu, except for one or two applications which i want to allow. He should be not able to Right click on the desktop, nor see the task-bar icons.
2. User marry can open a specific application and copy data to one folder on the D drive.
3. User Dan, have access to all drives but cannot install software, and so on...

Note: I should be able to disable the restrictions when it is required!

So far, I've found only the following solutions, but they all seems to miss one or more feature:
1. Faronics WINSelect The application seems to answer most of our needs except one feature which is very important to us but seems to be missing from WINSelect, which is "restriction per profile". WINSelect only allow to set up restrictions which are applied system-wide. If I have multiple user accounts on the system (which i do) and want to apply different restrictions for each user, I cant!
2. Deskman -> Same thing, no restriction per profile.
3. Desktop Security Rx -> not relevant, No Win7 Support.
4. The only software that I've found which is offering a restriction per profile is " 1st Security Agent ". But its GUI is very complicated and not very intuitive.

Its worth to mention that I'm not looking for "Internet Kiosk software" although they share some features with the one I need. All I need is software (like http://www.faronics.com/standard/winselect/) that is offering a way to restrict Windows user interface.

IF anybody knows such software which can allows to set-up user restrictions on Windows systems, It will be a big, big, big help for me!

Multiple local group policy
I've found an article on techrepublic which explain how to use "multiple local group policy" (http://www.techrepublic.com/blog/itdojo/lock-down-stand-alone-windows-machines-with-multiple-local-group-policy/2692). I must say it sounds like a good solution, but even if it will work, it will be hard work to implement and not so easy to reverse.

So if someone knows a solution for this scenario, it will be great help for me.
Thanks for everyone...

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Share your knowledge

Related Discussions

Related Forums