Windows Forum

Ask something
Discussion Locked

User Policy

0 helpful
6 replies

by tbwolfe

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How can I limit what a user can see & do on a standalone Windows 2000 Professional workstation. All I want is for the individuals to view our intranet page and not be able to get into any menus or "My Computer". I have Internet Explorer in the startup and that is all they should be able of doing.

In NT 4.0 could use Poledit.exe but that is not available in 2000 Pro

6 replies

by ptchtech

You can use local group policy. mmc in the run box
and add the group policy snap in. Beware everyone including you will be affected by the lockdown policies you create. So I suggest you be careful not to paint youself into a corner. Alo there are some things that you can't control from group policy, like the lockdown of all of internet explorers menus, users can select the search function and they are past your intranet site.
I have spent a lot of time with this issue and have found success with a combination of group policy (at the OU) and the use of a product called winselect from
www.deepfreezeusa.com
You can actually configure all of your restrictions with Winselect. Restictions that microsoft can't offer. Such as removing the start button, disabling the use of My computer, and locking down ALL of internet explorers menus.
It is also cheap and relatively easy to learn how to use. If you need more info you can E-mail me

by ptchtech

You can download a 60 day trial of winselect at the above link. I also use their product deepfreeze on all of my public workstations, I don't know what I would do without it. Actually I do know - I'd be re-imaging workstations everyday

This discussion is closed to new replies.