Discussion Locked

Windows 2000 Professional lockdown

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,

I have been given a task of locking down windows 2000 for an internet cafe, I have sucessfully manage to lockdown windows 2000 using local group policy but today as I went down there, I find that they are running Windows 2000 Pro on Fat or fat32 partition to my recollection.

All machines are standalone.
My main problem now is trying to disable their "C:drive" cause unlike the ntfs on my 2000 server I can't assign users to access the drives so although I have manage to hide drives from "my computer" but they are still able to access it through start menu "run" and plus i really need this run command incase policies get messed up. Also although I have disable the "save" commands from Internet explorer using group policy, they are still able to select "open this file from it's current location" option (cause "C:drive" is open) which extracts all the gaming cheats etc which we are trying to block.

I can't "restrict all drives" in group policy somehow it doesn't seem to work and even though if it does work I will lock myself out of admin because i save settings in admin then copy policies over when I try to access anything back

Is there a way we can get round this without converting to ntfs cause there are like45+ PC's and would prefer less down time on each PC.

Any and as much help would be greatly appreciated

Thanks in advance
CJ

2 replies

by timthetoolman

Hi,

Converting to ntfs is your best option.

There wont be any downtime as it wont be able to convert then and there, anyway.

The conversion will happen during the next reboot. That can be scheduled as required.

Cheers,
Tim.

This discussion is closed to new replies.