Hello,
I have been given a task of locking down windows 2000 for an internet cafe, I have sucessfully manage to lockdown windows 2000 using local group policy but today as I went down there, I find that they are running Windows 2000 Pro on Fat or fat32 partition to my recollection.
All machines are standalone.
My main problem now is trying to disable their “C:drive” cause unlike the ntfs on my 2000 server I can’t assign users to access the drives so although I have manage to hide drives from “my computer” but they are still able to access it through start menu “run” and plus i really need this run command incase policies get messed up. Also although I have disable the “save” commands from Internet explorer using group policy, they are still able to select “open this file from it’s current location” option (cause “C:drive” is open) which extracts all the gaming cheats etc which we are trying to block.
I can’t “restrict all drives” in group policy somehow it doesn’t seem to work and even though if it does work I will lock myself out of admin because i save settings in admin then copy policies over when I try to access anything back
Is there a way we can get round this without converting to ntfs cause there are like45+ PC’s and would prefer less down time on each PC.
Any and as much help would be greatly appreciated
Thanks in advance
CJ
