Windows Forum

Ask something
Discussion Locked

Locked Down Operating System

0 helpful
9 replies

by jasonbis 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
What is the best method (preferrably free) to lock down Windows XP so users can't do anything to it except surf the internet. We don't want them saving files, installing software, or deleting or uninstalling anything. Just stripped down to surf the net and that's it. I guess Linux is an option but I would like to use Windows XP.

9 replies

by bfilmfan

I'd recommend the XP Lockdown Guide:

http://www.windowsecurity.com/articles/Windows_XP_Your_Definitive_Lockdown_Guide.html

The NSA's XP Security Guide:

http://nsa2.www.conxion.com/winxp/

Microsoft's Security Guide:

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/default.mspx

The definitive answer is to make them just users and use group policy objects to deny them all other rights.

Note that you might run into issues if these users need to save file such as Word documents they created, print, etc.

by jasonbis

Thanks but all that stuff applies to the Administrator account as well when it is just a standalone machine. Those policies only work on a domain so you can specify which users or which groups.

by jasonbis

This is a standalone Windows XP machine. I am familiar with gpedit.msc but anytime I make changes to the policy it also affects the administrator account. How do I avoid that and lock down just the users or power users group specifically?

by jasonbis

OK I was thinking a better idea would be to just change the windows shell from explorer.exe to firefox or internet explorer. That way when Windows boots up it will start in a web browser and they are limited to that only. The only trouble is the last time I did that was in Windows 95 and I don't know where to begin in Windows XP. Any ideas? I am increasing the point value.

by jasonbis

OK Another change of plans. Since you guys are responding quick enough I already figured out how to change the shell to Internet Explorer. That parts works great but the last issue I want to address is the fact that if someone closes the IE window it doesn't restart. I need a failsafe way to make IE restart everytime someone closes it.

by jasonbis

This is exactly the tool I needed. I did not know this existed. You can choose a specific profile to lock down and it works perfect. Thanks

This discussion is closed to new replies.