View Full Version : How do you lockdown Windows?
This is related to 95,98,2k all of em. What do you use to remove things from the desktop such as the ability to change desktop settings, or removing the control panel from settings, removing the windows explorer from program groups, removing the run command from the start menu? You know, to really cripple a machine from people messing it up. I've seen them setup in schools like this before.
I've been playing with mandatory user profiles and I think it may be something to do with them, but I cant find it if it is.
dont touch the system.ini file
I've heard there are programs that let you totally lock up your PC until you enter the password, but I'm not sure how the thing works exactly.
And please post a thread ONLY once. The mods do not like when people do that. Thank You!
Originally posted by Super
I've heard there are programs that let you totally lock up your PC until you enter the password, but I'm not sure how the thing works exactly.
That would be ctrl-alt-del inside NT and 2K :)
Originally posted by Paiynn
That would be ctrl-alt-del inside NT and 2K :)
Never knew! I only used the 9x and Me. Didn't get a chance to play around with NT yet. :)
Endeavor
08-09-01, 05:48 PM
in 2k its cntrl alt delete then select Lock Computer
only the current user or the administrator can unlock it
its a useful feature
bartekbartek
08-09-01, 06:33 PM
NO NO NO PEOPLE!!! YOUVE GOT IT ALL WRONG! if i am correct it is not about locking up your computer at all. ever been in a computer lab, and you cant access the control panel, and you cant change the desktop or anything. It does have to do with permissions, and peoples different logon names. i havent been able to figure it all out myself either thats why i was interested in this thread, but there is a huge list of permissions which are things that each member can have or not have access to. the only way i know to do it is by letting them use the guest account. the are a bunch of premade different level accounts that only have certain permissions.
Endeavor
08-09-01, 07:04 PM
oh, then i dont know
are you planning to lock your friend out of his comp?
what you are reffering to are policies(not shure how its spelled) every user in windows gets a policy that says what they can and cant access in nt and 2k it is taken to the extreem if u dont have a policy you cant use the computer you need to get the policy editor from microsoft for win 9x (btw if you can find it tell me where u found it i am still looking) i think it comes with nt and 2k not shure though
pernicitus
08-11-01, 05:58 AM
Policies only come with Win NT based tech. That would be NT4 and 2000 (not sure about ME).
On a Win 2000 machine you have Local Policies if it is a standalone machine, or Global Policies if it is hanging off a server.
These are accessed through the administrativ folder in the start menu, but you generaly have to be logged on as an administrator.
In Win 9x no such stringent lockdown facilities ship with OS but external packages such as the likes of Twekui and also messing around with the Reg allows you to lockdown certain parts of the system ie Access to control pannel.
Good Luck!
Originally posted by pii100
what you are reffering to are policies(not shure how its spelled) every user in windows gets a policy that says what they can and cant access in nt and 2k it is taken to the extreem if u dont have a policy you cant use the computer you need to get the policy editor from microsoft for win 9x (btw if you can find it tell me where u found it i am still looking) i think it comes with nt and 2k not shure though
Theres a Poledit directory on Win98 CD under uhmmmm... tools/reskit/netadmin I believe. I tried to do add/remove progs and point to this directory but it didnt work. So I just copied the files to a dir, then copy the .adm files to the windows/inf directory and it works fine.
Be careful with the "run only allowed programs" option, I was playing around with it and setup Outlook in there to see how it worked, like an idiot I didnt add poledit.exe to the list and effectively locked myself out of making any more changes or running anything other than Outlook :)
I tried renaming the .pol file in DOS mode and restarting which didnt help, I also tried creating a new .pol file on another 98 machine with no restrictions then copying it over the other .pol file which also didnt work. I ended up having to scrap my registry to get full control over the system again.
Some more info to help you set it up:
When you first run poledit.exe click to open registry, then doubleclick local system, then go to system again, go to update at the bottom of the list and change it from automatic to manual, then add the path and file name where you plan to put the .pol file, you can name it something other than .pol if you want to hide it. click save afterwards then click new policy.
Create your policy and save it to the same directory and name you specified before, when you log off and on the new settings will take effect.
MS-Pcman
10-21-04, 05:33 PM
PERMISSIONS & SECURITY
I think this is what you WANTED to know.
It works only with Win 2000 Pro, and NT (and I guess XP too).
FIRST, you must create a Group of Users, and delegate them as either user, Power User, or Administrators, making yourself an administrator.
Go top Control Panel, and open USERS & PASSWORDS. Creat Users Here.
Then you will have to CHECK the box for ==> USERS MUST ENTER A USERNAME & PASSWORD TO USE THIS COMPUTER.
After creating user accounts, then Set PERMISSIONS on Folders (and Drives if you have more than one Drive). You will want to consider whether or not you give INHERITABLE Permissions with each Drive or Folder (INHERITABLE gives the SAME Permissions to all SUB-Folders & Files WITHIN what you are currently setting Permissions on. I usually don't check this, and go detail each folder or group of Folders.
Right-Click on a Folder or Drive, you want to Lock Down, and click the ADD button to ADD Users to this PERMISSIONS Group, and either GIVE or DENY them Permissions.
Play around with an UN-important Folder first, and see how it affects things FIRST, before you do it on your Entire Drive.
Go to Start Button, then HELP, and lookup the 2 topics also and it will tell you more: SECURITY . . . . and . . . PERMISSIONS
Be Careful and not Lock yourself out of something.
Good Luck
seadave77
10-21-04, 06:10 PM
Good info Ms Pcman and "Welcome to the forums!" if no one has told you but do you realize though that you just posted to a thread that is a tad over three years old?
Clint
CrystalMethod
10-22-04, 01:56 AM
Good info Ms Pcman and "Welcome to the forums!" if no one has told you but do you realize though that you just posted to a thread that is a tad over three years old?
Clint
Still useful information for those who still are in the dark about users, and permissions.
MS-Pcman
10-22-04, 03:26 AM
NO, I was too Sleepy to notice that I replied with some help to the msg (over a YEAR OLD . . . 3 yr old), about how to Set Permissions. THANKS for the Compliment ! !
I am New to Forums, and don't know alot about how they work, specifically, but I originally came on here to POST a PROBLEM that I have currently. It's under another THREAD.
Sorry for the lack of Clarity, I've been working on MY Tech PROBLEM for days, on a SERVER I built and Support, and am now WAY behind on Sleep, and not very coherent, so please excuse my in-cohesive explanation. Only had 3 hr in the last 2 days and that was interrupted by Heavy Equipment repairing the Roads. Such is life.
Workgroup Server Connection Problem =
List of Servers NOT Found !
Probable VIRUS
While Trying to Clone a Backup to a RECOVER a Corrupted Workgroup SERVER Hard Drive, after Cloning the Backup to the Corrupted HD, and Re-Booting the Backup, the Backup is NOW corrupted. I'm sure some younger workers at the business loaded a Virus on the Server. I have a Discussion Thread posted in another THREAD.
The Corruption is: Workgroup no longer opens.
Error Msg is: List of Servers NOT Found"
vBulletin® v3.8.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.