Windows 2000 lockdown

[agent006]

How would one go about securing a windows 2000 workstation. I just want to disasble control panel and various other settings for one user.

Tried security policy editor and got nowhere. Any ideas?

[rsvnigel]

Start here: www.microsoft.com/windows2000/security/default.asp

There is a whole article on there somewhere about locking down W2K workstation.

[IPAddis]

You can do it using a Local Security policy but in my experience, you'll just spend the rest of your life being asked by them to change something which they no longer have rights to do themselves. You may also find that misc. programs complain as they don't have access rights to do what they need to do.

Better to backup the PC and be able to restore if if required IMHO. At work we have all our servers protected but everyone logs onto the workstations as local admin (30 minute rebuild using Intellimirror).

I'm at a clients site where they are paying out 100 quid per hour for me to sit here twiddling my thumbs because I don't have access rights to do anything (like install Acrobat Reader).

Ian A.

[agent006]

It's for a demo PC in a communal area of the building, so just needs to sit there being shiny and nice, and not being buggered about with.

[danielson]

If its for a demo pc then Ians suggestion of using a local policy is probably best option.
there are sharewarez out there that will lock it down for you aswell it you dont fancy doing it yourself..