[mswindowsxp] Re: Locking down (sort-of)

  • From: Frank Monroe <Frank.Monroe@xxxxxxxxxxx>
  • To: "'mswindowsxp@xxxxxxxxxxxxx'" <mswindowsxp@xxxxxxxxxxxxx>
  • Date: Mon, 28 Apr 2003 18:44:14 -0400

You can lock it down, but with the privs the users require to install non
MSI software, they can simply turn the methods to lock down off. 

-----Original Message-----
From: Charles Carerros [mailto:ccarerros@xxxxxxxxxxx]
Sent: Monday, April 28, 2003 5:56 PM
To: mswindowsxp@xxxxxxxxxxxxx
Subject: [mswindowsxp] Re: Locking down (sort-of)



You can still use group policies as they exist on the WXP workstation.
However, GPMC you MAY be able to easily import and export them to the
workstations.  Don't take my word on that though, I haven't worked with
that product without a server, but it might be work investigation. =20

However with XPs group policies you can lock down anything you want
while keeping other items open.

chuck

-----Original Message-----
From: Frank Monroe [mailto:Frank.Monroe@xxxxxxxxxxx]=20
Sent: Monday, April 28, 2003 3:31 PM
To: 'mswindowsxp@xxxxxxxxxxxxx'
Subject: [mswindowsxp] Re: Locking down (sort-of)



I think you are asking too much.  If you want them to be able to install
ANYTHING, they will need to be in the administrator group.  And, if you
do, plan to audit all the time to make sure you remain in compliance
with your licenses.

-----Original Message-----
From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]
Sent: Monday, April 28, 2003 4:28 PM
To: mswindowsxp@xxxxxxxxxxxxx
Subject: [mswindowsxp] Re: Locking down (sort-of)



You want my answer to your second question, or the college's faculty=20
answer? I think I answered it already though. They want it, they most of

the time get it.

I am not asking to utilize a benefit of AD, just asking if there is=20
anything easier in XP than it was in NT for locking down the machine. I=20
presume the answer to that is "not without AD" and that is ok. I am
simply=20
pursuing the possibilities. Hoping to find someone that has experienced=20
this already. User's want to add software, I don't want them to screw
with=20
the Network configuration, the OS, or my servers. Am I asking too much?=20
Probably!

Thanks for the input.

At 01:12 PM 4/28/2003 -0700, you wrote:

>Hmmm. Your saying that you won't use the benefits of AD, yet your=20
>asking =3D for many of the features it offers.
>
>Joe
>
>Any particular reasons why users need to install software? They end up=20
>=3D with IM, Gator, Deskflag, Webshots, and many other crap releated=20
>apps.
>
>Joe
>
>-----Original Message-----
>From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]
>Sent: Monday, April 28, 2003 12:42 PM
>To: mswindowsxp@xxxxxxxxxxxxx
>Subject: [mswindowsxp] Re: Locking down (sort-of)
>
>
>
>Unfortunately, AD first is not going to happen here. We just won't use=20
>=3D many=3D20 of the benefits until later. However, can user's still =
mess=20
>with the=3D20 network settings and such as Power User's?
>
>
>At 03:29 PM 4/28/2003 -0400, you wrote:
>
> >Adding an end user to the local Power User group will give them the=20
> >ability to install most software - any software that doesn't=20
> >load/install services.  =3D3D20
> >
> >
> >I would suggest getting to the Active Directory first, then you will=20
> >=3D
>get
> >all the management benefits on the desktop (XP)
> >=3D3D20
> >
> >-----Original Message-----
> >From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]=3D3D20
> >Sent: Monday, April 28, 2003 3:26 PM
> >To: mswindowsxp@xxxxxxxxxxxxx
> >Subject: [mswindowsxp] Re: Locking down (sort-of)
> >
> >
> >No Active Directory yet. On the horizon, just not yet. We are going=20
> >to move=3D3D20 to XP from NT first later this year.
> >
> >
> >At 03:24 PM 4/28/2003 -0400, you wrote:
> >
> > >Are you running Active Directory?  If so, you can use group=20
> > >policies =3D
>to
> > >lock down the machine.
> > >
> > >-----Original Message-----
> > >From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]=3D3D3D20
> > >Sent: Monday, April 28, 2003 3:18 PM
> > >To: mswindowsxp@xxxxxxxxxxxxx
> > >Subject: [mswindowsxp] Locking down (sort-of)
> > >
> > >
> > >Has anyone had any success locking down XP Pro such that a user can

> > >still=3D3D3D20 load their own software, but not mess with Network =
or=20
> > >other settings?
> > >
> > >
> > >Matt Fowler
> > >LAN Specialist
> > >(847)925-6113
> > >mfowler@xxxxxxxxxxxxxxx
> > >
> > >
> > >
> > >
> > >
> > >
> > =3D
>
>=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=
=3D3D3D3D=3D3D3D3D=3D
>3D=3D
>3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D=3D3D
> =
>3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D=
3D=3D3D3D3
> >D=3D3D3D3D=3D3D3D
> > =
>=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=
=3D3D3D3D
> > >To Unsubscribe, set digest or vacation
> > >mode or view archives use the below link.
> > >
> > >http://thethin.net/winxplist.cfm
> > >
> > >
> > >
> > >
> > >
> > >
> > =3D
>
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D3D=3D3D3D=3D3D3D=3D3D3D=3D
>3D=3D
>3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D
> =
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
> > >To Unsubscribe, set digest or vacation
> > >mode or view archives use the below link.
> > >
> > >http://thethin.net/winxplist.cfm
> >
> >Matt Fowler
> >LAN Specialist
> >(847)925-6113
> >mfowler@xxxxxxxxxxxxxxx
> >
> >
> >
> >
> >
> >
>
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D3D=3D3D3D=3D3D3D=3D3D3D=3D
>3D=3D
>3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=
=3D3D
> >=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
> >To Unsubscribe, set digest or vacation
> >mode or view archives use the below link.
> >
> >http://thethin.net/winxplist.cfm
> >
> >
> >
> >
> >
> >
> =
>=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
> >=3D3D=3D
>=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
> >To Unsubscribe, set digest or vacation
> >mode or view archives use the below link.
> >
> >http://thethin.net/winxplist.cfm
>
>Matt Fowler
>LAN Specialist
>(847)925-6113
>mfowler@xxxxxxxxxxxxxxx
>
>
>
>
>
>
>=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3
>D=3D3D
=3D
>=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
>To Unsubscribe, set digest or vacation
>mode or view archives use the below link.
>
>http://thethin.net/winxplist.cfm
>
>
>
>
>
>
>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>To Unsubscribe, set digest or vacation
>mode or view archives use the below link.
>
>http://thethin.net/winxplist.cfm

Matt Fowler
LAN Specialist
(847)925-6113
mfowler@xxxxxxxxxxxxxxx






=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/winxplist.cfm






=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/winxplist.cfm






==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/winxplist.cfm






==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/winxplist.cfm

Other related posts: