[mswindowsxp] Re: Locking down (sort-of)
- From: "Joe Shonk" <JShonk@xxxxxxxxxxxxxx>
- To: <mswindowsxp@xxxxxxxxxxxxx>
- Date: Mon, 28 Apr 2003 15:58:01 -0700
It's kind of like preventing a Valet driver from opening the trunk of =
your car after you've given him the keys.
Joe
-----Original Message-----
From: Frank Monroe [mailto:Frank.Monroe@xxxxxxxxxxx]
Sent: Monday, April 28, 2003 3:44 PM
To: 'mswindowsxp@xxxxxxxxxxxxx'
Subject: [mswindowsxp] Re: Locking down (sort-of)
You can lock it down, but with the privs the users require to install =
non
MSI software, they can simply turn the methods to lock down off.=20
-----Original Message-----
From: Charles Carerros [mailto:ccarerros@xxxxxxxxxxx]
Sent: Monday, April 28, 2003 5:56 PM
To: mswindowsxp@xxxxxxxxxxxxx
Subject: [mswindowsxp] Re: Locking down (sort-of)
You can still use group policies as they exist on the WXP workstation.
However, GPMC you MAY be able to easily import and export them to the
workstations. Don't take my word on that though, I haven't worked with
that product without a server, but it might be work investigation. =3D20
However with XPs group policies you can lock down anything you want
while keeping other items open.
chuck
-----Original Message-----
From: Frank Monroe [mailto:Frank.Monroe@xxxxxxxxxxx]=3D20
Sent: Monday, April 28, 2003 3:31 PM
To: 'mswindowsxp@xxxxxxxxxxxxx'
Subject: [mswindowsxp] Re: Locking down (sort-of)
I think you are asking too much. If you want them to be able to install
ANYTHING, they will need to be in the administrator group. And, if you
do, plan to audit all the time to make sure you remain in compliance
with your licenses.
-----Original Message-----
From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]
Sent: Monday, April 28, 2003 4:28 PM
To: mswindowsxp@xxxxxxxxxxxxx
Subject: [mswindowsxp] Re: Locking down (sort-of)
You want my answer to your second question, or the college's =
faculty=3D20
answer? I think I answered it already though. They want it, they most of
the time get it.
I am not asking to utilize a benefit of AD, just asking if there is=3D20
anything easier in XP than it was in NT for locking down the machine. =
I=3D20
presume the answer to that is "not without AD" and that is ok. I am
simply=3D20
pursuing the possibilities. Hoping to find someone that has =
experienced=3D20
this already. User's want to add software, I don't want them to screw
with=3D20
the Network configuration, the OS, or my servers. Am I asking too =
much?=3D20
Probably!
Thanks for the input.
At 01:12 PM 4/28/2003 -0700, you wrote:
>Hmmm. Your saying that you won't use the benefits of AD, yet your=3D20
>asking =3D3D for many of the features it offers.
>
>Joe
>
>Any particular reasons why users need to install software? They end =
up=3D20
>=3D3D with IM, Gator, Deskflag, Webshots, and many other crap =
releated=3D20
>apps.
>
>Joe
>
>-----Original Message-----
>From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]
>Sent: Monday, April 28, 2003 12:42 PM
>To: mswindowsxp@xxxxxxxxxxxxx
>Subject: [mswindowsxp] Re: Locking down (sort-of)
>
>
>
>Unfortunately, AD first is not going to happen here. We just won't =
use=3D20
>=3D3D many=3D3D20 of the benefits until later. However, can user's =
still =3D
mess=3D20
>with the=3D3D20 network settings and such as Power User's?
>
>
>At 03:29 PM 4/28/2003 -0400, you wrote:
>
> >Adding an end user to the local Power User group will give them =
the=3D20
> >ability to install most software - any software that doesn't=3D20
> >load/install services. =3D3D3D20
> >
> >
> >I would suggest getting to the Active Directory first, then you =
will=3D20
> >=3D3D
>get
> >all the management benefits on the desktop (XP)
> >=3D3D3D20
> >
> >-----Original Message-----
> >From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]=3D3D3D20
> >Sent: Monday, April 28, 2003 3:26 PM
> >To: mswindowsxp@xxxxxxxxxxxxx
> >Subject: [mswindowsxp] Re: Locking down (sort-of)
> >
> >
> >No Active Directory yet. On the horizon, just not yet. We are =
going=3D20
> >to move=3D3D3D20 to XP from NT first later this year.
> >
> >
> >At 03:24 PM 4/28/2003 -0400, you wrote:
> >
> > >Are you running Active Directory? If so, you can use group=3D20
> > >policies =3D3D
>to
> > >lock down the machine.
> > >
> > >-----Original Message-----
> > >From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]=3D3D3D3D20
> > >Sent: Monday, April 28, 2003 3:18 PM
> > >To: mswindowsxp@xxxxxxxxxxxxx
> > >Subject: [mswindowsxp] Locking down (sort-of)
> > >
> > >
> > >Has anyone had any success locking down XP Pro such that a user can
> > >still=3D3D3D3D20 load their own software, but not mess with Network =
=3D
or=3D20
> > >other settings?
> > >
> > >
> > >Matt Fowler
> > >LAN Specialist
> > >(847)925-6113
> > >mfowler@xxxxxxxxxxxxxxx
> > >
> > >
> > >
> > >
> > >
> > >
> > =3D3D
>
>=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3=
D3D3D=3D3D3D3D3D=3D
=3D3D3D3D3D=3D3D3D3D3D=3D3D
>3D=3D3D
>3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D=3D3D3D
> =3D
>3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3=
D3D3D3D=3D3D3D3D=3D
3D=3D3D3D3D3
> >D=3D3D3D3D3D=3D3D3D3D
> > =3D
>=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3D3D3D=3D3D3=
D3D3D=3D3D3D3D3D=3D
=3D3D3D3D3D
> > >To Unsubscribe, set digest or vacation
> > >mode or view archives use the below link.
> > >
> > >http://thethin.net/winxplist.cfm
> > >
> > >
> > >
> > >
> > >
> > >
> > =3D3D
>
>=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=
=3D3D3D3D=3D3D3D3D=3D3D=3D
3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D
>3D=3D3D
>3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D=
3D=3D3D3D3D=3D3D3D
> =3D
>=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=
=3D3D3D3D=3D3D3D3D
> > >To Unsubscribe, set digest or vacation
> > >mode or view archives use the below link.
> > >
> > >http://thethin.net/winxplist.cfm
> >
> >Matt Fowler
> >LAN Specialist
> >(847)925-6113
> >mfowler@xxxxxxxxxxxxxxx
> >
> >
> >
> >
> >
> >
>
>=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=
=3D3D3D3D=3D3D3D3D=3D3D=3D
3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D
>3D=3D3D
>3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D=
3D=3D3D3D3D=3D3D3D3D=3D
=3D3D3D
> =
>=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=3D3D3D3D=
=3D3D3D3D
> >To Unsubscribe, set digest or vacation
> >mode or view archives use the below link.
> >
> >http://thethin.net/winxplist.cfm
> >
> >
> >
> >
> >
> >
> =3D
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D=3D
3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
> >=3D3D3D=3D3D
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
> >To Unsubscribe, set digest or vacation
> >mode or view archives use the below link.
> >
> >http://thethin.net/winxplist.cfm
>
>Matt Fowler
>LAN Specialist
>(847)925-6113
>mfowler@xxxxxxxxxxxxxxx
>
>
>
>
>
>
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D=3D
3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3
>D=3D3D3D
=3D3D
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
>To Unsubscribe, set digest or vacation
>mode or view archives use the below link.
>
>http://thethin.net/winxplist.cfm
>
>
>
>
>
>
>=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
>To Unsubscribe, set digest or vacation
>mode or view archives use the below link.
>
>http://thethin.net/winxplist.cfm
Matt Fowler
LAN Specialist
(847)925-6113
mfowler@xxxxxxxxxxxxxxx
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/winxplist.cfm
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/winxplist.cfm
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/winxplist.cfm
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/winxplist.cfm
==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/winxplist.cfm
Other related posts:
