[mswindowsxp] Re: Locking down (sort-of)

  • From: Frank Monroe <Frank.Monroe@xxxxxxxxxxx>
  • To: "'mswindowsxp@xxxxxxxxxxxxx'" <mswindowsxp@xxxxxxxxxxxxx>
  • Date: Mon, 28 Apr 2003 16:31:16 -0400

I think you are asking too much.  If you want them to be able to install
ANYTHING, they will need to be in the administrator group.  And, if you do,
plan to audit all the time to make sure you remain in compliance with your
licenses.

-----Original Message-----
From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]
Sent: Monday, April 28, 2003 4:28 PM
To: mswindowsxp@xxxxxxxxxxxxx
Subject: [mswindowsxp] Re: Locking down (sort-of)



You want my answer to your second question, or the college's faculty 
answer? I think I answered it already though. They want it, they most of 
the time get it.

I am not asking to utilize a benefit of AD, just asking if there is 
anything easier in XP than it was in NT for locking down the machine. I 
presume the answer to that is "not without AD" and that is ok. I am simply 
pursuing the possibilities. Hoping to find someone that has experienced 
this already. User's want to add software, I don't want them to screw with 
the Network configuration, the OS, or my servers. Am I asking too much? 
Probably!

Thanks for the input.

At 01:12 PM 4/28/2003 -0700, you wrote:

>Hmmm. Your saying that you won't use the benefits of AD, yet your asking =
>for many of the features it offers.
>
>Joe
>
>Any particular reasons why users need to install software? They end up =
>with IM, Gator, Deskflag, Webshots, and many other crap releated apps.
>
>Joe
>
>-----Original Message-----
>From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]
>Sent: Monday, April 28, 2003 12:42 PM
>To: mswindowsxp@xxxxxxxxxxxxx
>Subject: [mswindowsxp] Re: Locking down (sort-of)
>
>
>
>Unfortunately, AD first is not going to happen here. We just won't use =
>many=20
>of the benefits until later. However, can user's still mess with the=20
>network settings and such as Power User's?
>
>
>At 03:29 PM 4/28/2003 -0400, you wrote:
>
> >Adding an end user to the local Power User group will give them the
> >ability to install most software - any software that doesn't
> >load/install services.  =3D20
> >
> >
> >I would suggest getting to the Active Directory first, then you will =
>get
> >all the management benefits on the desktop (XP)
> >=3D20
> >
> >-----Original Message-----
> >From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]=3D20
> >Sent: Monday, April 28, 2003 3:26 PM
> >To: mswindowsxp@xxxxxxxxxxxxx
> >Subject: [mswindowsxp] Re: Locking down (sort-of)
> >
> >
> >No Active Directory yet. On the horizon, just not yet. We are going to
> >move=3D20
> >to XP from NT first later this year.
> >
> >
> >At 03:24 PM 4/28/2003 -0400, you wrote:
> >
> > >Are you running Active Directory?  If so, you can use group policies =
>to
> > >lock down the machine.
> > >
> > >-----Original Message-----
> > >From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx]=3D3D20
> > >Sent: Monday, April 28, 2003 3:18 PM
> > >To: mswindowsxp@xxxxxxxxxxxxx
> > >Subject: [mswindowsxp] Locking down (sort-of)
> > >
> > >
> > >Has anyone had any success locking down XP Pro such that a user can
> > >still=3D3D20
> > >load their own software, but not mess with Network or other settings?
> > >
> > >
> > >Matt Fowler
> > >LAN Specialist
> > >(847)925-6113
> > >mfowler@xxxxxxxxxxxxxxx
> > >
> > >
> > >
> > >
> > >
> > >
> > =
>
>=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
>3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D=3D
> >3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3
> >D=3D3D3D=3D3D
> > >=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
> > >To Unsubscribe, set digest or vacation
> > >mode or view archives use the below link.
> > >
> > >http://thethin.net/winxplist.cfm
> > >
> > >
> > >
> > >
> > >
> > >
> > =
>
>=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
>3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
> >=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
> > >To Unsubscribe, set digest or vacation
> > >mode or view archives use the below link.
> > >
> > >http://thethin.net/winxplist.cfm
> >
> >Matt Fowler
> >LAN Specialist
> >(847)925-6113
> >mfowler@xxxxxxxxxxxxxxx
> >
> >
> >
> >
> >
> >
>
>=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
>3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
> >=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
> >To Unsubscribe, set digest or vacation
> >mode or view archives use the below link.
> >
> >http://thethin.net/winxplist.cfm
> >
> >
> >
> >
> >
> >
> >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> >To Unsubscribe, set digest or vacation
> >mode or view archives use the below link.
> >
> >http://thethin.net/winxplist.cfm
>
>Matt Fowler
>LAN Specialist
>(847)925-6113
>mfowler@xxxxxxxxxxxxxxx
>
>
>
>
>
>
>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=
>=3D=3D=3D=3D=3D=3D=3D=3D=3D
>To Unsubscribe, set digest or vacation
>mode or view archives use the below link.
>
>http://thethin.net/winxplist.cfm
>
>
>
>
>
>
>==================================
>To Unsubscribe, set digest or vacation
>mode or view archives use the below link.
>
>http://thethin.net/winxplist.cfm

Matt Fowler
LAN Specialist
(847)925-6113
mfowler@xxxxxxxxxxxxxxx






==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/winxplist.cfm






==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/winxplist.cfm

Other related posts: