Locking down public computer

Tags:
DataCenter
Desktop management applications
Does anyone have a good solution for locking down puclic computers? The computers are not part of a domain. We are currently using Deep Freeze and local group policies. Any other methods?
1

Answer Wiki

Thanks. We'll let you know when a new response is added.

You really need to tell us the OS on the computers you are trying to lock down.

If they are XP, the use Microsoft’s free XP Shared Computer Toolkit
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

best of luck
dmw

Discuss This Question: 7  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Magkit
    The June 2006 edition of Windows IT Pro magazine had an article that details how to do it. The title is "6 steps to Secure Shared Computers". The article describes using the "Microsoft Shared Computer Toolkit" on a Win XP SP2 computer. The MS shared computer toolkit information can be found at www.microsoft.com/windowsxp/sharedaccess/default.mspx and at www.microsoft.com/windowsxp/sharedaccess/faq.mspx. The article is at http://www.windowsitpro.com/Articles/ArticleID/50114/50114.html You will probably need to register to access it. Mark
    0 pointsBadges:
    report
  • Magkit
    The June 2006 edition of Windows IT Pro magazine had an article that details how to do it. The title is "6 steps to Secure Shared Computers". The article describes using the "Microsoft Shared Computer Toolkit" on a Win XP SP2 computer. The MS shared computer toolkit information can be found at www.microsoft.com/windowsxp/sharedaccess/default.mspx and at www.microsoft.com/windowsxp/sharedaccess/faq.mspx. The article is at http://www.windowsitpro.com/Articles/ArticleID/50114/50114.html You will probably need to register to access it. Mark
    0 pointsBadges:
    report
  • Magkit
    The June 2006 edition of Windows IT Pro magazine had an article that details how to do it. The title is "6 steps to Secure Shared Computers". The article describes using the "Microsoft Shared Computer Toolkit" on a Win XP SP2 computer. The MS shared computer toolkit information can be found at www.microsoft.com/windowsxp/sharedaccess/default.mspx and at www.microsoft.com/windowsxp/sharedaccess/faq.mspx. The article is at http://www.windowsitpro.com/Articles/ArticleID/50114/50114.html You will probably need to register to access it. Mark
    0 pointsBadges:
    report
  • Bobkberg
    In addition to the other (fine) recommendations, you might also want to check out www.cisecurity.org for their benchmark security tools and recommendations. Also look at Microsoft's TweakUI tool. Bob
    1,070 pointsBadges:
    report
  • Humbleapprentice
    I believe you can also use group policies for that, either for the user that will be logged on to the computer (the user that everybody will use) or to the computer itself. Hope it helps!
    0 pointsBadges:
    report
  • KingTut
    Since you are challenging current practice, you might consider challenging the "not part of a domain" model. Making them part of the domain opens them to group policy management to simplify configuration changes. We have a severe lockdown via GPO where the user cannot even see the C:> drive.
    0 pointsBadges:
    report
  • Skepticals
    Thank you for your responses. I would love to use active directory in a domain. The issue is the place does not have the budget for that right now. They only have a workgroup. I am trying to do my best in a workgroup environment. I am used to locking computers down in a domain setting.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: