We have a workgroup of W2K Pro computers with no AD. How
can I "lock down" some of the computers like it was with
the old Policy Editor functions.

Functions to control,
use of diskette drive
CD
no access to certain control panel functions

Thank you,

Todd

Thank you

Thanks but didn't see any items that pertain to what we
need to accomplish. These are primarily the Local
Security Policy settings but do not include locking down
drives, control panel, etc.

Todd

Todd wrote:

Hi

Note, some Windows XP links also below, but it is very much the same as for
Windows 2000...


Managing Desktops Without Active Directory
http://www.microsoft.com/technet/pro...a_dcm_godi.asp

Tip 3612 at http://www.jsiinc.com/reghack.htm
3612 » How do I distribute Local Group Policy to Windows 2000 clients in a
non-Active Directory domain or workgroup?

Group Policies for Windows 2000 Professional Clients in
Windows NT 4.0 Domain or Workgroups
http://support.microsoft.com/default...b;en-us;274478

HOW TO: Secure Windows in a Non-Domain Environment
http://support.microsoft.com/default...B;EN-US;269799


This is important, a mistake can require a format as Mark L. Ferguson states
in the newsgroup thread below.

From: Cazz (ditto@again.ditto)
Subject: How to lock down almost everything for 1 user or group?
Newsgroups: microsoft.public.windowsxp.security_admin
Date: 2002-02-22 17:52:38 PST
http://groups.google.com/groups?th=59807abf6aa723ed


Some input/links:

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Subject: Re: Easiest way to implement a lock-down policy? Suggestions welcome
Newsgroups: microsoft.public.windowsxp.security_admin
Date: 2002-08-09 00:15:54 PST
http://groups.google.com/groups?th=c207ccb603d968cb


Implementing Common Desktop Management Scenarios
http://www.microsoft.com/windows2000...rouppolicy.asp

Online version of the one above (I think)
http://www.microsoft.com/technet/pro...t/grppolsc.asp

Implementing Registry-Based Group Policy for Applications
http://www.microsoft.com/technet/pro...t/regappgp.asp

Group Policy Registry Table
http://www.microsoft.com/windows2000...s/gp/gpref.asp

Windows XP Professional > Security and administration > Security Templates
overview
http://www.microsoft.com/technet/pro..._SCEwhatis.asp

Windows XP Professional > Security and administration > Security Settings
overview
http://www.microsoft.com/technet/pro...S_overview.asp

HOW TO: Set Up a File System for Secure Access in Windows 2000
http://support.microsoft.com/default...b;en-us;300691

SetACL.exe: SetACL - Windows permission management: Set permissions on
virtually anything
http://setacl.sourceforge.net/



--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter