How do you lockdown Windows?

[Paiynn]

posted in networking too...

This is related to 95,98,2k all of em. What do you use to remove things from the desktop such as the ability to change desktop settings, or removing the control panel from settings, removing the windows explorer from program groups, removing the run command from the start menu? You know, to really cripple a machine from people messing it up. I've seen them setup in schools like this before.

I've been playing with mandatory user profiles and I think it may be something to do with them, but I cant find it if it is.

[JigPu]

I think you have to change some settings in the registry. I'm not sure what ('cuz I've never done it), but I think that is what you have to do. Wait for some more replys for the exact setting changes (or programs that will do it for you!)

JigPu

[RedDeathDrinker]

You are best doing it in 2000, as it's based on NT technology, and has those features built in. There are several free and shareware programs out there to do it for 95/98/Me

[Monaco]

There are a couple ways to use the registry to remove sensitive items. I learned these tricks during my "l33t pr4nkst3r" days.

Things like setting to 640x480, 256 color and then removing the reg key that controls the Display Properties menu. Or, like you said, killing the Run menu.

Funny , but useful in your case. Look thru the registry; everything that shows up in Control Panel can be disabled. Usually if I remember correctly it is a simple "ShowDisplayControl=1" kind of thing. Of course I don't remember exactly what the keys were. Google ought to know. I got some off of LittleWhiteDog.com, they had a prank section a while ago.

Registry edits will stop a novice cold, but anybody who can get to safe mode can get around them.

If it is a critical issue, just get win2000.

[Paiynn]

I found it, its the system policy editor. A little more difficult to do on a local machine but its there. Thanks