Guest jim Posted February 18, 2008 Posted February 18, 2008 I have the Windows 2000 Server Administrator's Companion (Microsoft Press), but it's not been very helpful (or I have been very dense). I have been tasked with caring for an ancient Windows 2000 Server and the users on its small domain. What I need to do is have a user desktop that is set up with applications, printers, desktop links, favorites, etc. (everything they need to do their job) and restrict them from changing those things, installing applications, getting to the control panel, running unauthorized apps, etc. It is for a location that cannot seem to get its workers to stop installing crap on the local PCs and they want it locked down. (I said just fire the people that don't listen and your problem is solved....but that is not the path they have chosen.) Are there any resources that may be helpful to me in this (more helpful than the MS tome that I can't seem to figure out)? jim
Guest Danny Sanders Posted February 18, 2008 Posted February 18, 2008 Re: Need a little help please..... If the users are not members of the Administrator group on their local PCs, this will go a long ways towards stopping them from installing stuff on the local PC. hth DDS "jim" <jim@home.net> wrote in message news:4sfuj.88743$rc2.41123@bignews1.bellsouth.net... >I have the Windows 2000 Server Administrator's Companion (Microsoft Press), >but it's not been very helpful (or I have been very dense). > > I have been tasked with caring for an ancient Windows 2000 Server and the > users on its small domain. > > What I need to do is have a user desktop that is set up with applications, > printers, desktop links, favorites, etc. (everything they need to do their > job) and restrict them from changing those things, installing > applications, getting to the control panel, running unauthorized apps, > etc. > > It is for a location that cannot seem to get its workers to stop > installing crap on the local PCs and they want it locked down. (I said > just fire the people that don't listen and your problem is solved....but > that is not the path they have chosen.) > > Are there any resources that may be helpful to me in this (more helpful > than the MS tome that I can't seem to figure out)? > > jim >
Guest jim Posted February 18, 2008 Posted February 18, 2008 Re: Need a little help please..... I'm hoping to only have Guest active on the local PC (no other accounts active locally - and maybe not that if I can get away with it) and force them to logon to the domain using a Mandatory Profile. I've seen it done at other companies - this is just my first time having to administer a Windows 2000 Server. With all of the How Do I.... sites out there, you'd think there'd be one for admins. If there is, I haven't found it yet. Jim "Danny Sanders" <DSanders@NOSPAMciber.com> wrote in message news:%2322duFlcIHA.6024@TK2MSFTNGP06.phx.gbl... > If the users are not members of the Administrator group on their local > PCs, this will go a long ways towards stopping them from installing stuff > on the local PC. > > > hth > DDS > > "jim" <jim@home.net> wrote in message > news:4sfuj.88743$rc2.41123@bignews1.bellsouth.net... >>I have the Windows 2000 Server Administrator's Companion (Microsoft >>Press), but it's not been very helpful (or I have been very dense). >> >> I have been tasked with caring for an ancient Windows 2000 Server and the >> users on its small domain. >> >> What I need to do is have a user desktop that is set up with >> applications, printers, desktop links, favorites, etc. (everything they >> need to do their job) and restrict them from changing those things, >> installing applications, getting to the control panel, running >> unauthorized apps, etc. >> >> It is for a location that cannot seem to get its workers to stop >> installing crap on the local PCs and they want it locked down. (I said >> just fire the people that don't listen and your problem is solved....but >> that is not the path they have chosen.) >> >> Are there any resources that may be helpful to me in this (more helpful >> than the MS tome that I can't seem to figure out)? >> >> jim >> > >
Guest Roger Abell [MVP] Posted February 20, 2008 Posted February 20, 2008 Re: Need a little help please..... "jim" <jim@home.net> wrote in message news:4sfuj.88743$rc2.41123@bignews1.bellsouth.net... >I have the Windows 2000 Server Administrator's Companion (Microsoft Press), >but it's not been very helpful (or I have been very dense). > > I have been tasked with caring for an ancient Windows 2000 Server and the > users on its small domain. > > What I need to do is have a user desktop that is set up with applications, > printers, desktop links, favorites, etc. (everything they need to do their > job) and restrict them from changing those things, installing > applications, getting to the control panel, running unauthorized apps, > etc. > > It is for a location that cannot seem to get its workers to stop > installing crap on the local PCs and they want it locked down. (I said > just fire the people that don't listen and your problem is solved....but > that is not the path they have chosen.) > > Are there any resources that may be helpful to me in this (more helpful > than the MS tome that I can't seem to figure out)? > hi jim, Since they will not fire at will, ask won't they then promulgate quite visibly their policy on PC usage and violation penulty. If you have an uplevel domain environment perhaps subsumming them in some new OU with an imposed user profile migration would be much shorter than config of a W2k for your specs unless you overlay a pushy, fully forceful account restriction set in the existing W2k domain (via alien, remote mgmt ?). Roger
Recommended Posts