Locking Down XP

I am updating a number of business PC's to XP Pro. This seems like a good time to increase security. I want to know if I can use group policy to prevent users (or hackers) from installing programs or visiting unapproved websites. These users only need to visit 4 or 5 business related sites, and I can install any needed programs with the "install as" option.   Thanks
Who is Participating?
luv2smileConnect With a Mentor Commented:
The first step would be to not grant them admin rights....most programs require admin rights to install

There are software restriction policies that you can set up with group policy, but here's the thing: You either have to 1.  block all programs except ones that you specify or 2.  know the programs you wish to block.


1. is very hard to setup and is often full of problems, etc. and takes a long time to perfect.
kbbcnetConnect With a Mentor Commented:
Make everyone other than you part of the "Users" group, not "Power User" or "Administrator" groups.  This way they can't install programs; however, this will not stop all installations, such as screensavers, wallpapers, spyware, etc.

The MS article referenced above is also a good starting point, however complex to implement.  

You may want to try a third party solution to assist you in this task such as "Deep Freeze" by Faronics.  See their webpage - http://www.faronics.com/.  This product will basically make an image of the PC's O/S then restore it everytime you reboot....no installation crap to worry about then; just reboot it.

There are a number of internet content filtering products out there for blocking access to various websites.  They typically include 'black lists' for bad sites and 'white lists' for approved sites.  Most of these programs allow you to specify 'custom' lists of webpages you want to deny access to.

Good luck!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.