Lock down desktop and functions W2K PC on NT Network

Posted on 2004-11-29
Last Modified: 2010-04-14
I am looking for the easiest solution to this problem. I have an NT domain running currently. I need the easiest way to create a profile (either on the domain or locally) that will totally lock out the computers usage except for one icon which is to remain on the desktop. Basically, once the user logs into the PC (using a predefined user login), the only thing that should appear on the desktop is one icon from a third party software company. The start button can be visible as they will need to use it to log out, but I do not want to see any of the programs listed (i.e. no "run", "Help", etc.). Also, the pc is currently internet enabled and needs to remain this way to support the third party software, so I need to make sure they cant even launch the browser. This is not a major problem since I am just waiting for the network security people to configure a profile, but I am inpatient and hate to wait, so I would like to do it myself. Any help that can be provided would be appreciated.
Question by:jpdoyle7
    LVL 18

    Expert Comment

    I would say your best bet is to use the local group policy on the workstations in order to lock them down. Start- run- gpedit.msc  There are lots of options here for locking down a workstation. There are lots of articles and help sites that discuss the use of group policy to lock down machines.
    LVL 18

    Expert Comment

    For example, you can use the software restriction policy to prohbit users from running any software other than the program you specify. You can prevent users from accessing the control panel, you can lock down the desktop, etc. Group policy is a wonderful feature :)
    LVL 18

    Accepted Solution

    Just make sure to disable it from applying to administrators since local group policy by default applies to all users on the computer including admins:

    Also, to keep from touching each computer, this will help you out:

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now