Locking down computers with local group policies2007-03-31 08:52:08
One of the great tools that an admin of an active directory network has is the ability to limit Windows clients using group policies. If you are working on a network where there is no way to lock down client machines but you would still like to then you can do the same thing using local policies on the windows box. There are a multitude of reasons that you would want to do this but the single best reason is to make sure that the network or even the computer stays secure by limiting what the user can do on the machine. The real upside for an administrator of these clients is that there are less problems and less support needed to keep the machine running in tip top shape.
First of all the best thing to do is to limit the machine using an autologon using a network or even local account and then using tweakui from Microsoft to add the registry entries to have it successfully logon. This in itself does not lock anything down but at least the machine, barring someone holding down the shift