System Lock Down Advice Wanted

Does anyone know of an easy way to lock down sysedit, msconfig, control panel, My Computer, regedit, Windows services and command prompt? Is there software available to achieve that end? Any help or advice would be greatly appreciated.


Peace & Love,

CogitoErgoSum

 

With System Safety Monitor, executables such as sysedit, msconfig, and regedit can be locked out. You can set it to either block the processes entirely or only allow them when SSM is in administrator mode (UI connected). It can also restrict access to folders like the Control Panel, My Computer, etc by adding the folder captions to its Window Filter list. SSM will automatically close that window. Works on system folders, documents, web pages, etc.
They've just released a fully functional free version.
Rick

 

Thanks herbalist. I will look into SSM.


Peace & Love,

CogitoErgoSum

 

There is also a way to do it through Security in Microsoft... I think limited users aren't allowed access to msconfig, regedit, etc.

 

Hello,
You can do that using Restriction Policies. This will work in Windows XP Pro.
You need to do the following:

Start > Run > gpedit.msc

You will be presented with a large range of options.
Now, you need to go through them, one by one, and find the relevant options and disable them. After you finish all of the changes, you will have a desired lockdown in place.

For example:
Local Group Policy > User Configuration > Administrative Templates > Start Menu and Taskbar
In the right side, a wealth of options:
Do not keep history of recently opened documents
Lock the Taskbar

Another example:
Local Group Policy > User Configuration > Administrative Templates > Control Panel
In the right side:
Prohibit access to the Control Panel

You asked about system tools:
Local Group Policy > User Configuration > Administrative Templates > System
In the right side:
Prevent access to the command prompt
Prevent access to the registry editing tools
Don't run specified Windows applications
Windows Automatic Updates

And so on and on ...

User Configuration is for the local user ONLY. You need to do computer-wise settings to affect all users (Computer Configuration)

And so on, you can lock your PC this way like a 14-century iron maiden.

Mrk

P.S. If you need more help, ask.

 

Thanks sosaiso and Mrkvonic for your contributions. They are very much appreciated.


Peace & Love,

CogitoErgoSum