System Lock Down Advice Wanted

Discussion in 'other software & services' started by CogitoErgoSum, Jun 29, 2006.

Thread Status:
Not open for further replies.
  1. CogitoErgoSum

    CogitoErgoSum Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    641
    Location:
    Cerritos, California
    Does anyone know of an easy way to lock down sysedit, msconfig, control panel, My Computer, regedit, Windows services and command prompt? Is there software available to achieve that end? Any help or advice would be greatly appreciated.


    Peace & Love,

    CogitoErgoSum
     
  2. herbalist

    herbalist Guest

    With System Safety Monitor, executables such as sysedit, msconfig, and regedit can be locked out. You can set it to either block the processes entirely or only allow them when SSM is in administrator mode (UI connected). It can also restrict access to folders like the Control Panel, My Computer, etc by adding the folder captions to its Window Filter list. SSM will automatically close that window. Works on system folders, documents, web pages, etc.
    They've just released a fully functional free version.
    Rick
     
  3. CogitoErgoSum

    CogitoErgoSum Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    641
    Location:
    Cerritos, California
    Thanks herbalist. I will look into SSM.


    Peace & Love,

    CogitoErgoSum
     
  4. sosaiso

    sosaiso Registered Member

    Joined:
    Nov 12, 2005
    Posts:
    601
    There is also a way to do it through Security in Microsoft... I think limited users aren't allowed access to msconfig, regedit, etc.
     
  5. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,700
    Hello,
    You can do that using Restriction Policies. This will work in Windows XP Pro.
    You need to do the following:

    Start > Run > gpedit.msc

    You will be presented with a large range of options.
    Now, you need to go through them, one by one, and find the relevant options and disable them. After you finish all of the changes, you will have a desired lockdown in place.

    For example:
    Local Group Policy > User Configuration > Administrative Templates > Start Menu and Taskbar
    In the right side, a wealth of options:
    Do not keep history of recently opened documents
    Lock the Taskbar

    Another example:
    Local Group Policy > User Configuration > Administrative Templates > Control Panel
    In the right side:
    Prohibit access to the Control Panel

    You asked about system tools:
    Local Group Policy > User Configuration > Administrative Templates > System
    In the right side:
    Prevent access to the command prompt
    Prevent access to the registry editing tools
    Don't run specified Windows applications
    Windows Automatic Updates

    And so on and on ...

    User Configuration is for the local user ONLY. You need to do computer-wise settings to affect all users (Computer Configuration)

    And so on, you can lock your PC this way like a 14-century iron maiden.

    Mrk

    P.S. If you need more help, ask.
     
  6. CogitoErgoSum

    CogitoErgoSum Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    641
    Location:
    Cerritos, California
    Thanks sosaiso and Mrkvonic for your contributions. They are very much appreciated.


    Peace & Love,

    CogitoErgoSum
     
Loading...
Thread Status:
Not open for further replies.