Slashdot Mirror

← Back to Stories (view on slashdot.org)

How Would You Lock Down a Windows XP Machine?

Posted by Cliff on from the throw-away-the-key dept.

Kronos666 asks: "I've been working with a network of about 50 computers, and a few of them have to be locked down. What I mean is that there is an application running, and the users must not be able to do anything else on it. The computers (Windows XP), are in a Windows 2000 domain and I've tried everything that comes to mind with the group policies. Now, I know it might seem contradictory to some, but is there a way to make those computers completely locked down? Maybe someone has had previous experience with something like this?"

10 of 119 comments (clear)

  1. Have you tried.... by HotNeedleOfInquiry · · Score: 4, Funny

    A blob of expoxy in the keyboard jack?

    --
    "Eve of Destruction", it's not just for old hippies anymore...
  2. Another solution by foidulus · · Score: 3, Funny

    rather than a technical solution, just strike fear into the heart of the user. Put an empty camera shell above the computer tied to a fake, but realistic looking revolver.
    Tell them the camera can detect them messing with the system, and if caught, the camera/gun combo will grow legs and make them wish they hadn't installed the random screensaver exe sent to them in the mail.
    Or maybe you would get sued, I dunno, I'm not a lawyer.

  3. Smash it with an axe. by trouser · · Score: 2, Funny

    Disconnect it from the network, remove all drives, smash it with an axe and then, for good measure, install GNU/Linux.

    My apologies if this seems unhelpful. It's very early and I haven't had my coffee yet.

    --
    Now wash your hands.
    1. Re:Smash it with an axe. by chris_mahan · · Score: 3, Funny

      Either you are not good with the ol' axe, or you're the guru of gurus if you can get linux installed post axeing.

      --

      "Piter, too, is dead."

  4. Re:Yes there is a way by Clover_Kicker · · Score: 2, Funny
    While Slashdotters often make fun of Windows admins, as you have found out, its not as simple as you think it'd be.
    No, and I've got the grey hairs to prove it.

    Tip for the day:

    A masochistic Windows admins bragging about how difficult it is to secure a Windows box is no more appealing or interesting than a hard core *nix guy bragging about how he does everything with /bin/ed over a 300 baud serial connection.
  5. Re:surely there's programs for this? by cgenman · · Score: 1, Funny

    Simple. Just rename the finder to something else, then take the target application and rename it "Finder" with file type "FNDR" and application "MOVR." Voila! Instant Kiosk!

    That not working? Well, log in as root. Move the Finder out of your /System/Library/CoreServices/ directory. Rename whatever you want "Finder" and plop it in that folder.

    Still not working? Oh, you meant Windows. Can't help you there.

    --
    The ______ Agenda
  6. Enable Windows RAM Policy by prabha · · Score: 3, Funny

    Boot the XP systems with 32MB RAM.

  7. Two words by Lars+T. · · Score: 2, Funny

    Kensington Chain ;-)

    --

    Lars T.

    To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  8. Re:Some good reading... by jea6 · · Score: 2, Funny

    In order to download the PDFs using IE, I'd need to add them to my list of Trusted Sites. What to do, what to do...

    --

    sarchasm: The gulf between the author of sarcastic wit and the person who doesn't get it.
  9. Re:the phrase "surely there's a program for this" by FlameSnyper · · Score: 2, Funny
    I can build a car, a house, a boat, a dam, a power station, etc.
    A hat, a brooch, etc...