How Would You Lock Down a Windows XP Machine?

Kronos666 asks: "I've been working with a network of about 50 computers, and a few of them have to be locked down. What I mean is that there is an application running, and the users must not be able to do anything else on it. The computers (Windows XP), are in a Windows 2000 domain and I've tried everything that comes to mind with the group policies. Now, I know it might seem contradictory to some, but is there a way to make those computers completely locked down? Maybe someone has had previous experience with something like this?"

Comments

cement

[adamshelley]

with a cement block and a chain right before i dropped it in the ocean.

Re:cement

[josepha48]

really? I'd make it the center of the cement block, and skip the chain.. wouldn't want anyones fishing line to get tangled in that dang chain....

Physical security

[orthogonal]

Now, I know it might seem contradictory to some, but is there a way to make those computers completely locked down?

A heavy boat anchor?

Seriously, what's to prevent Joe Slashdot reader from rebooting with a Knoppix CD?

solution

[Anonymous Coward]

debian.org

Re:Well.. you asked for it

[pbox]

Or the single step solution:

1. simply remove power cable.

The implied assumption...

[eyepeepackets]

...is that it can be locked down.

You might stand a chance if you:
1, remove all network access;
2, lock it in a hardened shelter;
3, post a platoon of U.S. Marines.

Otherwise, why bother: People who want secure and robust don't use MS products and there is simply no way you can't know that -- you be a troll?

simple

[saqq]

Unplug it.