Need App to Lockdown a XP computer

[nuclearsnake]

So, we have a few workstations that *have to* run as the system admin in order for some older programs to run correctly since they run as the current logged on user...

Im looking for some sort of app that will let me lock the computer down. Basiclly disallow access to certain program, usb keys, etc with an easy to use GUI.

But, it needs to be easy to enable the security and disable it for when we need to fix something. I was looking at "Security Administrator" but I wished it had more features...

Anyone know of anything better?

 

[oakfan52]

I haven't met an app yet that "requires" local administors rights.

You should try using tools like filemon and regmon to determine what areas the user needs access to to run the app. Also look at Microsoft's Application Compatbility Tool kit.

http://www.jsifaq.com/SF/Tips/Tip.aspx?id=9134


The problem with local admin rights you can go arround most any secuirty settings such as software or a GPO.

 

[gigabyte1024]

you could try VirtualPC to run the old apps. (free)
http://www.microsoft.com/windows/products/winfamily/virtualpc/default.mspx

You could also look into deepfreeze (not free)
http://www.faronics.com/html/deepfreeze.asp

 

[Order]

I love Fortres 101 at work.

 

[MavsX]

god i hate it when apps need admin rights..such BS

 

[JayAre]

god i hate it when apps need admin rights..such BS

My old company was HUGE into limited privileges. Go find the directory in the registry and give users full access. Then under C:\program files\**program name** and give the users group full access.

 

[oakfan52]

god i hate it when apps need admin rights..such BS

No such thing. It just takes a little effort to figure it out. It well worth it.

 

[AcidTone]

Regmon and Filemon are your friends, I have spent many hours with these programs and in the end it was well worth it to have the system locked down.

Give the limited access user rights to what it needs to run. May take a while to get em all some times.