Locking Down Windows Workstations
Last Updated: 08 Aug 2004
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*** PLEASE NOTE: Link(s), If Provided, May Be Wrapped ***
Here are some products which you can use to lock down
systems, perhaps for use as a KIOSK, or in a Library,
or in any environment calling for a rigid desktop
configuration. As with Spy Software, if you're using
this sort of product in a corporate environment, make
sure you have a good Security Policy to back you up.
LOCKDOWN SOFTWARE
• Fortress ............... http://www.fortres.com/products/fortres_101.htm
• Hands Off .............. http://www.datawizard.com.au/
• IT Secure .............. http://www.datawizard.com.au/
• Secure Desk ............ http://www.cursorarts.com/ca_sd.html
• Secure PC .............. http://www.citadel.com/securepc.asp
• Security Administrator . http://www.softheap.com/
• Security Suite ......... http://www.softclan.com/english/secsuite.html
• Storm Windows .......... http://www.cetussoft.com/stormwin.htm
• WebSense CPM ........... http://www.websense.com/products/about/CPM/
• WinLock ................ http://www.visionsoft.com/winl.asp
USER POLICIES
Desktops of Windows 2000, XP and above can be configured
via Group Policy or Local Security Policy.
START -> RUN -> GPEDIT.MSC
User Configuration
Administrative Templates
Desktop
WHITEPAPERS & TECH DOCUMENTS
• http://www.microsoft.com/WINDOWS2000/techinfo/howitworks/management/ccmintro.asp
• http://www.microsoft.com/WINDOWS2000/techinfo/howitworks/management/intellimirror.asp
• http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolicy.asp
• http://www.microsoft.com/office/ork/2000/journ/KioskMode.htm
• http://support.microsoft.com/?KBID=198771
• http://support.microsoft.com/?KBID=278295
• http://msdn.microsoft.com/library/backgrnd/html/msdn_zerowin.htm
• http://www.microsoft.com/windows/zak/
• http://KB.UltraTech-llc.com/Docs/?File=Secure2000Pro.htm
PERSONAL NOTES
• Securing Windows 95/98/ME systems is made much more
difficult because the underlying OS does not have
good support for security. Without the use of 3rd
party products, you can circumvent most security
policy simply by booting to SAFE mode.
• Security Administrator is among the least expensive
products in this category of software.
