How Can We Help?

Locking Down Windows Workstations

You are here:
< Back
Locking Down Windows Workstations
Last Updated: 08 Aug 2004
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

*** PLEASE NOTE: Link(s), If Provided, May Be Wrapped ***


Here are some products which you can use to lock down
systems, perhaps for use as a KIOSK, or in a Library,
or in any environment calling for a rigid desktop
configuration. As with Spy Software, if you're using
this sort of product in a corporate environment, make
sure you have a good Security Policy to back you up.


LOCKDOWN SOFTWARE

• Fortress ............... http://www.fortres.com/products/fortres_101.htm
• Hands Off .............. http://www.datawizard.com.au/
• IT Secure .............. http://www.datawizard.com.au/
• Secure Desk ............ http://www.cursorarts.com/ca_sd.html
• Secure PC .............. http://www.citadel.com/securepc.asp
• Security Administrator . http://www.softheap.com/
• Security Suite ......... http://www.softclan.com/english/secsuite.html
• Storm Windows .......... http://www.cetussoft.com/stormwin.htm
• WebSense CPM ........... http://www.websense.com/products/about/CPM/
• WinLock ................ http://www.visionsoft.com/winl.asp


USER POLICIES

Desktops of Windows 2000, XP and above can be configured
via Group Policy or Local Security Policy.

	START -> RUN -> GPEDIT.MSC
	User Configuration
	Administrative Templates
	Desktop


WHITEPAPERS & TECH DOCUMENTS

• http://www.microsoft.com/WINDOWS2000/techinfo/howitworks/management/ccmintro.asphttp://www.microsoft.com/WINDOWS2000/techinfo/howitworks/management/intellimirror.asphttp://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolicy.asphttp://www.microsoft.com/office/ork/2000/journ/KioskMode.htmhttp://support.microsoft.com/?KBID=198771http://support.microsoft.com/?KBID=278295http://msdn.microsoft.com/library/backgrnd/html/msdn_zerowin.htmhttp://www.microsoft.com/windows/zak/http://KB.UltraTech-llc.com/Docs/?File=Secure2000Pro.htm


PERSONAL NOTES

• Securing Windows 95/98/ME systems is made much more
  difficult because the underlying OS does not have
  good support for security.  Without the use of 3rd
  party products, you can circumvent most security
  policy simply by booting to SAFE mode.

• Security Administrator is among the least expensive
  products in this category of software.