Forum Home
Press F1
 
Thread ID: 22339 2002-07-18 08:43:00 Advanced Win2k security nzporscheboy (603) Press F1
Post ID Timestamp Content User
63350 2002-07-18 08:43:00 Hi all,
was wondering if any of you knew how to set advanced security of any sorts on windows 2000 professional - I have Admin priviliges. For example at skool when we right click the desktop, nothing happens. It's been disabled. I want to do this sorta thing at home (i dont have a machine running a copy of 2000 server) i have already found and set everything like stopping users from changing system time and not allowing them to shut down the computer

Brendon ;/
nzporscheboy (603)
63351 2002-07-18 09:46:00 If your PCs at school run Windows 2000 they will use Group policy which integrates into Windows 2000 Active Directory. You will need to find a Windows 2000 server unfortunately.
Then again, if the PCs at school are windows 98, then they will be using poledit
If they are Windows NT - they will be using system policy editor
Marty2001 (421)
63352 2002-07-18 23:25:00 Is 2GB enough room to install win2k server? i have a 2gb partition on my drive.....and does the server have to be running to have the other computers enforce the security levels you've created using the server? I am hoping that I can create it in 2kserver, then load it when i boot into 2kpro

Brendon ;/
nzporscheboy (603)
63353 2002-07-19 11:01:00 I was wrong
If you use start run and type GPEDIT.MSC

you should find that you can get into group policy editor
Not sure as I am not at a Windows 2000 Professional PC

2GB is the minimum for server. It loads at just over 1GB
Marty2001 (421)
63354 2002-07-20 14:34:00 Hi
This is for a standalone Win 2000 PC.
Type gpedit in the run command to start group policy. Any changes you do here affect all users to this computer including admin. Now to stop admin from being affected by the group policy Microsoft has a way of doing it here support.microsoft.com I set mine up another way and works fine for me. The Microsoft way seems to only apply to the users you currently have and it seems to me one has to go through this process again if you add a new user. My system is formatted in NTFS so I can use the sercurity options to deny access to the group policy for admin. If you have NTFS then make what changes you want to group policy then go to winnt\system32\group policy and deny access for the admin to the gpt.ini file. When you log in as admin next time you are not affected by the GP but all other users are. Of course this only works if you have NTFS format, otherwise you have to use the Microsoft way.
Berryb (654)
1