October 28th, 2008, 04:41 PM
MMC 101 - Lock Down Those Desktops
Want to put an end to the user free-for-all and "not this again" help desk requests? Sonny Discini walks us through the basics of locking down those workstations with Microsoft Management Console and Active Directory.
First, you have to lay the groundwork.
Microsoft MMC How To: Hardening Desktops for Improved Security - eITplanet
Click-by-click instructions await if you visit this MMC tutorial.
Let's start with a manual workstation lockdown.
When defining a local security policy you will be working in the following areas: Account Policies, Local Policies, Event Log, Restricted Groups, System Services, Registry and the File System. Once you have a working hardened image, you can then deploy it out across your enterprise.
Make sure that your baseline image does not interfere with supported enterprise apps or you will be going through the lockdown phase many more times than you will like.
October 28th, 2008, 04:44 PM
Somethign I have been looking for , thank you.
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
October 28th, 2008, 05:06 PM
It's missing a vital suggestion.... remove the users from the (local) admin group...
Experience is something you don't get until just after you need it.
By phernandez in forum Miscellaneous Security Discussions
Last Post: October 17th, 2006, 04:27 PM
By jbclarkman in forum Microsoft Security Discussions
Last Post: May 12th, 2005, 12:17 AM
By HTRegz in forum Miscellaneous Security Discussions
Last Post: November 24th, 2004, 04:18 PM
By gstudios in forum Miscellaneous Security Discussions
Last Post: April 15th, 2002, 02:58 PM
By jared_c in forum Non-Security Archives
Last Post: January 31st, 2002, 10:10 PM
Tags for this Thread