-
October 28th, 2008, 03:41 PM
#1
MMC 101 - Lock Down Those Desktops
Want to put an end to the user free-for-all and "not this again" help desk requests? Sonny Discini walks us through the basics of locking down those workstations with Microsoft Management Console and Active Directory.
First, you have to lay the groundwork.
Microsoft MMC How To: Hardening Desktops for Improved Security - eITplanet
Let's start with a manual workstation lockdown.
When defining a local security policy you will be working in the following areas: Account Policies, Local Policies, Event Log, Restricted Groups, System Services, Registry and the File System. Once you have a working hardened image, you can then deploy it out across your enterprise.
Make sure that your baseline image does not interfere with supported enterprise apps or you will be going through the lockdown phase many more times than you will like.
Click-by-click instructions await if you visit this MMC tutorial.
-
October 28th, 2008, 03:44 PM
#2
Somethign I have been looking for , thank you.
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
October 28th, 2008, 04:06 PM
#3
It's missing a vital suggestion.... remove the users from the (local) admin group...
Oliver's Law:
Experience is something you don't get until just after you need it.
Similar Threads
-
By phernandez in forum Miscellaneous Security Discussions
Replies: 0
Last Post: October 17th, 2006, 03:27 PM
-
By jbclarkman in forum Microsoft Security Discussions
Replies: 2
Last Post: May 11th, 2005, 11:17 PM
-
By HTRegz in forum Miscellaneous Security Discussions
Replies: 6
Last Post: November 24th, 2004, 04:18 PM
-
By gstudios in forum Miscellaneous Security Discussions
Replies: 3
Last Post: April 15th, 2002, 01:58 PM
-
By jared_c in forum Non-Security Archives
Replies: 2
Last Post: January 31st, 2002, 10:10 PM
Tags for this Thread
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|