Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to Lock down Windows 7 as much as possible?


27 Apr 2010   #1

Windows 7
 
 
How to Lock down Windows 7 as much as possible?

Hello, I was wondering if anybody can tell if it is possible and if so to point me to resources that would tell me how to lock down Windows 7 as much as possible.

We have a need at work to lock down a system so a user cannot ping, use nslookup, network discovery, or even tell if someone else is out there. We would like to lock down access to the C drive and OS as much as possible while still allowing the user to use the system and access a single IIS web instance.

Is this level of exclusion possible, even if through many different processes? If so can someone get me started on how to do all this?


My System SpecsSystem Spec
.

28 Apr 2010   #2

Windows 7 Pro 64bit build 7601 SP1
 
 

I'm sure specifically to your situation, but check your "local security policy" in the Administrative tools section. You can tweak all kinds of security in Windows there. I believe you can make custom policies too, but definitely do some homework as you can cause all kinds of problems with access if you input the wrong thing.
My System SpecsSystem Spec
28 Apr 2010   #3

Windows 2000 5.0 Build 2195
 
 

Use Group Policy to lock down your system. You need at least Windows 7 Professional in order to access these settings.

There are a whole bunch of policies you can edit, and this is what IT administrators use to lock down a system. I myself used this to lockdown a system in an office my uncle had. You can use it to restrict anything from chaning the wallpaper, to opening the run menu, to opening the task manager, to right clicking the desktop, to preventing any logging off or shut down.
My System SpecsSystem Spec
.


29 Apr 2010   #4

Windows XP - Now Windows 7 Home Premium (64-bit).
 
 

Parental controls is another option -- although somewhat limited.
My System SpecsSystem Spec
29 Apr 2010   #5

Windows 7 Ultimate x64 RTM + SP1
 
 

Or if you have a bit of dosh, think its $40ish, Windows 7 Manager.

Download here

This is very easy to use and you can pretty much lock everything down with this program and all options are explianed when you hover over them
My System SpecsSystem Spec
29 Apr 2010   #6
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

My System SpecsSystem Spec
29 Apr 2010   #7

7 Pro 64 Bit
 
 

Get to know Group Policy Editor.
The only issue is there are so many settings for so many things if you "oops" one of them, you just gotta remember where/what you checked and/or enabled.

Network Administrators use Group Policy for domains to lock down computers...as said.
My System SpecsSystem Spec
29 Apr 2010   #8

Windows 7 Ultimate 32 bit
 
 

Quote   Quote: Originally Posted by dajogejr View Post
Get to know Group Policy Editor.
The only issue is there are so many settings for so many things if you "oops" one of them, you just gotta remember where/what you checked and/or enabled.

Network Administrators use Group Policy for domains to lock down computers...as said.
Make a log of each change you make to Group Policy. That makes it easy to go back without guessing and without leaving something out.
My System SpecsSystem Spec
29 Apr 2010   #9

Windows 7
 
 

[QUOTE=CarlTR6;710275]
Quote   Quote: Originally Posted by dajogejr View Post
Make a log of each change you make to Group Policy. That makes it easy to go back without guessing and without leaving something out.
Great advice, as these can quickly get out of control and forgotten. What I like to do is before making a change, clone the policy you want to change, name it accordingly, apply it to a test PC/account. That way you can verify that your desired results are reached. For logging, you can run gpresult /v with an /x to tell it to write to file on the account/PC before and after. You can name the output files with the dates or changes. That way if you need to track down changes you can use a program to compare the files, like windiff.
My System SpecsSystem Spec
30 Nov 2010   #10

Windows 7 64bit
 
 

We use Secure Lockdown which is a pretty inexpensive product ($20) from Inteset. It's for Windows 7.
My System SpecsSystem Spec
Reply

 How to Lock down Windows 7 as much as possible?




Thread Tools



Similar help and support threads for2: How to Lock down Windows 7 as much as possible?
Thread Forum
Desktop windows lock up General Discussion
Solved Windows 7 lock down by user General Discussion
Solved Windows 7 lock down program Software
Caps lock, num lock, scroll lock screen messages General Discussion
Windows 7 random lock up BSOD Help and Support
Windows 7 lock Help!! General Discussion
TrayStatus Displays Indicator of Num Lock, Caps Lock, S News

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:33 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33