Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to Lock down Windows 7 as much as possible?

27 Apr 2010   #1
soccastar001

Windows 7
 
 
How to Lock down Windows 7 as much as possible?

Hello, I was wondering if anybody can tell if it is possible and if so to point me to resources that would tell me how to lock down Windows 7 as much as possible.

We have a need at work to lock down a system so a user cannot ping, use nslookup, network discovery, or even tell if someone else is out there. We would like to lock down access to the C drive and OS as much as possible while still allowing the user to use the system and access a single IIS web instance.

Is this level of exclusion possible, even if through many different processes? If so can someone get me started on how to do all this?


My System SpecsSystem Spec
.
28 Apr 2010   #2
metalmania31

Windows 7 Pro 64bit build 7601 SP1
 
 

I'm sure specifically to your situation, but check your "local security policy" in the Administrative tools section. You can tweak all kinds of security in Windows there. I believe you can make custom policies too, but definitely do some homework as you can cause all kinds of problems with access if you input the wrong thing.
My System SpecsSystem Spec
28 Apr 2010   #3
arkhi

Windows 2000 5.0 Build 2195
 
 

Use Group Policy to lock down your system. You need at least Windows 7 Professional in order to access these settings.

There are a whole bunch of policies you can edit, and this is what IT administrators use to lock down a system. I myself used this to lockdown a system in an office my uncle had. You can use it to restrict anything from chaning the wallpaper, to opening the run menu, to opening the task manager, to right clicking the desktop, to preventing any logging off or shut down.
My System SpecsSystem Spec
.

29 Apr 2010   #4
manhunter2826

Windows XP - Now Windows 7 Home Premium (64-bit).
 
 

Parental controls is another option -- although somewhat limited.
My System SpecsSystem Spec
29 Apr 2010   #5
Luckystar

Windows 7 Ultimate x64 RTM + SP1
 
 

Or if you have a bit of dosh, think its $40ish, Windows 7 Manager.

Download here

This is very easy to use and you can pretty much lock everything down with this program and all options are explianed when you hover over them
My System SpecsSystem Spec
29 Apr 2010   #6
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

My System SpecsSystem Spec
29 Apr 2010   #7
dajogejr

7 Pro 64 Bit
 
 

Get to know Group Policy Editor.
The only issue is there are so many settings for so many things if you "oops" one of them, you just gotta remember where/what you checked and/or enabled.

Network Administrators use Group Policy for domains to lock down computers...as said.
My System SpecsSystem Spec
29 Apr 2010   #8
CarlTR6

Windows 7 Ultimate 32 bit
 
 

Quote   Quote: Originally Posted by dajogejr View Post
Get to know Group Policy Editor.
The only issue is there are so many settings for so many things if you "oops" one of them, you just gotta remember where/what you checked and/or enabled.

Network Administrators use Group Policy for domains to lock down computers...as said.
Make a log of each change you make to Group Policy. That makes it easy to go back without guessing and without leaving something out.
My System SpecsSystem Spec
29 Apr 2010   #9
Desslok

Windows 7
 
 

[QUOTE=CarlTR6;710275]
Quote   Quote: Originally Posted by dajogejr View Post
Make a log of each change you make to Group Policy. That makes it easy to go back without guessing and without leaving something out.
Great advice, as these can quickly get out of control and forgotten. What I like to do is before making a change, clone the policy you want to change, name it accordingly, apply it to a test PC/account. That way you can verify that your desired results are reached. For logging, you can run gpresult /v with an /x to tell it to write to file on the account/PC before and after. You can name the output files with the dates or changes. That way if you need to track down changes you can use a program to compare the files, like windiff.
My System SpecsSystem Spec
30 Nov 2010   #10
jeffl012

Windows 7 64bit
 
 

We use Secure Lockdown which is a pretty inexpensive product ($20) from Inteset. It's for Windows 7.
My System SpecsSystem Spec
Reply

 How to Lock down Windows 7 as much as possible?




Thread Tools




Similar help and support threads
Thread Forum
Num Lock, Caps Lock and Scroll Lock all lights up (not blinking)
For some time now, i have been experiencing that my Num Lock, Caps Lock and Scroll Lock all lights up (not blinking) all at the same time, I tried to google it but i can not find any solutions or explanations for it. Does anyone know if it is bad? and what is causing this? I am having a wired...
Hardware & Devices
Caps Lock/Num Lock, on screen pop up gone Gateway NV77
Good afternoon, I just did a clean install of 7 to fix errors with my laptop, and it fixed one, but not the other main issues, My caps lock, and number lock button on the keyboard don't have a light on it and the pop up that is supposed to pop up doesn't show up on screen. I figured by doing...
General Discussion
Caps lock, num lock, scroll lock screen messages
Hi, how to disable Caps lock, num lock, scroll lock screen messages? I have desktop pc with two keyboards usb and bluetooth. Also TOSHIBA Bluetooth Stack software, but in device manager: keyboard > hid keyboard device both using microsoft drivers. And I dont have any software installed...
General Discussion
Windows 7 random lock up
I recently upgrade from Windows XP to Windows 7. When I did this I decided to go with a new hard drive and keep XP on a separate drive. My problem has been ever since I installed 7 it will randomly lock up for no apparent reason and I can't figure out why. When the lockup occurs I have no...
BSOD Help and Support
Windows 7 lock Help!!
I put downloads on Vuze (alternate to bittorrent) and dont want anybody to stop or pause it...or ethier touch my computer Is there any pogram that would lock my computer...since the windows 7 lock goes to sleep after 30 minutes?
General Discussion
TrayStatus Displays Indicator of Num Lock, Caps Lock, S
Read The Rest At: TrayStatus Displays Indicator of Num Lock, Caps Lock, Scroll Lock Status and Hard Drive Read/Write Activity My Digital Life
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:12.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App