IT admin GUI for win2k regedit

[Axel]

Wouldn't it be great if there was an actual working TWEAK UI gui for IT professionals to build out a custom registry image for desktops with simple check-marks that adjusted the values for you in the HKey's?

A multi-screen list that you could save as files that allowed you to adjust a registry for a corporate image -
lock out the CD - auto-run, lock down the screen appearence settings - hide the network neighborhood icon - lock down the control panel - lock down the IE proxy setting - disable the COM ports - enable or disable plug & play -

stuff like that to keep amateur's with "Dummy" books out of company desktops and out of trouble.....

It would have to be in a simple form of some sort because we know that most corporate administrators are whoever sits in the same cube as the server......

What else would go into something like that - if you had a wish-list?

I'd love to see a utility that also allowed the admin to lock down execution of certain file types or specific files by name and key this to specific user ID's or user groups. Like keep all user groups from opening and editing any file with a reg extension.....and so on.....

This is so big brother - but the goal is to keep stupid user tricks off the network......

[Mntsnow]

hehe. Yeah something like that could make my day quite often a bit smoother!

[jadison]

Well, it seems that no matter how many ways u try to block someone out of a restricted zone/area, they (no matter how smart or not!) seem to find a way through.

Eg: The overnight grocery stockers that come in our store @ about 11PM, used to use our computers in the employee lounge to access the net. Unfortunately they abused this as they visited many illegal pornography and blatantly disgusting websites, during the course of about 2 years. After the store director caught them, he shut down the internet, and now they just try to screw up the computers every which way. I've given up on trying tweaks, and mods, and software, and performance boosts to atleast allow the system to run Office apps. and games. I talked to the boss, and he said, "Don't Bother, they used it, and abused it!"

Here's a link to a software utility related to what you were talking about Axel:
Click Here (http://www.xteq.com/products/xset/index.html)

if only there could be complete & utter security...

-=jd=-

[SalaTar]

http://www.salatar.com/sec.gif

[Axel]

Policy editor is not a bad idea - but it's a pain to ship images like that out to the field - Over the last 2 years, I've assisted in deploying over 1600 computers. I'm looking for something that can quickly adjust an "image" build - the policy editor is too much administration and definitely doesn't have everything I'm looking for.

As for absolute security - a nice sold oak door and a medeco lock usually does the trick, but then you have to do your own dusting and take out your own trash - something most geeks say definitely isn't in their job descriptions.

Then there's always BIOS passwords - but most system manufacturers tell how to bypass that on their support web-sites.

Then there's always taking the power cords with you - but anyone can buy those for less than $5 at any salvage store.....

Rule of thumb - if they have physical access to the box - they can find a way to get into it if they want to -

Another idea is buying roll-top desks and locking the CPU down each night - but you have to make sure the unit is getting enough air to breath during operation. Seen a few burned out PS's locked away for safety that had to be replaced because they burned up....

[Axel]

this will work - install hot swap hard drive bays and remove and lock down the hard drives each night - definitely won't work without those.....