samba - Jul 2003 - Locking Down Windows 2000 Professional

Good day,

We have set up a Samba 2.x domain.  So far so good.

We want to lock down the workstations.  For example, we don't want users to
have access to the run command from the start menu and we don't want them to
access control panel.
>From what I have read NT 4.0 system policies seem to be the way to go.  Is
this correct?  If so, what utility can I use to create the policies?  Are
there any differences between the NT 4.0 policies and those on a Samba
machine?

Do you have any links to useful documents?

Thanks.

On Tue, 15 Jul 2003, Jamrock wrote:
> Good day,
>
> We have set up a Samba 2.x domain.  So far so good.
>
> We want to lock down the workstations.  For example, we don't want
users to
> have access to the run command from the start menu and we don't want
them to
> access control panel.
That's the way to go!
> From what I have read NT 4.0 system policies seem to be the way to go.
> Is this correct?
Yes.
> If so, what utility can I use to create the policies?
NT4 Group Policy Editor. Comes only with NT4 Server.
> Are there any differences between the NT 4.0 policies and those on a
> Samba machine?
No.
> Do you have any links to useful documents?

http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf

- John T.
-- 
John H Terpstra
Email: jht@samba.org