If anyone needs to go down this sort of road, the NSA in America have a document suggesting what changes need to be made to a NT box to implement a level of security. search for 'NSAGuidev2.pdf' It was written by Trusted Systems and may still be on their web site.
Richard > -----Original Message----- > From: Dean S Wilson [SMTP:[EMAIL PROTECTED]] > Sent: 21 December 2001 15:48 > To: [EMAIL PROTECTED] > Subject: Re: Dual boot > > ----- Original Message ----- > From: "Chris Benson" <[EMAIL PROTECTED]> > > > > But surely this discussion is pointless since everyone logs in as > > Administrator[*1] > > How many people post to Linux groups as root? This is a user education > issue more than a technical one, although i will conceed that Winws > makes it stupidly difficult. > > > Every NT box I've ever seen has worked like this. And apparently XP > users > > default to administrative rights?? > > XP Bad. Win 2K better. > > > *1 because they need to be able to *do* things other than play > Solitaire! > > One of the topics that came up at a GLLUG (Weird place to discuss > Windows but hey :)) was bolting down a staff members PC. A demo laptop > was shown running the whole of Office, MSProject and a couple of utils > like IE and Outlook and the user had no admin rights, a tight profile > and no ability to make OS changes without getting very inventive, > something that the staff were not going to do, they didn't have the > need nor the right to install new software on the machine. > > Windows can be made less than wide open it just requires a bit more > work. And its worth it in support costs if nothing else ;) > > Dean > -- > Profanity is the one language all programmers understand. > --- Anon >