How do i properly lock down a xp pro workstation

Hi everyone

I have a situation which i never had before. We have a plasma screen in our
business which is connected to a shuttle pc with xp pro installed on it.
However the people that will be managing the plasma screen and the
pictures/slides runing on it will be coming from outside (outside company).
I have reserved a IP for that pc and made provision on the firewall that if
users coming from a specific IP, they can only access that specific pc. My
question is how do i lock down that pc so that they cannot access ANY
network resource.

Do i just create a user account on the pc with limited access and hide icons
like my computer, network places through a group policy or do i make the pc
a member of the domain with limited rights e.g a domain user. Please help me
so that outside people do not get access to important information I have a
win2003 DC. Thanks

You can do one of two things:

1) Create a local account on the PC with just enough rights to do what they
need with the plasma screen. They then won't be able to access any network
resources.
Even with a local admin account it's unlikely they would be able to gain
elevated privileges.

2) Create a Domain Account and give it minimal rights.
Also make sure it's only allowed to log on to that one PC and only between
certain hours (Say, 9-17 or what ever is needed).
Or even better, disable the account and only enable it when work needs to be
done on the Plasma Screen.

The first option might be the safest since the account wouldn't have any
network rights...
--
Cheerio,
Lars Petersson
MCSA: Messaging
mr-eleganza.livejournal.com


"MSExchange2003Student" wrote:

> Hi everyone
>
> I have a situation which i never had before. We have a plasma screen in our
> business which is connected to a shuttle pc with xp pro installed on it.
> However the people that will be managing the plasma screen and the
> pictures/slides runing on it will be coming from outside (outside company).
> I have reserved a IP for that pc and made provision on the firewall that if
> users coming from a specific IP, they can only access that specific pc. My
> question is how do i lock down that pc so that they cannot access ANY
> network resource.
>
> Do i just create a user account on the pc with limited access and hide icons
> like my computer, network places through a group policy or do i make the pc
> a member of the domain with limited rights e.g a domain user. Please help me
> so that outside people do not get access to important information I have a
> win2003 DC. Thanks
>
>
>