Server 2003 specific users policy Options

[Snoochems]

I have a few stand alone terminal servers. No active directory, no domain, nothing fancy. Just windows Sever 2003.

The software that this server runs set up a user automatically (on installation) that has windows locked down. No task manager, no cmd prompt access, etc.

I want to create another user, that also has been locked down.

I've created a new user, added this user to the same groups that the above user is, but its not working.


Looking further into it, I can't figure out how to even view the settings/differences between the various groups on the server.

I've looked in to group policies, but then can't work out how to apply the policy to the users/groups.


All the online help seems to details about how to apply group policies to OU or via active directory. I haven't got this!


Any ideas?

[aliali]

The software that this server runs set up a user automatically (on installation) that has windows locked down. No task manager, no cmd prompt access, etc.

What software that creates the user and locks them down?
If it is actually third party software doing htis that seems odd to me as I would have thought doing it by AD and GPOs would be the best way to do it.
How do the users log on to the local computers? Domain logon or workgroup logon?

[Genders]

Is it Citrix?

[twinair]

I would have thought doing it by AD and GPOs would be the best way to do it.
How do the users log on to the local computers? Domain logon or workgroup logon?

No active directory, no domain, nothing fancy. Just windows Sever 2003.

Group policies are only applicable to machines that are part of a domain.
It's the local security policy you want to edit.

Without knowing much about how the machine is locked down, you'd normally access this via administrator tools, or by installing the server 2003 admin pack.

[xnatex]

your life would be much easier if you DCPROMO'd one of the servers. Cant use group policy without a DC