microsoft.public.windowsxp.security_admin

RFleming@nationalsteel.com wrote:
> Hello,
>
> I am trying to lock up some desktops by running a registy script
> file (.reg). However, on some computers I am having troubles. For
> example I change the following:
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
> \Explorer]
> "NoDrives"=dword:00000008
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
> \Explorer]
> "NoViewOnDrive"=dword:00000008
>
> This should remove and restrict access to the D drive. But on several
> workstations I can verify the registry was changed, but I can see the
> drives in Explorer and in My Computer. I also tried the Group Policy
> MMC and still the drives were not restricted. Could a Local Computer
> Policy override this? Any help would be greatly appreciated!
>
> Thanks
>
> Ryan

If you're in a workgroup, there's no group policy to speak of. Rather than
trying to do it this way (which may well hose *your* access to stuff that
you need as an admin) I suggest you take a look at Windows Steady State, as
well as Doug Knox's XP control panel (google). I don't use policies on
standalone workstations as they tend not to be the best method.