Hello, Our work environment is basically a Govt Security Agency. Need to achieve the following: 1. End Users should not install whatever they want, Need to have full control on the enduser machines. 2. If we setup domain network & after end users log in to Domain, I believe we can have some control. What if the users cancels to login to Domain Network? I remember in 95 it was possible, even if user starts his pc as standalone (not logging into domain), he cannot do anything other than what was given. Now all our end users have XP as O/s. Please suggest. Thanks1 person needs an answerI do too

A properly setup domain will do what you need. Domain member workstations do not have local user accounts that are accessible to your employees so your Windows 95-era fears are not relevant. You need to hire someone skilled to set this up for you. Don't use a BigComputerStore/GeekSquad type of place. Get recommendations from family, friends, colleagues for the names of local professionals who have experience in setting up domains for small businesses.MS-MVP - Elephant Boy Computers - Don't Panic!

Hello,Our work environment is basically a Govt Security Agency. Need to achieve the following:1. End Users should not install whatever they want, Need to have full control on the enduser machines.2. If we setup domain network & after end users log in to Domain, I believe we can have some control. What if the users cancels to login to Domain Network? I remember in 95 it was possible, even if user starts his pc as standalone (not logging into domain), he cannot do anything other than what was given.Now all our end users have XP as O/s. Please suggest. Thanks That's something that would need to be controled with a GPO (group policy object) The first one (1. End Users should not install whatever they want) would be defined in User "Configuration\Administrative Templates\Add or Remove Programs" the second in "Configuration\Administrative Templates\Network" there are some other areas that you would want to pay attention to also "Step-by-Step Guide To Understanding the Group Policy Feature Set" http://technet.microsoft.com/en-us/library/bb742376.aspx "Configure Network Connection Restrictions by Using Group Policy" http://technet.microsoft.com/en-us/library/cc732613(WS.10).aspx Additional resources for group policy http://technet.microsoft.com/en-us/windowsserver/grouppolicy/default.aspx Dennis ,, Owner: DB Security,, Please dont forget to mark any post(s) that helped as helpful or answered