Hi all, I recently became the administrator of a medium-sized subnet of a university's domain. I got the job based on my knowledge of SQL and database apps, as well a humble set of PC and telephony trouble-shooting skills. I know, however, very, very little about NT Server, which is what I have to work with. I would like to make some improvements to the current security, etc., of the network. The client machines (approximately 45 of them) are running 98 and 2000. I do have a bit of experience with 2000 Server, but not much. Can someone please point me in the right direction by giving me an overview (if you like typing a lot) about using Policies on an NT network, etc.? For instance, I would like to prevent the users from accessing DOS (or COMMAND), mapping (or disconnecting) network drives, gaining internet access by way of the internet explorer folder or Windows Update, etc. Things I would know how to do if I were able, and where I am able, if it were practical, to use 2000 Pro MMC snap-ins. Is it all about Policy Editor? I've taken a look at it and I have no idea where to begin. Any help, including reccommendations for (free) web resources, would be very much appreciated. Thank you very much for reading! Roger

For prevent users doing things as you lsited you need to use Policy Editor anbd create a policy for tyhe network. Lanch Policy Editor from Start menu -> Programs -> Administrative Tolls -> POlicy Editor. p there you can create a new policy, and add the users/ groups you want. Then double click the user/ group you want to restrict. There you can just check mark things you dont want users to use. After you are finished you should save the policy into the winnt/system32/repl/import/scripts folder as config.pol (for Win98) and ntconfig.pol (for Win2k). When the suers log into the network the policy should take effect, the workstation will look into that folder and lanch the policy. If you have any promblems contact me.

You might be wise to get a copy of a decent W2K Server manual? Mark Minasi has a excellent 'tome' - published by Sybex viz: "Mastering Windows 2000 Server". (He has similar for Pro - but it's not so widely regarded...) Maybe the university will spring the cash for it? Bob Cowan a better book for Pro - using Windows 2000 Pro (or something like that); pub's by Que books. Bob's book is considered a better tome... Also the Sybex MCSE series for W2K would be useful; they will cover most items from basics upwards and be useful reference? John Savill has an excellent faq's at: http://www.windows200faq.com. The site has many sections and would also be a useful reference. At the home site (the faq's are part of the Windows 2000 magazine site) there is also the IT-library section; manyy useful items there - including on-line books... http://www.labmice.net/weblinks.htm offers varous links to resource/helpful (how to) sites. and CertTutor.net is another useful site. Buried within M$ there is whole slew of useful info. Dig around and you'll find all the tutorials etc. that you probably need; including some linkage to the technet library. A search via google.com for: Windows 2000 Server tutorials will almost certainly bring up other useful links too? Minasi's book (and the Sybex MCSE item/s) would be useful regardless - hardcopy is often easier to handle? If I can locate some of my other resource links I'll post them here and email them to you anon.