The Lock XP provides user audit, access control, Internet and system security for any computer running Windows 2000, Windows XP (with or without Fast User Switching), Windows Server 2003, and now supports Windows Vista. Running on Windows 9x/ME will work, but is no longer supported. The Lock XP is PL-1 compliant to Chapter 8, NISPOM. It also meets Sarbanes-Oxley Access Control, Intrusion Detection, and PC Auditing requirements, as well as meets HIPPA, Access, Authorization, and Security control requirements. All user security is group based configurable by any members of the Administrators group. User security can define system policy, logon times, internet access times, web site restrictions, and access to local resources such as programs and files and folders, including removable media (USB, flash, etc.), that can be restricted as it is plugged into the system. Restrict printer access in any Windows application. Restrict access to screen capture via the Print Screen key. Logging features will record web sites visited, programs run, and any security violations occurring while the user is logged in, and now supports the Firefox browser. User security data is stored locally or on a shared network folder. The Lock XP, the local Windows system, a Netware Server, a Windows NT server, or a remote Lock XP Security Manager server, can verify user passwords. The Lock XP has a built in cloning feature designed to make network installations a simple one step process. When used in conjunction with the Lock XP Security Manager, all remote systems may be kept up to date when The Lock XP has been updated on the Security Manager system. Tools are included with the Security Manager that will allow remote monitoring of any systems running The Lock XP and connecting to the Security Manager. Active Password monitoring is used to combat modification of Windows 2000/XP/2003 user passwords (usually with a bootable hacking disk) outside of the Windows GUI.