Windows Forum

Ask something
Discussion Locked

Lockdown PCs

0 helpful
9 replies

by the emu

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I would like to "lockdown" the PCs our patrons use in a Library environment. It was easy with NT, but 2K seems to be more difficult. I'm not sure how the "inherit permissions" work. If I start at the root directory, it seems as though I must then check on each and every folder under the root to see whether or not they inherit permissions. I need to be assured that patrons cannot save anything to the hard drive, yet at the same time they must be able to utilize MS Office and IE. From what I can tell, the Documents and Settings folder seems most vulnerable for saving files.

9 replies

by therock_3333

Hi

hmmm...are you running active directory? if so you can configure a group policy object that restricts those users and then apply the group policy to them. or you could configure a local group policy on each machine, you get alot of control with these. go into your administrative tools, and pull up the local policy and you can configure it from there. hope that helps

by ptchtech

I slso work in a library environment, I use a combo of group policy, modifying permissions ( for example removing a users write permission to their desktop and start menu). I use a product called deepfreeze make the workstation return to its original state upon every reboot. I also use winselect to complete certain lockdowns where win2k falls short (example IE). I have to many methods to type, feel free to drop me an e-mail

by pacalealaathotmail.c

you could play the partition game:
have a partition for "data" and
lock the "system" partition .

then make sure that Office and IE are saving
to the right place.

it works for me.

by scrantonbob

I use a product called "WinGuard Pro" to lock down PCs. You can pick and choose which applications users can run, everything else is password protected. It works very well. You can check it out at http://www.winguardpro.com/

-Bob

This discussion is closed to new replies.