Locking down a workstation

One way is to install a Proxy Server/Firewall into your Network and restrict downloads.
Easier: Go to (IE) Tools-Options-Security Settings- Custom Level. There you are able to disable File downloads. Works only if the User is not a local Administrator so he can reverse this.

You can use system policies to restrict the programs that will run on the workstation (assuming Microsoft OS). There are System Policy templates available in the MS resource kits.
This will be more extreme - by only allowing listed programs to be executed. This is pretty tight, but requires alot of testing.
It won't necessarily stop downloads, but won't let any of the downloads run.

I agree with answer 1. You'll also be able to keep logs of what pages were visited and if anything was downloaded.

Does your company have a written internet usage policy? This can help to keep users from doing things they shouldn't and protect you. Make sure every user reads this, don't just post it somewhere.

You can restrict access by going to the system Registry,Restrict Run REG_DWORD.a value of 0 disables only the programs you define in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun to not run on the computer.

Firewall/Proxy servers will be the best option for this problem.

There are several applications that will do this and more on the desktop. Libraries often use these applications on Internet connected machines. One I have used and works well is "Childproof" for Windows. Check www.zdnet.com software and search for "security" to see some of these applications.

Yes a firewall is the best way to keep them from downloading. If your intent is to do it at the desktop-- I have had excellent luck on Win9X boxes with a program called "Fortress." It works great.

We use Fortres - the machines that have it enabled (and it is password protected) cannot download any exe, bat, dll or any other type of program files. It is highly effective and doesn't take too much to administer.

There are a couple of options at your disposal. Assuming your users are running ie browsers, the use of MS admin tools such as poledit and IEAK (Internet Explorer Administration Kit) poledit is on the Win 95,98 CD. The IEAK is avaible for download at Microsofts web site. The second that I know of is a product called cooler ( http://www.fortres.com/products/cooler.htm ) This will allow you to go in and disable/enable menu commands in several different programs. This one is a little difficult to administer, but will give you maximum control. It also works for other programs including Netscape, so if any of your users fell into that category, you would be covered. Hope this helps.

This question was closed by the author