Community archive

Ask something
Discussion Locked

Stopping kids from installing software?

0 helpful
16 replies

by rdforsberg

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I support a computer lab in a high school with up to 12 computers running NT4.0 connected to a Novell Server and the Internet. These systems are for schoolwork and e-mail use only. Each student has their own login to Novell and their own home folder on a network drive but they use the Guest account on each NT system. There are about 150 students and I don?t want to create individual accounts on each machine. Is there a way in NT to block or stop them from downloading and installing programslike AOL Instant Messenger, MSN Messenger, games etc. or changing the settings on the desktop?

16 replies

by cg it

mandatory logon profile created for the Guest account. That profile can be taylored to whatever you want. If they access the internet for schoolwork, that's another story. You'll have to use a packet filter [or a firewall] where you can block inbound connections by either domain or IP address. Then you can block AOL or MSN inbound connections. You also might want to consider changing the permissions on the quest account. Students may be able to download, but with restrictive permissions, they won't be able to install. [we have a similar policy here where we are running W2K. Only an admin can install programs].

by cg it

kids are kids and one way or another, they will probably find someway around blocks and filters that are put into place.

by rdforsberg

The Guest account is set to mandatory and that means that any changes are not saved but doesn't stop them from installing software. We already block some sites and this list is growing. The number of sites that you can find instant messenging are to numerous to mention (including other languages). We have restricted the permissions on the Guest account but this doesn't seem to block the ability to install programs. Do you have any more details on how this is done?

by rdforsberg

Due to the nature of most software programs, it is not possible to make all files or disks read only. Software is always writing to a disk for one reason or another (updates, temp files etc.)

by wim

I should disable the guest account on each machine and create a single user(the same) on all these machines, you can give this user specific rights on drives, disable the display properties, etc..

by cglrcng9

We use WinLock on all our Win9x machines. Works wonders w/ the kids throughout all grade levels.

Try this link, but I know we found a freeware version.

by jcmcintyre

Go to

www.zisman.ca/poledit/ to get Policy Editor for '98. This is a Microsoft tool that will allow you to configure the OS to fit your needs. I haven't used this tool lately, but the site has a lot of info.

Cheers

Jim

by deadly ernest

Our local college uses Win NT4 with a LAN boot process thus anything that students do during any session is lost when the system is rebooted. Each student has storage space on a file server where they can create/change/delete files but can execute any. This leaves things a bit open during a session but it is a clean start each session.

by deadly ernest

sorry that should 'but can NOT execute any' bloody fingers go at a different speed to the brain and often cause typos.

This discussion is closed to new replies.