We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

computer dedicated for internet browsing only

abd_1980us
abd_1980us asked
on
Medium Priority
174 Views
Last Modified: 2013-12-04
We will install 3 PC's and at the reception area, these 3 PC's will be just for internet browsing not more, I want you to help me with a set of local group ploicy settings helping me in proctecting them, the policy should satisfy the following:
1- the user cannot install any software espectially those not needing administrator rights
2- the user cannot browse the start menue.
3- Internet Explorer always on and cannot be closed (explorer running automatically at start-up).
4- the user cannot use mail programs like Outlook Express.
5- user cannot open cotrol panel or control.exe or cmd.exe
6- the user cannot modify the internet explorer security settings.
7- any other adviced security settings ( like want windows components should be installed and what services to be running and which is unecessary)
8- blocking adults sites and chatting software or music sites
9- the user cannot download any file into hard disk
10- user cannot use the CD-ROM only administrator can


notting these settings should be applied for the user account not the administrator account and the computers not joined to any domain.

Please help me with the set of group policy settings, scripts and other softwares.
Comment
Watch Question

Deep Freeze (http://www.faronics.com/html/choose.asp) can, kind of, help with most of your problems. It allows anything to be changed but every time you restart everything goes back to exactly the way it was when Deep Freeze was originally installed. This makes all viruses useless after you restart. ANY change you make will be restored. You can create "thawed" drives that will allow changes, also. To block websites, just use the hosts file if you're only going to use IE. To block other websites, I guess you could use http://www.download.com/Cyclope-Internet-Filtering-Proxy/3640-2653_4-10510936.html?tag=qf_ustars, even though I've never tried it and I don't know what browsers it works in.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Microsoft issued a free application for Internet cafe like usage of the IE. It was waterproof, as far as I remember, but I cannot remember the name.
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx I think, this is it, not only for IE.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.