Group Policy for SMART teenagers


I'm challenged everyday with trying to keep the want-to-be computer geeks at my high school and middle school locked down.  I implement everything through either group policy or by means of a ghost image (to remove items).  I'm looking for any examples of what you're doing out there if you work in a school district to STOP knuckleheads from trying to cheat, play around and/or disrupt the normal classroom because he/she wants to be a show off.  I used to use Deepfreeze enterprise but it was too inconvenient.  I'm moving from Windows XP to Windows 7 and I'm not that familiar with how I can lock down the computer.   This is our current profile:

Windows 7 Professional
Lightspeed Security Suite
Use Group Policy and/or ghost imaging to control environment

Is there any way to stop kids from uploading .exe/zip files from a flash drive to their home folder "H Drive"?  

I'm open to any help!!

Who is Participating?
VampireofdarknessConnect With a Mentor Commented:
Have you considered software restriction / path rules? You can allow set it to allow only certain extensions (ie- .doc, .docx) or to disallow certain extensions (.vbs, .exe). They work with Windows XP and Windows 7.

Note: As the Technet article says, this won't stop someone from executing macros from within a doc / xls / other file. You also need to think about what the kids need to use - doc, docx, odt (open office), etc...

I work primarily with primary school (7 - 11 year olds) so they're less of a hassle than the kid I used to be (You know, the one that would do stupid things like load shared folders with nonsense files, get rid of the taskbar, or change autocorrect options in Word so 'the' changes to an expletive).
Martin81Connect With a Mentor Commented:
If the file server their Home drives sit on is running Server 2003 R2 or later you can use file server resource manager to create a file screen to prevent them saving the file types you specify.
Aaron TomoskySD-WAN SimplifiedCommented:
It wont stop people from messing with stuff but Comodo time machine will help you put it all back how it was each class or each morning.
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

How hard do you need to lock the systems down? What are they supposed to be doing with them?
mbcaseyAuthor Commented:
The main problem is with what they bring into the school on their flash drives.  The students need to be able to use the flash drives but is there any way to stop them from uploading .mp3 and movie files?  If it was up to me, they wouldn't be able to use flash drives.  We give them a home folder but I guess sometimes they need to bring in work from home.  
MidnightOneConnect With a Mentor Commented:
The easiest way to so schedule a mass delete of *.mp* and videos from the server on an hourly basis. Once they figure out whatever they put up has a very limited lifetime, they'll get the clue.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.