Group Policy for SMART teenagers


I'm challenged everyday with trying to keep the want-to-be computer geeks at my high school and middle school locked down.  I implement everything through either group policy or by means of a ghost image (to remove items).  I'm looking for any examples of what you're doing out there if you work in a school district to STOP knuckleheads from trying to cheat, play around and/or disrupt the normal classroom because he/she wants to be a show off.  I used to use Deepfreeze enterprise but it was too inconvenient.  I'm moving from Windows XP to Windows 7 and I'm not that familiar with how I can lock down the computer.   This is our current profile:

Windows 7 Professional
Lightspeed Security Suite
Use Group Policy and/or ghost imaging to control environment

Is there any way to stop kids from uploading .exe/zip files from a flash drive to their home folder "H Drive"?  

I'm open to any help!!

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

If the file server their Home drives sit on is running Server 2003 R2 or later you can use file server resource manager to create a file screen to prevent them saving the file types you specify.
Aaron TomoskySD-WAN SimplifiedCommented:
It wont stop people from messing with stuff but Comodo time machine will help you put it all back how it was each class or each morning.
How hard do you need to lock the systems down? What are they supposed to be doing with them?
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

mbcaseyAuthor Commented:
The main problem is with what they bring into the school on their flash drives.  The students need to be able to use the flash drives but is there any way to stop them from uploading .mp3 and movie files?  If it was up to me, they wouldn't be able to use flash drives.  We give them a home folder but I guess sometimes they need to bring in work from home.  
The easiest way to so schedule a mass delete of *.mp* and videos from the server on an hourly basis. Once they figure out whatever they put up has a very limited lifetime, they'll get the clue.
Have you considered software restriction / path rules? You can allow set it to allow only certain extensions (ie- .doc, .docx) or to disallow certain extensions (.vbs, .exe). They work with Windows XP and Windows 7.

Note: As the Technet article says, this won't stop someone from executing macros from within a doc / xls / other file. You also need to think about what the kids need to use - doc, docx, odt (open office), etc...

I work primarily with primary school (7 - 11 year olds) so they're less of a hassle than the kid I used to be (You know, the one that would do stupid things like load shared folders with nonsense files, get rid of the taskbar, or change autocorrect options in Word so 'the' changes to an expletive).

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.