• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 266
  • Last Modified:

need secure WORKGROUP environment in classroom

i have a 3-computer environment in an afterschool program that already has netnanny on them, but i'd like to lock down the desktop, c drive, control panel, etc so some bright young kid don't mess up the computer setup just to see if he/she can.  i want them to only have access to the IE icon to go to approved websites.  netnanny takes care of the websites, but i can't use active directory as its on a workgroup, and i've tried to use gpedit.msc to lock the environment, but even the built-in admin is locked down in this way - i can't go back and change anything after using gpedit if i needed to cause it locks down the built-in admin as well.

i'm sure there's a software product that can do this, but the owner doesn't want to spend the money or time finding the software - i want to set it locally on each system for him.  the guest account does not fully lock out a user's privileges - is there even a way in a workgroup to lock down the environment but still maintain an admin access to manipulate it if needed?
0
JodyBear
Asked:
JodyBear
  • 3
  • 2
  • 2
1 Solution
 
KCTSCommented:
You could use STEADY state to enable you to discard all changes that the 'bright kid'  may make - see http://www.microsoft.com/download/en/details.aspx?id=4310 - its free

To lock it down in the first place try - Doug Knox's Security console http://www.dougknox.com/ and other utilities (also free)
0
 
FlippCommented:
I have similar requirements with a small school classroom, and have had no issues using the following:

Windows XP and 7 Desktops and Laptops on Windows Workgroup
Smoothwall Express for Internet Filtering
Student User Account only member of built-in Users group
Teacher User Account only member of built-in Power Users group
Admin User Account only member of built-in Administrators group
Basic Internet Security Client (centrally managed)
Imaged with Clonezilla and Setup with Sysprep. Any settings for Software Updates and locking down is done before image is finalised.
Internal NAS for Student files

When I need to perform any type of major software upgrade, I can modify image and deploy very easily (under 2 hours to approx. for 10 computers).
0
 
FlippCommented:
I had a look at SteadyState, but as the students are also learning about computers, I don't want to take away the learning aspect. I still protect them as Users, and also allow for a quick "reset" if and when required.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
KCTSCommented:
I'm not sure what you are getting at with your reference to SteadyState - the whole purpose of it is to allow the users to do what they like, but afterwards it simply resets everything back as it was.
0
 
FlippCommented:
I think this works in truly public computer spaces, but for this small classroom network it is simply not required. Our locked down environment does a great job already so no point in loading additional software.
Just different requirements :)
0
 
JodyBearAuthor Commented:
thanks everyone.  i'll take a look at it first thing next week - servers in south america have taken precedence today.  i'll respond soon.
0
 
JodyBearAuthor Commented:
thank you.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 3
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now