best software to lock down desktop pcs

Posted on 2012-03-28
Medium Priority
Last Modified: 2012-06-21
I have 4 desktop pcs in a warehouse that I need to lock down so people can't delete icons, get in the control panel etc.  I have tried using group policy but this always left something people could mess with (yes, we have "those" type of people working for us)

my ideal solution would be as follows:

have a central profile so all pc's are locked down the same way
can be unlocked by typing in a password
be able to lock down the vast majority of things people with idle hands will try to mess with.
work on both XP and windows 7
32 and 64 bit.

any suggestions would be appreciated

Question by:monkey_balls
LVL 28

Accepted Solution

Run5k earned 2000 total points
ID: 37777187
Depending upon how in-depth you want to get, you may want to consider the Faronics products:

Faronics Deep Freeze Standard

Faronics Deep Freeze Standard Manual

Faronics WINSelect Standard

Faronics WINSelect Standard Manual

Great functionality, and they will definitely do what you want.

Expert Comment

ID: 37777220
A combination of Group Policy and not running as a local administrator or power user should eliminate these problems.  

An option could be to use a thin client in the warehouse connected to either a VM which is restored to a 'gold' snapshot at the end of the day, or use VDI to accomplish this.  

Citrix has purchased Kaviza which produces VDI-in-a-Box.  This is a very affordable VDI solution for small deployments.  With this, you can control your 'gold' image and manage any updates as well.

Here is a TechRepublic article on Desktop Lockdown

More information
LVL 32

Expert Comment

ID: 37777334
How about just creating a mandatory profile in addition to group policy for the account.  They can mess with it all they want, but upon logout, everything is reset.


Expert Comment

ID: 37778304
If you are looking for a software solution, you should look into BeyondTrust.

It integrates with AD/Group Policy and is able to give very granular controls to secure the desktop.

Expert Comment

ID: 37781189
Going along with the DeepFreeze suggestion (of restoring your computer back to a base state), you could use the following to ensure upon reboot that the state of the computer is back to some baseline state.  Any changes get discarded on reboot.  Let them change whatever they want but it'll be back again to the baseline state on reboot.  You could even schedule a reboot during off-hours, like at 3AM, to ensure the host is at its baseline state in the morning when the workers show up.

Returnil System Safe
Returnil Pro 2011
Returnil Lite 2011

Some [biased] comparisons here between RSS and DF:

I do like Returnil's config where I can have it prompt on unknown programs (those ran or "installed" [but will disappear on reboot] after activating safe mode) rather than just trust all programs to run in safe mode.  Just because I virtualized all disk I/O that gets discarded on a reboot still doesn't mean I want unknown processes to startup while I'm virtualized in safe mode.

There was Microsoft's SteadyState but they dropped it back in June 2011; see http://support.microsoft.com/kb/2390706.

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

OfficeMate Freezes on login or does not load after login credentials are input.
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question