Printable View
I work for a school division and I need a way to lock down the desktop settings so that the kids don't mess with them all the time. I know of a program called poledit, it works, sorta, but I don't like the fact that I have to go and manualy change the settings everytime that I need to make a change to the computer. is there any other good programs out there that would help me do this?
If they are logging onto a domain, you can define a policy with poledit, add it to the netlogon folder on the DC, and then it will be applied to all the computers.
I can give more detail if this applies to you.
Shadow, please go into it a little more...
Did you say you work for a school division? IBM's schoolvista works pretty good, but it's probably pretty expensive. I've never set it up, but I have seen it. I don't have any clue how complicated/easy it is to manage. Or if it will even do what you wan't. You probably could get the school to pay for the licensing. Hope this helps.
The simple fact of the matter is: you cannot effectively "lock-down" Windows 9x without purchasing third party software. Windows 9x by itself is inherently insecure. The kids will always find a way around whatever estrictions you put in place.
Windows NT/2K on the other hand, is very secure.
He's right. Again. If you do decide to take the plunge and order some 3rd party stuff, visit www.fortres.com the two programs you will want to look at are "fortes" and "cooler". I've described them about 30 times before, so you should probably just go take a look for yourself. They are exactly what you are looking for. You can tell it which programs the kids are allowed to run, what functions on the menus the kids can use, what programs are allowed to use right click. Tons of stuff like that. As long as you have BIOS password, so that no one can change the boot order, this program is rock solid. I used it at a school for a few years with no problems at all. It earned my recommendationQuote:
Originally posted by MacGyver:
<STRONG>The simple fact of the matter is: you cannot effectively "lock-down" Windows 9x without purchasing third party software.</STRONG>
I guess I should have mentioned that we are running novell 4.11, on IBM 300PLs... don't know if that makes any difference.
will look into the 3rd party software. thanks for the tips so far.
You're using Novell Netware 4.11? <IMG SRC="smilies/redface.gif" border="0"> You're dang right it makes a difference. You may not be aware, but there is a free add-on for Netware 4 and above called ZENworks Starter Pack. ZENworks is a network management package that integrates with the NDS tree to provide remote workstation management, application rollout, security measures, etc. For example, if a student logs into Netware, then selected Windows 9x/ME/NT/2K policies can be automatically applied to that workstation. You can even force groups or individuals to have certain screen savers, wallpaper, etc. These policies and any other restrictions are configured through one place: Netware Administrator. The possibilites are endless.
If you're running Netware and not using ZENworks then you're missing the boat. Really, it's that good. Here are some sites where you can get more info:
ZENworks home page
Download the free version of ZENworks (the starter pack)
Novell ZENworks Cool Solutions Site - this site has loads of info and tips from fellow ZEN network admins and the good people at Novell. BOOKMARK IT!
School Security Part 1
School Security Part 2
BTW, the free version of ZENworks does just about everything except remote workstation control, and hardware and software inventory.
If you want the extra features, you'll have to purchase the full version for Novell. But the free version does just about everything a network admin might need or want to do.
We have a similar situation (I work for a University), a number of manufactured databases don't work with Policy Editor. Therefore we use WinSelect - works like Policy editior, but is much more powerful. The advantage is you don't need to create login ID's or anything like that, making the PC Open access.
http://www.winselect.com/
In Win2k you can do this:
Login as an administrator and create a new user account. Login to the new account and make the desktop settings you want. Then logout and login back as an administrator. Then goto \documents and settings\new_account\
Rename the NTUSER.DAT to NTUSER.MAN and copy the NTUSER.MAN file into every userprofile you want to have those settings.
This is called a mandatory user profile.
Using this will reset the user settings back to normal upon logoff.