The school wants to get in a trolley of netbooks and one thing my LM has asked what happens when they go on the network he wants evil Winsuite on them.
I dont really wanna buy more licenses for winsuite because i hate it lol. Am i right in thinking that i could just use Windows 2k3 GP's and the like to lock them down? Then that way they're safe, without Winevil and kids can log onto their network account.... right?
Thats correct.
Ben
Little-Miss (5th March 2009)
Great...
Now is there like an LEA standard set of permissions to follow, or is it whatever we deem appropriate? I had a guy in from Tempus who said that if i was to have a new server installed they would do it to LEA standard....
The best thing I could suggest is to look through Becta and see if you can find any guidelines.
At our site we set group policies according to what we deem to be appropriate.
File permissions shouldn't need changing, they main topic you'll have to look into is Group Policy. Lots of schools now use it to lock down their workstations.
You however will have to forgot WinSuite's logging and auditing functions. Since the last time I did anything with WinSuite was in 2001, I don't know exactly what functionaly you'll be missing.
You'll also need to work out a method to only apply the group policy to the netbooks and not the whole network.
Do I dare ask why the head of ICT is so attached to WinSuite?
They don't do change here....
Sorry, that's what i meant, policies...
Winsuite logs and audits?! I just use Policy Manager and the add a user function.
The only thing i think Winsuite does in particular is have that desktop function, where you add the program icons.
But i only think they'll be wanting some sort of office program on there...i wasnt planning on them being a desktop replacement yet.
I work mostly in primary schools, the ONLY advantage I can see of using the dreaded winsuite is that the pupils can click there name from a list to log on rather than having to type in thier username, which the younger ones would struggle with.
Other than that i think it sucks, you can get much better desktop security with GP and redirected desktops.
Blimey Jon we dont even have that! I know its exist but it isnt in place here...
I would let your line manager know that WinSuite is no longer supported, you can get licences, but that is it!
You can do everything WinSuite does with group policies (apart from the log on thing!!)
We got rid of WinSuite here about 1 1/2 years ago, never looked back!
How have you got past the XP Home upgrade? Does it not take up a chunk of HDD?
From memory you create a OU group and place the computers (aka the netbooks) within and then you apply the group policy only to them.Originally Posted by K.C.Leblanc
Little-Miss (7th March 2009)
Asus Eee PCs at Egglescliffe School | Open Source Schools is an interesting read. If you followed the model used there it would save you vast amounts of money!
Little-Miss (7th March 2009), SimpleSi (8th March 2009), Sylv3r (7th March 2009)
Correct me if I'm wrong but mixing between group policy and winsuite won't be a walk in the park, most of the restrictions will have to be applied via user group policys applied to the students OU which will take affect wherever the students logon although I guess if the same restrictions are being applied via GPO and winsuite you'll be able to remove winsuite at a later date and not notice the difference. I'm not sure whether group policy would override winsuites policys though - I've never had the misfortune of dealing with winsuite other than ripping it out to setup a new vanilla network
Bloody thing is causing me nothing but grief!
You should be able to add all of the winsuite computers to a group and then use security to deny read access to the lockdown GPOs and only apply the policy if it the machine is not in the winsuite computer group.Correct me if I'm wrong but mixing between group policy and winsuite won't be a walk in the park, most of the restrictions will have to be applied via user group policys applied to the students OU which will take affect wherever the students logon although I guess if the same restrictions are being applied via GPO and winsuite you'll be able to remove winsuite at a later date and not notice the difference. I'm not sure whether group policy would override winsuites policys though - I've never had the misfortune of dealing with winsuite other than ripping it out to setup a new vanilla network
As to how they coexist I can't really say but I assume that winsuite uses registry tweaks to lock down most aspects which is simmilar to group policy. Group policy however is applied at login time and so at least initially winsuite would probably override any settings that it was told to as it is probably applied later. GPOs also apply to a limited extent during background policy refreshes which happen about every 90 minutes so at this point the GP settings would probably override winsuite.
There are currently 1 users browsing this thread. (0 members and 1 guests)
Posting Permissions
LinkBack URL
About LinkBacks
Reply With Quote