Windows 7 Netbook Lock-Down Software/ Methods and ideas
After reading through most of this site (might I add what a useful resource! Thanks for that). Were currently are looking at upgrading our lock-down software on our system we use and wondering if anyone out there might have a good suggestion for us to try.
Currently we have about 1000 netbook and notebooks. We're using the Dell Latitude 2110 (years 7-8-9) and the latitude 6220 (year 10) with Windows 7 Pro 32bit. For lockdown we used to use Faronics WinSelect. Do not recommend it!!! It is filled up with hours and hours of headaches.. Basically lasted a few months and the students worked out a way of passing it. Also the support is hopeless as they are in Canada and we are in Brisbane and there is quite a significant time difference which usually made one of us pretty tired the next day.
We have adopted the policy where the student cannot change anything on the system (hardware - wireless settings, graphical options etc) or customise desktop space, icons and install games all the time!!
The other thing is we are opting for a dual boot setup, one with a (@ Home) partition and the other for (@ School). Both will be running Windows 7 Pro 32bit, and there will also be a link up between the 2 OS partitions for a data drive. So in total on the hdd there should be about 4 active partitions.
So what I am wondering is are their options to perform these tasks;
1)It can't interfere with the partitions
2) Can be applied and not get effected during the image process using altiris. (Involves the no sys prep and sys prep stages)
3) The school side can still access domain, not interfere with student shares, and I can add software and usual programs to start menu.
4) Also is not relied on by network deployment. (Learnt the hard way with winselect)
5) Block out the settings for the kids.
With experimenting with local GPO I have found that, (for example if a student wanted to get into control panel with local GPO set) all they had to do was copy a shortcut from sys32 folder within windows, copy it to a usb drive, put it into the computer and run it from there and opens up with no worries. Even though I have set it to deny access to control panel for all users. Funny thing is if you couldn't get a copy of it there's no way of gaining access to control panel. The other thing is we also need the usb ports so we cant disable it which would fix the problem quite quickly.
Any help with this would be GREATLY appreciated!! Thanks heaps. Kieren