Windows Thread, Locking down Windows in Technical; What a long strange trip since my first post on this board.
I've mostly survived the year so far with ...
I've mostly survived the year so far with only minor tweaks to the existing mess that I inherited, but I've recently come to realize that I may need more for the home stretch.
My predecessors did not like group policy and almost seemed to design a system to prevent its proper use. I'm aware of the power of group policy, but not a gpo expert or confident enough to use it as a sole means to prevent student (and teacher) misdeeds. I've played with programs like netsupport protect, but it's buggy and does not allow for multiple levels of limitations (just on or off).
I'd really like some kind of kiosk style interface that only shows the programs that students are allowed to run in one severely restricted managed profile and a home folder.
What are you guys doing to keep students out of places they don't belong and only running the programs that they should?
A mixture of mandatory profiles and group policies is what you want. The easiest thing to do is to grab a couple of books (although I can't recommend which as I have learnt coming from NT4 and haven't got any books on it) and have a read.
It isn't complex really, just long winded picking out all the bits you want and testing it. Just be aware that Microsoft love using double and triple negatives and having multiple, conflicting policy options.
Blind, If you like i'll post the GOP I use for pupils here. It locks them down pretty tight, start menu redirected, no desktop icons, only their home drives in My computer, etc....
Not in work today though, as I'm at the dentist later but
Folder redirecton for the start menu and desktop is the first place I would start. Setup a test OU in AD create a couple of test users staff and students and have a play.
As long as you only link your test GPO's to the test OU you cannot do any real harm. Also GPO does a reasonable job of explaining most settings and any that you unsure about or need futher information on, just copy and paste into google or even better, post them here.
LinkBack URL
About LinkBacks
Reply With Quote
Originally Posted by ajbritton 
