+ Post New Thread
Results 1 to 12 of 12
Windows Thread, Locking down Windows in Technical; What a long strange trip since my first post on this board. I've mostly survived the year so far with ...
  1. #1
    Blind's Avatar
    Join Date
    Jul 2006
    Location
    The Wrong Side of The Pond
    Posts
    61
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Locking down Windows

    What a long strange trip since my first post on this board.

    I've mostly survived the year so far with only minor tweaks to the existing mess that I inherited, but I've recently come to realize that I may need more for the home stretch.

    My predecessors did not like group policy and almost seemed to design a system to prevent its proper use. I'm aware of the power of group policy, but not a gpo expert or confident enough to use it as a sole means to prevent student (and teacher) misdeeds. I've played with programs like netsupport protect, but it's buggy and does not allow for multiple levels of limitations (just on or off).

    I'd really like some kind of kiosk style interface that only shows the programs that students are allowed to run in one severely restricted managed profile and a home folder.

    What are you guys doing to keep students out of places they don't belong and only running the programs that they should?

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,526
    Thank Post
    513
    Thanked 2,404 Times in 1,861 Posts
    Blog Entries
    24
    Rep Power
    822

    Re: Locking down Windows

    A mixture of mandatory profiles and group policies is what you want. The easiest thing to do is to grab a couple of books (although I can't recommend which as I have learnt coming from NT4 and haven't got any books on it) and have a read.

    It isn't complex really, just long winded picking out all the bits you want and testing it. Just be aware that Microsoft love using double and triple negatives and having multiple, conflicting policy options.

  3. #3

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,644
    Thank Post
    858
    Thanked 645 Times in 428 Posts
    Rep Power
    498

    Re: Locking down Windows

    Blind, If you like i'll post the GOP I use for pupils here. It locks them down pretty tight, start menu redirected, no desktop icons, only their home drives in My computer, etc....

    Not in work today though, as I'm at the dentist later but

  4. #4

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    777
    Thank Post
    1
    Thanked 31 Times in 29 Posts
    Rep Power
    23

    Re: Locking down Windows

    Folder redirecton for the start menu and desktop is the first place I would start. Setup a test OU in AD create a couple of test users staff and students and have a play.

    As long as you only link your test GPO's to the test OU you cannot do any real harm. Also GPO does a reasonable job of explaining most settings and any that you unsure about or need futher information on, just copy and paste into google or even better, post them here.

  5. #5
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    22

    Re: Locking down Windows

    This any good? :?



    (yes, I'm already in the cloakroom handing over ticket)

  6. #6
    farmerste's Avatar
    Join Date
    Mar 2007
    Location
    uk
    Posts
    339
    Thank Post
    100
    Thanked 23 Times in 20 Posts
    Rep Power
    21

    Re: Locking down Windows

    try clean-slate from fortresgrand.com

    seems to solve 99% of problems

  7. #7

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,644
    Thank Post
    858
    Thanked 645 Times in 428 Posts
    Rep Power
    498

    Re: Locking down Windows

    I've attached our Pupil Policy that we have in effect at MHS, feel free to amend it to suit your school

    I also have additional GPO's for WSUS, Software, and a few other bits

    Let me know if your interested and I'll get them to you
    Attached Files Attached Files

  8. #8

    Join Date
    Mar 2007
    Location
    Newport News, VA
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Locking down Windows

    Gatt, Awesome GPO. I am defiantly going to implement a few of these.

  9. #9
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Locking down Windows

    Wow! That's a complex SRP setup!

  10. #10

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,644
    Thank Post
    858
    Thanked 645 Times in 428 Posts
    Rep Power
    498

    Re: Locking down Windows

    It Works tho

  11. #11
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 44 Times in 34 Posts
    Rep Power
    29

    Re: Locking down Windows

    Quote Originally Posted by ajbritton
    Wow! That's a complex SRP setup!
    hehe You should see mine then

    Nath.

  12. #12
    nicholab's Avatar
    Join Date
    Nov 2006
    Location
    Birmingham
    Posts
    1,452
    Thank Post
    4
    Thanked 97 Times in 93 Posts
    Blog Entries
    1
    Rep Power
    50

    Re: Locking down Windows

    Who needs to used GPO when you got a Fisher price network. I want GPO's I can touch not RM

SHARE:
+ Post New Thread

Similar Threads

  1. Locking down Firefox on Ubuntu
    By jonathan.lees in forum *nix
    Replies: 1
    Last Post: 12th December 2007, 10:05 AM
  2. Promethean ActivBoard locking up.
    By Quackers in forum Hardware
    Replies: 4
    Last Post: 4th December 2007, 09:31 AM
  3. Locking down student laptop
    By richard.thomas in forum How do you do....it?
    Replies: 17
    Last Post: 1st December 2007, 08:54 AM
  4. Locking Down PDAs
    By BKGarry in forum Wireless Networks
    Replies: 1
    Last Post: 2nd October 2007, 11:59 AM
  5. Locking Powerpoint
    By andy in forum Windows
    Replies: 9
    Last Post: 26th September 2006, 08:51 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •