Disable everything but your exam software

[uffy2000]

Hi

 

I was asked an interesting question this morning that has stumped me. I was asked if its possible to disable everything (applications, windows etc) except for a certain application that the students are doing a test on.

 

I have had a look on google but haven't really seen anything that fits the bill?

 

Has anyone any ideas or suggestions?

 

Thanks in advance!

[Steve21]

Not exactly what you're after, but you can create an account with a custom logon script that replaces the "run explorer.exe" with "run exam.exe" it'll then not load explorer and just run the software. But depending how the rest of your stuff is setup, it's still possible to get to things.

 

Steve

[uffy2000]

I have GP doing folder redirect for desktop and documents. Also locking out shortcut keys and run etc.

 

any idea of a software or client on machines that can lock users into 1 application?

 

Not exactly what you're after, but you can create an account with a custom logon script that replaces the "run explorer.exe" with "run exam.exe" it'll then not load explorer and just run the software. But depending how the rest of your stuff is setup, it's still possible to get to things.

 

Steve

[strawberry]

It won't lock but as Steve suggested you can change the shell from explorer to something else. It will be the only program that opens , if you can access task manager you can start new tasks.

 

"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"Shell"="Explorer.exe""

[Vasriel]

You could use the following GP User Configuration/Administrative Templates/System/Custom User Interface

 

Just enable and put in the path to the software

[browolf]

Not exactly what you're after, but you can create an account with a custom logon script that replaces the "run explorer.exe" with "run exam.exe" it'll then not load explorer and just run the software. But depending how the rest of your stuff is setup, it's still possible to get to things.

 

Steve

 

I suggest similar but

 

In group policy you can set "custom user interface" in

User Configuration/Administrative Templates/System

 

set it to your software or ping.exe (!) and use login script to launch the program.

[uffy2000]

We have students who need the exams read out to them. there is a piece of software on the PC's to do this.With that GPO Would I be able to run both at the same time. I.e locked into the exam with this software/toolbar running aswell? Edited March 19, 2014 by uffy2000

[MordyT]

Simplest way is SRP is whitelist mode. Only whitelist the software, windows, and done.

 

Custom shell is nice, but doesnt prevent a savey person from breaking out. SRP does.

[birchanger]

We move the machines into an OU for the purpose that imposes Applocker rules, then we place the candidates' accounts in security groups to pick up the correct Applocker permissions. This is for cases in which the ability to save work is needed and (sometimes) to have access to exam resources such as graphics.

 

Takes a bit of setting up, but very flexible once it's there.

[Duke5A]

We move the machines into an OU for the purpose that imposes Applocker rules, then we place the candidates' accounts in security groups to pick up the correct Applocker permissions. This is for cases in which the ability to save work is needed and (sometimes) to have access to exam resources such as graphics.

 

Takes a bit of setting up, but very flexible once it's there.

 

App Locker is awesome; I'm using it here to keep the kids from running executables from there home folder and removable drives. You need Windows 7 Enterprise though as any lesser edition does not have it.