Windows xp prevent users from installing applications




















Big security risk for my users - I could see their banking info or naughty chats if I so choose. The first step is to have an acceptable use policy for the students that the parents have to sign. Provisioning and decommissioning standards also need to be in place to explain how the computer will be cleansed after the use of one student and prior to the next student receiving it.

Also ask a few students direct questions on how they installed the game. You might be pleasantly surprised that you get an honest answer. The next question that I have is why do the students have a computer that is powerful enough to play these games? Shouldn't they have a basic chromebook that can get to the internet and run a word processor? Google has a program that can help with the hardware and monitoring software. Also illegal in many places, without proper notification. Even with notification, in some cases, if dealing with privileged information.

Blacklisting just means you'll block one location and they'll find another. Hit it hard and do it right the first time. When creating the file screen set the path to be the root of the students folders.

When you've done that, you can customise the screen and send emails to Admins or the user or both. For example ours emails the user the following template:. Just so you know the file screens also apply to admins and system so be careful on the path you set as to not prevent legitimate files from admins being saved. I put our SRP into place using the guides found here on Spiceworks links in above posts. It has proven its worth a few times. Thanks again Spiceworks.

If you're whitelisting, the server won't be on the list by default, so nothing will execute from there. Also covers flash drives. It is what it says - unless you explicitly permit a location, it's not executing from there. To continue this discussion, please ask a new question. Get answers from your peers along with millions of IT pros who visit Spiceworks.

Hi, So I work in a secondary school and the students are at the age where they like to do everything but their work in lessons Many Thanks, Tom. Best Answer. Verify your account to enable IT peers to see that you are a professional.

You can do a blacklist or whitelist approach. Bryan Doe Mace. View this "Best Answer" in the replies below ». Spiceworks Help Desk. This conversation is currently closed to new comments. To enable a software restriction policy, use either of the following methods:? Using Group Policy1. Click Start, and then click Run. Type gpedit. Using the Local Security Policy1. Type secpol.

Follow the instructions to enable a policy. If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

With Configuraiton Manager you can then automatically deploy the applications they need as well. When this is automated, it should be quick and painless to simply wipe and reload a desktop if needed. Further tweaking would be a bonus, but could involve GPO lockdown of IE to prevent user toolbars and so on BUT any toolbar installed by a user would only be active for that user. So simply do not re-use user accounts. Although you can prevent a lot of problems through the use of restricted accounts that will not solve all your problems.

Just ask anyone who does IT in a school. In addition to the use of restricted accounts you should use mandatory profiles, as that also helps to reduce some of the problems users can cause. You might also consider imaging the machines and restoring the machines when appropriate.

There are a number of ways machine images can be restored semi- automatically, so that the number of machines really isn't all that much of a problem. I'm sure there are others here who can provide the specifics. Something like DeepFreeze is a sure-fire way. Not sure how much management goes into something like that though. There's other ways - the simplest and most hands-off is to not make them local admins, as Zoredache mentioned. They can install somethings but not much, that way.

The Microsoft version is called Windows SteadyState. XP or Vista only though - there are no plans to support it on Windows 7. Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. How can I prevent users from installing software? Ask Question. Asked 11 years, 7 months ago. Active 11 years, 7 months ago. Viewed 32k times.

Any ideas? Improve this question. Cypher Cypher 1, 2 2 gold badges 17 17 silver badges 24 24 bronze badges. Can you just not make them administrators on the local machine?

If they are not an administrator the can't do much to the computer. All of our users login with domain accounts. Nobody has a local administrator rights on any machine. Since seating is rarely assigned majority of users are in call centers , setting up local users for every possible employee on every possible machine gives me a headache just thinking about it. Is there a way to automatically create a restricted local user account for these folks at login via Group Policy? Can you give some examples of the software they're managing to install, despite having no administrator rights on the machine?

AIM, Yahoo IM, Skype, various browser toolbars, vendor-specific phone-related software, alternate web browsers, itunes, winamp, utorrent, limewire, conficker. That's not the same as no local administrator rights. On a workstation, right-click 'My Computer' and select 'Manage'.



0コメント

  • 1000 / 1000