Re: Need lockdown advice



Ah, nothing like a good highjacking...

Apart from the use of MS or M$, I use neither. I just type Microsoft.

However, to your issue. I recommend the Microsoft Shared Computer
Toolkit. I believe it's still a little buggy, but it does the trick.
You can configure your user's computer to be nothing but a desktop of
icons that only you want.

There is one feature I recommend you look into. I forget the actual
term for it, but it's a method of locking the harddrive down in a way
that prevents him from making any changes. It works by storing a
complete copy of the OS on a hidden partition of the drive. When your
user logs in, that partition is loaded into the visible one, and any
changes he makes (software, settings, cookies, internet history, etc.)
are all stored normally in the visible partition.

Here's where the cool part comes in. When the user is done, he shuts
down. At this point, the entire visible partition is dumped. Next time
he boots up, the hidden partition is loaded and he's back to a computer
that's virus-free, malware free, etc-free even if he loaded it to the
seams on his last use.

You can set aside an area for the user to save things to that is
retained between reboots. Fear not, however, he shouldn't be able to
install software there since the toolkit can prevent him from running
ANY *.exe file.

If you have any questions, drop me an email.

Enjoy.

- wulf

.



Relevant Pages

  • Re: newby needing help
    ... That's the problem though, same with linux, there are obvious things that I ... I'd recommend starting with 6.2-RELEASE with patches. ... How do I refer to this home partition ... FreeBSD are subdivisions of a slice. ...
    (freebsd-questions)
  • Re: Uprgade from Server 2000 to Server 2003
    ... I usually don't recommend partitions smaller then 10 GB for the system. ... There are some 3rd part tools that can repartition your hard disk space. ... before you go for the upgrade. ... > Originally they were set up with a 4GB partition for O/S. ...
    (microsoft.public.windows.server.setup)
  • Partitions
    ... I would recommend firstly to defragment your harddrive ... with system tools from accessories from the start ... program called partition magic. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Create A Drive D:
    ... I highly recommend Symantec Partition Magic 8. ... Norton Ghost lets you back up everything on your HD to a disk or to another ... came with one drive, C:, and I do not have a D: for backups, in the ...
    (microsoft.public.windowsxp.newusers)