Re: locking XP from the little brats

Thanks Nepatsfan.
the built-in admin is password protected and BIOS has a password.
Thank you for telling me about the steady state. looking at the features
makes it sound like a useful program.

Ike


"Nepatsfan" <nepatsfan@xxxxxxxxxxx> wrote in message
news:OjjQS5d2HHA.5360@xxxxxxxxxxxxxxxxxxxxxxx
In news:e1Antid2HHA.3760@xxxxxxxxxxxxxxxxxxxx,
Ike <lkjl@xxxxxxxx> wrote:
I help an elemantry school K-5 with the computer lab they have which has
32
XP Home computers that are part of workgroup.

They do not have enough money for full time administrator or
administrative
software or even central domain administration. so I have to work with
whatever free time I have to help.

some kid(s) keep rotating the screen, change the wallpaper, install
programs, and change settings.

I added a guest account, the onlyway they can login is thrue the guest
account, administrator accounts are locked with password changed
frequently.

I disabled right click. locked the control panel, and no display
settings.
the little creeps still managed to get around it.

my question is does anyone know how could they do that.

second question is there anyway I can prevent them from changing anything
on
the computer or reset any changes after logging off.

Thanks
Ike

First off, whoever made the decision to order computers with XP Home
Edition didn't do you any favors. They may have saved the school some
money but in the end they've severely limited what can be done in terms of
security.

As for how the "little creeps" are making changes, two things come to
mind. First, have you password protected the built-in Administrator
account? In XP Home Edition, that account is only available if you boot
into Safe Mode. Second, is the BIOS password protected? If they can enter
the BIOS setup program it's possible they've configured the computers to
boot from a CD and using any one of a number of programs are changing
administrative passwords.

You might want to consider using this program available from Microsoft.

Windows SteadyState
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Good luck

Nepatsfan



.

Relevant Pages

  • Re: Limiting rights to a second administrator account
    ... IMHO there is no way to reliably limit any Administrator ... equivalent account. ... If these computers all log into a network server somewhere such as a Windows ... My main concern would be protecting the admin account password and limiting ...
    (microsoft.public.win2000.security)
  • Re: SAM cracking
    ... to type in a bios password at boot. ... administrator for the learning purpose. ... just need the SAM file and a few minutes. ... the Administrator account and disable the LN manager hashe. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: daughter changes administrator user
    ... Also Malke this will not help much if he does not change the Administrator's ... log into the machine using the normally hidden Administrator ... > Administrator account. ... Also set the Supervisor password in the BIOS so BIOS ...
    (microsoft.public.windowsxp.security_admin)
  • Power user privilege question . .
    ... I have a small home network of a few computers for ... elevate a power user to administrator privileges. ... he didn't go through the steps to hack his account. ... it still retains admin privileges. ...
    (microsoft.public.win2000.security)
  • Re: locking XP from the little brats
    ... XP Home computers that are part of workgroup. ... They do not have enough money for full time administrator ... I added a guest account, the onlyway they can login is ... is the BIOS password protected? ...
    (microsoft.public.windowsxp.general)