Re: Blocking internet access on XP Pro machines w/ZenWorks

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Rob Elder, MVP-Networking (relder_at_thisisnotcorrect.com)
Date: 03/06/04


Date: Sat, 6 Mar 2004 18:18:32 -0500

You could make the hard drive read only but using NTFS security permissions
on each local machine.

I think that the Novell client logon is tied to the local user account (not
sure, though, not much of a Netware person.) If this is the case, you might
consider taking the user and making them a member of the Guest group. This
group has very limited rights to do anything.

Unfortunately, local policy on XP PCs is global. This needs to be done from
the domain controller to obtain any filtering. Have you had a chat with
the network admin?

"LeonMyerson" <leonmyerson@yahoo.com> wrote in message
news:AC2312E0-2962-459A-9B9D-37530E606FD9@microsoft.com...
> I've recently begun teaching Microsoft Office at a local high school. We
have nice new Compaq computers running XP Professional attached to a Novell
network via ZenWorks. It is almost impossible to police the students'
constant attempts to access the internet through IE, to stop them from using
AOL Instant Messaging, playing games, or even to keep them from inserting
their own CDs in the machines. The class all logs on with the same user ID,
via the ZenWorks screen that comes up initially, single logon for both PC
and network. Other classes use other IDs, and I cannot touch them. I would
like to shut down any or even all of these capabilities, and also make the
hard drive read-only, based on the ID they use to log on. I'd like these
restrictions to not apply to any other IDs, and certainly not to each
system's local administrator account.
> Any advice would be greatly appreciated, as right now I'm not even sure
where to start. I was a network administrator once, but never got past
being MCSE NT 4, or even doing anything like this on the job. There are
less than 60 PCs involved, so manually exporting/importing a local security
policy is doable, if that's the way to go. Is it? Any advice would be
greatly appreciated. Thank you.
>
>



Relevant Pages

  • Re: Replication as a Performance Enhancer?
    ... And, if there is a need to have them work with multiple reocrds, but that's ... Or, alternativesly, can put each subform on its own tab in a tabbed ... leading me to believe the network has a lot to do with it. ... was bring in the MDW file to his local machine, ...
    (comp.databases.ms-access)
  • Re: ASP.Net Connection To MYSQL
    ... databases are local to this machine, if not connected to the network, ... extremely fast so it is possible that your problem lies elsewhere. ... I am developing on a local machine. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: IDE changes setting on its own
    ... This may be an artifact of something happening on your local machine or network, rather than a "bug" in VS. ... > "Start page" to "Empty environment". ... > get a bug fix? ...
    (microsoft.public.vsnet.ide)
  • Re: Help - I tried to define a home network and now I cant logon!!!
    ... Try doing the control-alt-delete again to bring up the logon ... domain or the local machine by clicking on ... to your corporate network domain. ... > network connection. ...
    (microsoft.public.win2000.security)
  • Security Error Message
    ... My IIS is set to use a network share as wwwroot. ... the website (from the local machine, or from another machine on the ... Security Exception ...
    (microsoft.public.dotnet.framework.aspnet.security)