controlling executables in user accounts

From: LouisB (louisREMOVEberkREMOVE2002_at_hotmail.REMOVEcom)
Date: 11/14/04


Date: Sun, 14 Nov 2004 11:45:09 GMT

I am a teacher in a UK Secondary School (equivalent to High School in the
US) and our network consists of Windows Server 2003 with Windows XP
Professional on the user desktops. Clearly, WS2003 is used for
administration of the user accounts of both students and teachers. It also
hosts various applications which are run centrally from the server rather
than on the individual machines, e.g. MS Office etc.

I am encountering a serious control problem. My students are quite happily
installing P2P executables, specifically Ares Lite, into their user areas. I
don't actually know whether they are downloading this from the internet or
installing it from pen drives via the USB ports. Whichever manner they are
using the software is appearing in their user areas and they are quite
happily disrupting my lessons by using it to download mp3s and then play
them in Media Player.

It has always been my impression that windows server has tools that restrict
user activity, especially the installation of software. Am I correct in this
impression? Should our network manager be able to configure the user areas
so that it is impossible to install software - even if users have access to
the internal floppy disk drives or pen drives (via the USB ports)?

Is there a way to stop anything other than pre-defined applications from
running, so that even if someone breaches restrictions and installs software
it will somehow be prevented from operating?

I'm mainly looking for advice so I can have a sensible conversation with the
technical support staff who support out systems and network.

TIA for any help or assistance

Louis
------
"I'm a half-wit. I sold the other half on e-Bay"

-- 
------
"I'm a half-wit. I sold the other half on e-Bay" 


Relevant Pages

  • Re: Fully parallel Scheme-based language w/ evaluator
    ... Windows Server 2003 and networks in simple - and irreverent - terms. ... If networking really is a big deal, ... Concepts and Terminology in Part I, and The Design and Deployment of Network ...
    (comp.lang.misc)
  • IT Security Administrator in Bend, OR
    ... workstations as well as physical security for I/T systems. ... manages network security software and hardware. ... Extensive experience with Windows 2000/2003 servers and Exchange ... Two years experience configuring, installing and implementing VMWare ...
    (comp.arch)
  • Network Administraot in Bend, OR
    ... Determines, installs and manages network ... Troubleshoots and configures Casino phone networks and servers to ... AUTHORITY & RESTRICTIONS (supervisory capacity, signatory ability, ... Three years experience configuring, installing and implementing HP ...
    (comp.sys.mac.system)
  • Network Administraot in Bend, OR
    ... Determines, installs and manages network ... Troubleshoots and configures Casino phone networks and servers to ... AUTHORITY & RESTRICTIONS (supervisory capacity, signatory ability, ... Three years experience configuring, installing and implementing HP ...
    (comp.arch)
  • Re: Remote Desktop Disconnects
    ... I have a Windows Server 2003 R2 and not a SBS. ... I understand that the RDP from remote to SBS ... Contact the network adapter manufacturer or contact the original equipment ... Modify the registry to disable Receive Side Scaling ...
    (microsoft.public.windows.server.sbs)