Jump to content



Photo

computer illiterate proofing computer

local group policy

  • Please log in to reply
10 replies to this topic

#1 ironsight2000

ironsight2000

    Neowinian Senior

  • Joined: 26-August 06
  • Location: Toronto

Posted 08 January 2014 - 20:29

I would like some tips on ID10t proofing a computer as I am almost always having to fix it what are some local group policy you would recommend implementing or other ideas.  as they have bad downloading habits and what not.

I am gonna make a ghost image of the computer once its back to default but any other ideas.

 

I tried them using Linux but they need iTunes and they don't trust Linux




#2 redvamp128

redvamp128

    Neowinian Senior

  • Joined: 06-October 01

Posted 08 January 2014 - 20:32

Here is a DOC about locking down a computer 

 

Explains how to replicate Windows SteadyState actions by using Windows 7 features and free tools from Microsoft.

 

http://www.microsoft...s.aspx?id=24373



#3 +BudMan

BudMan

    Neowinian Senior

  • Tech Issues Solved: 75
  • Joined: 04-July 02
  • Location: Schaumburg, IL
  • OS: Win7, Vista, 2k3, 2k8, XP, Linux, FreeBSD, OSX, etc. etc.

Posted 08 January 2014 - 21:50

Nobody "needs" itunes ;)

Why not just get them a mac if they are "needs" apple software kind of person.

I take it your using ghost image as general word for taking a image, since "ghost" has not been a viable product for years and years. Last version 15 was released in what 2010.. And did they announce end of support back Apr/Mar 2013?

Is this a laptop? Most of them come with built in methods of factory reset, depending there are ways of using this built in system with an updated image of the OS.. So you can tweak it like you like, and then update the system image on the system so that they can just hit like a F key to restore it back to nice clean image.

But your overall plan is sound - if you have a user that your just always having to fix their machine taking an image of your base install for them is a great idea, then you can reimage it and give it back to them in a few minutes.

As to other things - if they are one of these users that just can not help but clicking on the shiny stuff that pops up.. Look to blocking those popups vs adblocker - have them user a browser that supports that like firefox for example. You would be amazed out how much less trouble they get into when they just don't see the BS that pops up to grab their attention. Other than that make sure they are only normal user, and lock down UAC so they don't even know the admin password to be able to change any system settings or install software.

What antivirus software are you using? Is it they just keep infecting it with crapware?

#4 ChuckFinley

ChuckFinley

    Neowinian Senior

  • Joined: 14-May 03

Posted 08 January 2014 - 23:12

Ask them why they dont "trust" linux then punch them in the face!  :laugh: I jest...but I am getting more and more into Linux and the more I use it the more I like it. It sounds like they need a VERY sandboxed environment. I think Microsoft did a program called DeepFreeze. Maybe check that out but it shouldn't be in the Internet sub forum. If you are asking about the networking side well....

 

Install a firewall, Lock it down to essential services only. However an expert on Group Policy may be able to help you more. 

 

Install something like Websense or Bloxx in your environment. Set the proxy using GP. 

 

We would need to know more about your environment constraints first. Number of users etc. 



#5 Fahim S.

Fahim S.

    Neowinian Senior

  • Tech Issues Solved: 2
  • Joined: 15-April 02
  • OS: Windows 8 - OG
  • Phone: Google Nexus 4 16GB by LG

Posted 10 January 2014 - 02:02

Can you not just make their account to a normal user (not an Administrator account)?

You'd be surprised how much of a difference this alone will make.

#6 z0phi3l

z0phi3l

    Neowinian

  • Tech Issues Solved: 1
  • Joined: 11-June 02
  • Location: Waterbury CT
  • OS: Win 8
  • Phone: Android

Posted 10 January 2014 - 02:06

Get one of them Linux distros that look almost exactly like Windows !!!

 

All the benefits and none of the disadvantages



#7 Roger H.

Roger H.

    Neowinian Senior

  • Tech Issues Solved: 20
  • Joined: 18-August 01
  • Location: NYC & Germany
  • OS: Windows 8.1
  • Phone: Nexus 5

Posted 10 January 2014 - 02:09

Guest Mode

 

/endthread

 

:p



#8 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 21
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 10 January 2014 - 02:43

Deep freeze.

#9 Praetor

Praetor

    ASCii / ANSi Designer

  • Tech Issues Solved: 2
  • Joined: 05-June 02
  • Location: Lisbon
  • OS: Windows Eight dot One dot One 1!one

Posted 10 January 2014 - 02:52

First and foremost: educate the users.

Then restrict the account so it's a normal user account, without any administration privileges; use group policies to restrict them to hell, so they can't do pretty much anything else than work, downloads (use a good firewall to restrict their bad download habits) and what's not.

Oh and you could use VDI if you are in a virtualization environment, so you have a clean desktop VM for them everyday :woot:



#10 francescob

francescob

    Neowinian Senior

  • Tech Issues Solved: 1
  • Joined: 04-November 08

Posted 10 January 2014 - 03:18

I would like some tips on ID10t proofing a computer as I am almost always having to fix it what are some local group policy you would recommend implementing or other ideas.  as they have bad downloading habits and what not.

I am gonna make a ghost image of the computer once its back to default but any other ideas.

 

I tried them using Linux but they need iTunes and they don't trust Linux

Disable access to IE, install firefox, install adblock, install the latest adobe flash and set it to autoupdate, disable all firefox plugins but flash, install publicfox and set a password for downloads of exe files. Problem solved.



#11 wrack

wrack

    Wireless Robotic Android Calibrated for Killing

  • Joined: 09-December 06
  • Location: Melbourne, Australia

Posted 10 January 2014 - 03:44

Guest Mode

 

/endthread

 

:p

Amen to that. First thing I do on any home laptop after setup is enable the guest account and if anyone wants to use my laptop they have to use the guest account. Even I have trained mum & dad to start using that account and it has been fine for ages!





Click here to login or here to register to remove this ad, it's free!