computer illiterate proofing computer

[ironsight2000]

I would like some tips on ID10t proofing a computer as I am almost always having to fix it what are some local group policy you would recommend implementing or other ideas.  as they have bad downloading habits and what not.

I am gonna make a ghost image of the computer once its back to default but any other ideas.

 

I tried them using Linux but they need iTunes and they don't trust Linux

[redvamp128]

Here is a DOC about locking down a computer 

 

Explains how to replicate Windows SteadyState actions by using Windows 7 features and free tools from Microsoft.

 

http://www.microsoft.com/en-us/download/details.aspx?id=24373

[+BudMan MVC]

Nobody "needs" itunes ;)

Why not just get them a mac if they are "needs" apple software kind of person.

I take it your using ghost image as general word for taking a image, since "ghost" has not been a viable product for years and years. Last version 15 was released in what 2010.. And did they announce end of support back Apr/Mar 2013?

Is this a laptop? Most of them come with built in methods of factory reset, depending there are ways of using this built in system with an updated image of the OS.. So you can tweak it like you like, and then update the system image on the system so that they can just hit like a F key to restore it back to nice clean image.

But your overall plan is sound - if you have a user that your just always having to fix their machine taking an image of your base install for them is a great idea, then you can reimage it and give it back to them in a few minutes.

As to other things - if they are one of these users that just can not help but clicking on the shiny stuff that pops up.. Look to blocking those popups vs adblocker - have them user a browser that supports that like firefox for example. You would be amazed out how much less trouble they get into when they just don't see the BS that pops up to grab their attention. Other than that make sure they are only normal user, and lock down UAC so they don't even know the admin password to be able to change any system settings or install software.

What antivirus software are you using? Is it they just keep infecting it with crapware?

[+John Teacake MVC]

Ask them why they dont "trust" linux then punch them in the face!  :laugh: I jest...but I am getting more and more into Linux and the more I use it the more I like it. It sounds like they need a VERY sandboxed environment. I think Microsoft did a program called DeepFreeze. Maybe check that out but it shouldn't be in the Internet sub forum. If you are asking about the networking side well....

 

Install a firewall, Lock it down to essential services only. However an expert on Group Policy may be able to help you more. 

 

Install something like Websense or Bloxx in your environment. Set the proxy using GP. 

 

We would need to know more about your environment constraints first. Number of users etc. 

[+Fahim S. MVC]

Can you not just make their account to a normal user (not an Administrator account)?

You'd be surprised how much of a difference this alone will make.

[Anibal P]

Get one of them Linux distros that look almost exactly like Windows !!!

 

All the benefits and none of the disadvantages

[Roger H. Veteran]

Guest Mode

 

/endthread

 

:p

[sc302 Veteran]

Deep freeze.

[Praetor]

First and foremost: educate the users.

Then restrict the account so it's a normal user account, without any administration privileges; use group policies to restrict them to hell, so they can't do pretty much anything else than work, downloads (use a good firewall to restrict their bad download habits) and what's not.

Oh and you could use VDI if you are in a virtualization environment, so you have a clean desktop VM for them everyday :woot:

[francescob]

I would like some tips on ID10t proofing a computer as I am almost always having to fix it what are some local group policy you would recommend implementing or other ideas.  as they have bad downloading habits and what not.

I am gonna make a ghost image of the computer once its back to default but any other ideas.

 

I tried them using Linux but they need iTunes and they don't trust Linux

Disable access to IE, install firefox, install adblock, install the latest adobe flash and set it to autoupdate, disable all firefox plugins but flash, install publicfox and set a password for downloads of exe files. Problem solved.

[wrack]

Guest Mode

 

/endthread

 

:p

Amen to that. First thing I do on any home laptop after setup is enable the guest account and if anyone wants to use my laptop they have to use the guest account. Even I have trained mum & dad to start using that account and it has been fine for ages!