Computer Lockdown software

[zactommo]

What i'm wanting to do is create an account on our multimedia PC that is open (no password) but is locked down so tightly, that it can only be used for its intended purpose. This account will be used for people who are hiring our facilities, and are wanting a computer for projection.

Obviously I can't do it just with windows, i'm going to need some software. Open-source would be great, but if I have to pay, then thats what I i'll have to do. I'm wanting some pretty serious restrictions; Only the basic programs accessable, read/write premissions to the desktop only, start menu only contains programs they are allowed to use and shutdown button. No top menu bar in windows explorer, etc. I'm sure you get the idea.

The reason for this is that our church has the largests seating capacity venue in our town, so is hired out to a lot of the local schools etc, and we want to keep our data/network safe, and make sure they computer is being used only for what they are paying for.

[Gracetech]

What OS?

I think you would be better to use a Steady State program. All this means is you don't have to lock down the operating system and make it unusable you just load teh Steady State software on the machine and each time it Logs On/Starts the machine is in the exact State that you locked it in.

I use Deep Freeze and Steady State. Steady State is a Microsoft software that is free to any legally licensced XP or Vista machine(i'm sure they support 7 as well).

crt

[dmerchen]

I'd never heard of Steady State before, interesting idea. I'll have to look into that for future applications.

I was going to suggest you use Group Policies on the computer you wish to restrict, they are a powerful tool for controlling what you can and cannot do in a Windows based environment, there particularly effective when a domain is in use.

[bladeaudio]

I've worked in a theater that was rented out regularly, but was used by a Willow Creek satellite service in Chicago on Sundays. The way they set things up was to just provide a VGA line in to the switcher for guests to use. They had to bring in there own laptop to hook up. Made things clean and simple.

[zactommo]

I tried out Steady state, and it does exactly what I need.

The only problem I'm having is that a want to disallow write access to everywhere except the desktop, but I can only seem to disable write access everywhere, or no where.
Any hints?

[Gracetech]

From what i can remember you have to setup a user and then adjust the settings from there. I remember i could make a hard drive not even appear for certain users which made it impossible for them to write to it. I'm pretty sure there is options for customizing per user writing privileges. I'll see if i can dig up any more info.

crt

[Gracetech]

It looks like you have to setup a separate partition to write to. What i would do is either sync your desktop folder with a folder on a separate folder on a partition or just put a folder on the desktop to the separate partition. Just label the folder "Save Here or Else" that should get the point accross.

crt

[zactommo]

I'm not too keen to partition the drives. I have set up individual user settings, but the lack of control for read/write settings is a bit frustrating.

Any other suggestions for software?

[rbcyouthdude]

If it's not a laptop can you install a second drive and use it as the saving drive?

[[Admin] osborn4]

For clarity, I have moved the server discussion to Server 2008 set up.

[zactommo]

The volunteers who are running this computer for a normal service are highly skilled in the computer department, so i'm just slightly worried that i'll confuse them by adding extra drives. But then I can just hide the extra drive/partition under their user right. Problem solved right? I cant believe I didn't think of that before.