Vista Security/Lockdown?

WhyWhyZed · #1 February 5th, 2008, 04:49 AM

Hey Everyone.

I am new here, and hope you're all still willing to help me out as much as you can here. I typically try to manage in finding information and help on my own, but I don't even have the slightest clue where to begin with what I am looking for. I'm also hoping (depending on how it gets resolved?) that its posted in the correct forum.

I am a college student, and through their network, the computers are setup that the user logs in, and he isn't allowed to install software to any of the main drives. But gets their own "Hard drive" called a "local workspace", and anything that is saved in a place other then the local workspace, at the time of restarting, gets deleted from the computers memory/hard drive. In a sense they lockdown the computers to its users with the exception of that small bit of hard drive space.

I would like to know how this is done, seeing as how I would like to implement this into a shared computer of ours that is running into constant malfunctions/problems from particular users.

Your time and patience is greatly appreciated!
Jason DePodesta

oracle128 · #2 February 5th, 2008, 11:04 AM

You can achieve a similar effect with specific software, such as Windows SteadyState. But you cannot do the exact same thing, since it is managed by a domain controller, not the local computer.

**Snurfen** · #3 February 6th, 2008, 01:02 PM

Hi Jason, welcome to CTH

In addition to Oracle128's point, this is controlled by a part of Active Directory known as Local Policies.

Typically, all the accounts in your user grouping or pc grouping ("clients" in AD), probably the "students" group, invoke a set of rules every time the network acknowledges you are logging on or off. This will involve putting the pc back to a given state, but also allowing or disallowing certain actions. It's a very useful part of active directory - for example I have a load of pc's where I have to absolutely prevent external data being installed - easy, I wrote a group policy disabling all inputs other than keyboard and mouse!

The shared computer you refer to is something you have main control over and others use as a favour? Theres a few ways of locking it down from the operating system, as well as third party applications such as the one mentioned above (a very well thought of piece of software, I may add).

What version of Vista do you use on the machine in question, and what scenarios are you trying to control?

As a footnote, we'll probably move this post to the appropriate operating system forum when you answer the questions - don't worry, we'll send you the link to find it once moved