1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Group policy queries. Newbie alert!

Discussion in 'Windows & Other Software' started by Ratbag, 27 Sep 2009.

  1. Ratbag

    Wise Guy

    Joined: 18 Oct 2002

    Posts: 1,284

    My last post was about locking down a PC configuration for student use. I'm still wrestling with this problem, thanks in part to the horrors of gpedit.

    So I'm the admin, and I think it'd be good to 'disable the notification area' etc etc. I reboot and sure enough, all the changes are applied on the admin account but not neccasarily on the standard user account. Some are, some aren't.

    Basically, I want the swines to be able to access Firefox [default internet browser] off the start menu and absolutely nothing else. No right clicks on the taskbar or start menu, no access to tray items or the control panel etc. How hard can it be?

    Any advice?

    ;)
     
  2. theheyes

    Sgarrista

    Joined: 17 Jan 2007

    Posts: 8,945

    Location: Manchester

  3. marc2003

    Capodecina

    Joined: 6 Feb 2004

    Posts: 20,200

    Location: England

  4. Burnsy2023

    Man of Honour

    Joined: 17 Nov 2003

    Posts: 36,575

    Location: Southampton, UK

    Just to echo the two above posts, SteadyState is exactly what you want :)
     
  5. jas72

    Capodecina

    Joined: 31 Jul 2006

    Posts: 10,263

    Location: Belgium land of chocolate

    was thinking about this for my son but...

    General
    Can I install Windows® SteadyState™ on a 64-bit computer?


    Windows SteadyState is designed to work on 32-bit computers only.

    still might keep XP 32 as dual boot for the boy.
     
  6. Guest2

    Capodecina

    Joined: 6 May 2009

    Posts: 16,285

    Again, SteadyState or maybe Deep Freeze?
     
  7. Burnsy2023

    Man of Honour

    Joined: 17 Nov 2003

    Posts: 36,575

    Location: Southampton, UK

    Is there a free version of Deep Freeze?
     
  8. Guest2

    Capodecina

    Joined: 6 May 2009

    Posts: 16,285

    Dont think so, but i could be wrong. Did the OP want free software/free methods?
     
  9. Ratbag

    Wise Guy

    Joined: 18 Oct 2002

    Posts: 1,284

    I thought about deepfreeze a while back and downloaded the evaluation but got an error message on installation: 'deepfreeze doesn't support disks over 2TB', which is odd as my boot drive is 37GB and the other drive is 1TB. Doesn't instill a lot of confidence....

    Anyway, after much arsing about I ran gpedit [as administrator] direct from the system32 folder of the standard user and applied the settings I need. Now all the settings remain - I couldn't figure why some changes only affected the admin acccount and some were universal.

    I got hold of an app called anti-executable that creates a whitelist of allowed programs and denies the execution of all others. The swine have access to Firefox, and only firefox. Combined with drive access denial, the might of admuncher and Opendns - I think we should be OK.

    Cheers for the replies!

    ;)
     
  10. Burnsy2023

    Man of Honour

    Joined: 17 Nov 2003

    Posts: 36,575

    Location: Southampton, UK

    Did you try SteadyState?