Desktop lockdown

0 pts.
Tags:
DataCenter
Desktops
Development
Management
Microsoft Windows
Networking
OS
Security
Servers
Software
SQL Server
Tech support
Hi all, I have 30+ windows 2000 clients running of a NT4 Server. The clients are locked down via gpedit but due to teacher requirements need the right click enabled. What i want to do is either: Stop any changes to desktop, or set a default wallpaper that cannot be changed. We have no money despite being in education, we spent the budget! Any help'd be great. Carl
ASKED: October 13, 2005  10:09 AM
UPDATED: July 16, 2013  11:56 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

use group policy to set a wallpaper and take away display from the control panel, should do the trick.

Discuss This Question: 12  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Rfergus28
    Just so I understand correctly you want people to be able to Right click on the desktop and get the the display Properties, but only to adjust a few things and not the desktop background or screen saver? What function do they require? If you want certain functions or features removed from the display properties and you can not impliment Active directory you have to adjust options in the Local Security Settings administrative tool. You may have to get the correct registery key changes and add them to all your machines.
    0 pointsBadges:
    report
  • Carl0s81
    rfergus28: They need to have right click to save internet pictures, but by doing so this allows them to ad images to the desktop which is only a matter of time before I get calls asking me to take inappropriate websites off 3,4 times a week. I want them to have NO options to change on the desktop. I need it as restricted as possible. Thanks for the help so far testing tomorrow
    0 pointsBadges:
    report
  • BlueKnight
    Pardon me for saying so, but having spent 16 years working in the education arena, if you have to take inappropriate websites off machines 3-4 times a week, I'd say it's high time the users of those machines get reported to school and district officials. There could be other things, more sinister, going on there as well - if you catch my drift. (I know, my badge is showing). Sounds like you need to restrict access to certain web sites, though there are too many to totally screen them all out.
    10 pointsBadges:
    report
  • OnTheEdge
    I work with a university and know well budget constraints. I tried for 2 years to lockdown desktop computers, but either I locked them down too much or not enough. We have resolved that problem with FARONICS' Deep Freeze software. You don't really have to lock the computer down too tight--I have software that requires students to have POWER USER rights. Once you have a computer configured, you install the software and it images the machine as it is currently. Students can do whatever they need to do and when they logoff the computer (as we have it set up this way), it will reboot to the original configuration. You can have it reboot as needed, not just when a student logs off. I know you said you don't have the budget for it, but in a school setting, you really *need* to budget for something that will save hours of labor--both in the configuration and clean-up phases.
    0 pointsBadges:
    report
  • Jbm125
    You can get a password protected screensaver that should solve your lockdown problem. Then just leave the primary user right click enabled. Good luck. Jack
    15 pointsBadges:
    report
  • Spadasoe
    Other options to implement: mandatory profiles, folder redirects (don't allow saves to the desktop), scheduled reimaging. The CC where I work implements most of these practices
    5,130 pointsBadges:
    report
  • Rfergus28
    you can impliment a Wallpaper Through the registry. One sugestion is on boot up you put a registry hack in that will change the Wall paper setting to a default at all reboots. so if they do not like the back ground.. shut it down. I am sure there is a way to disable changing the Desktop wallpaper setting all together. But none of this is a real solution to the fact that you need a Proxy server that filters porn. You always need multiple user accounts that lock out. People should be held accountable for their logins. If person "A" gives a login and password to person "B" then person "A" should loose his/her account. And if porn is found then you know which user did it. If any my users goes to Any site I know about it. And if it is porn it is flagged. We have let go 4 people in the last 3 months for internet abuse. Even when they did not even get the items of which they sought. just mearly being blocked to many times was enough.
    0 pointsBadges:
    report
  • Cazulp
    A password protected screen saver and removing the ability to right click and save porn to the desktop are 2 completely different things. The password protected screen saver is a no brainer but you have to know what your security requirements are. A good solution in a corporate environment is to select the options that 1) Use the default Windows or a Corporate Screen Saver only 2) Prevent the installing of other passwords 3) Timeout after nn minutes and 4) Require an alt/ctrl/del action to enter the Windows/Domain password. Having said that, this will have to be controlled via GPO's to be effective.
    0 pointsBadges:
    report
  • Ajmcgary73
    While I know budget is a concern for you I have used a product in my office which is actually designed for the classroom enviroment (unfortunately my users are worse then kids with too much time on their hands) the program is "AB Tutor" and can be found at www.abconsulting.com, this product provides a tremendous amount of control for your system as well as provides great monitoring. You can get a 30 day trial free and the cost is fairly cheap like $212 for one server and unlimited workstations. Take a look at it.
    0 pointsBadges:
    report
  • Mdragon321
    the simple route is always the easy way set a standard policy first all changes have to be approved. through said persons and would set a standard usage for all users at what level you determind. set the wall paper the for the same except for admin personel. most companies have a logo they use for their background and that is what it stays at for everyone that logs on its hard to please everyone the politcal process just some simple thoughts
    0 pointsBadges:
    report
  • Ve3ofa
    Could you explain why the teacher needs the right click available on the students desktop? Teachers can use a less restrictive logon which may allow right click and the students a highly restricted environment. If using XP i'd suggest the shared computer toolkit in which on logoff the computer resets to a standard configuration.. Have you considered NetNanny or other content protection schemes.. how about using the content advisor in IE to restrict sites? Through gpedit you can restrict all programs except those on a specific approved list..
    80 pointsBadges:
    report
  • Carl0s81
    thanks for all the reply's. We do work off a proxy server, but it doesn't block all the porn sites! the ones that come trough are hosting sites filleed with porn site link and images and this is what the kids are saving. We are getting on top now and the head asked me to lockout any porn users which has saved me a job - no porn cleans in 2 weeks now!! Our year 11's save images but they are the good lot. The teachers need right click to copy and paste images in publisher 97 (i asked them to upgrade but thats a no go????). The teachers are not all IT literate, i got a call last week saying 4/15 machines were not working - the issue was they were not turned on!!! Thats what i have to put up with! I'll try it in group policy and if anyone know the reg hack to reset the wallpaper, that woulkd be great. Cheers, Carl.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following