Secure desktop parameters?

from JoeUser Forums
Hi, I've read about the Enterprise version (not out yet?) and its capabilities for creating secure desktops. I'm researching ways to lock down the desktops on our PCs in our Internet cafe and am curious as to just how locked down the desktops can be. I am most interested in blocking a user's ability to install programs. How will this capability be managed? Thanks
4,565 views 4 replies
Reply #1 from WinCustomize Forums Top
Not sure exactly how good this works but... the ability to install programs and limit access to the guts of the pc can be done by using Guest accounts. You can use passwords for admin accounts to keep people out. Just a thought.
Reply #2 from WinCustomize Forums Top
If you are running XP Pro, you can gain a certain amount of control by using the group policy service (Run > gpedit.msc > user configuration > administrative templates > double-click an entry > select enable).

Hackers will make it difficult to lock down the desktops. You will need to disable access to the command prompt, as well as enabling (or creating policies) to prevent removable media installations, access through file structures, etc.

A combination of the group policy service and removing any access to run command and command prompt access would at least make a significant road block to the fly-by hacker.

Here is a link for disabling Windows key shortcuts Link
Galactic Civilizations IV
Reply #3 from Stardock Forums Top
Thanks for the Windows tips. Unfortunately most of the systems are XP Home. We're looking into some different cyber cafe software which might do the trick, but I'm a big fan of Object Desktop and was basically curious as to how a secure desktop is created, where the differences are between it and Windows' security policies, etc.
Reply #4 from WinCustomize Forums Top
Perhaps a combination of Night Trains suggestion on creating a guest account to limit the ability to install softwares, running the REGINI file to disable the Windows key shortcuts, and something like DesktopX to create a desktop that does not have any links to system commands.

You could create a wharf object with say things like:

- Internet browser
- Paint
- Notepad
- Calculator
- Games
- Printer

Perhaps include a clock, calendar, weather widget.

I am sure you could design something, and make some settings in XP Home that would minimize, if not remove any type of moderate hacker threat. If a true hacker shows up, there is probably little you could do to prevent him/her from poking around anyway - without a real network administrative OS installed.

Removing the Windows key shortcuts will prevent access to the Start Menu, Explorer, Search, and Run directly from the keyboard.

Hopefully someone with some ideas on creating a desktop with Stardock products will drop by.