Lockdown Software?

barneysplash

Hi all

I need to lockdown i.e. remove access to usb ports / cd burners / printers, on some workstations in work.

Basically we want people just to be able to view a database on the screen, but not to print or download any part of it.

What is a good program or method to manage access to usb ports / cd burners etc?

blackgold>>

A dumb terminal would be ideal.

Overheal

Hey you can just disable the devices in the Control Panel> Device Manager.

Tried it just there on Vista and while I can still open/close the CD drive its no longer being read by My Computer and inserting discs does little of nothing. All you have to do is ensure the user isnt an administrator/granted access to the Device Manager.

blackgold>>

He said lockdown, your solution is a cheap hack and it won't work effectively.

MarkR

You can create a new hardware profile and set that to load with those items disables. I assume you can password protect that and choose to boot back into your regular profile when needed.

blackgold>> wrote: »

He said lockdown, your solution is a cheap hack and it won't work effectively.

Why won't it work?

Overheal

Hardware Profile. Never had to use one of those before. I like it. Good stuff MarkR

He said lockdown, your solution is a cheap hack and it won't work effectively.

...and you are..?

blackgold>>

Maybe my understanding and your understanding of the word lockdown are different.Aswell as that locking down a workstation whos job is to do work is a waste of resources and money .
The correct and proper way to do it is to use simple dumb terminals which are just a monitor and a keyboard if needed.

...and you are..?

What do you mean exactly?

Overheal

true.

In any case OP that should be a start. alternatively I do recall another simple solution is to put your desktops in locked enclosures, like you might see at the Library:
http://www.law.uconn.edu/infosys/classrooms/ch110/ch110_pc_cabinet.jpg

There is of course corporate software out there deisnged to limit what an employee machine can do but i cant think of any off hand. Of course this might be overkill for a small business solution anyway.

calex71

don't overlook disabling internet access and email on those workstations,
all the hardware profiles in the world would be useless if someone could simply email it to another pc with a printer :pac:

Shiny

Overheal wrote: »

...and you are..?

He is someone that goes into threads telling people that they
don't know what they are talking about.

muggyog

Possibly Kiosk software especially if the database is web friendly?

Ignore all other advice in this thread and look into/get a good book on group policy objects.

It will do everything you need and much much more. We use them for embedded touch screen machines in work.

Snowbat

You don't say which OS you need to lock down, if Active Directory is being used, or if the printers are USB, serial, parallel, or network.

For XP Pro, look at Group Policy Objets (start, run, gpedit.msc)
http://www.petri.co.il/disable_usb_disks_with_gpo.htm

barneysplash

Snowbat wrote: »

You don't say which OS you need to lock down, if Active Directory is being used, or if the printers are USB, serial, parallel, or network.

For XP Pro, look at Group Policy Objets (start, run, gpedit.msc)
http://www.petri.co.il/disable_usb_disks_with_gpo.htm

The Operating System is Windows XP or some Windows 2000 machines.

All ports - serial, paralell, usb must be disabled on the units.

Standard Toaster

ronoc wrote: »

Ignore all other advice in this thread and look into/get a good book on group policy objects.

It will do everything you need and much much more.

+1

Overheal

Ignore other advice? I am hurt but at the same time kudos for the better response.

MarkR

He wins. That is a better option, I had thought that a domain controller was needed. No need to ignore our suggestions though. Me and overheal are going to have to form a support group! Both are viable options, yours is tidier.

swanky

Snowbat wrote: »

You don't say which OS you need to lock down, if Active Directory is being used, or if the printers are USB, serial, parallel, or network.

For XP Pro, look at Group Policy Objets (start, run, gpedit.msc)
http://www.petri.co.il/disable_usb_disks_with_gpo.htm

Agree with this post. Best option