I need a way to restrict what a person can do on a computer

[jl123]

Ok here is the main thing. There is a person where my mom works that is constantly on the internet, costomizing her desktop, reading emails, writing emails, downloading pictures, and just random surfing of the web. I need a way to cut the internet connection without cutting the network connection. She needs to maintain the network connection because she needs to access a database from the main computer. Is there a way to do this?

Another thing.....my mom's boss wants me to find a way how to limit what she does as far as changing the desktop settings and just keep her out of the control panel. I would really appriciate some help on this one. I'm sure some of you guys/gals with jobs have done this before. http://sysopt.earthweb.com/forum/smile.gif

Thanks,

~Joel

[Mungla]

Jl123,

Is this person smart enough to reinstall the TCP/IP protocol if you delete it? As far as my Windows networking knowledge goes, normal networking (file sharing) isn't affect by deleting TCP/IP.

[DVNT1]

Making it difficult for that person is easy.

I'll have to assume your using Win9x since you didn't state otherwise. Here's a few good links...
http://act.kent.edu/stapp/win95rem.htm#profiles
http://www.smartcomputing.com/editorial/article.asp?article=articles%2Farchive%2Fl0606%2F0 6l06%2F06l06%2Easp

Reading the above links, but basically you enable user profiles, have one user for Admin, one user for you mom, and a default user. Admin has no restrictions, MOM has Control Panel areas locked down, DEFAULT has everything blocked including only allowed windows programs like "explorer.exe", "winword.exe", etc...(no iexplorer.exe, no regedit.exe, etc...) No "save settings on exit" is good too.

Eliminate the F8 startup menu, eliminate Safe Mode (a little dangerous through but in safe mode the registry can be accessed and changed by the user.) Get the IE Administration Kit and you can lock IE from certain sites and set specific security settings.

Having a good backup of your drive is very important since you could easily lock too much and have trouble getting back in.

I've done this a few times against some persistent users, so if/when they get around some of these, I'll help you block those too.

[DVNT1]

Another thought, for just stopping the Internet usage, change the connection type to use a proxy server (no a real one of course).

or

You could also change the c:\Windows\HOST file to redirect certain sites like www.hotmail.com (http://www.hotmail.com) to an IP of your choice (real or not).

[sharder8]

I have three teenage kids in the house and in order to control them on my computer, I use the BioLink U-Match Mouse with security programs. I'm the administrator the kids can only go or do what I allow (internet is not one of them).

The mouse has a scan window built into the side and captures your finger print. So only the people authorized by finger print have access to those things the administrtor allows.
http://sysopt.earthweb.com/forum/biggrin.gif
Harder

[jl123]

Thanks for the info guys. http://sysopt.earthweb.com/forum/smile.gif I really appriciate it. As far as the internet access goes...I was going to set it to use a made up proxy and delete the TCP/IP protocols since NetBEUI is also installed for the network.

And yes this computer does have Win98. The main thing i want to do is lock the display properties, internet privledges, and the control panel. It's normal to have to do this to a kid but it shouldn't be this way for a grown woman. http://sysopt.earthweb.com/forum/wink.gif

~Joel

[jl123]

I forgot one thing....

This user is computer literate but to a point. http://sysopt.earthweb.com/forum/smile.gif I'm doubt she knows about networking protocols but she can try and possibly mess things up. So that's why i want to lock down the network properties too. http://sysopt.earthweb.com/forum/wink.gif

Anyone heard of Fortress 101? I remember that a computer at school had that installed and the person who did it locked everything at startup. It was not funny. http://sysopt.earthweb.com/forum/smile.gif It was my computer too...the teacher let me format the drive. http://sysopt.earthweb.com/forum/smile.gif It didn't matter though...it only had MS Office on it and that was it.

Ok so I forgot a few things.... http://sysopt.earthweb.com/forum/frown.gif http://sysopt.earthweb.com/forum/smile.gif

~Joel

[Steve R Jones]

Fortress is a VERY POWERFUL tool for doing what your wanting to do. Its probably expensive.

Another simple thing to consider:

I Jane Doe, here by acknowledge that I have been warned that I am not to “surf” or get on the internet during business hours. I also acknowledge that doing so can and will cause the termination of my employment with ABCD, Inc. Bla Bla Bla, etc etc..


Sign Here:____________

[CMonster]

sharder8 - 3 teenage kids? I'd bet you can find another mouse around the house that you have never seen...ah they probably do all the nasty sites somewhere else. No wonder they spend so much time at the library.


...whatever happened to education and trust with kids? what's next a urin test before being allowed to use the car?


I refuse to live anywhere that I must install bars on my Windows.


Steve R. Jones - I like your simple solution.

[This message has been edited by CMonster (edited 01-20-2001).]

[Fingers]

I've read about something that's included on the Win98-CD, but almost no one that's not an administrator knows about. It's called System Policy Editor, from what I've read, all configurations setting can be password locked, and items such as "Control Panel" can even be hidden.

I'll try to look it up.

System Policy Editor: A Free Windows Lock and Key (http://www.pcworld.com/hereshow/article.asp?aid=7521&pg=7)
You can't control which people can log on to your Windows 95 or Windows 98 system. But with Microsoft's free System Policy Editor utility, you can prevent unexpected visitors from viewing your files or running applications. Though it's likely to be useless against world-class hackers, Policy Editor is effective enough to bamboozle your average office snoop. But be careful: You must follow the steps here faithfully, or the security will be so effective that even you won't be able to break in.


Here's how to install it (http://www.helmig.com/j_helmig/polediti.htm)
Here's how to use it (http://www.zdnet.com/zdhelp/stories/main/0,5594,2215759-3,00.html)

[This message has been edited by Fingers (edited 01-20-2001).]

[GroundZero3]

Hey Steve R Jones i agree FORTRESS is a very good progam. Most of the high schools down where i go use the program.

JaYsin

[jaida]

about locking the control panel it would probely be the easiest for you to just go into control.ini

and at the top it will display something like this:

don't load]
snd.cpl=no
joystick.cpl=no
midimap.drv=no

the command for display is desk.cpl=no
or for network Netcpl.cpl=no

it would be the easiest because if she need access for some reason to the display or anything it would just take her a couple sec. to get access back and i doubt the person knows enough to go into the control ini to gain access back

Just a thought http://sysopt.earthweb.com/forum/smile.gif



[This message has been edited by jaida (edited 01-20-2001).]

[Idnew]

Much information in here. This reminds me of something I forgot about and would like to know the answer to.

During my divorce proceedings one of the things we were arguing about was the household property. I finally got the computor, but the s.o.b. had someone change out the hard drive and put one in that wouldn't allow you to access the Bios. I never could get in the Bios until I changed out the HD. It's only a 2g but might be of some use but not like it is. How would you get the password off of it?

[sharder8]

Steven R. --

They can try another mouse, but it won't allow windows to boot without the finger print! It also requires the finger print for the dial-up to work and for the password for dial-up! If someone doesn't know your "back door" password, your system is locked without the finger print. BTW, the finger print info is stored in the system BIOS and not in the CMOS, so it doesn't help by clearing the CMOS either.

I do trust my kids and they do go on the internet, but not with their friends present. My kids have been good about their surfing, but when their friends are present, it gets to be more "let's go where our parents don't want us to go"!

Harder

[RayH]

Get Tweak UI and hide everything, including Tweak UI!