Aces High Bulletin Board

General Forums => Hardware and Software => Topic started by: Raubvogel on August 19, 2003, 10:50:56 AM

Title: Win 2k question- System Admin stuff
Post by: Raubvogel on August 19, 2003, 10:50:56 AM

Here's the scenario:

I have some PCs that I need to setup for use by our inmates (I work in a prison).

I want to set them up so that they are unable to save anything to the hard drive. Anything they want to save has to go on a floppy.

What's the best way to do this?

Title: Win 2k question- System Admin stuff
Post by: Furious on August 19, 2003, 11:33:36 AM

permissions.  give their usernames read access only.

Title: Win 2k question- System Admin stuff
Post by: Trell on August 21, 2003, 10:09:18 AM

just make sure to give them read write access to the floppy

Title: Win 2k question- System Admin stuff
Post by: qts on August 21, 2003, 05:03:18 PM

Difficult. The user needs somewhere on the HDD to write temporary files - typically c:\temp or c:\documents and setting\\...\temp or both. The user must have Change permissions to this area. Further, users must have rights to create or modify their own profile if you're using individual usernames.

It gets worse if the machine isn't on a network and you're not using mandatory profiles.

You'll need to clear down any common temporary areas between users - have a cleardown script as part of the login script or in the Startup folder (better is in the registry).

Go to MS's website and grab their documents on security, policies, profiles, and group policy objects.

It'll be an interesting exercise.