How to combat idiots altering settings on your PC

Guys,

I have a problem that I would like to get sorted out asap. Can anyone advise on the following?

I have 2 PCs set up that are installed for the general public to use but everytime we return to them, the desktop images have been changed to show some sort of xxx or obscene images.

Can anyone advise how to disable the facility to change the desktop or screensaver? Is there something that can be disabled from the regedit files?

Any help will be greatly appreciated...

Mez

 

Returnil.

 

If you are using XP Pro you can use gpedit.msc to modify User Group Policy Settings to prevent wallpaper change.

http://technet2.microsoft.com/windowsserver/en/library/a3c78eb9-92fe-42f5-98ad-ae4ad1abe4c21033.mspx?mfr=true

 

Also make sure the users are running in a LUA (I'm sure that's the case already but...).

 

Unless the users have a need to save files on the computer, which doesn't seem likely for public access, the advice to use Returnil or something similar is sound. With Returnal running, everything that has changed during a session is lost on the next reboot.

Different users could alter settings all day long, one after the other. When it's all over, or one of the users can no longer use it because of some silly change someone else has made, reboot. It comes back up the way it was before anyone changed anything.

 

Returnil and don't forget to use a password. There are alternatives, but you have to pay for it.
I use an alternative, but more as a protection against MYSELF, because I'm one of these idiots in the title of your thread.

 

I've never used it but it's supposed to work well. And it's free!
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

 

I tried that one also recently, but got a message from Windows, that I had 3 days to activate Windows, which is already activated since September 2007.

 

DeepFreeze from Faronics: It's probably one of the best for this kind of job, and reasonably priced.

http://www.faronics.com/

If you try the program, make sure to read the basics first.

 

Hello,
As suggested, Group Policies, the most powerful built-in tool in XP Pro. You can lock the desktp, but also so much more - prevent installs, prevent applications form running, disable control panel, internet options in IE, prevent autorunning of removable drives, disable cd-rom, etc.
Mrk

 

Yup group policies, deny people the ability to change settings in the first place.

 

Gpedit.msc without a doubt is the way to go. No additional software, little\to no chance of conflicts and free\built in. Have been playing with it quit a bit on my resource deprived lap top to increase security. No additional services required and no additional drivers to load so no slow downs. In fact in some cases you may experience a slight speed increase depending on what you disable\prevent.

 

I was about to support Eric's advice but also the others are on equal terms too for what you need.

I would love to suggest Power Shadow to you, since that's the one i use (depending on FD snapshot), and it covers ALL partitions and also with a password. No matter what someone else does to your settings, PS would always return the system back to square one again, but i can't recommend it although if you could still find it, it's a viable alternative.

 

Hmm, I really have to look into this Returnil product. I've been out of the game for quite some time with new stuff but this might be cool. I guess its some type of IDS?

On topic, group policy or Deep Freeze would be my suggestion as well.

 

Easter where do you see the password setting in PS?

Thanks

 

Gpedit.msc does not prevent users from changing a wallpaper using 3-rd party software or does it?

 

Hello,
Sure it can.
Mrk