PC Lockdown

Discussion in 'other anti-malware software' started by Noob, May 10, 2011.

Thread Status:
Not open for further replies.
  1. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    I have a cousin which will be coming to my house soon.
    He's kinda geeky and i'm pretty sure he WILL MESS UP MY COMPUTER when i'm working because my PC is the only desktop in the whole house.

    So, right now i'm planning to create an user for him and lock it down COMPLETELY.
    So i need ideas and probably tutorials.
    I want the user to be locked down like in companies computer where you cannot do a single thing unless you have access to admin rights (Which i will have)

    I need ideas.
    Currently what comes to my mind is LUA + SRP + EMET and Avast! probably.
    Any other ideas?
     
  2. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    or just Defensewall or even OA pasword protected so no instalations are allow:D
    for OA when the gui is lockdown it will denny any instalations in your system unless is trusted but if you want you can also configure for trusted vendors to be block if you want to
     
  3. cm1971

    cm1971 Registered Member

    Joined:
    Oct 22, 2010
    Posts:
    727
    These are good suggestions. Also Returnil. With virtual mode enabled he can do whatever he wants and after a reboot all will be like it was before he came.
     
  4. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
  5. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Yes. That's probably the most easy way to do it actually. But if you don't like Returnil then you can of course use a similar app.
     
  6. x942

    x942 Guest

    It depends on just how geeky he is. Does he know how to bypass windows passwords? If so not much you can do besides FDE and forcing him to use a live CD. If he isn't that geeky or a hacker like me than all you need is LAU + SRP +EMET as you said or force him to use a live CD and BIOS lock him from booting the HDD.
     
  7. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Actually, you shouldn't give him live cd rights, because that's how passwords are usually changed. Not to mention other possible destruction of the hard drive without restrictions.
     
  8. buckrogers

    buckrogers Registered Member

    Joined:
    Jul 30, 2010
    Posts:
    13
    My suggestion would be to take your hard drives with you to work or leave it in the trunk of your car and let him run a LINUX distro live CD off of RAM. No password is safe when he is physically there... there are many software out there that can bypass windows without you knowing it. Good luck!
     
  9. Kernelwars

    Kernelwars Registered Member

    Joined:
    Aug 12, 2010
    Posts:
    2,155
    Location:
    TX
    Follow the wiseman and you shall overcome everything my good friend:)
     
  10. Konata Izumi

    Konata Izumi Registered Member

    Joined:
    Nov 23, 2008
    Posts:
    1,544
    or Returnil :)
     
  11. Kernelwars

    Kernelwars Registered Member

    Joined:
    Aug 12, 2010
    Posts:
    2,155
    Location:
    TX
    indeed :thumb:
     
  12. Spysnake

    Spysnake Registered Member

    Joined:
    Apr 11, 2009
    Posts:
    187
    I would probably not let him at the computer at all, that seems to be the best solution! :D

    Some kind of virtualization seems to be the way to go for you, I think I'd say Returnil too.
     
  13. PJC

    PJC Very Frequent Poster

    Joined:
    Feb 17, 2010
    Posts:
    2,959
    Location:
    Internet
    - Sandboxie
    [+]
    - One (1) of the following: Returnil, Shadow Defender, Deep Freeze.
     
  14. lordraiden

    lordraiden Registered Member

    Joined:
    Jan 30, 2006
    Posts:
    3,067
    +1
    DeepFreeze or any other similar software like ShadowProtect or Shadow Defender, it's all you need.
     
  15. Yanick

    Yanick Registered Member

    Joined:
    May 3, 2011
    Posts:
    269
    Heres useful feature of Returnil: Virtual Mode Always On
    You can lock the interface with password too :D
    (Hope you can see the pic).
     

    Attached Files:

  16. Woody777

    Woody777 Registered Member

    Joined:
    Aug 29, 2006
    Posts:
    484
    Keriver 1 Click Restore Free. Make a baseline image after he leaves Restore to the baseline.
     
  17. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,042
    I agree. If I can't trust someone, they just don't get to use my computers. Doesn't matter who they are.

    Pete
     
  18. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    Hahaha thanks for suggestions.
    I knew someone would mention Deep Freeze :D They had those on my school computers . . . What a PAIN! :rolleyes:
    I don't think he knows how to reset passwords so that's pretty much all i'll need to do. (Aside from denying all rights to all folders except a few ones) :thumb:
     
  19. alex_s

    alex_s Registered Member

    Joined:
    Aug 13, 2007
    Posts:
    1,251
    Does this mean you want to block Windows updates and other trusted software updates? (they may be critical security updates, BTW).
     
  20. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    560
    Except if he´s running an admin account and he has the bad luck of getting infected with TDSS, then Deep Freeze will not protect you.
     
  21. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    Hahaha i may have sounded a bit too much with "lockdown" but anyways that's what i basically wanted to do.

    I already have the ideas in mind. Thanks d00ds for recommendations! :thumb:
     
  22. cheater87

    cheater87 Registered Member

    Joined:
    Apr 22, 2005
    Posts:
    3,124
    Location:
    Pennsylvania.
    Take out the HDD, power cable, keyboard and mouse :p
     
  23. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
    Set a password to access BIOS. In BIOS, disable booting from removable media (floppy/optical/usb).

    Choose your flavor of protection then with either the deepfreeze/shadow method or simply a restricted account. Either you reboot to a clean slate or you simply don't let him make changes.

    Sul.
     
  24. Konata Izumi

    Konata Izumi Registered Member

    Joined:
    Nov 23, 2008
    Posts:
    1,544
    copy my setup and follow Sully's suggestion above this post. :D :thumb:
     
Loading...
Thread Status:
Not open for further replies.