Lock Desktop

[learningtech]

Experts,

I am working as an IT Support Supervisor at an Outsourced Site [ call center]. We have 3 training rooms with more than 75 desktops installed in them. .We are using a single username on each local machine . The username is "Training.user" with password as "password".

Following is the tasklist that we need to do on each desktop

1. Disable the proxy options in Internet Explorer so that no one can edit them .
What we tried ~~ HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]
"NoBrowserOptions" and (without quotations) with a data value of "1

Now this option does work but any user can still access the Internet Options using Right Click on IE icon. We need to lock it permanently so that no user can make any changes. Is there an option to disable registry editing

I have tried entering a ProxyServer using this steps
[[[To disable Internet Access for the current logged on user, do this:

Open Regedit

Navigate to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings

Change:

'ProxyEnable' to 1 (one)

Change:

'ProxyServer' to an invalid network proxy address. Example: 10.1.0.1:2222

The above information will block Internet access to Internet Explorer, MS
Office & other applications that rely on the proxy service.

Next, to disable changes to the proxy server settings, do this:

Navigate to:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel

Create the following keys:

'Connection Settings' (DWORD) Value = 1
'Connwiz Admin Lock' (DWORD) Value = 1
]]

2. Permanently remove all games in Windows 2000.
What we tried is
HOW TO: Remove All Default Games from a Computer in Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314614&sd=tech
Even after removing games from Add/Remove programs they can still be accessed using start->run menu and type exe name .

Does anyone of you guys have .reg file which i can reuse witth minimum modifications .

Thanks

 

[jihiggs]

why dont you just delete the games. and use a switch or somthing to block port 80.

go tell your alien brothers, that ronnie cordova says they're gay!!! <A HREF="http://sockbaby.com" target="_new"> sock baby </A>

 

[riser]

Add/Remove Programs - Windows Components - Remove them, OR just delete the Link under Programs.

Disable Internet?
You can create a GPO to block it, use a VLan if the company supports that technology (I assume it doesn't), what about creating a Local Security Policy.. The GPO would work best if you can't block port forwarding requests.. you would just assign those PCs an IP range.. Let's say 10.1.1.25 to 10.1.1.100 and Deny them Port 80 access. Internet problems solved.


Riser

 

[folken]

If you have server2k w/ the xp GPO update or server2k3 there might be an option in the GPO to disable the Internet Options tab. It has been a bit since I last messed w/ a 2k3 GPO though so I could be mistaken. Then push down a bogus proxy using the GPO (or your reg fix) and there ya go.

You could also just put a bogus default gateway. Regular users shouldnt be able to change ip settings. Though that would require setting statics to the bunch. I can't recall if you can push down a default gateway from a GPO.

<A HREF="http://www.folken.net/myrig.htm" target="_new">My precious...</A>

 

[sobelizard]

gpedit.msc

And you're supposed to be a supervisor?

<b><i>Powered by <font color=blue>V</font color=blue><font color=purple>E</font color=purple><font color=red>R</font color=red><font color=purple>T</font color=purple><font color=blue>O</font color=blue></b>
Fueled by <b><font color=blue>CL-</font color=blue><font color=red>ONE</font color=red></b>