Biggest Project to date.......

ace2109 · 22 Oct 2007 at 21:29

Hi guys,
This will be my biggest project to date. A local charity have asked me to setup some new computers for them in addition to their exisitng ones.

Basically what i was thinking of doing is this:

All the machines need to be limited right down to the bare basic's, i was thinking of doing this through the registry???

The only machines that dont need limiting are the office machines they are fine just plug them into the network and thats it.

But the other machines need to have parental controls and such software to stop the young kids using them gaining access to unwanted material.

I was going to stop access to sites such as bebo using the router and then filter out key words like "P**N" etc etc using some sort of software, what do you guys think????

ace

Peace · 22 Oct 2007 at 21:57

you could use K9 from Bluecoat to filter your web traffic, it's free and does a better job then using key words on the router.

ace2109 · 22 Oct 2007 at 22:06

i was having a look at that just there now mate, it seems to be what im after i was also having a look at windows steadystate to control windows access and things but i thibk limiting down through the registry is a better option.

hybrid · 22 Oct 2007 at 23:12

CensorNet V3 for web filtering and proxying.

I take it this project is all in the same building/site?

Are the other PC's just 'cybercafe' style machines open for anyone to use?

Caged · 22 Oct 2007 at 23:51

Use www.opendns.com for web filtering, and upload a version of your picture that is readable

ace2109 · 23 Oct 2007 at 22:59

hybrid said:
CensorNet V3 for web filtering and proxying.

I take it this project is all in the same building/site?

Are the other PC's just 'cybercafe' style machines open for anyone to use?

The pcs in the cafe are open for anyone to use, ie will display Internet Explorer all the time and thats it.

I am going to disable explorer.exe from loading automatically when windows starts but how do i get internet explorer to load automatically????

encephalopathy · 24 Oct 2007 at 09:00

put the shortcut to iexplore.exe into the startup folder??

#Chri5# · 24 Oct 2007 at 09:33

Anychance of a diagram that doesn't make me think I'm going blind?

Have you already got the internet cafe PCs? If not, consider something like a Wyse WinTerm. They have IE 6 in ROM and are simple to lock down - much less agro than a PC IMHO.

I'd suggest something like a SonicWall TotalSecure 10 or 25. That includes content filtering, anti-spyware, gateway anti-virus for a 1 year.

ace2109 · 24 Oct 2007 at 22:12

encephalopathy said:
put the shortcut to iexplore.exe into the startup folder??

I cant do this, as i will not be using explorer.exe and im nearly sure the startup folder only starts programs after the explorer.exe has loaded.

ace2109 · 24 Oct 2007 at 22:15

#Chri5# said:
Anychance of a diagram that doesn't make me think I'm going blind?

Have you already got the internet cafe PCs? If not, consider something like a Wyse WinTerm. They have IE 6 in ROM and are simple to lock down - much less agro than a PC IMHO.

I'd suggest something like a SonicWall TotalSecure 10 or 25. That includes content filtering, anti-spyware, gateway anti-virus for a 1 year.

Yea they had already purchased everything from a high street retailer :mad:

.

They are doing this on a very tight budget in fact i had to talk them round to letting me get a router for them, they were just going to use an awful little usb thingy, hateful little things.

ace

Fr0dders · 24 Oct 2007 at 23:05

what version of windows are they on ?

im hoping they've got vista business or XP professional on

with those its very easy to lock down the entire PC, even so far as disabling the ability to right click, through the built in policy editor

if its windows XP home on the other hand .... not as easy.

regarding the web traffic

personally id be knocking up a web proxie server for them out of old bits. An old pentium 4 machine would do nicely. Then just use some free software to turn it into an internet proxy and enable content filtering on that

then make sure the PCs that use the proxie are on a different subnet to the main one, so they cant access the internet unless they use the proxie

encephalopathy · 25 Oct 2007 at 10:57

a little confused

explorer.exe = windows explorer
iexplore.exe = internet explorer

not sure re startup folder contents not running unless explorer.exe is started

but - have you looked into modifying the autoexec.bat file to run the programs you want at startup?

Fr0dders · 25 Oct 2007 at 14:11

does IE even work properly without explorer running ? have you tested this. IE can be really funny about what parts of windows it wants running before it will work properly.