🚀 go-pugleaf

----------------------------Original message----------------------------
        Speaking of the Policy Editor....  Has anyone tried writing their
own ADM files?  What I would really love to do is remove *SOME* of the
drives and not all of them.  I'd really like to be able to leave places for
people to save their work.

        --Bryan


At 07:27 PM 8/12/96 EDT, you wrote:
>----------------------------Original message----------------------------
>
>>If you're on a network, you can force the use of a mandatory policy
>>which nobody can change except the adminstrator.  This policy can be
>>based upon groups or users.
>
>Yes,  and we have done this in our open access lab.  If you require network
>login in the policy,  students virtually cannot avoid using the policy.  You
>do have to bootstrap the policy with a login to the net,  and POLEDIT can
>disable that (but it will be reset at next login no matter what the student
>changes with POLEDIT).
>
>Add remote registry and remote admin - you've got a nice set of tools.  The
>only problem I've found is that typically you want to update the registries
>remotely en masse.  Our workstations are only on if a student has checked
>out a key,  so the remote registry edit isn't as useful as i suspected.
>
>Remote Admin is quite cool,  especially for your normal user base (I amazed
>one of our business managers when I was able to share her WINDOWS directory
>via remote admin,  and change her desktop while she was looking at it - all
>while we were talking over the phone.  Icons just popped up on her desktop.)
>
>>
>>Setting this up is not easy.  ...
>
>There are a lot of pieces to put together,  and you have to have a server to
>store the policy.
>
>>... I really can't tell you how
>>effective this whole setup is until we let the student get their paws
>>on the computers for a while.
>
>We have been up since december and the locked setups work pretty well at
>making sure the workstation looks the same for each new user logging on with
>no intervention from us.
>
>You can mandate the desktop, start button and program menu contents,  and
>these cannot be modified by students.  Each student gets a clean desktop at
>login.
>
>Application settings can be read into the registry (i.e. netscape) with a
>.REG file in the startup,  or by copying INI files from the server at login.
>This keeps those clever students from setting the netscape home page to
>their personal page (or worse!).
>
>>Also, I understand that for Novell networks, you need to use the
>>Microsoft client for Novell networks not the Novell client.
>
>We are all NT here.
>
>>
>>Another thing you could try  is to use Policy Editor to "Disable
>>Registry editing tools" which is under Local
>>User->System->Restrictions.
>
>Again,  this does not stop a student from walking around with POLEDIT,  or
>downloading it - for non floppy machines.  In fact,  that is how I do my
>maintenance (POLEDIT on a diskette).  Other than that,  I have not found
>alot of ways around this if you have required a network login in the group
>policy (I can think of two).
>
>>Again, you
>>should probably look through the Windows 95 Resource Kit to get a full
>>understanding of how this works.  (I haven't tried this yet, but from
>>the description of it, I would think it would work).
>
>It does,  but the only thing it doesn't prevent is access to dump all kinds
>of games, netscape plug-ins, etc. onto the HD.  That and quickly restoring
>workstations to standard setups are still my toughest problems.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>Dan Henry                  __o          LSU Medical Center
>Computing Support        _ \<,_         <dhenry@lsumc.edu>
>Academic Affairs        (_)/ (_)        (504) 568-8623
>
________________________________________________________
|                               |     Bryan L. Scovill  |
|       My World,               |Netware Adm/Instructor |
|               My Rules        |     C.I.S./T.S.A.S.   |
|                               |         U.N.H.        |
_________________________________________________________