Configuring and Securing Multiple Computers

[maverick140991]

Hi,

I have to maintain a computer lab containing around 20-25 computers. What is the most efficient and fastest way to install the same software set on all of them, without doing it manually on each computer. All the computers are networked together.

Also, as these computers will be used publicly and mostly for LAN Gaming, I want them to be ultra-secure. I need no removable storage to be enabled on these computers, no right clicks, no system properties, and no access to all the stuff worth tweaking, no deletion of data from the drive, etc. I want it to be impenetrable for the average techie user, so a good, lightweight security solution is essential. Keep in mind that the PCs are a bit old (P4s, 512 megs of RAM, they run XP) Is cloning/imaging a good idea so that it can be restored to its previous state once it has been used? A lot of questions, hoping for some answers.

Thanks in advance.

 

[tejaslok]

use ADS in windows server 2003 and create a server with it so that u can format anytime u wish without a disc and use deepfreeze if u are using it for games or else use cafezee - the cyber management software and if its a cyber zone then use prepaid option or else remove user login and let the rest of the options be as it is

 

[maverick140991]

What does ADS do exactly? Formatting is ok, but i want a better way to install multiple softwares rather than doing it manually on each PC. Does DeepFreeze remove user generated files (such as documents) once you restore it? Nevertheless, I want to secure the computer and cut down the access rights of the users. Any help?

 

[arpanmukherjee1]

try nLite

find registry and policies for hiding drives, folder etc....
backup the keys as .reg file
make a .bat file to run the reg file
place this bat file in "runonce" folder. this bat will be executed whenever u install the os

 

[maverick140991]

Thanks

 

[hjpotter92]

try nLite

find registry and policies for hiding drives, folder etc....
backup the keys as .reg file
make a .bat file to run the reg file
place this bat file in "runonce" folder. this bat will be executed whenever u install the os

But an average techie(~10th class) can undo most of those settings.

 

[arpanmukherjee1]

But an average techie(~10th class) can undo most of those settings.

SERIOUSLY !!!!!

i can point u TONS of guys that r software engineer and they cant open regedit, let alone change the settings.

hell, they dont know how to open programs until they r on the start menu !!

what u say i right for very VERY few people.

 

[hjpotter92]

But who said that software engineers are techie?

 

[motobuntu]

Your best bet is to Install Windows Server 2003 on a machine with better config (say dual core proccy, 2-4 gb ram, hd 250 gb) then make it domain controller, add all other machines to the domain, create user ids on the domain controller which will be used to login to clients.

Now you can do most of the task sitting on the domain controller. you can deploy softwares on all machines using Remote installation services feature of server 2003.

If you don't want to use MS technologies, you can do the same with linux directory services.