I set up computer labs with HP laptops and using Windows 7 Professional. The computers are set up without password protection and students have figured out how to change the background and erase the one program ICON on the screen.
I need help to prevent students from making changes.
Thank you.
Bill
Some schools have been using a program called DeepFreeze[?] to return a computer to pristine condition after each use, or, at the end of the school day. Other than something similar to DeepFreeze, the only other pathway to use each computer's passworded admin acct to create open-no-password guest accts with very limited access to Windows OS and desktop.
Found it:
Instant System Restore Software for Multiple Computers | Deep Freeze ...
Instant System Restore Software for Multiple Computers | Deep Freeze Enterprise
Faronics Deep Freeze makes PCs indestructible. It protects endpoints by Freezing a snapshot of a computer's desired configuration and settings defined by the IT Admin. With an instant reboot, any unwelcome or unwanted changes are removed from the system, restoring it to its pristine Frozen state.
If they have physical access to the computer there is very little you can do.
Some way's you can lock down a computer.
1: You could password protect the BIOS and set it to only boot up on the C: drive.
In most computers this can be bypassed and reset by removing the CMOS battery or using a jumper wire or button to reset it to factory default.
2: You could give them a non admin account and restrict what programs and setting they can use.
In about five or ten minutes they could easily add an admin account and change whatever they like. I will not get into the method of how to do this but it is as simple as booting into another OS and changing the name of two file's and running a dos command.
Most schools buy computers and software that are designed to prevent the students from changing things on the computers.
As the computer is Win 7 pro, you can change some Group Policy to limit their action.
Group Policy has so many options that setting it up isn't a simple task. But almost everything can be restricted.
I once did that on a public computer on a dentist office. People had access only to some programs and no access to drive C:, only USB flash drive.
An mentioned, you must set BIOS to not allow booting from any other drive than C: and protect BIOS with a password.
Remember: You're a giant tyrant and alone against multi well equipped army. You have to be good. Very good.
Quote