dvandervelde
Premium
join:2003-02-11
Abbotsford, BC
clubs:
1 edit | Setting Up Public PC in Church Library
We want to put a Public PC in our church library for use by church members to use during office hours. We want it to be available for running office, internet, etc. apps.
I'm looking for any tips or help in setting up and securing such a setup.
Thanks.
PS - We're using Vista Home Premium.
Note - Mods, if there is a better forum for this post, please move it or IM me. Thanks. |
|
Justakiwi
Premium
join:2004-11-24
New Zealand
clubs:
| I'm no expert but you'd want to do (at least) the following:
-run a firewall
-run a reputable AV
-set the account up as a limited account only - you don't want users changing settings, installing programs etc.(I'm assuming you're not intending to set them up with individual logins but if you are, same applies)
-I haven't used Windows for some time so I'm not sure where to disable it (if you even can) but you probably don't want users downloading stuff (music, applications, screensavers etc)
-if you're not using individual logins remind users that anything they save on the computer will be accessible to everyone. They might want to save to pendrive, floppy, CD etc if they are working in applications etc.
--
"Stand up and walk out of your history" ~ Phil McGraw |
|
jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland | reply to dvandervelde
Put on Knoppix or Ubuntu live-cd. No maintenance, no privacy and no security problems. After each user, they can simply restart the computer and its 100% clean again. |
|
dvandervelde
Premium
join:2003-02-11
Abbotsford, BC
clubs: | Will that work with our existing apps? |
|
jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
| said by dvandervelde  :Will that work with our existing apps? Apps? Well, Ubuntu has OpenOffice which is prettymuch the same as MS Office. Im not sure about Knoppix. The best part is, that it is 100% free.
--
My computer security & privacy related homepage »www.markusjansson.net
Use HushTools or GnuPG/PGP to encrypt any email before sending it to me to protect our privacy. |
|
Greg_Z
Premium
join:2001-08-08
Springfield, IL
 ·Comcast
| reply to dvandervelde
Problem with something like Vista Home series, is that you cannot lock the OS down. You are better off going with something like XP Pro, Vista Business, or Linux. If the church cannot afford the cost of an alternative OS with the administration that goes into it, then lock Vista Home Prem. down with the Parental Controls to only allow what you want the users to do, and use Security to its full advantage to only allow the "Guest" user to access what you want them to do. |
|
Greg_Z
Premium
join:2001-08-08
Springfield, IL | reply to jansson_mark
Knoppix has OpenOffice, and pretty much the same that are on the other editions. |
|
ElJay
join:2004-03-17
 ·Great Works Internet
3 edits | reply to dvandervelde
I'd go with XP Pro and try out Windows SteadyState. If you want to stick with Vista, I'm sure a Vista version of SteadyState will be out eventually, maybe around the time SP1 ships. |
|
caffeinator
Coming soon to a cup near you..
Premium
join:2005-01-16
Spokane, WA
·WebBand
2 edits | reply to dvandervelde
Not to be too cynical, but I'd suggest calling your church's lawyer and setting up a mandatory Terms of Use and release form for those using it. Also a login policy and logging.
Think Public Library setup here. No allowing any writing of files to disk at all, only removable media. And remember, any smart kid on the 'Net these days can load a Linux LiveCD and own your box utterly. I could use a single floppy dish and reset any windows password...just FYI.
So, disable booting from anything but the hard drive and password the BIOS with a stong password. BIOS's can be cracked easily, but it'd stop most people.
Just imagine when some body's kid finds porn or whatever on the evil Internet. Or Johnny Kiddie turns it into a zombie. Or worse.
After all, you are taking about a physically accessible location, which is virtually impossible to secure in totality. And, if it's going to be using Wi-Fi then you have a whole new set of complications to safeguard against. (i.e. pervs/criminals in the church parking lot using the connection...etc)
You would be liable for acts committed on that computer belonging to the Church whether you knew about it or not. Same sort of deal as setting up a hotspot, and same risks.
If you think that you'd be ok because it's only "good christian people" using it, well, that's pretty naive IMHO.
You sure you want to really do this?
In my church, only the staff uses the Church computers.
For good reason.
-CaFF
--
My 9/11 Tribute..online since 9/14/01
Need an Avatar? Check out Wafen's Avatar Pages |
|
Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:
| reply to dvandervelde
said by dvandervelde :We want to put a Public PC in our church library for use by church members to use during office hours. We want it to be available for running office, internet, etc. apps. I'm looking for any tips or help in setting up and securing such a setup. Setup the PC with Deep Freeze.
»www.faronics.com/html/deepfreeze.asp
Regards,
Doctor Olds
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time? |
|
