[AccessD] Lock Down PC

Depending on your LAN/WAN facilities, and the PC, it would be advisable to 
make the system only boot from LAN, and to lock the BIOS so it cannot be 
changed.

As usual, all non-maintenance work should be done under a limited access 
userid.
So - restrict access to folders by ownership, and only allow access to the 
required folders or files to that user.
Not forgetting to disable any USB, connection facilities to avoid BYOD

JimB

----- Original Message ----- 
From: "John Bodin" <jbodin at sbor.com>
To: "Access Developers discussion and problem solving" 
<accessd at databaseadvisors.com>
Sent: Tuesday, March 12, 2013 1:21 PM
Subject: Re: [AccessD] Lock Down PC


> Hi Brad,
>
> Since it is XP, Microsoft *had* a program called Steady State that allows 
> you to lock down the computer to only show icons for applications you want 
> available to users of the machine, as well as what can be changed and run 
> etc.  It allowed you to set a timer to auto-logoff users after say 30 
> minutes, reboot and restore last image so that if someone were able to 
> install say Chrome and you didn't want them to, next reboot the image 
> would overwrite this install.
>
> They have discontinued it so you have to do some searching to find the 
> installer.  It is out there and a doc to go with it. Still works (I have a 
> few machines in common areas at some clients with this.)  Win7 can be 
> setup similarly but you have to use some tools (free) and Group Policy 
> manipulation to get it done.  There are docs out there describing this. 
> Good luck.
>
> John
>
> -----Original Message-----
> From: accessd-bounces at databaseadvisors.com 
> [mailto:accessd-bounces at databaseadvisors.com] On Behalf Of Brad Marks
> Sent: Tuesday, March 12, 2013 8:59 AM
> To: Access Developers discussion and problem solving
> Subject: [AccessD] Lock Down PC
>
> All,
>
> We have just installed a PC in a production department that has never had 
> a PC before.  This PC is running XP SP3.
>
> There is only one application on this PC.  This is an inquiry system built 
> with Access 2007.
>
> Because of where this PC is located, I have some concern that people in 
> this department will "experiment" with other things on this PC.
>
> Is anyone aware of a free or inexpensive tool that will enable us to lock 
> down this PC so that the only thing available is the Access inquiry 
> system?
>
> Thanks,
> Brad
>
> -- 
> AccessD mailing list
> AccessD at databaseadvisors.com
> http://databaseadvisors.com/mailman/listinfo/accessd
> Website: http://www.databaseadvisors.com