[11818] in Public-Access_Computer_Systems_Forum
Re: Win95 Security
daemon@ATHENA.MIT.EDU (Public-Access Computer Systems For)
Fri Nov 14 20:27:16 1997
Date: Fri, 14 Nov 1997 10:05:00 -0600
From: Public-Access Computer Systems Forum <LIBPACS@UHUPVM1.UH.EDU>
To: PACS-L@LISTSERV.UH.EDU
Reply-To: Public-Access Computer Systems Forum <PACS-L@LISTSERV.UH.EDU>
3 Messages; 95 Lines
*-----
From: "Jeffrey A. Trimble" <jtrimble@pgh.auhs.edu>
At 03:56 PM 11/13/97 -0600, you wrote:
>----------------------------Original message----------------------------
>Our public machines have used Windows 3.11 and we have had a good handle
>on making them "secure" and "reliable"... Now we are getting ready to
>change to Windows 95 machines. Can anyone point us to some tips on making
>these machines "secure" so they cannot be harmed and "reliable" so they
>always go back to the original configuration? We do not use a local area
>network so servers are not an option.
We are using Microsoft's "Policy Editor" that "locks" down the PCs from
unwanted user control. Right now our users cannot get to the "run" feature
in Windows 95 and the desktop is clean--no "my Computer" no "neighborhood
network", none of that stuff. The policy editor resides on our server with
a policy file residing on each workstation. The editor let's you customize
it by the person signing onto the network. Some authorizations/userids let
the PC act as a normal PC with all the Window 95 functions.
Caveat: Microsoft will give NO support to the editor. It's a "learn as
you go" procedure.
Jeffrey A. Trimble
Health Information Specialist
Health Sciences Library
Allegheny University of the Health Sciences
Allegheny General Hospital
jtrimble@pgh.auhs.edu
412.359.4648 (phone)
412.359.4420 (fax)
*-----
From: Bill Hudson <bhudson@lancaster.lib.pa.us>
Hi Catherine,
Here we use a security program called Fortres 101. It allows you to lock
down essentially all Win95 functions except those you want patrons to
access. I think a current site license is around $300, not a bad price
considering the small amount of time it takes to install it and the time
it saves you in repairing hacked machines. I have been very satisfied
with its performance. I recently received an ad for a similar program
called WINLOCK from Boxware (www.boxwareinc.com). I don't have any
experience with this program but the ad listed the price at $159.00 for
a site license, so it might be worth checking out.
Be advised that these programs protect the hard drive (to a degree) and
disable parts of Win95 like the Start button, Windows Explorer, My
Computer, etc. They do NOT disable individual menu options in programs.
For example, if you let patrons use Wordperfect or Netscape on a locked
machine, using the file menu commands they might still be able to wreak
a little havoc by overwriting files. Because many programs need to save
to the hard drive as part of normal operation, it is impossible (as far
as I can tell) to completely lock down every folder on your hard drive
and still have all of your programs work. To disable menu options in
programs such as save, chat or mail, we are looking at Cooler (from the
same company that produces Fortres) and IKIOSK (sorry, don't have the
site address handy). These programs allow you to extract the menu
options from individual programs and disable those you don't want
patrons using.
There are a number of other programs that function as those I have
listed. I suggest you check out the archives for PACS-L and WEB4LIB to
find out about them. Use the keyword security and you should get a
number of useful hits.
If you want a home grown solution, check out the July '96 issue of PC
MAGAZINE, page 357. In the User-to-User column, Neil Rubenking tells you
how to use the Policy Editor to lock down Win95. I haven't tried this
one but it does have the advantage of being free.
Hope this helps.
Bill Hudson
--
****************************************************************************
Bill Hudson, Library Technology Coordinator
Lancaster County Library
125 N. Duke Street, Lancaster, PA 17602-2883 USA
Voice: 717.396.9313 ext. 169 Fax: 717.394.3083
Email: bhudson@lancaster.lib.pa.us
*-----
From: Blazewski <blazewsk@sls.lib.il.us>
Michelle Blazewski
Green Hills Library
E-mail address: Blazewsk@sls.lib.il.us
I have found a program that we use it's called winshield you can block
out saving on the hard drive. and from changing the settings and shutting
down the computer without a password. If you need more information
please e-mail me.
