windows xp client setup

[zombine210]

hi,
as a learning experience, i'll be setting up a home server to host files for about three or four users (roomates). right now i want to set up the client machine for these users using windows xp. are there any particular security options that i need to be aware of?

can i 'lock down' the c:/ drive so that the users don't save stuff on it, but use the server instead? or should i allow them to?

i'd rather not have them install updates, but want to allow them to install and run all programs, but the only user accounts are admins and limited which one do i chose?

thnx

 

[deanj20]

hi zombine210,

can i 'lock down' the c:/ drive so that the users don't save stuff on it, but use the server instead? or should i allow them to?

i'd rather not have them install updates, but want to allow them to install and run all programs

If you're going to allow them to install and run all programs, then you definitely don't want to lock down C:\

Your logic seems backwards for an admin - usually you want to install updates and don't want users installing any program they please...

I was an admin for the research lab network when I was in college. We had everything locked down. Users couldn't install anything without me or the other admin inputting a password.

We used roaming profiles for all the Windows XP computers, so all the crap in My Documents (pictures, music, documents, and program settings and preferences) was stored on the server. I believe we had a quota on the size their profile could take up.

Worked out pretty well for us. But that's a little different setting than what you're talking about - I guess you have to ask yourself two questions:

1. What do I want the users to be able to do on (or to) their computers?
2. What do I NOT want the users to be able to do on (or to) their computers?

Riddle me that!?

 

[zombine210]

hi zombine210,



If you're going to allow them to install and run all programs, then you definitely don't want to lock down C:\

Your logic seems backwards for an admin - usually you want to install updates and don't want users installing any program they please...

I was an admin for the research lab network when I was in college. We had everything locked down. Users couldn't install anything without me or the other admin inputting a password.

We used roaming profiles for all the Windows XP computers, so all the crap in My Documents (pictures, music, documents, and program settings and preferences) was stored on the server. I believe we had a quota on the size their profile could take up.

Worked out pretty well for us. But that's a little different setting than what you're talking about - I guess you have to ask yourself two questions:

1. What do I want the users to be able to do on (or to) their computers?
2. What do I NOT want the users to be able to do on (or to) their computers?

Riddle me that!?

hmm..

it's two adults and one kid, possible a child, that will be using this machine.

i want to give the adults rights to install programs like ms office, chat clients and printer/camera drivers, etc.

but i don't want them to do critical changes to the machine, like updates adn i don't want them dorking with the root directories. i want to be the one doing these things, to have better control of the machine.

in other words, i don't want them to bother me whenever they buy a new camera or whatever and need to install some driver or software for it.

i'm starting to think this will be very difficult as they usually don't bother loging out of their accounts and they just let the kids use whatever user account is on at the time.

i really wanted to set up a server with file folders for each user and make them accessible across the network. right now their files are all over the place, some on their mydocuments folder, some on c:/ drive, some on the backup disk, some on the desktops, etc.

any ideas how i can accomplish this. i'm starting to think instead of having a file server, just have it do backups periodically of the user machine.

 

[deanj20]

In that case, I suppose you could lock out every directory except Program Files, System32 and their home folder on the server. Program Files and System32 will have to be password protected to deter the kids from installing unwanted software. Of course, they should be totally locked out of everything on the server except their home folder, for obvious reasons.

Having the server backup the computers periodically is a good idea, assuming you have the room for it.

i don't want them to do critical changes to the machine, like updates adn i don't want them dorking with the root directories.

Out of curiosity, why are you so concerned about users doing updates? Are they inclined to do so? It's been my experience that most users never update anything. EVER. (ever).

A majority of the time, updates will have no adverse reactions... just wondering... I guess you just want to know exactly what version of what is installed?

I think you'll be able to get something going. I mean, what's the worst case scenario? Someone d/ls a virus and you have to reformat/reinstall their box? No biggie, right?

How computer-saavy are the adult-users? Will malware be a problem? Also, do they all log in on all the computers? If so, I would definitely look into roaming profiles. Also, you might consider setting up one box exactly like you like it, and then ghosting the disk image and using it for the others...

Just my thoughts... have fun!

 

[zombine210]

In that case, I suppose you could lock out every directory except Program Files, System32 and their home folder on the server. Program Files and System32 will have to be password protected to deter the kids from installing unwanted software. Of course, they should be totally locked out of everything on the server except their home folder, for obvious reasons.

that sounds like too much trouble...

Having the server backup the computers periodically is a good idea, assuming you have the room for it.

i plan on installing a sata controller card and put in a terabyte drive, or two. i don't know if i should go for a mirror raid or just single disks. the actual data (photos, videos, music, documents, etc.) would be on the client machine and then replicated to the server; i think that would be enough redundancy. however, with the videos and photo collections growing, the 320Gb drive on the client machine might fill up quick.

Out of curiosity, why are you so concerned about users doing updates? Are they inclined to do so? It's been my experience that most users never update anything. EVER. (ever).

A majority of the time, updates will have no adverse reactions... just wondering... I guess you just want to know exactly what version of what is installed?

yeah, something like that. i guess i don't want them putting stuff on there randomly, like iE8 or microsoft drivers.

I think you'll be able to get something going. I mean, what's the worst case scenario? Someone d/ls a virus and you have to reformat/reinstall their box? No biggie, right?

yeah, i suppose so. so far the worst that's happened is there are a bunch of icons (my computer, my documents) were renamed to random characters, lol

How computer-saavy are the adult-users? Will malware be a problem? Also, do they all log in on all the computers? If so, I would definitely look into roaming profiles. Also, you might consider setting up one box exactly like you like it, and then ghosting the disk image and using it for the others...

they're not as bad as they used to be i trained them well

they all use just one machine. at the moment they are using the pentium 3, but i'm going to give them teh NES and turn the P3 into the server.

they like to go to social sites and chat and online flash games, with the occasional office documents. they should know by now not to put junk on it, but you never know.

Just my thoughts... have fun!

thanks, i think i'm going to give them admin rights on the client machine. then, i'll map a drive from the server and have XP run periodic backups to it. i'll have an active anti virus on the server to guard against viruses.

that would be the simplest thing to do for now; i'll see how that goes.

 

[deanj20]

i'm going to give them teh NES

Are you drunk or just crazy? You must be both...

That thing is friggin' awesome - what are you thinking!!?

I guess it's the chase not the quarry huh?

So sad...

 

[zombine210]

Are you drunk or just crazy? You must be both...

That thing is friggin' awesome - what are you thinking!!?

I guess it's the chase not the quarry huh?

So sad...

lol
i really have no use for it. i use my laptop for school and work. and i already have a gaming rig for more intensive stuff. and i kind of just built it for the fun of it cause i had some extra cash.

and i'm supa' nice

edit - it will always be mine; just like the P3. i built that machine back in '01 and now i'm taking it back. still runs strong.