Childrens Computer - Prevent Access to certain features

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

Childrens Computer - Prevent Access to certain features

Logged in as: Guest

arrSession:exec spGetSession 2,2,25432

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> WSH & Client Side VBScript >> Childrens Computer - Prevent Access to certain features
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: [1]

Message

<< Older Topic Newer Topic >>

Childrens Computer - Prevent Access to certain features - 9/1/2005 2:13:18 AM

Firemarble

Posts: 3
Score: 0
Joined: 9/1/2005
Status: offline

I share my windows xp computer with a teenager.

I am trying to figure out a way to use a login script (preferably VBScript) to prevent access to start menu, and just put 4 shortcuts on the desktop (one for a game, one for internet and one for word, and on to log off the computer) I do not want them to be able to install applications nor do I want them to have access to any part of My Computer or the File system.

Kind of a recap:
1. No Start Button
2. Just Shortcuts
3. No installing software.

I know that the guest account or a limited account can prevent the installation of software. And by using the Group Policy editor I can remove the start menu, only when I do that I loose the start menu on my side as well.

Any help thanks in advance.

Post #: 1

RE: Childrens Computer - Prevent Access to certain feat... - 9/1/2005 2:37:06 AM

sethsdad

Posts: 115
Score: 0
Joined: 4/4/2005
From: USA
Status: offline

The MORON's at Redmont made the product easy enough for a 3 year old to use, but you have to be a rocket scientist to protect the computer from the 3 year old (or the teenager in your case). One thing you can do is to create a "window blocker" script that will allow all of these features to remain active, but kill them when launched. Otherwise I'd say that you are pretty much out of luck because of the all-or-none nature of the XP beast. You can however make your blockers ID dependent, ie if user=dad don't block

(in reply to Firemarble)

Post #: 2

RE: Childrens Computer - Prevent Access to certain feat... - 9/1/2005 3:20:48 AM

Firemarble

Posts: 3
Score: 0
Joined: 9/1/2005
Status: offline

Well I do know its possible. My job does something similar to this. I know they are running a login script from the command prompt window that displays something like running Employee.vbs....

(in reply to Firemarble)

Post #: 3

RE: Childrens Computer - Prevent Access to certain feat... - 9/1/2005 4:30:31 AM

kirrilian

Posts: 628
Score: 3
Joined: 3/15/2005
From:
Status: offline

They use a GPO for this at school, but you should also be able to define this in the Local Security Policy MMC snap in.

_____________________________

Have you searched here ?
VBScript Fundamentals
My Site

(in reply to Firemarble)

Post #: 4

RE: Childrens Computer - Prevent Access to certain feat... - 9/1/2005 4:31:11 AM

mbouchard

Posts: 1916
Score: 16
Joined: 5/15/2003
From: USA
Status: offline

the 3rd one is the easiest, create a user account for them and do not add it into the Admin group. This will prevent them from installing many pieces of software but not all.
You could also take a look at the group policy object (start run GPedit.msc) which if used correctly can help in locking down a system, but if used in correctly can prevent almost anyone from using the system. I am not that up on my GP stuff so would not be of much help here. If you have a 2000 network where you work, they are mostlikely using Group Policy to manage security on the PC's, doing everything via vbscript would not be the best way of doing it.

With that being said, there are pieces of software that will do this, i.e. cyber nanny and the like. This might be able to meet all of you needs.

_____________________________

Mike

For useful Scripting links see the Read Me First stickey!

Always remember Search is your friend.

(in reply to Firemarble)

Post #: 5

RE: Childrens Computer - Prevent Access to certain feat... - 9/1/2005 5:27:53 AM

Firemarble

Posts: 3
Score: 0
Joined: 9/1/2005
Status: offline

I just don't want to spend money on cyber nanny etc.

I wanted to do it in VBScript for the simple fact is my computer is not connected to a network but I can set a Logon script for the user so it executed only when he logged on.

here is what i have so far

for the GP

All Users

Computer Configuration (Enabled)
No settings defined.
User Configuration (Enabled)
Windows Settings
Folder Redirection
   My Documents
   Setting: Basic (Redirect everyone's folder to the same location)
   Path: D:\Users\%USERNAME%\My Documents
Options: show
Grant user exclusive rights to My Documents Disabled
Move the contents of My Documents to the new location Disabled
Policy Removal Behavior Leave contents

Administrative Templates

Control Panel

Policy Setting
Prohibit access to the Control Panel Enabled
Desktop
Policy Setting
Do not add shares of recently opened documents to My Network Places Enabled
Don't save settings at exit Enabled
Hide My Network Places icon on desktop Enabled
Prohibit user from changing My Documents path Enabled
Remove My Computer icon on the desktop Enabled

Start Menu and Taskbar

Policy Setting
Add Logoff to the Start Menu Enabled
Do not display any custom toolbars in the taskbar Disabled
Force classic Start Menu Disabled
Hide the notification area Enabled
Prevent changes to Taskbar and Start Menu Settings Enabled
Remove access to the context menus for the taskbar Enabled
Remove All Programs list from the Start menu Enabled
Remove and prevent access to the Shut Down command Enabled
Remove common program groups from Start Menu Enabled
Remove Documents menu from Start Menu Enabled
Remove Drag-and-drop context menus on the Start Menu Enabled
Remove Favorites menu from Start Menu Enabled
Remove Help menu from Start Menu Enabled
Remove links and access to Windows Update Enabled
Remove My Network Places icon from Start Menu Enabled
Remove Network Connections from Start Menu Enabled
Remove programs on Settings menu Enabled
Remove Run menu from Start Menu Enabled
Remove Search menu from Start Menu Enabled
Remove Set Program Access and Defaults from Start menu Enabled
Remove user's folders from the Start Menu Enabled
Turn off personalized menus Enabled

System/Ctrl+Alt+Del Options

Policy Setting
Remove Task Manager Enabled

Windows Components/Windows Explorer

Policy Setting
Hide these specified drives in My Computer Enabled
Pick one of the following combinations Restrict A, B and C drives only
Policy Setting
Prevent access to drives from My Computer Enabled
Pick one of the following combinations Restrict A, B and C drives only
Policy Setting
Remove Windows Explorer's default context menu Enabled
Removes the Folder Options menu item from the Tools menu Disabled

Windows Components/Windows Explorer/Common Open File Dialog

Policy Setting
Items displayed in Places Bar Enabled
Places to display:
Item 1 MyDocuments
Item 2
Item 3
Item 4
Item 5

The second group policy handles the publishing of the application.

App1
Computer Configuration (Enabled)
No settings defined.

User Configuration (Enabled)

Windows Settings

Scripts
   Logon
    Name Parameters
    D:\Netlogon\app1.vbs

Administrative Templates

Desktop

Policy Setting
Hide and disable all items on the desktop Enabled

Start Menu and Taskbar

Policy Setting
Turn off personalized menus Enabled

As you can see the group policy does not do much except clean the desktop and run a login script.

For the VBScript i have this. But this is bits a pieces that i have found from the net sewn together. From what i can understand about it before i run it is i will let the user run a specific app then log off the computer once the app is closed

On Error Resume Next
Set fs = CreateObject ("Scripting.FileSystemObject")
Set WshShell = WScript.CreateObject ("WScript.Shell")
'Get the username and profile directory
MUser = WshShell.ExpandEnvironmentStrings ("%USERNAME%")
MUserProfile = wshShell.ExpandEnvironmentStrings("%USERPROFILE%")
'Delete icons
fs.DeleteFolder MUserProfile & "\Start Menu\Programs\Accessories",True
fs.DeleteFile MUserProfile & "\Start Menu\Programs\*.lnk"
'Run the app
wshShell.Run "c:\myapp\app.exe"
' Connect to wmi
set objWMIService = GetObject("winmgmts:root\cimv2")
Do
found = false
' List the processes
strQuery = "Select * from win32_process where name='app.exe'"
set colProcesses = objWMIService.ExecQuery(strQuery)
for each proc in colProcesses
   ' Get the reference class linking processes to sessions to get the session object path
strQuery = "References of {win32_process.handle='" & proc.handle & "'} where ResultClass=Win32_SessionProcess"
set colSessionReferences = objWMIService.ExecQuery(strQuery)
   for each oSessionReference in colSessionReferences
     'Get associators of the session object that are user accounts (linked by win32_loggedonuser)
     strQuery = "Associators of {" & oSessionReference.antecedent & "} where AssocClass=win32_LoggedOnUser"
     set colUsers = objWMIService.ExecQuery(strQuery,,48)
       for each user in colUsers
        if user.name = MUser then found = true
     next
next
next
Loop While found = true
'Run the Windows 2003 logoff utility
wshShell.Run "c:\windows\system32\logoff.exe"

(in reply to Firemarble)

Post #: 6

If you found our site useful please link to us <a href="http://www.visualbasicscript.com">VisualBasicScript.com</a>.

All Forums >> [Scripting] >> WSH & Client Side VBScript >> Childrens Computer - Prevent Access to certain features

Page: [1]

Jump to:

New Messages	No New Messages
Hot Topic w/ New Messages	Hot Topic w/o New Messages
Locked w/ New Messages	Locked w/o New Messages

Post New Thread

Reply to Message

Post New Poll

Submit Vote

Delete My Own Post

Delete My Own Thread

Rate Posts