windows 7 - Limiting user privileges in an internet cafe setting

07
2014-07
  • lebhero

    I am trying to set up a small internet cafe with 3 PCs.

    I want to make them secure and ensure that the users don't have full rights on the PC they are working on. For example, they shouldn't be able to start Task Manager, access the D: drive, or install or remove programs.

    How do I configure these PCs appropriately for a cafe like this? Are there tools to make the configuration easier?

    • Answers
  • slancio

    You'll want to use the Local Group Policy Editor (gpedit.msc). This tools is only available in Professional, Ultimate and Enterprise editions. There's a not so good explanation of it from Microsoft here. This question may also help you as well. You will also want to make all of your changes to a Limited User account as Griffin suggested.

    Any tool that you end up using to do this will just be making changes to the Group Policy, so you're best off learning how to do it through Microsoft's tools.

    I don't know if there are any more detailed guides out there for the tool, but I imagine there likely are for what you're trying to do.

  • Griffin

    I would consult a article Microsoft published that talks a good deal about something that seems to be similar to what you want to do. This article can be found here.


    • Related Question

    windows xp - Software to completely restrict Internet Access?
  • bruno077

    I need to completely restrict Internet browsing in one computer with Windows XP installed.

    I have read many methods which imply editing the hosts file, using Internet Explorer filters, etc. The problem with these solutions is that they are not flawless unless you're running a limited account, which is not possible in my case.

    Is there any software that restricts this kind of activity under, say, a password?

    Thanks in advance.

    EDIT: I'm running an admin account because the machine runs a POS (Point of Sale) software which cannot be run under a limited account.


    • Related Answers
  • lajuette

    You should configure your router to restrict access for the machine.

    An user with an admin account can reverse every change you made and disable any protection you install. That's what admin accounts are for. So any measure you take to limit internet access on the machine itself is useless.

    The most fairly modern routers allow you to block internet access to certain machines. This feature may be called "parental control" (that's what this mechanism is usually used for) or something similar.

    If your router doesn't support this, you may have to reconfigure your network (routing the machine in question through another machine with two network interfaces) or find another solution. IMHO a software solution can always be bypassed.