How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
I just tried setting the setting "restrict which users are allow to sign in to Google Chrome" to enabled and used*.@nologin as the allowed user.
I was still able to login from the restricted user. For this setting should you leave it blank for users or what? thanks.I would expect you would leave it blank.
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
Had no idea that that was an option. Good idea.
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
I don't understand the difference.
-
I found this thread about the GPO setting.
https://bugs.chromium.org/p/chromium/issues/detail?id=471268basically it says you need to put ^$ into the field to block all logins to Chrome itself.
Sadly - the user has to go through the whole logon process before Chrome reports they are not allowed to to log into Chrome - which will lead to your staff being told Chrome is broken, because it's likely some people think signing into Chrome is the same as signing into Google's webpages.If you do get this to work, you'll need to train the staff at those sites to point visitors to log in on the websites themselves, not the browser(Chrome).
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
Aww, now I see
Incognito mode availability = 2 (Incognito mode forced)
The '>' threw me off.
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
What happens when you open multiple tabs in different Google services after logging into the first tab? If the creds don't flow tab to tab, this could become frustrating to users.
-
This post is deleted! -
Is Chrome a requirement on these PCs? What about getting rid of it entirely and using another browser? Firefox, vivaldi, opera etc?
-
@Dashrender said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
Aww, now I see
Incognito mode availability = 2 (Incognito mode forced)
The '>' threw me off.
My bad.
-
@Dashrender said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
What happens when you open multiple tabs in different Google services after logging into the first tab? If the creds don't flow tab to tab, this could become frustrating to users.
They still flow from tab to tab.
-
Thanks to everyone who helped me. I believe my problem is solved now. Here is a little re-cap and some random ideas.
I jumped to conclusions late in the day when confronted with a problem. I now believe that the problem with the two PCs was that the Chrome.adm template was not applied or misconfigured or something. Since I copied the contents of Windows/System32/grouppolicy and Windows/System32/grouppolicyusers from another machine I will never know for sure. The other 18 public computers have no Chrome browser problems that I can find.
I still think its possible that enterprise policies might override local group policy or registry settings but I don’t think that is what happened here. Probably like active directory in the sense that unless it is configured at the higher level it probably doesn’t affect the local level.
The contributors here have given me several new ideas to try. I am continuously trying to improve my public computer configuration.
I learned a lot from this thread and am truly thankful for all the help. This is an awesome forum! -
@notverypunny I would love Firefox because many patrons ask for it but in the past I was unable to get it to update automatically. Has that changed or do you know a work around?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@notverypunny I would love Firefox because many patrons ask for it but in the past I was unable to get it to update automatically. Has that changed or do you know a work around?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@notverypunny I would love Firefox because many patrons ask for it but in the past I was unable to get it to update automatically. Has that changed or do you know a work around?
choco upgrade firefox -yvia task scheduler.
-
@DustinB3403 Thanks. I have never used chocolatey but I guess I need to learn.
-
@LJ Oops. left out something. thanks coliver.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@LJ Oops. left out something. thanks coliver.
Most if not all of your freeware software can be installed via Chocolatey, and then generally updated pretty damned easily as well.
here's my typical install string
choco install adobereader-update greenshot citrix-workspace wiztree googlechrome pdf-ifilter-64 -y --allow-empty-checksums
to update them all
choco upgrade all -y -
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 Thanks. I have never used chocolatey but I guess I need to learn.
For sure. I can't imagine working on Windows without it.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
further complication is they don't log out and the next public user who wants to log in sees the previous user and is confused requiring intervention by library staff. We need a way to prevent this or at least a l
Hi,
I don't get why they recommended chocolatey pkg management solution, cause you don't need it in your scenario. why would you need to install apps easily using choco ? your goal to lockin users and have them not install apps.
What you need is KIOSK platform. usually Linux OS works better for this, especially if what you are providing is simple web browsing experience, any linux OS with chrome without sudo user permissions will work great for your needs.
-
@Emad-R said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
further complication is they don't log out and the next public user who wants to log in sees the previous user and is confused requiring intervention by library staff. We need a way to prevent this or at least a l
Hi,
I don't get why they recommended chocolatey pkg management solution, cause you don't need it in your scenario. why would you need to install apps easily using choco ? your goal to lockin users and have them not install apps.
What you need is KIOSK platform. usually Linux OS works better for this, especially if what you are providing is simple web browsing experience, any linux OS with chrome without sudo user permissions will work great for your needs.
We were working for where the OP started - which was with Windows machines.
Assuming there is no other Windows based software on the machine - you're right, putting Linux on these and locking them down would be best - it will stop most casual idiots from screwing around with to much stuff.
