How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
@DustinB3403 I am talking about windows. these are all Windows Pro standalone machines with local group policy on each machine.We don't have Active Directory and CALS for these.
-
@LJ Restoring to a previous state nightly sounds good if I could get it to work automatically or just when needed manually.
Dustin and coliver I am guessing both of you have worked for schools or libraries before. -
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Restoring to a previous state nightly sounds good if I could get it to work automatically or just when needed manuall
There are programs that will do that, basically like SteadyState used to do. DeepFreeze might still be around.
Most places use virtualization (even on the end points) to handle this today.
-
I think VDI has taken over for a lot of that, too. VDI wouldn't matter here, it's an option, but just one of several. But I think that you'll find that it is a common mechanism to use for the rollback these days.
-
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Yeah I haven't referred to them at all.
The process for setting up the google restrictions you linked is from the google administration side. . .
-
In public spaces like this, it's common to use the "frozen" state or to "rollback" to avoid all kinds of issues. From what you mention, to viruses, to just problems.
-
@scottalanmiller I loved Steady state. When it wasn't brought foward to Windows 7 I used a bootleg mandatory profile located on the local hard drive and that worked great. I never could get that to work consistently in Windows 10.
-
UrBackup can be scheduled IIRC to just take a backup, restore nightly etc.
And it's totally free.
-
@DustinB3403 is the restore a complete re-image or just whatever has changed?
-
@LJ just whatever changed by default.
-
@DustinB3403 our staff computers and public computers are on the same subnet at most locations. Can you group the ones to be restored by computer name, MAC address, IP address, etc?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 our staff computers and public computers are on the same subnet at most locations. Can you group the ones to be restored by computer name, MAC address, IP address, etc?
You install an agent on each system you want to backup, point it to the server, from the server set up your preferences (like allow the user to restore etc) and then go from there.
-
@DustinB3403 OK. Sounds good. I will look into it
-
You can install the server on windows with
choco install urbackup-serverthen install the agent on your same system or another to test with.I'm pretty certain you can do scheduled restores. .
-
@scottalanmiller I like the frozen concept. If you read above I used it until the hard drives started filling up.
I have been lucky so far as far as viruses through lots of restrictions including additional path rules that block executables from running in any location the restricted user has access to. -
In the worst case, you'd have to access the web page and restore the system.
-
@DustinB3403 Thanks again. I need to expand my abilities. If more than ten PCs backup from the same workstation will that violate Windows licensing? It might be better for me to try to get it going on a linux box.
-
For now I am about to put the PC that I have been working on earlier back into public service before the school crowd gets here. Maybe some of the changes I made will work but I don't really have my hopes up.
I'll be away from this discussion for a few minutes. -
@DustinB3403 said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Yeah I haven't referred to them at all.
The process for setting up the google restrictions you linked is from the google administration side. . .
Oh, I missed that. I thought that was the enterprise settings available via the Chrome ADMX. I don't have this in production at the moment.
-
I just realized that I did not personally reboot yesterday. I took the word of a fairly competent staff person but they do sometimes get confused while multi-tasking.
I am hopeful that today after closing I can check some computers and find that rebooting or even signing out of google then logging off and back in will work. I didn't get to check this yesterday.
