How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
@coliver I have the policies locally on every machine. Once I get one setup well I clone it. We don't have the budget or the bandwidth for Domain servers, CALS etc.
-
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver he would love to set this up via the google admin console, but he's not the administrator. The schools are. So he needs an alternative that is either local to every workstation or some restoration process.
Huh, I thought @LJ was the owner of these machines? It sounds like @LJ has been pushing other policies.
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver he would love to set this up via the google admin console, but he's not the administrator. The schools are. So he needs an alternative that is either local to every workstation or some restoration process.
Huh, I thought @LJ was the owner of these machines? It sounds like @LJ has been pushing other policies.
@LJ is in charge of the library computers, not the google accounts that the students are using.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver I have the policies locally on every machine. Once I get one setup well I clone it. We don't have the budget or the bandwidth for Domain servers, CALS etc.
But you do for Windows?
-
@DustinB3403 said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver he would love to set this up via the google admin console, but he's not the administrator. The schools are. So he needs an alternative that is either local to every workstation or some restoration process.
Huh, I thought @LJ was the owner of these machines? It sounds like @LJ has been pushing other policies.
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver he would love to set this up via the google admin console, but he's not the administrator. The schools are. So he needs an alternative that is either local to every workstation or some restoration process.
Huh, I thought @LJ was the owner of these machines? It sounds like @LJ has been pushing other policies.
@LJ is in charge of the library computers, not the google accounts that the students are using.
Yeah I haven't referred to them at all.
-
@DustinB3403 I am talking about windows. these are all Windows Pro standalone machines with local group policy on each machine.We don't have Active Directory and CALS for these.
-
@LJ Restoring to a previous state nightly sounds good if I could get it to work automatically or just when needed manually.
Dustin and coliver I am guessing both of you have worked for schools or libraries before. -
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Restoring to a previous state nightly sounds good if I could get it to work automatically or just when needed manuall
There are programs that will do that, basically like SteadyState used to do. DeepFreeze might still be around.
Most places use virtualization (even on the end points) to handle this today.
-
I think VDI has taken over for a lot of that, too. VDI wouldn't matter here, it's an option, but just one of several. But I think that you'll find that it is a common mechanism to use for the rollback these days.
-
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Yeah I haven't referred to them at all.
The process for setting up the google restrictions you linked is from the google administration side. . .
-
In public spaces like this, it's common to use the "frozen" state or to "rollback" to avoid all kinds of issues. From what you mention, to viruses, to just problems.
-
@scottalanmiller I loved Steady state. When it wasn't brought foward to Windows 7 I used a bootleg mandatory profile located on the local hard drive and that worked great. I never could get that to work consistently in Windows 10.
-
UrBackup can be scheduled IIRC to just take a backup, restore nightly etc.
And it's totally free.
-
@DustinB3403 is the restore a complete re-image or just whatever has changed?
-
@LJ just whatever changed by default.
-
@DustinB3403 our staff computers and public computers are on the same subnet at most locations. Can you group the ones to be restored by computer name, MAC address, IP address, etc?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 our staff computers and public computers are on the same subnet at most locations. Can you group the ones to be restored by computer name, MAC address, IP address, etc?
You install an agent on each system you want to backup, point it to the server, from the server set up your preferences (like allow the user to restore etc) and then go from there.
-
@DustinB3403 OK. Sounds good. I will look into it
-
You can install the server on windows with
choco install urbackup-serverthen install the agent on your same system or another to test with.I'm pretty certain you can do scheduled restores. .
-
@scottalanmiller I like the frozen concept. If you read above I used it until the hard drives started filling up.
I have been lucky so far as far as viruses through lots of restrictions including additional path rules that block executables from running in any location the restricted user has access to. -
In the worst case, you'd have to access the web page and restore the system.
