Software-based computer supervisor recommendation [closed]

Question

Let's consider the following scenario:

In a hospital, the patients can use some some public computers which have Windows 7 and Internet access. The 'administrator' (read the responsible for the computers in the room) wishes to give to every patient a username and a password in order to use the computers. The problem is that the users can do stupid things or will install infected programs.

Do you know any software which allow the administrator to view which user had a bad behaviour?

Answer 1

This is just one example, but you may want to look at a kiosk program that really locks down the computer and will not let the person do anything but what you want to allow. The additional advance is you do not need to give the user a password or login of any kind.

http://www.sitekiosk.com/Default.aspx

Answer 2

I would choose linux and preinstall many useful programs. First, in my opinion, there is no reason too allow the users to install programs as there will always be someone able to do heavy damages on software (sometimes without knowing what he exactly does). Second, such restricted account could be fully public - no need for login and passwords... Third, using linux would be much safer and you could use computer without any antivirus SW, antispyware etc. - this would have positive influence on performance. And linux could be obtained for free. :-) From my point of view there is no need to use Windows for kiosks.

Answer 3

I highly recommend you use one of two solutions from Faronics, although I think DeepFreeze will likey work the best for you if the patients need to install software (I have clients using DeepFreeze at a number of locations, and a simple reboot wipes out all changes including newly installed software including viruses and SpyWare, so if the patient makes a really big mess of the system, then a simple restart, reboot, or power cycle will solve the problem immediately -- this also makes it an ideal candidate for your support staff who may not be computer-literate):

  Faronics Anti-Executable
  http://www.faronics.com/anti-executable/

• Faronics Anti-Executable ensures total endpoint productivity by only allowing approved applications to run on a computer or server. Any other programs, whether they are unwanted, unlicensed, or simply unnecessary, are blocked from ever executing.

  Anti-Executable's ability to enforce total compliance provides absolute peace of mind. Organizations benefit from productive user sessions each and every time, while I.T. personnel are guaranteed that desktop computers, notebooks, and servers are compliant with acceptable use policies, regulatory requirements, and software deployment schedules.

  Faronics Deep Freeze
  http://www.faronics.com/deepfreeze/

• Faronics Deep Freeze helps eliminate workstation damage and downtime by making computer configurations indestructible. Once Deep Freeze is installed on a workstation, any changes made to the computer, regardless of whether they are accidental or malicious, are never permanent. Deep Freeze provides immediate immunity from many of the problems that plague computers today -- inevitable configuration drift, accidental system misconfiguration, malicious software activity, and incidental system degradation.

  Deep Freeze ensures computers are absolutely bulletproof, even when users have full access to system software and settings. Users get to enjoy a pristine and unrestricted computing experience, while I.T. personnel are freed from tedious helpdesk requests, constant system maintenance, and continuous configuration drift.

Answer 4

Were you not interested in licensing additional products like DeepFreeze (which is really great for this task) you can build out a similar type configuration using standard Group Policy restrictions, users as limited/standard user vs admins and AppLocker.

Windows Team Blog entry on making a Steady State config in Windows 7

TechNet AppLocker documentation