Need to lock down Windows

[ZoomStop]

OK, here is the deal. My three year old son has a computer of his own. He uses it for his games, movies, PBS website, etc. Hey, it keeps him off my computer
Now he can navigate around it pretty well, but let me tell ya, over the course of a few weeks he has caused total chaos in some ways. So I am about to format and re-install windows. But when I do (and before he can use it) I would like to lock down certain areas and need help doing so.
If you can help with any of the below just let me know. Here is what I am trying to do:

* Lock the icon position and properties (i.e. shortcut name, icon, location) of icons on the desktop. Bonus would be prevention of him dragging icons off the start menu onto the desktop.

* Lock out access to My Computer

And this sounds small but it is my most desperate request....
* Prevent execution of more than one copy of a program. He has this Popcap game Mummy Maze that he loves. But it takes about 15 seconds to open. So he just clicks and clicks until it does. But by then 20 copies start up and the system basically takes a crap.

So that is my Wish List. I am going to try to lock down as much as possible, get the default set of software installed and then Ghost his drive image and back it up over the network to my system. I know he will find ways around these "fixes" but if they slow him down, all the better.

Thanks in advance for any help.

Tom

 

[Smilin]

Originally posted by: AcidBath

* Lock the icon position and properties (i.e. shortcut name, icon, location) of icons on the desktop. Bonus would be prevention of him dragging icons off the start menu onto the desktop.

And this sounds small but it is my most desperate request....
* Prevent execution of more than one copy of a program. He has this Popcap game Mummy Maze that he loves. But it takes about 15 seconds to open. So he just clicks and clicks until it does. But by then 20 copies start up and the system basically takes a crap.

Sorry no help right now, but I just wanted to say that has got to be the cutest thing I've heard in a long time.

 

[TonyRic]

vmware ACE. that will allow you to lock the host to nothing and let you run the guest operating system (with appropriate restrictions) in a mode that you can find appropriately restrictive. Or you could just use VMware workstation, and use its snapshot feature to "roll back" the clock and undo all of the screw ups that happen.

 

[mechBgon]

What operating system and version (e.g. WinXP Home Edition or whatever)? If it's WinXP Pro you should be able to bust out gpedit.msc and do some of the GUI mods you want.

To keep him from launching a beelion copies of his Mummy Maze game... hmmm...

1) put a shortcut to the game in the system's \Documents and Settings\All Users\Start Menu\Programs\Startup directory, so it is launched when the system hits the desktop

2) install enough RAM that Windows has room to keep the game cached in RAM for instant re-launch after that initial autolaunch

Any good?

 

[ZoomStop]

Originally posted by: TonyRic
vmware ACE. that will allow you to lock the host to nothing and let you run the guest operating system (with appropriate restrictions) in a mode that you can find appropriately restrictive. Or you could just use VMware workstation, and use its snapshot feature to "roll back" the clock and undo all of the screw ups that happen.

Humm.. have not worked with that program, but it sounds promising. I'll check it out. Thanks!

Originally posted by: mechBgon
What operating system and version (e.g. WinXP Home Edition or whatever)? If it's WinXP Pro you should be able to bust out gpedit.msc and do some of the GUI mods you want.

That is a great idea too. And sorry, forgot to mention the OS which I am sure will play a factor. It is WinXP Pro. So I'll try out gpedit.msc. Another one I have never had a need to use.

For putting it in startup so it says in RAM, that is a pretty good idea too. If I cannot lock out multiple instances that would be a definite work around.

I appreciate the help on this. It should get me started. I am open to more ideas but at least now I have somewhere to start.
I have never ran a multi-user enviroment before so I have nil experience in security. So it will be a learning curve.

Originally posted by: Smilin
Sorry no help right now, but I just wanted to say that has got to be the cutest thing I've heard in a long time.

Think that is cute, you should see my son
But when he is not wrecking the computer he is playing his games. He is actually better than I am at that Mummy Maze game. Then again I don't play it for a few hours a day!
I may need to update his graphics card though because now he loves Need For speed Underground 2. But that could be because he likes the "Pretty Lady" in the beginning that tells you street racing is Not Cool

 

[magomago]

Hehe your son is awsome. I feel loading up twenty instance of mummy maze in less than a minute or so is an unconcious message and his way of saying, "I need a 4800+ X2 with a gig of ram before I can fly!"

 

[thirdeye]

Copy of Fortres 101 would work for you.

 

[kamper]

Possible idea for limiting the instance of the game: replace the shortcut with a script that checks for a running instance of the game before starting the game itself. I have no idea how to start such a thing on windows, though, so maybe someone else can fill it in?

 

[dnuggett]

Pull the computer off your network and let him have at it.... how else is he gonna learn? Training wheels on a bike are great, but at some point you have to say it's the kids bike and let him dump it a few times before the want to stay upright sinks in.

Once it's broke leave it that way until you can adequately explain to him that he broke it and why you shouldn't do that. This is damn cool that the little guy is getting into computers already. Good luck w/ him!

 

[Kibbo86]

Man,

You just made me want to be a dad.

 

[dnuggett]

Originally posted by: Kibbo86
Man,

You just made me want to be a dad.

Thanks.

 

[ZoomStop]

Thanks for the tips here. I'll try the Fortress thing too.
And as much as I would like him to just have at it, which we have, he eventually reduces the computer to a point of major instability (i.e. his fix for the mummy maze problem is to hit the power button).
Only problem is he is not quite old enough to understand that some of the things he does will "break his toy".

But it really seems like having kids/family really just leads to more PC's.
* First it was just mine.
* Then I got married and my wife wanted one to use since I am on mine a lot.
* Then we needed a laptop, everyone needs a laptop.
* Then we had our son and when he turned three he needed a computer.
* But the movies he like we archive on his computer in xvid and he wants to watch them in the living room too. Sure we could do a stand-alone, but why not a media PC.
* Now my daughter is still young but she will need one here soon too.
5 going on 6 PC's. Good gawd.

But it is a lot of fun. And the computer geek guy has a computer geek family now.

And for any parents with small kids that have stumbled on this thread....
Back before I did a separate PC for the kids I always had my son using my computer every time my back was turned. Bad news till I found this program:
Toddler Keys: http://tk.ms11.net/
It is genius. Basically you run this in your tray and then right-click and select what you want to lock. You can lock the keyboard, mouse, optical drives, & power switch. To turn the lock off all you have to do is type "quit". A wonderful util that has saved us a LOT of pain.

Sorry I type so much. This thread will be published in a book due out on Amazon at the end of the month

 

[mechBgon]

If he is actually messing up the computer, then also use a Limited-class user account for him too. Limited-account info. That'll keep him from just deleting the Windows directory and stuff, anyway

For the rest, hey... if he's that smart already, you can also train him what not to do.

 

[tiap]

In addition to a very limited account in xppro, the system restore works wonders and when it fails, a good hdrive imageing prog works to restore quickly. I used to let mine just go for it.
The more you sit there with them, the faster they learn, even at 3.
It's well worth the negatives.

 

[ZoomStop]

Originally posted by: tiap
In addition to a very limited account in xppro, the system restore works wonders and when it fails, a good hdrive imageing prog works to restore quickly. I used to let mine just go for it.
The more you sit there with them, the faster they learn, even at 3.
It's well worth the negatives.

And that is exactly what I am doing right now

I did a fresh install, created a hidden partition, and am using Ghost to dump an image to that partition. I'll jet let him go nuts and restore the image every few weeks.

So far so good