Office computer setup

[DragonReborn]

hey all, I build custom ivy bridge systems for my office (mortgage company) with Win7 Ultimate. I want to keep them as clean as possible so I want to restrict my agents from installing any new programs or making any changes. that said, they need more flexibility than a guest account.

should i just use the policy editor? any suggestions on what I should block? I was also going to edit the HOSTS file to block certain websites.

thanks!

 

[JackMDS]

There is No general answer to this question.

The answer depends on the Topology of the Network, number of computer and what specifically is done by the systems.

P.S. Whether the computers are ivy bridge or not is irrelevant for such question.


😎

 

[DragonReborn]

ha, well of course the ivy bridge is somewhat irrelevant except to tell people it's a brand new system so I won't have many hardware limitations. I'll try to make sure I stay on point.

I understand it's a general question but I was looking for general answers. "I have an office and used this program to limit my employee's checking outside websites and it's amazing." "I blocked facebook but employees revolted and I am now locked in a closet." "I switched to google apps from outlook and my employees are in heaven/hell."

To give you more information, I run a mortgage company of 20 agents. The main things they need to do is use a program called Emcompass360, run a credit report online, check their email, and log into their virtual phone system (8x8) to review recorded calls.

That's really all i want them doing but I didn't want to be too restrictive and block them being able to open up a pdf or use Office, etc.

 

[Bubbaleone]

You have to make the decisions how to configure your users access rights, to what best suits your objectives. As JackMDS noted; where you should limit or block access will have to be uniquely customized to your office environment. I'd suggest first doing a little research on effective use of group policy.

Group Policy management for IT pros

 

[JackMDS]

According to size and real security need the first choice has to be whether you are keeping a WorkGroup Network, or switch to a Real Server Topology with a sever OS.

Real server topology offers almost all that is needed to the Network.

It is however (for the short run) more costly and needs more knowledge than just Building an Ivy Bridge computer or pushing a "poor" video card to give few more frames while gaming.


😎

 

[6string]

There are a number of ways to restrict what your users can do, but it all depends on your network. Are the computers joined to a domain or are they just in a workgroup?