How to lock down public access computers

[jb2cool]

I've got 8 PC's in an open area at work for public use. These are there for downloading files that our normal network blocks as well as for visitors to use for web-browsing. Now i'd like to stop people putting crap onto these PC's. They only have user access right now but even that seems too much so when i rebuild them i'll try 'guest' access.

What i was wondering is whether Linux would be worth a try as that might let me lock stuff down more.

The things i need are;
Web browser
Network printer
Some form of Office suite for opening downloaded documents
Download to USB stick
Ideally to wipe out temp files/downloads on reboot
Ideally free

Now if i have a guide to follow then i can do that but beware that i have little Linux skill.

[idchoppers]

On my public computers I use a guest account and Group Policy. Does the trick.

[jb2cool]

Thanks idchoppers, i appreciate the reply. I thought about Group Policy but these PC's are not on our main domain and sit on a parallel network so not centrally configurable. I guess i could still set it up locally.

[Lord_Micron]

If you were using XP/Vista, Microsoft has a canned solution called "SteadyState."

They did away with that for Windows 7, since many of the features are already there, they just need configured.

http://windowsteamblog.com/windows/b...windows-7.aspx

[jb2cool]

Steady State had been discontinued so even if i wanted it (These are currently WinXP) then i'm out of luck.

[Lord_Micron]

Steady State had been discontinued so even if i wanted it (These are currently WinXP) then i'm out of luck.

Irk, I didn't realize they had even removed the download for it... WEAK! [rolleyes]

Try this, then: http://www.faronics.com/en/Products/...Corporate.aspx

[thumbup]

[two00lbwaster]

Thanks idchoppers, i appreciate the reply. I thought about Group Policy but these PC's are not on our main domain and sit on a parallel network so not centrally configurable. I guess i could still set it up locally.

You don't need a domain to deploy group policy as you can deploy through gpedit locally on the machine. You could combine local GPs with something like: A PCI recovery card, as generally used for cyber cafés.

[Langaleer]

While these are good suggestions, its still not a free alternative. I found this which should be able to replace steadystate and is free!