OSL Support: Public PC Security

Computers for public use in libraries require special attention to security. The most important requirement is that users of these public computers should not be able to make changes to operating systems or software. Security can be implemented on individual computers, or through network management systems. A related issue is managing Internet access, to permit or deny access to selected web sites or other resources.

Network Security

The most useful network security is implemented through Windows 2000/2003 Group Policies. With Group Policies you can disable many parts of the Windows desktop interface.

Local Desktop Security

OSL recommends and supports DeepFreeze Enterprise for all public computers.

Managing Internet Access

Public Web Browser can be used to provide a restricted web environment
OSL Support has a linux-based "Catalog CD" which boots up on a computer (preferably an older system). The only site that can be accessed is the OSL Millennium catalog.

Group Policy Management Console

Are you using Group Policies on your Windows 2000/2003 domain? Then you know that the Active Directory console for creating and managing policies is awkward and incomplete. But Group Policies provide so much flexibility and security, that its worth the trouble. Perhaps the biggest annoyance in Group Policies is the lack of a easy way to see and print out all of the policies that are in effect in an Organizational Unit.

Now there is a cool new Group Policy Management Console. Its full name is "Group Policy Management Console with Service Pack 1" (GPMC). You can run GPMC on a Windows XP SP1 system, or directly on a Windows 2003 server. If you have a Windows 2000 server, you can run the GPMC on a Windows XP SP1 computer. GPMC requires the .Net framework. Some of GPMC's features:

Easy to use interface
Export a list of policies to a html page
Backup and restore Group Policy Objects

Download the Group Policy Management Console with Service Pack 1

For a good overview of managing Group Policies with the new GPMC, take a look at this tutorial by USC Berkely.

Posted: 11/25/03