Main Area and Open Discussion > General Software Discussion

Need to limit all but a few applications to keep my kids focused on homework!

<< < (3/3)

StefanC:
maybe ProcessGuard (free version should be enough)can help you . I think the settings can be protected with a password
This is actually a security tool that allow only the sellected programs to run . Be sure to read some stuff about setting this app coz' you can kill your Windows if you don't know how to work with it.

homepage
http://www.diamondcs.com.au/processguard/download.php

forum (DiamondCS forum @ wilders is archived ; if i remember right the app is not developed anymore)
http://www.wilderssecurity.com/forumdisplay.php?f=13

mikiem:
Microsoft offers a free set-up for environments like libraries, internet cafes etc...
http://www.microsoft.com/downloads/details.aspx?FamilyID=d077a52d-93e9-4b02-bd95-9d770ccdb431&DisplayLang=en

If you *really* want to guard against damaging your windows install dealextreme offers a few pci cards that can reset the PC to the same baseline condition every boot. They're less than $10 shipped, and seem to have several admin options, so perhaps worth checking out... Allegedly it's a virus & malware proof solution -- according to the manufacturer's site anyway.  :D

jfw06013:
Although these are not free they are cheap.
Deep Freeze: http://www.faronics.com/html/deepfreeze.asp
Anti-Executable: http://www.faronics.com/html/AntiExec.asp
Pricing:
 https://store2.esellerate.net/store/checkout/CustomLayout.aspx?s=STR1066199390&pc=&page=OnePageCatalog.htm

hwtan:
Via windows registry:

[ Reference: http://www.kellys-korner-xp.com/xp_abc.htm ]

Applications - Restrict Users from Running Specific Applications

This setting allows you to specify applications and filenames that users are restricted from running.

Open your registry and find the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]

Create a new DWORD value and name it "DisallowRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.

Then create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer\DisallowRun] and define the applications the are to be restricted. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be restricted (e.g. "regedit.exe").

Explained: DK

Right click in the right pane and select New, DWord value.  Name the new value DisallowRun.  Double click the new value and set it to 1.  Then right click on the Explorer sub branch, in the left pane and select New, Key  Name the new key Disallow Run.  Highlight this key, then in the right pane, right click and select New, String value.  Give it "1" for
the name, without the quotes. 

Double click this new value and enter the actual file name of the executable you wish to restrict this user from
running.  Example: calc.exe   This prevents this user from running Calculator.  They'll get a "This operation has been cancelled message" when they try.  Note: The way around this is for the user to rename Calc.exe to something else.  For additional entries, just give the "values" names in numerical order, 1, 2, 3, 4 and so on. DisallowRunReg and DisallowRunCalc

Restart Windows for the changes to take effect.

Applications - Restrict Applications Users Can Run

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer. Value Name: RestrictRun

Open your registry and find the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]

Create a new DWORD value and name it "RestrictRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.

Then create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer\RestrictRun] and define the applications that are allowed. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be allowed (e.g. "regedit.exe" and "calc.exe").

Explained: DK

This example prevents any applications but those that you specify from being run:

Right click in the Right pane and select New, DWord value and name the new value RestrictRun  Double click this entry
and set it to 1. Right click on the Explorer sub branch, in the left pane and select New, Key  Name the new key RestrictRun.  Highlight this key, then in the right pane, right click and select New, String value.  Give it "1" for the name, without the quotes.  Double click this new value and enter the actual file name of the executable you wish to restrict this user from running. Example: calc.exe  Right click again, select New, String value, name the new value "2".  Double click the new
value, enter REGEDIT.EXE

This example would only allow Calculator and REGEDIT to be run.   Be VERY careful with this setting.  You could wind up locking yourself out of REGEDIT if you were to use the restrictions on your Administrator account.

Restart Windows for the changes to take effect.

Note: If you are the person who applies Group Policy, do not apply this policy to yourself. If applied too broadly, this policy can prevent administrators from running Group Policy or the registry editors. As a result, once applied, you cannot change this policy except by reinstalling Windows XP.

Software Restriction Policies may be set to determine what software may or may not be run by users on the system. (Jim Cavalaris [MS])

Software Restriction Policies can be configured via the group policy editor (gpedit.msc) at:

Local Computer Policy -->Computer Configuration -->Windows Settings -->Security Settings -->Software Restriction Policies.  Policy can be set to either: restrict users from running specified programs - OR -restrict users to allow ONLY the specified programs to be run.

For a non-domain machine, policy can be applied to all users on the system, or non-Admin users only (Admins are not affected by the policy, and may run any/all programs). you cannot specify this policy for only certain users, but for a non-domain machine, the Admin/non-Admin breakdown may be sufficient.

mouser:
Long write-up about a program for this on "Confessions of a Freeware Junkie Blog" today:

http://maximillianx.blogspot.com/2008/02/internet-security-and-limiting.html

"If you have kids that are on the computer and/or Internet for any length of time, you know that getting them to log off can be quite a chore. Also, knowing just what they are doing can be just as difficult, if not near impossible.

The makers of Spyware Terminator (which I LOVE) have come up with a pretty decent piece of software that can help you control just what your kids are doing on the computer. Not only does Crawler Parental Control help you keep them from getting into certain programs and folders, it can protect them as well by blocking nasty sites, and (my favorite feature) CPC can put time limits on Internet, computer, and even program usage...allowing you to shut down or log off the computer when the max time allotted is reached. The program is completely customizable in that you can add or remove sites, programs, and folders you deem inappropriate (or not)."

Need to limit all but a few applications to keep my kids focused on homework!

Navigation

[0] Message Index

[*] Previous page