I am dealing with a school right now that I got hired to come in and help with some computer issues...they are having a lot of problems with students installing software and downloading things from the internet and writing them to the HDD.
They are running Windows XP Professional. I thought of denying write access locally to the entire C: Drive, but they are using roaming profiles which means that the download of their profile from the server to C:/documents and settings would be denied. If I used a group policy for the student users, the same would happen. Write access to Documents and Settings is denied.
Also, I thought of denying access to write on the C drive and then allowing just the documents and settings folder, but the DENY is inherited in all sub directories and cannot be changed for certain directories.
Any ideas of something I can do? Has anyone dealt with simular issues?
Thanks.
They are running Windows XP Professional. I thought of denying write access locally to the entire C: Drive, but they are using roaming profiles which means that the download of their profile from the server to C:/documents and settings would be denied. If I used a group policy for the student users, the same would happen. Write access to Documents and Settings is denied.
Also, I thought of denying access to write on the C drive and then allowing just the documents and settings folder, but the DENY is inherited in all sub directories and cannot be changed for certain directories.
Any ideas of something I can do? Has anyone dealt with simular issues?
Thanks.