# Need Decent PC Lockdown Software

**URL:** <https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568>\
**Category:** NYSpeed Off Topic\
**Created:** [April 10, 2008, 10:32am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568 "2008-04-10T10:32:13Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![tpgsr](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/tpgsr/32/7374_2.png) [@tpgsr](https://forums.speedlife.net/u/tpgsr)\
**Post date:** [April 10, 2008, 10:32am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/1 "2008-04-10T10:32:13Z")

</div>

I have 5 computers in my warehouse that are currently unrestricted desktops. What i need is software that will on startup allow only one program to run (our shipping software). We do not want them to have a start menu, IE, or the ability to even change the desktop background from our logo. I also have to be able to login with my administrator account and have unrestricted access to the entire computer.

any suggestions? Oh, and these guys are not all idiots so it needs to be pretty strong.

---

<div class="post-metadata">

**Author:** ![9c1](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/9c1/32/7392_2.png) [@9c1](https://forums.speedlife.net/u/9c1)\
**Post date:** [April 10, 2008, 10:33am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/2 "2008-04-10T10:33:46Z")

</div>

If they’re on a domain, just use Group Policies.

---

<div class="post-metadata">

**Author:** ![tpgsr](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/tpgsr/32/7374_2.png) [@tpgsr](https://forums.speedlife.net/u/tpgsr)\
**Post date:** [April 10, 2008, 10:35am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/3 "2008-04-10T10:35:02Z")

</div>

> [@9c1](#):
>
> If they’re on a domain, just use Group Policies.

Yes, but the domain is controlled from texas and I can’t modify that side of it from here locally. If I call and ask, they will drag their feet for months!

---

<div class="post-metadata">

**Author:** ![9c1](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/9c1/32/7392_2.png) [@9c1](https://forums.speedlife.net/u/9c1)\
**Post date:** [April 10, 2008, 10:38am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/4 "2008-04-10T10:38:23Z")

</div>

Oh. That’s no good. We use a desktop lockdown software here but it’s only for a few Win9x machines we have out in the plant. It wouldn’t work on XP. If I find something similar, I’ll pass it along.

EDIT: Apparently they do make a version for XP: [http://www.visualautomation.com/securedesktop/index.html](http://www.visualautomation.com/securedesktop/index.html)

---

<div class="post-metadata">

**Author:** ![tpgsr](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/tpgsr/32/7374_2.png) [@tpgsr](https://forums.speedlife.net/u/tpgsr)\
**Post date:** [April 10, 2008, 10:40am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/5 "2008-04-10T10:40:11Z")

</div>

really it seems hypocritical since i am sitting at my desk on NYspeed, but we really want to lock out the internet first and foremost, then the whole desktop as an added bonus!

---

<div class="post-metadata">

**Author:** ![9c1](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/9c1/32/7392_2.png) [@9c1](https://forums.speedlife.net/u/9c1)\
**Post date:** [April 10, 2008, 10:41am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/6 "2008-04-10T10:41:22Z")

</div>

I understand 100% where you’re coming from.

---

<div class="post-metadata">

**Author:** ![Joe](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/joe/32/7219_2.png) [@Joe](https://forums.speedlife.net/u/Joe)\
**Post date:** [April 10, 2008, 10:41am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/7 "2008-04-10T10:41:55Z")

</div>

why? any productivity lost on the internet will be lost 5x over out of spite if you take it away.

---

<div class="post-metadata">

**Author:** ![tpgsr](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/tpgsr/32/7374_2.png) [@tpgsr](https://forums.speedlife.net/u/tpgsr)\
**Post date:** [April 10, 2008, 10:48am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/8 "2008-04-10T10:48:32Z")

</div>

> [@Joe](#):
>
> why? any productivity lost on the internet will be lost 5x over out of spite if you take it away.

I don’t think so. We have given them all sorts of luxuries that most warehouse employees do not get. Most of the guys don’t bother with the internet, but there are a few of our least productive guys that will just browse for pictures to put on the desktop or play with the fantasy baseball accounts all day.

---

<div class="post-metadata">

**Author:** ![Joe](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/joe/32/7219_2.png) [@Joe](https://forums.speedlife.net/u/Joe)\
**Post date:** [April 10, 2008, 10:51am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/9 "2008-04-10T10:51:42Z")

</div>

hmm, could be, but in my experience taking away the option to do something, even if they don’t use it much, pisses employees off more than its worth. Personally, ever since they told my team we couldn’t listen to headphones at our desks because they felt we should be “focusing on work” i try to do 2 hours less work a day, and when National Fuel took away my internet that I used for maybe an hour a day, i spent a couple hours a day trying to get around it, then surfing once I did.

---

<div class="post-metadata">

**Author:** ![zwarbyt](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/zwarbyt/32/7623_2.png) [@zwarbyt](https://forums.speedlife.net/u/zwarbyt)\
**Post date:** [April 10, 2008, 11:34am UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/10 "2008-04-10T11:34:33Z")

</div>

Step 1. From IE select Tools/Internet Options/Connections/LAN Settings.

Step 2. Put a tick in the check box next to "Use a Proxy Server for your LAN …”

Step 3. Type in “0.0.0.0” in the address box and “80” in the Port box. Don’t type in the quote marks of course, just what’s inside them.

Step 4. Click OK.

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [April 10, 2008, 12:07pm UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/11 "2008-04-10T12:07:39Z")

</div>

> [@Joe](#):
>
> why? any productivity lost on the internet will be lost 5x over out of spite if you take it away.

Very true. Most locked down systems people waste time looking for ways to get around them.

If you want a quick lock down to remove internet just change the IP settings to a static and remove the DNS servers. Then you still have network access if you need it to local servers.

If you have network hardware access, put a ACL on the router so that IP cant get out or modify the VLAN to prevent it from getting outside the network.

---

<div class="post-metadata">

**Author:** ![VANDIT](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/vandit/32/4977_2.png) [@VANDIT](https://forums.speedlife.net/u/VANDIT)\
**Post date:** [April 10, 2008, 12:23pm UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/12 "2008-04-10T12:23:41Z")

</div>

if there that addicted to fantasy baseball they will get a phone with the internet…

you only have control over there (your) stuff, while there at work… anything that is not yours; i.e. there own laptop will be used as they want, however if I did not go on nyspeed so much I would get more work done lol…

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [April 10, 2008, 4:01pm UTC](https://forums.speedlife.net/t/need-decent-pc-lockdown-software/46568/13 "2008-04-10T16:01:35Z")

</div>

> [@tpgsr"](#):
>
> I have 5 computers in my warehouse that are currently unrestricted desktops. What i need is software that will on startup allow only one program to run (our shipping software). We do not want them to have a start menu, IE, or the ability to even change the desktop background from our logo. I also have to be able to login with my administrator account and have unrestricted access to the entire computer.
> 
> any suggestions? Oh, and these guys are not all idiots so it needs to be pretty strong.

You can setup a local policy on each computer…
