Locking down a shopfloor PC

Yahoo Archive
1
I am agreeing with Brian.
If you are only using a few PC's Policy Editor may be the way to go.
We only have one shop floor PC and use poledit to control access.
If you go this way don't forget to disable the basic windows help system as it contains back doors which go right around the policy editor.
----- Original Message -----
From: Steve
To: vantage@yahoogroups.com
Sent: Monday, October 21, 2002 12:45 PM
Subject: [Vantage] Locking down a shopfloor PC


I'm about to deploy our first data collection PC to the shop floor
and I'm wondering what tricks others use to discourage/prevent
factory personnel from "playing" with the PC's.




[Non-text portions of this message have been removed]
2
I'm about to deploy our first data collection PC to the shop floor
and I'm wondering what tricks others use to discourage/prevent
factory personnel from "playing" with the PC's.
3
We use Win95 PCs on our floor and I lock them down with policy editor
(poledit). Basically disable everything and set it so the only program they
are allowed to run is prowin32.exe and vantage.exe.

Brian Boyes,
Systems Administrator,
Precision Resource Canada Ltd.
<http://www.precisionresource.com>
<mailto:brianb@...>

> I'm about to deploy our first data collection PC to the shop floor
> and I'm wondering what tricks others use to discourage/prevent
> factory personnel from "playing" with the PC's..
4
Remove anything they can play with ;)

Bigger question here I think is what operating system are you using, some
operating systems have better security options than others (i.e. Windows XP
Pro)

Jessee Holmes

-----Original Message-----
From: Steve [mailto:spolatas@...]
Sent: Monday, October 21, 2002 11:45 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Locking down a shopfloor PC


I'm about to deploy our first data collection PC to the shop floor
and I'm wondering what tricks others use to discourage/prevent
factory personnel from "playing" with the PC's.



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
5
1. Removed CD drive (when needed I map to CD drive on server)
2. Disabled floppy drive in BIOS
3. Locked down BIOS changes with supervisor password (but no boot up
password)
4. Deleted all screen savers and other customization opportunities
5. A big sign on each PC saying "Mess with this PC and you'll be unemployed"
-Todd C.

-----Original Message-----
From: Steve [mailto:spolatas@...]
Sent: Monday, October 21, 2002 11:45 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Locking down a shopfloor PC


I'm about to deploy our first data collection PC to the shop floor
and I'm wondering what tricks others use to discourage/prevent
factory personnel from "playing" with the PC's.



Yahoo! Groups Sponsor

ADVERTISEMENT

<http://rd.yahoo.com/M=237459.2482214.3895589.2146399/D=egroupweb/S=17050071
83:HM/A=1278098/R=0/*http://www.verisign.com/cgi-bin/go.cgi?a=b3089010792061
6000>

<http://us.adserver.yahoo.com/l?M=237459.2482214.3895589.2146399/D=egroupmai
l/S=:HM/A=1278098/rand=445250125>

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
6
We use thin clients on the plant floor and even some low end users. We have
25 of them running Windows 2000 Terminal Server. Thin clients run us
$300.00 each plus a $75.00 Microsoft Thin Client Lic. For $375 we have a
very inexpensive solid state pc with no moving parts to burn out that can be
configured at the server to limit access to everything but what we want the
users to have. This saves us 50% on our cost of purchasing a PC and it
saves us allot more time in management of the shop floor pc's.
We built a dual AMD MP system with 2 gb of ram and it easily powers all the
thin clients for $1500.00 plus server lic. This also allows advanced users
and members of management to log onto our network from home or anywhere they
can get an internet connection. They can check their mail, use vantage or
work with their office documents. Terminal services is right up there with
sliced bread for us.

Jeremy Leonard
IT Manager
K-T Corporation


-----Original Message-----
From: Brian Boyes [mailto:brianb@...]
Sent: Monday, October 21, 2002 11:55 AM
To: 'vantage@yahoogroups.com'
Subject: RE: [Vantage] Locking down a shopfloor PC


We use Win95 PCs on our floor and I lock them down with policy editor
(poledit). Basically disable everything and set it so the only program they
are allowed to run is prowin32.exe and vantage.exe.

Brian Boyes,
Systems Administrator,
Precision Resource Canada Ltd.
<http://www.precisionresource.com>
<mailto:brianb@...>

> I'm about to deploy our first data collection PC to the shop floor
> and I'm wondering what tricks others use to discourage/prevent
> factory personnel from "playing" with the PC's..


Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
7
Of course, I forgot to mention that our shop floor PCs are kept in locked
cases, so the drives and plugs are not available. Only the mouse and
keyboard. By restricting which programs can run with poledit, it effective
disabled all the other windows applets, plus all the control panel stuff.

The reason I like this is then I don't have to erase the programs from the
computer, so it makes life easier when I have to work on one of them.

> 5. A big sign on each PC saying "Mess with this PC and you'll
> be unemployed"
I'll agree with Todd here. By using this approach, we've never had an issue
with people messing with the systems. Our biggest problem now is that the
shop floor guys keep unplugging the PCs.

Brian
8
www.fortres.com <http://www.fortres.com>

Product = "Fortres 101"

$ 59 / one pc
$ 570 / 25 pc's
$ 860 / 50 pc's

Nice product !

Todd Anderson

-----Original Message-----
From: Steve [mailto:spolatas@...]
Sent: Monday, October 21, 2002 11:45 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Locking down a shopfloor PC


I'm about to deploy our first data collection PC to the shop floor
and I'm wondering what tricks others use to discourage/prevent
factory personnel from "playing" with the PC's.



Yahoo! Groups Sponsor

ADVERTISEMENT

<http://rd.yahoo.com/M=237459.2482214.3895589.2146399/D=egroupweb/S=17050071
83:HM/A=1278098/R=0/*http://www.verisign.com/cgi-bin/go.cgi?a=b3089010792061
6000>

<http://us.adserver.yahoo.com/l?M=237459.2482214.3895589.2146399/D=egroupmai
l/S=:HM/A=1278098/rand=445250125>

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
9
I agree with Todd, for the $570 to lock down 20 stations, I felt the Time it
saved me by trying/managing other methods paid for it's self.

Patrick

-----Original Message-----
From: Todd Anderson [mailto:tanderson@...]
Sent: Monday, October 21, 2002 12:51 PM
To: 'vantage@yahoogroups.com'
Subject: RE: [Vantage] Locking down a shopfloor PC


www.fortres.com <http://www.fortres.com>

Product = "Fortres 101"

$ 59 / one pc
$ 570 / 25 pc's
$ 860 / 50 pc's

Nice product !

Todd Anderson

-----Original Message-----
From: Steve [mailto:spolatas@...]
Sent: Monday, October 21, 2002 11:45 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Locking down a shopfloor PC


I'm about to deploy our first data collection PC to the shop floor
and I'm wondering what tricks others use to discourage/prevent
factory personnel from "playing" with the PC's.



Yahoo! Groups Sponsor

ADVERTISEMENT

<http://rd.yahoo.com/M=237459.2482214.3895589.2146399/D=egroupweb/S=17050071
83:HM/A=1278098/R=0/*http://www.verisign.com/cgi-bin/go.cgi?a=b3089010792061
6000>

<http://us.adserver.yahoo.com/l?M=237459.2482214.3895589.2146399/D=egroupmai
l/S=:HM/A=1278098/rand=445250125>

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
10
I agree, that product is unstoppable, we used this in a High School and it
was flawless!

-----Original Message-----
From: Todd Anderson [mailto:tanderson@...]
Sent: Monday, October 21, 2002 12:51 PM
To: 'vantage@yahoogroups.com'
Subject: RE: [Vantage] Locking down a shopfloor PC


www.fortres.com <http://www.fortres.com>

Product = "Fortres 101"

$ 59 / one pc
$ 570 / 25 pc's
$ 860 / 50 pc's

Nice product !

Todd Anderson

-----Original Message-----
From: Steve [mailto:spolatas@...]
Sent: Monday, October 21, 2002 11:45 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Locking down a shopfloor PC


I'm about to deploy our first data collection PC to the shop floor
and I'm wondering what tricks others use to discourage/prevent
factory personnel from "playing" with the PC's.



Yahoo! Groups Sponsor

ADVERTISEMENT

<http://rd.yahoo.com/M=237459.2482214.3895589.2146399/D=egroupweb/S=17050071
83:HM/A=1278098/R=0/*http://www.verisign.com/cgi-bin/go.cgi?a=b3089010792061
6000>

<http://us.adserver.yahoo.com/l?M=237459.2482214.3895589.2146399/D=egroupmai
l/S=:HM/A=1278098/rand=445250125>

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/