8 replies to this topic

[flansch]

Hi folks,

I want to use LiveXP as bootcd for a common internet pc. How can I do restrictions to the IE so that it is not possible to download any files and save them onto the RAM-drive?

Is it possible to secure the desktop so that no files can be saved?


Kind regards,
flansch

[Wonko the Sane]

I want to use LiveXP as bootcd for a common internet pc. How can I do restrictions to the IE so that it is not possible to download any files and save them onto the RAM-drive?

I don't get it.

The RAM disk is volatile, you can save files to it allright and at next boot it behaves like the devil:
http://www.imdb.com/...t0114814/quotes

Verbal:The greatest trick the Devil ever pulled was convincing the world he didn't exist. And like that, poof. He's gone.
....
Verbal: [last line of the film] And like that... he's gone.

If the PC boots from CD and has NO Hard Disk, there is simply nowhere anything can be saved and survive a re-boot.




Wonko

[flansch]

Hi Wonko,

thanks for your fast reply.

Everything you wrote is correct, but I'm searching for a possibility to deactivate the downloads from the internet (because of malware, viruses, etc). These files would be away after a restart, but I don't want to give them a chance to enter the whole network (four more pcs/notebooks an a NAS).

The internet pc has no hdd, but I think it would be more safe without the possibility to download files ;-)


Kind regards
flansch

[flansch]

another question regarding this intention is: is it possible to deactivate the start menu button? I just want to have it a castrated internet pc.

[Wonko the Sane]

Well, half the internet (due to the way it is made) won't probably work anymore corectly.

And being careful about security AND using Internet Explorer seems like not living well together.

You can use some registry tweak:
http://support.micro...kb/823057/en-us
http://www.pctools.c...try/detail/442/
http://www.pctools.c...try/detail/537/
More:
http://www.pctools.c...egistry/id/612/

And change the security level of IE to different settings.

Wonko

P.S.: The Doctor did not order you to use Explorer as Shell, use another one, like bb4win or whatever and tweak it as you like.

[MedEvil]

but I'm searching for a possibility to deactivate the downloads from the internet (because of malware, viruses, etc). These files would be away after a restart, but I don't want to give them a chance to enter the whole network (four more pcs/notebooks an a NAS).

The internet pc has no hdd, but I think it would be more safe without the possibility to download files ;-)

I think you should read up some more on: 'how things work'. Disabling downloads will NOT stop a virus from downloading itself.
Having your 'Windows' folder read only will.

another question regarding this intention is: is it possible to deactivate the start menu button? I just want to have it a castrated internet pc.

You can set Internet Explorer as Shell, then only IE will be available and this right from the start.

[Lancelot]

H, flansch

And being careful about security AND using Internet Explorer seems like not living well together.

+

I think you should read up some more on: 'how things work'. Disabling downloads will NOT stop a virus from downloading itself.

+

just for the fun of it, I added "Disable Download" to IE settings script .

The internet pc has no hdd, but I think it would be more safe without the possibility to download files ;-)

I feel goal is "safe" and "temporary" internet access. We have av and firewall softwares around for that goal and you may find many settings to reach your goal. It will be nice if you work on this goal for a while and share your findings on a topic which will be helpful for others too.

[flansch]

H, flansch

+
+

just for the fun of it, I added "Disable Download" to IE settings script .


I feel goal is "safe" and "temporary" internet access. We have av and firewall softwares around for that goal and you may find many settings to reach your goal. It will be nice if you work on this goal for a while and share your findings on a topic which will be helpful for others too.

Hi Lancelot, this is exactly what I needed! Thanks a lot!!

[dog]

I still reckon starting off with the all-powerful SYSTEM account and trying to apply restrictions is almonds and cashews.
But good luck anyway