PDA

View Full Version : Company Computer - Limiting Staff Access



camo
16-10-2008, 05:13 PM
Hi all,

I run a small bar and restaurant, and have a computer which the staff use from time to time.

The only reason they use it is to use ONE PROGRAM ONLY. Is there a way that I can limit their user account to run this program only?

No internet, no start menu....zip. Nada.

Can I:

1. Nominate a program to start automatically as soon as they login

2. Make all other functions null and void except for the "log off user" command in the start menu?

Cheeeerrrs!!

stormdragon
16-10-2008, 05:16 PM
What's the operating system? Does each staff member have a different account?

Jester
16-10-2008, 05:27 PM
Kiosk mode maybe?

That was designed for one application, perhaps it can be locked somehow.

Edit: Just Googled - Kiosk mode was for IE rather than a specific program but Wiki has some ideas:
http://en.wikipedia.org/wiki/Kiosk_software

minster
16-10-2008, 05:57 PM
Why don't you look at one of the many "Child PC Limitation" apps?

nofam
16-10-2008, 06:13 PM
If your OS is XP Pro, you should be able to do this through Group Policy?

Blam
16-10-2008, 06:35 PM
If your OS is XP Pro, you should be able to do this through Group Policy?

Yes-This can all be done with gpedit, but you will need to disable the windows+? hotkeys too, or else your staff will be able to bring up the run command.

To make a program start automatically, just drag any program shortcuts to the start-up folder

wainuitech
16-10-2008, 07:01 PM
Try The Program from MS - Its free and called Steady State (http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx) - NO fliddling around with reg files especially if you dont know what you are doing -

Just tried it on a windows XP HM install on a workshop PC, and after a very quick read ( less than 30 seconds) created an account that for all intense purposes wouldn't let me do anything apart from run the one program I selected/allowed to run, and shut down/reboot the PC.

What you do is have your main account - Yours/Administrator, password protect it and tell no one, you will have full control in your own account. Download and install Steady state, create a new user Via the program, lets call it "Staff".

BEFORE you go and lock every thing,(run through and select no restrictions) log into the new Staff account, then the program you want to run on start up, create a shortcut to it on the desktop, lets call it "staff work", drag the Staff Work shortcut into the All Programs/ Start up folder. This will cause the program to auto run each time the account is logged into.

Now log back into your own account, run through the settings and lock every thing you want to lock, in other words tick everything - in the programs select all programs to lock, then locate the "Staff Work" program and remove it from the blocked list.

Interesting feature I also found , you can set it to auto shut down the PC after a set time you decide.

Now log back out, log into the Staff Account and the Staff Work will auto open and allow to do what ever its designed to do.
Some features are still visible, but 99% are now gone/hidden--- BUT Heres the good part - ANYTHING that is tried to be opened like a Command prompt you get a message saying locked by Administrator.

I would take a screen shot - :crying :lol: But I couldn't as the function was locked as well as paint to paste it to - which would have been no good as the right click functions were also locked.

linw
16-10-2008, 07:17 PM
Thanks for the review, Wainui! Sounds like a really good (and free!) addition to XP for some special situations.

prefect
16-10-2008, 08:41 PM
Why not make up company computer guidelines get the staff to sight the guidelines. Leave the computer open, trust your staff. If you cant trust your staff give them written warnings and fire them
Your staff will think you are an ok boss.
If my superiors at the bus company locked out our computer I would quit.

wainuitech
16-10-2008, 09:41 PM
One reason business owners want to lock out certain functions is because of the lost time and other costs of staff doing things on the computers they are not meant to when they are meant to be working - I don't know the figures but I do know LOTS of $$$$$$$$ are lost.

Its not till the employees are on the other side of the fence so to speak - as they have to pay the bills and account for time that sometimes its realized.

Blam
16-10-2008, 10:44 PM
One reason business owners want to lock out certain functions is because of the lost time and other costs of staff doing things on the computers they are not meant to when they are meant to be working - I don't know the figures but I do know LOTS of $$$$$$$$ are lost.

Its not till the employees are on the other side of the fence so to speak - as they have to pay the bills and account for time that sometimes its realized.

And it means the company doesn't have to hire many technicians to maintain and fix the computers, cause it probably won't stuff up running just one program:p

sroby
17-10-2008, 09:55 AM
Why not make up company computer guidelines get the staff to sight the guidelines.

This doesnt work. Some(many) staff will continue to surf for porn, play games,send out bulk joke emails,
watch youtube in company time, even after sighting and signing a PC Use guideline. Some even openly refuse to follow the guidelines, assuming its their right to use company PC's for whatever they want.
This is of course good news for those in the business of fixing up the mess afterwards.

prefect
17-10-2008, 11:12 AM
Depends what you want, some people like happy staff. They might check something on Trademe etc its not end of the world.
You tell staff they cant do something that is fun etc they will resent it. Believe me staff will get you back manyfold behind your back if you are a dickhead boss. Sickies, ripping off stock, damaging gear, being rude to customers. I have learnt this from the worker side not the boss side. The old days of working for one company till you got a gold watch have gone, people will move jobs if the boss or company are a pack of bastards.
Happy staff with some freedom /responsibility and perks are good for your customers. I know that might come as a big shock to some bosses buts its true.

wainuitech
17-10-2008, 11:19 AM
While its Ok to have a bit of fun try this --- a person spends lets say 3 hours a week in total doing things they are not meant to on the internet, during normal working hours ( not lunch times) - this time is then deducted from their wages - yeah right.

There can be a bit of give and take on both sides, and I have been on both sides, worker & Boss - some people TAKE more than they give.

Metla
17-10-2008, 11:28 AM
Depends what you want, some people like happy staff. They might check something on Trademe etc its not end of the world.
You tell staff they cant do something that is fun etc they will resent it. Believe me staff will get you back manyfold behind your back if you are a dickhead boss. Sickies, ripping off stock, damaging gear, being rude to customers. I have learnt this from the worker side not the boss side. The old days of working for one company till you got a gold watch have gone, people will move jobs if the boss or company are a pack of bastards.
Happy staff with some freedom /responsibility and perks are good for your customers. I know that might come as a big shock to some bosses buts its true.

Then those staff need to be fired. End of story. They are not productive staff and don't deserve to be employed. Its not the bosses fault if people have a mentality that leads them to steal. Dealing with just such a ****head at the moment, well, Actually I'm not as my plan was to punch him in the head.

I could swear everyone with a work ethic and a sense of responsibility has just buggered off to Aussie.

Chilling_Silence
17-10-2008, 02:04 PM
Yeah end of the day, they're there for 8 hours, being paid for 8 hours to do 8 hours of work (Well, less 2x 15 mins breaks, but you get the picture).

Some places Ive worked at, or seen, have the idea of "free play time during break time", where you can do whatever you want in terms of checking emails, trademe, browsing news websites etc all during your break time.
pr0n, file-sharing, and other illegal stuff isnt tolerated either way mind you.

The problems then arise when smokes bugger off during "work" time 3-4 times a day, then take "smoko breaks" to check emails etc...

Lifes not fair for us non-smokers ;)

prefect
17-10-2008, 02:38 PM
I agree the blardy smokers seem to have more rights than no smokers.
A non smoker cant go for a fag break they just have to keep working they wouldnt normally be allowed to do private work on the computer and says its my equalavalent of a butt break.
Although sharing a work space with a smoker who couldnt go out for a butt could be worse they would be super grumpy and bite your head off for anything.
I was wondering can you not hire a smoker over a non smoker or would you get done like a hot dinner at the employment court?
The government could set up a roving hit squad with machine guns and as they drove past offices etc where smokers were out the back having a fag they could waste them.

Chilling_Silence
18-10-2008, 08:22 AM
Haha :D

Roscoe
18-10-2008, 04:21 PM
Wainui: Liked your explanation and will try it on my PC just for curiosity. Ta.

But it seems that Steady State might be just for XP or Vista. Will it work on 98?

Yes, I know it's ancient, but that is what is used on a PC that I would like to restrict. If it does not work on 98 do you know what does?:thanks

wainuitech
18-10-2008, 05:06 PM
Hi Ya roscoe - I dont think it does work on 98 - the spec's say
Supported Operating Systems: Windows Vista Enterprise; Windows Vista Home Premium; Windows Vista Ultimate
Windows XP Professional, Windows XP Home Edition, Windows XP Tablet PC Edition with Windows XP Service Pack 2 (SP2) installed or Service Pack 3 (SP3) installed, Windows Vista Business, Windows Vista Home Basic, Windows Vista Starter, or Windows Vista with Service Pack 1 (SP1) installed. Copied from This site here (http://www.trap17.com/index.php/how-control-other-users-privileges-microsoft-windows-steadystate-2-5_t59024.html) - which when I looked gives one hell of a good set of instructions with pictures of the settings :clap ---

make mental note - book mark site. oh OK bookmark now :)


As for what will do the same on 98 - hmmmmmm not to sure Maybe This (http://nexus404.com/Blog/2007/06/11/protect-your-pc-with-the-usb-desktop-bouncer/) :D :lol:

Edited: have a look through This google search (http://www.google.co.nz/search?hl=en&q=Restrict+Access+to+windows+98&btnG=Google+Search&meta=) may be of some help

Roscoe
18-10-2008, 07:51 PM
Hi Ya roscoe -
As for what will do the same on 98 - hmmmmmm not to sure Maybe This (http://nexus404.com/Blog/2007/06/11/protect-your-pc-with-the-usb-desktop-bouncer/) :D :lol:

If I wanted a "smart fart" reply I would have asked for one! Mind you, it does look a bit of a laugh. Who do you know who you want to annoy that much?:thumbs:

I will, as you say, have a look through that Google search you left, ta.

Unfortunately I do not have the advantage of your expertise so it will take me much longer than it would you, but I shall persist. Thanks for your help. It is appreciated.:)

Winston001
19-10-2008, 12:49 AM
Then those staff need to be fired. End of story. They are not productive staff and don't deserve to be employed. Its not the bosses fault if people have a mentality that leads them to steal. Dealing with just such a ****head at the moment, well, Actually I'm not as my plan was to punch him in the head.

Yeah so you know that disciplining staff is very difficult, never mind putting them down the road. It creates stress for the employer, affects other staff, and is simply better avoided.

I think Camo's idea is good. There is no reason to assume that a computer is available for anything other than work. Its a tool, nothing more.

Trusting staff to self-police sounds nice and fair, and most wouldn't abuse it. But one person would. And another would notice this, resent it, and start using the net themselves. It snowballs.

Metla
19-10-2008, 08:50 AM
Yeah so you know that disciplining staff is very difficult, never mind putting them down the road. It creates stress for the employer, affects other staff, and is simply better avoided.


I have also found not discipling staff creates stress and affects morale. And trust me, when your four stories up in the air strapped to a structure your pulling apart you do not want disharmony....People have to be able to work together as a team, safely and efficiently.And to listen to what they are told and act upon it, while still doing their own thinking.

But yeah, firing someone is near impossible , and even if you give the required notice it can all still be challenged, from so many angles its just ridicules.

wainuitech
19-10-2008, 09:58 AM
If I wanted a "smart fart" reply I would have asked for one! Mind you, it does look a bit of a laugh. Who do you know who you want to annoy that much?:thumbs:

I will, as you say, have a look through that Google search you left, ta.

Unfortunately I do not have the advantage of your expertise so it will take me much longer than it would you, but I shall persist. Thanks for your help. It is appreciated.:) The link for 98 was meant as a joke - geessss - thought it may be good for a laugh.

Any way I have been looking through some of the links in the Google Search, and 1 that comes up several times, and looking at the screen shot appears to do similar to Steadystate is This one (http://www.filesland.com/companies/Ixis-Ltd/1st-Security-Administrator-Pro.html) - The "Weird Thing" is depending on which site you look at the price differs. I have no idea if it is any good, as I cant test it on win98 like I normally would as I dont have any PC's with 98 loaded.

I know free would be better, and no doubt there is something available, hidden away in some site, depends on how much a person wants to look or has knowledge of the sites. Someones bound to know of a place.

NOTE: Wonder if the original poster of this thread has come back and looked ??