Not specifically linked to mairlist but thought you chaps may be the best people to answer this query…
I wish to set up a ‘presenters’ account on xp which when using that login would see mairlist load at login and run maximized but so that the account is logged right down so that the only option on the start menu would be to log off - i.e. no options to load ‘my computer’… ultimately what would be great would be stopping a USB loading if plugged into a computer and therefore forcing users to that account to use music in the mairlist database…
This would also then mean that there would be no way for users to load things such as the config etc etc…
Normally this is done by Group pollicy in the Active Driectory.
To prevent use of USB Storage, is not very difficult. The limited user is not allowed to install drivers, so just remove the USB storgae drivers from the Windows\inf directory, so the user should not be able to use any USB Storage device.
More detailed description can be found here: http://diaryproducts.net/about/operating_systems/windows/disable_usb_sticks
… or if you don’t have Active Directory, you can still use the MMC Group Policy snap-in, from a user who has admin. rights. This lets you lock down a lot of Windows features. Start, Run, gpedit.msc starts it on XP: dunno about Vista or Win7.
CAUTION: Settings made under Computer Configuration (which IS the section you want: User Configuration isn’t what you think it is) affect ALL users of the PC.
PS: To force mAirList to start at login for your ‘presenter’ user, copy mAirList into the Startup folder in that user’s Start Menu folder. If no Startup folder exists there, create one manually and THEN copy the mAirList shortcut into it. Make sure the shortcut’s Properties have Run seto to Maximized.
[quote=“feroz, post:6, topic:6790”]At the user application layer, YOU have mistrust issues.
Locking USB ports, and restricting users from being creative, in the long term is just bad management practice.[/quote]
I agree it’s better to EDUCATE your users, and to DISCIPLINE them (a ban from presenting shows for a month works well for persistent offenders ;)).
Howver, just preventing people from being able to do certain things which are against local rules is still helpful, and it sends a strong message to those who persist in thinking ‘it won’t matter, I’ll just do it this one time …’
PS: I don’t think this is really off-topic, because it does concern management issues associated with mAirList.
I don’t think it has anything to do with mis-trust… In many studio set-ups this wouldn’t normally be a problem as the actual PC wouldn’t be in the studio, instead it would be hidden away elsewhere - ultimately illiminating the issue of USB points…
Also, when working in community radio, where people are giving up their time to work for you, it is easier and a kinder approach just to lock down a machine in a simple way like this than it is to plague them with rules and sanctions - which could see them walking out of the door…!
I have worked and gained experience in many large organisations where accounts like this are simply common practice - i have already learned of somebody attempting to make changes in the config after just a couple of weeks of the station being up and running - while people are so keen i’d wouldn’t dream of being too harsh or issuing sanctions!
I take the opposite view. Many community radio volunteers are unemployed, and part of the station’s purpose is to help those people by giving them skills to help them get a job.
And for some people, part of this (in my opinion) is to get them used to an environment where there ARE rules and sanctions. Almost every company in the UK which uses computers either has them fully locked down, or has a computer use policy which employees must sign and agree to abide by. Whichever method you adopt in your community radio station, it promotes (or enforces) responsible use of computers by the volunteers, which can only help them when looking for work.
I would say that those sorts of people are either potential additions to the station’s IT team; or are trying to restore their access to porn sites, Facebook, etc., or are trying to install their ‘favourite’ app. The latter category are the ones you need to either educate or restrain. You wouldn’t want your station getting into any legal or criminal issues because of a ‘keen’ volunteer, would you? Or have a virus running riot on all your PCs because a ‘keen’ volunteer has installed ‘… a really great piece of software I just found on the Internet!’
The one thing you absolutely DO NOT want to lock down is the ability to change Windows colours, screen resolution, etc.: they may have colour blindness or other visual problems. Having said that, you can only do this if everyone has their own user ID. If there is just one user which EVERYONE uses, you probably will want to lock down screen and colour settings as well.