Re: Computer Lab in a Jail...

[Bugbear <gbugbear () gmail com>]

Although steady state is EOL end of year _ just fyi

On 9/19/10, xgermx <xgermx () gmail com> wrote:
> There's always Microsoft Steady State (basically a free, paired down
> version of DeepFreeze).
> https://www.microsoft.com/downloads/en/details.aspx?familyid=d077a52d-93e9-4b02-bd95-9d770ccdb431&displaylang=en
>
>
> On Sun, Sep 19, 2010 at 2:36 AM, Brian H <binarynomad () gmail com> wrote:
> > I wanted to get some input from the security professionals point of view
> > on my situation.
> >
> > I've been contacted by a local county detention center (read: JAIL), to
> > help with a computer lab that keeps getting pwned.  They keep having
> > problems with MP3s, Porn, and Gang communication on these computers.  They
> > say they keep trying to clean them up, but the next day everything is
> > back.
> >
> > I don't trust these computers one bit, I've already found an number of
> > questionable programs/processes (that I've removed), and some trojans in
> > the form of Adobe CS4 cracks that were placed on the hard drives.
> >
> > My first objective is (scorched earth) to reinstall from scratch, but that
> > is on hold while they find the install CD's and Keys.  I've been told
> > these will not be available until later this week, but the first class of
> > the new session will happen before that.
> >
> > So, in the meantime, I have to clean & lock these down as much as I can
> > while letting the students still run the class programs and save their
> > work somewhere.
> >
> > Environment:
> >        - 20 Lab/Student machines, 1 instructor
> >        - Two (2h) classes per day, AM (beginner) and PM (advanced)
> >        - Windows Vista Home Basic, Dell Optiplex 360, 2GB RAM, 130GB HD
> >        - No server
> >        - Students on closed network, unless teacher plugs in uplink cable
> >        - Students used to drop off work over network to teacher's PC.
> >        - Teacher has filtered Internet access cable next to their PC
> >        - Classes cover basic Office Suite, Typing, and IC3 Certification.
> >        - Previous IT person had "flexible morals", did favors for inmates.
> >
> > Ongoing problems:
> >        - Some malicious, computer savvy, felons
> >        - Gang messages hidden on the system to communicate to other
> > members
> >        - Gang communication and file sharing across LAN in class
> >        - Porn and MP3 being spread between computers
> >
> > Options:
> >        - Removing all non essential programs
> >        - Installing and using Microsoft SteadyState
> >        - Creating student profile, with standard permissions
> >        - Enabling parental controls on student profile, app limitations,
> > etc.
> >        - Disabling network switch (in the class room)
> >        - Disabling NIC in BIOS
> >        - Password protect BIOS
> >
> > Still trying to figure out how to let them save files, yet not leave
> > messages for other students.  I'm considering getting 40x 2GB USB Flash
> > Drives (one for each student of each class) so SteadyState can just nuke
> > all changes between students.  Teacher would distribute and collect all
> > drives before and at the end of class.
> >
> > ----
> > Brian H
> > binarynomad () gmail com
> > http://www.binarynomad.com
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com

-- 
Sent from my mobile device
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com