Comments on: How to stop my crazy family from downloading destructive software?

Question: How to stop my crazy family from downloading destructive software?

mockjovial — Fri, 26 Aug 2005 21:45:50 -0800

My computer illiterate family has an HP box running Windows XP Home SP 2. They are constantly installing random programs from suspicious websites and allowing nefarious Active X controls to run – often leaving a trail of destruction for me to deal with. Is there an easy way to restrict their ability to install software? (Also - was I dreaming or did Microsoft just release some kind of policy editing tool that deals with this kind of problem?)

By: trondant

trondant — Fri, 26 Aug 2005 22:06:32 -0800

Disable IE, for starters.

By: zerolives

zerolives — Fri, 26 Aug 2005 22:12:39 -0800

and outlook.

By: ldenneau

ldenneau — Fri, 26 Aug 2005 22:15:35 -0800

Create an account without administrative privileges. Install Firefox, Flash and Thunderbird, and that's it. Set up the computer to auto-login to that account, password protect the administrator account, and don't let them near the administrator account.

By: Zed_Lopez

Zed_Lopez — Fri, 26 Aug 2005 23:15:40 -0800

What ldenneau said. Also, go into the Internet options for the non-administrative account and disable ActiveX controls.

By: strikhedonia

strikhedonia — Fri, 26 Aug 2005 23:30:12 -0800

Microsoft released an antispyware program (that they bought from another company). I've been using it for a few months and it works fairly well... real-time protection and scheduled scans seem to take care of most problems (once you get viruses and the like out the way). It has to be a legit copy of XP to download it, though, and it still asks you if you want to install some things--nothing other than a restricted account is going to stop them from saying yes.

I'd install Firefox and put extensions like NoScript on it. You can hide IE from the desktop by going into Windows components in Add/Remove Programs.

I know it's difficult to get the point across, but keep explaining why they shouldn't install stuff.

By: Dean Keaton

Dean Keaton — Fri, 26 Aug 2005 23:38:16 -0800

Ditto to all the other advice. I would also set up Ad-Aware, AVG Antivirus (free and self updating), and definately hide the admin account.... now!

Teach them how to use Ad-Aware. If they still don't do it, charge them $25 an hour (friend prices) to be there. They will learn to use it quickly.

By: strikhedonia

strikhedonia — Fri, 26 Aug 2005 23:42:46 -0800

Ad-aware and Spybot make a good team.

And I thought there was a similar thread awhile back about family computers, but my yahoo/google-fu is failing me.

By: dersins

dersins — Sat, 27 Aug 2005 00:08:58 -0800

and if you create a non-administrator account for them to log in, i'd like to reiterate what Idenneau said: PUT A PASSWORD ON THE ADMIN LOGIN.

I have had much fun at various workplaces over the years taking advantage of the fact that, in windows, the default admin password is NO PASSWORD AT ALL...

By: uspommie

uspommie — Sat, 27 Aug 2005 00:50:58 -0800

Use 'GoBack'? Works well for me....

By: mrg

mrg — Sat, 27 Aug 2005 09:11:32 -0800

There was a group policy management console (that's what it's called, I think) that's part of the Windows Server 2003 resource kit - if you wanted to you could set up a GPO with a list of approved software and apply it to the computer, but you'd have to figure out how to apply a GPO without having AD (which is possible, I just don't know how) and it'd be a lot more of a pain than just giving them a non-admin account. IE can also be set to not allow you to install or run ActiveX controls, and you can put a whitelist in if they absolutely must run IE.

By: gemmy

gemmy — Sat, 27 Aug 2005 09:36:10 -0800

What everyone else has said about admin accounts.

I'd recommend Hitman Pro as a way for you/them to keep the computer clean. The site is in Dutch only, but the download is easy to find and the program itself has an English version. It's basically a shell for running a bunch of anti-spyware apps all at once, and they update automatically.