Prevent Employees from Taking Stuff Home

[mans]

Hi,

We have a small wireless winXP based network covering our offices. I'm thinking of buying some ebooks, video tutorials, etc and make them viewable through projector in our conf room. I don't want the employees to copy these materials to their local pcs. any idea how can I do this?

Thank you.

 

[gaidin123]

Why can't you simply put all the files you want to display onto the computer, hook it up to the projector, and do NOT hook it up to any network?

The other option would be to lock down a networked winxp box via group or local policy to act as more of a kiosk where you disallow access to most programs except the ones needed to display the files and disable the administrative shares on that machine. As long as it's not part of a domain where your users are allowed to remote desktop or are all local administrators that should be somewhat workable.

Gaidin

 

[kamper]

I don't have a solution to your dilemma (and sorry for the thread-crap ) but this sort of thing seems to be a growing problem: read here

 

[mans]

Yep, it is USB problem and more.

I want to be able to access the computer connected to the projector from my desktop to update things. But at the same time, I don't want others to copy things from projector pc to their pcs. For USB, I disabled it via bios.

 

[gaidin123]

Not sure how involved your network setup is but would it be possible to put an extra NIC in your machine and create a vlan that contains solely your machine and the projector pc? That way you would have the ability to update it over the network without providing it internet access and without letting anyone but you connect to it over the network. Or you could get a bit simpler by placing a firewall in front of the machine and only allowing your machine's IP to connect to it.

A BIOS password and disabling of USB ports and any ports that aren't required for the thing to function are necessary.

Gaidin

 

[skyking]

make it necessary to log in to use it, set the machine to never go back to the login page, and do not give out the uname/password. Put all the materials on it with whatever user level necessary, no more. leave it logged in to that user level, hopefully a regular user. disable USB as you have, remove or disable floppy drive.
Do not place it in your workgroup, and use the IP to remotely administer it with either tightVNC or some such program.