Kids Laptops - Win10 - LockDown Dilemma

[tankplanker]

You can use LGPO via a login activated batch file to import the GPO on a workgroup PC: https://blogs.technet.microsoft.com/secguide/2016/...

[essayer]

What do you do when they just reinstall a hacked copy of Win10 off a friend?

[SystemParanoia]

essayer said:

What do you do when they just reinstall a hacked copy of Win10 off a friend?

i'd be quietly proud of them for circumventing my efforts.

( if i end up experiencing what tank planker went though i'd be pretty excited at the prospect of commencing @sysop vs blackhat warfare on my own lan against the kids )

... still tell em off though


as ive said I dont want to lock everything down so tight that they cant do anything.
but i want to at least protect them from themselves for a while now that they're in secondary school and open to alot more influence than ever before.

Edited by SystemParanoia on Friday 22 September 09:54

[SystemParanoia]

tankplanker said:

You can use LGPO via a login activated batch file to import the GPO on a workgroup PC: https://blogs.technet.microsoft.com/secguide/2016/...

[SystemParanoia]

Ive pulled the trigger and run

 rm -rf / 

on my Homeserver; its now running a full M$ stack ( thanks to dreamspark ) with Hyper-V on the bottom and many copies of Server 2016 on top.

Ive Got my Domain up and running, and im currently experimenting with domain users and groups.

Ive decided to put W10 Education Edition onto the kids computers.
things are going surprisingly smoothly so far.

[Simon.]

I have a Lenovo Flex 10, originally running Windows 8.1 it was upgraded to Windows 10 (for the free license) and then rebuilt with Windows 10 to get rid of the bloatware.

Because the machine was so slow I got my son a replacement (shuttle PC with more ram and much better cpu) and decided to have a play with the Flex 10.
According to various reports it 'could' run Ubuntu but there were some caveats (touch screen, wifi nic drivers etc).

So I grabbed a USB key and created a new 1704 media key and booted the Flex 10 off it (after disabling secure boot).

First of all, it just worked, I did follow the instructions to create a 32bit UEFI boot file but even then I am not sure it would have been needed because the Ubuntu installation just worked, touch screen, wifi, bluetooth all just worked.

What I am trying to say is that the Miix may well also 'just work' and if you already have them backed up you've nothing to lose (I use Acronis TrueImage for my system backups, it's an awesome product and been using it for years now).

[SystemParanoia]

Ill give it a try at some point before i hand it over to them
Ive needed an excuse to become a windows household, and MCSE training seems like a good one.

( Hyper-V has already annoyed me as the USB passthrough function i use to give my USB printer to the relevent VM with Proxmox, ESXI, VMWARE is non existant )