[WEB4LIB] Public access machines and network security

[N. Lynn Schlatter]

On our WinNT workstations that were given to us by the Gates Foundation, we
have all the software they provided:  Office 2000, 3 Barney programs, 3
Magic School Bus programs, several Encarta applications, 3 Corbis titles,
Streets and Trips 2000, Acrobat Reader, and a Mouse Tutorial.

Patrons can save to the hard disk, but as we have "don't save settings on
exit" checked in our System Policies, material saved disappears upon reboot.
We turn the machines off at the end of the day and on at the beginning,
which is usually the only reboot.  Patrons cannot use NT Explorer, and they
cannot delete any files (even their own) from the hard disk.

Network Neighborhood is invisible on public access computers.

I do not know all the ins and outs of how our security works on the Gates
Foundation computers, because they set it up.  On machines we've purchased
recently, we use Centurion Guard for "reboot amnesia."

Lynn Schlatter
Instructional Coordinator
Shreve Memorial Library
www.shreve-lib.org


-----Original Message-----
From: web4lib at webjunction.org
[mailto:web4lib at webjunction.org]On Behalf Of Robin Boulton
Sent: Wednesday, May 22, 2002 4:54 PM
To: Multiple recipients of list
Subject: [WEB4LIB] Public access machines and network security


On machines that provide anything more than catalog and simple internet
access:

What applications do you make available?

How much access do patrons have to the local hard disk?

How much access do they have to the network?

How do you prevent malicious mischief from being done?


TIA for any advice or suggestions.

Cheers,
Robin.



___________________________________________________
Robin Boulton                           rboulton at linc.lib.il.us
Automation Coordinator          (630) 584 0076 x 258
St. Charles Public Library District     Cell:  (630) 918 8738
St. Charles, IL 60174                   FAX: (630) 584 3448
http://www.st-charles.lib.il.us
___________________________________________________



*********************************************************************
Due to deletion of content types excluded from this list by policy,
this multipart message was reduced to a single part, and from there
to a plain text message.
*********************************************************************