| Page 1 of 1 |
sTo0z
[Moderator] Babysitter
Posts: 7449
Location: USA
|
 Posted: Fri, 26th Dec 2014 20:54 Post subject: Best way to segregate windows installs? |
|
 |
So sad that I've lost my IT skillz after being in the industry for like 8 years, but it's time to call in reinforcements because I suck now. 
So basically we have a family computer here, and I went with the standard multiple accounts setup. Admin account for me, restricted accounts for the kids. (Went through both Windows 7 and 8.1).
It says things that sound good "Restricted users can't install software, can't change certain things", etc.
What a crock of shit that turned out to be. No matter how hard I lock shit down, any AV software, any protection I can find, shit they do on their accounts always affects the entire computer. Even the admin accounts end up with altered search engines, a bunch of bullshit icons automatically added to the desktops, shit like that. So much for "can't install without permission".
So fuck one Windows install with multiple accounts. But I also don't want to go full hardcore on partition the drive 3 ways either, that seems a little overkill.
Is there any easy to use and intuitive middle ground between the two?
And no, I'm not switching to Linux or any of that bullshit.
Any ideas?
|
|
| Back to top |
|
|
|
|
| Posted: Fri, 26th Dec 2014 21:44 Post subject: |
|
|
Can't you lock down account install software privilege from group policy?
|
|
| Back to top |
|
|
LeoNatan
☢ NFOHump Despot ☢
Posts: 73217
Location: Ramat HaSharon, Israel 🇮🇱
|
| Posted: Fri, 26th Dec 2014 21:59 Post subject: |
|
|
Get a mac 
What about some virtual machine solution? It should really be enough for family accounts.
|
|
| Back to top |
|
|
|
|
| Posted: Fri, 26th Dec 2014 22:04 Post subject: |
|
|
I think many games don't work properly inside a VM.
|
|
| Back to top |
|
|
LeoNatan
☢ NFOHump Despot ☢
Posts: 73217
Location: Ramat HaSharon, Israel 🇮🇱
|
| Posted: Fri, 26th Dec 2014 22:23 Post subject: |
|
|
| VGAdeadcafe wrote: | | I think many games don't work properly inside a VM. |
Depends on the games, but true. |
|
| Back to top |
|
|
|
|
|
| Back to top |
|
|
|
|
| Posted: Fri, 26th Dec 2014 23:18 Post subject: |
|
|
| LeoNatan wrote: | | VGAdeadcafe wrote: | | I think many games don't work properly inside a VM. |
Depends on the games, but true. |
Why the hell don't we have native GPU access in VM yet? Instead we get that emulated S3 fucking bullshit that would chug trying to play Doom 2 >_>
|
|
| Back to top |
|
|
LeoNatan
☢ NFOHump Despot ☢
Posts: 73217
Location: Ramat HaSharon, Israel 🇮🇱
|
| Posted: Fri, 26th Dec 2014 23:26 Post subject: |
|
|
If you connect more than one card, you can assign each card to a virtual machine using VT-d, and have each VM basically a dedicated GPU. It would work at a performance not much different than native.
As for sharing, it comes down to GPU support of virtualization. Of course nVidia and AMD only support these in the workstation lines, not the game lines. You still need VT-d in the CPU.
|
|
| Back to top |
|
|
|
|
|
| Back to top |
|
|
LeoNatan
☢ NFOHump Despot ☢
Posts: 73217
Location: Ramat HaSharon, Israel 🇮🇱
|
| Posted: Fri, 26th Dec 2014 23:31 Post subject: |
|
|
Since all Android draw calls are using OpenGL ES, could be that the emulator is translating the calls from OGL ES to native host OGL calls, thus seeing an almost 1/1 performance. To support something like that in a VM through virtual driver would be a lot more complicated than the emulator.
|
|
| Back to top |
|
|
|
|
|
| Back to top |
|
|
LeoNatan
☢ NFOHump Despot ☢
Posts: 73217
Location: Ramat HaSharon, Israel 🇮🇱
|
| Posted: Fri, 26th Dec 2014 23:45 Post subject: |
|
|
For anything but 3d graphics, virtual machines offer sufficient performance these days, especially for family computers, where most people use the computers for reading articles, checking email and facebook and watching YouTube.
|
|
| Back to top |
|
|
sTo0z
[Moderator] Babysitter
Posts: 7449
Location: USA
|
| Posted: Fri, 26th Dec 2014 23:49 Post subject: |
|
|
| MisterBear wrote: | | Can't you lock down account install software privilege from group policy? |
I've tried, that's what I'm saying, it boggles my mind that so much shit ends up getting altered/installed.
This one is a huge culprit: http://www.bigfishgames.com/
It just spams the (EVERY ACCOUNT) desktop with a ton of shit, and somehow they can just run it without needing any permissions.
And obviously viruses aren't going to give a shit so I understand that piece, but it just seems like they can fuck so much shit up (unintentionally) even though I try and lock so much shit down.
I was thinking VM but I'm not sure if the interface is friendly enough for the kids to "logout" and "login" and I wasn't sure about gaming and stuff, which was mentioned already.
It's a pretty basic machine with a single video card, etc, so nothing crazy  |
|
| Back to top |
|
|
LeoNatan
☢ NFOHump Despot ☢
Posts: 73217
Location: Ramat HaSharon, Israel 🇮🇱
|
| Posted: Fri, 26th Dec 2014 23:58 Post subject: |
|
|
|
|
|
| Back to top |
|
|
sTo0z
[Moderator] Babysitter
Posts: 7449
Location: USA
|
| Posted: Sat, 27th Dec 2014 02:02 Post subject: |
|
|
Minecraft is a big one, one of them recently got into Farming Simulator 15 which almost pushes the system to its limits (it's not the best machine ever). Sometimes Hearthstone and some of the Windows store games, some "casual" racing games and crap. Starbound, Terraria, Turbo Dismount... That's about all I can think of at the moment. Oh yah some really awful web game or something called Roblox: http://www.roblox.com/
|
|
| Back to top |
|
|
DXWarlock
VIP Member
Posts: 11422
Location: Florida, USA
|
| Posted: Sat, 27th Dec 2014 02:11 Post subject: |
|
|
this wont work for the group policy?
http://www.howtogeek.com/howto/8739/restrict-users-to-run-only-specified-programs-in-windows-7/
add that plus block windows installer without admin password should do it I think.
-We don't control what happens to us in life, but we control how we respond to what happens in life.
-Hard times create strong men, strong men create good times, good times create weak men, and weak men create hard times. -G. Michael Hopf
Disclaimer: Post made by me are of my own creation. A delusional mind relayed in text form.
|
|
| Back to top |
|
|
|
|
|
| Back to top |
|
|
sTo0z
[Moderator] Babysitter
Posts: 7449
Location: USA
|
| Posted: Sat, 27th Dec 2014 15:28 Post subject: |
|
|
I feel like most of the damaging stuff that happens is not even from any installers though. It's like a ton of plugin crap that happens over the browser.
It always worked well when it just came down to plain old installers, but even the amount of crap they can change on the system is mind boggling.
|
|
| Back to top |
|
|
|
|
| Posted: Sat, 27th Dec 2014 16:12 Post subject: |
|
|
So if you install something in the restricted account it makes changes to the admin account?
Also, don't the restricted accounts have their own Firefox/Chrome installation separate from the admin's?
Maybe you have dome something like install the browser for "all users"? Just an idea, I've never used multiple accounts in Windows.
|
|
| Back to top |
|
|
|
|
| Posted: Sun, 28th Dec 2014 10:56 Post subject: |
|
|
Deep freeze still works ?
|
|
| Back to top |
|
|
sTo0z
[Moderator] Babysitter
Posts: 7449
Location: USA
|
| Posted: Sun, 28th Dec 2014 14:42 Post subject: |
|
|
| frogster wrote: | | Deep freeze still works ? |
Heh I considered this |
|
| Back to top |
|
|
| Page 1 of 1 |
All times are GMT + 1 Hour |
