<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
I'm on the fence, myself between an open patron config and a
restrictive config. In past years, I've standardized on a
restrictive patron desktop (plus Deep Freeze), which has worked
very, very well. The patrons appear to be ok with the restrictive
desktops and I very rarely have any complaints filtered through the
staff to me. However, I'm finding the more open desktop (plus DF)
more and more appealing and useful for patrons. <br>
<br>
With an open desktop, patrons would be much more easily able to
bring a USB device with a portable application installed and then
run it on the library computers. Not necessarily a bad thing, but it
opens the library up to another avenue of abuse: bulk spamming,
malicious network scanning, etc. These attacks would be coming from
library computers. Granted, this is already a risk when patrons use
the library's wireless access. But still, a patron could considered
it safer to use the library's computer for malicious activity than
the patron's own wireless device.<br>
<br>
With the restrictive desktops, this isn't really an issue.<br>
<br>
I think I'm still more inclined to start opening up the desktops.<br>
<br>
<br>
<div class="moz-signature">______________________________<br>
<b>Chad Neeper</b><br>
<small>Senior Systems Engineer</small><br>
<br>
<b>Level 9 Networks</b><br>
<small>740-548-8070 (voice)<br>
866-214-6607 (fax)</small><br>
<br>
<small><small><i>Full LAN/WAN consulting services -- Specialized
in libraries and schools</i></small></small></div>
<br>
On 9/2/2010 9:51 AM, Dan Will wrote:
<blockquote cite="mid:004601cb4aa5$f1510870$d3f31950$@oplin.org"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoPlainText">Subject: Re: [OPLINTECH] SteadyState -
no Win7</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">For years, the only user control we had
on our public PCs was Deep Freeze. Then a new IT Specialist,
frustrated and appalled at the lack of updates, removed Deep
Freeze and tried to just lock everything down. (<span
style="color: red;">Sort of the reverse direction that we
aged library IT folk have moved in over our careers</span><span
style="color: rgb(149, 55, 53);">).<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="color: rgb(149, 55, 53);"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span style="color: rgb(149, 55, 53);">
Yep, been there started with W3.11 & DOS 6.0. Lock those
babies down tight and then find a child to break it (any
child would do because they knew more about the computers
than we did).</span><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">That IT person lasted 6 months with us.
We now have no Deep Freeze and crippled public computers.
Something needs to change.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><span style="color: red;">What direction
do you all recommend I push New IT Specialist? <o:p></o:p></span></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><span style="color: rgb(149, 55, 53);">Don,
we have been trying to get to the point where our patrons
can do anything they can at home (short of installing
programs and messing with the system files). It actually has
made my life easier. I have fewer questions about <b>“Why
can’t I <i>{add your own nightmare here}</i>!”</b> <b> </b>As
long as Deep Freeze is installed and in the frozen state,
you should be good to go.<o:p></o:p></span></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Does Deep Freeze allow some way that
regular updates can automatically be installed, or is it still
the tedious process of visiting every machine, booting
unlocked, installing updates, and rebooting locked?<o:p></o:p></p>
<p class="MsoPlainText"><span style="color: black;"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span style="color: rgb(149, 55, 53);">The
Deep Freeze console is the way to go, hands down & no
doubt about it! You can cause the computers to boot at any
time you choose & then just have it boot in an unfrozen
state & run windows update (I have a WSUS running here,
cuts down on the outside internet traffic).<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="color: rgb(149, 55, 53);"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size: 10.5pt;
font-family: Consolas;">Dan Will<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10.5pt;
font-family: Consolas;">Technology Supervisor<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10.5pt;
font-family: Consolas;">Meigs County District Public Library<o:p></o:p></span></p>
<p class="MsoNormal"><a moz-do-not-send="true"
href="mailto:willda@oplin.org"><span style="font-size:
10.5pt; font-family: Consolas; color: blue;">willda@oplin.org</span></a><span
style="font-size: 10.5pt; font-family: Consolas;"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10.5pt;
font-family: Consolas;">740.992.5813<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10.5pt;
font-family: Consolas;">740.992.6140 (fax)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10.5pt;
font-family: Consolas;"><o:p> </o:p></span></p>
<p class="MsoNormal">“When you are growing up there are two
institutional places that affect you most powerfully: <o:p></o:p></p>
<p class="MsoNormal">the church that belongs to God and the
public library that belongs to you. <o:p></o:p></p>
<p class="MsoNormal">The public library is the great equalizer.”
<o:p></o:p></p>
<p class="MsoNormal">Keith Richards<o:p></o:p></p>
</div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
OPLINTECH mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OPLINTECH@oplin.org">OPLINTECH@oplin.org</a>
<a class="moz-txt-link-freetext" href="http://mail.oplin.org/mailman/listinfo/oplintech">http://mail.oplin.org/mailman/listinfo/oplintech</a>
Search: <a class="moz-txt-link-freetext" href="http://oplin.org/techsearch">http://oplin.org/techsearch</a>
</pre>
</blockquote>
</body>
</html>