How would YOU go about protecting 30 computers at a primary school?

[antowan]

There is a school with 30 computers. These computers should be blocked from most sites on the web bar a select group of websites.

How would YOU approach it cost effectively in a way that smart kids won't be able to bypass. In other words host file tampering etc is out.

[Nerfherder]

UAC and then ipcop

[NomNom]

Make all the pupils have to login to a domain as a guest account with their own username and password of sorts that doesn't have the ability to install programs or change system settings.

Then a program that monitors every website each Pc goes to OR a program that only allows certain websites sort of like a whitelist and blacklist program for websites.

[Pr⊕phet]

There is a school with 30 computers. These computers should be blocked from most sites on the web bar a select group of websites.

How would YOU approach it cost effectively in a way that smart kids won't be able to bypass. In other words host file tampering etc is out.

Remove the mouse and keyboards

[hereticangel]

untangle firewall with a squid proxy.

[Praeses]

Squid with a couple of website rules should do the trick. just make sure that the PCs can't access the internet without going through the squid proxy

[Wyzak]

Standard user accounts, good antivirus which can disable removable media, malware protection, and then a hardware router which blocks all sites except ones that you allow for the lesson.

[iAmThePope]

Standard user accounts, good antivirus which can disable removable media, malware protection, and then a hardware router which blocks all sites except ones that you allow for the lesson.

This ˆ

Nice and simple and easy to set up.

[DJ...]

Hire Picard...

[Flidiot]

Standard user accounts, good antivirus which can disable removable media, malware protection, and then a hardware router which blocks all sites except ones that you allow for the lesson.

I also agree with this, if you have another PC lying around though you could even install IPCop, Untangle or ClearOS (dying to play with this one) to filter your traffic.

RE the security software, since it is a school you could get a decent discount on something like Sophos endpoint.

[ave]

Standard user accounts, good antivirus which can disable removable media, malware protection, and then a hardware router which blocks all sites except ones that you allow for the lesson.

and install ubuntu on all the pc's

[AcidRaZor]

http://netparent.co.za/

[Nuro]

and install ubuntu on all the pc's

This, and take one box, and run pfsense on it. This will give you squid and an awesome firewall.

[Rocket-Boy]

I would just install squid on a linux box and use that as the firewall and setup a custom ruleset. If you run a GP on the local pc's(even if its local GP) to remove access from installing software or modifying proxy settings then it should be ok. Lastly setup rules in your firewall to drop data on standard web ports if its not going through the squid.

[czc]

Lock the kids outside the computer lab.