Sign in to follow this  
Surk

[b]How do I disable games in W2K_Pro??[/b]

Recommended Posts

Have a client whom is running a VPN server and is continually having freecellsolitaire etc re-loaded by employees on the network machines. I have logged in as Admin and deleted, renamedhidden attributed all games yet they are being put back on either through users sending freecell as attachment from home or through disk. Users are all on restricted access for workstations at present.

I was told that W2K Policy editor should do the trick, however I am not familiar with setup or config to correct this issue...Could someone advise or suggest other methods of disabling or permanently removing ALL games within 2K_pro ??

Share this post


Link to post
Share on other sites

since those kinds of apps don't actually need to be placed in global locations or access the registry, even those without administrator privileges can name them whatever they want and throw them on their system

if you actually need something this fine-grained, perhaps there is a default-deny shell for app launching where you could only launch approved apps?

of course you'd have to block flash/java/etc on your proxy server to keep them off of web games...

i think this is a real case of diminishing returns here. if the employees do it all day, they should be fired. if they don't, i doubt management is going to enjoy their newfound resentment for their position since they're not granted trivial amenities.

Share this post


Link to post
Share on other sites

I agree...however employees have all signed waivers for software piracy and policies including games... Employer informs me that it is hard to replace employees and train accordingly if drastic measures are taken...I replied.."Perhaps you need to set an example with one of the employees when they persist to defy company policy..

I can restrict attachments on the VPN without question, however they do request wordexcel docs at times....

Any other suggestions??

Share this post


Link to post
Share on other sites

With the policy editor you can clamp down a machine as hard as needed upto and including seting up a machine to only run approved programs & nothing else: Thus eliminating a users ability to run Solitaire or any other game from any location. You however, need to be able to identify exactly what is allowed: Which can be a pain. I do note that it is harder to prevent web-based games and still allow access to a browser. But even with a browser, one can limit the sites accessable to a pre-ordained list. However, that rather limits the usefullness of unrestricted access.

More to the point, your employer is correct. It is expensive to hire, train and keep good employees if drastic measures are taken. Even setting an example of one can harm the Employer-Employee relationsip of everyone there because people talk (That's the whole point of setting an example). There is alot of good in allowing small inefficiencies for the sake of moral as long as the jobs are being done well. Drastic measures and making an example of an employee is really justified if the act being punnished is so outrageous that most everyone (or at least the most important people) will agree that it needed to be done. There are enough evil draconian bosses that do what is percieved as spiteful without looking at the cost to the business of that action. Rather than trying to punish these inefficiecies - punish when the job they do is not done in time or done poorly and with every job expect faster and better so that there is no time for the inefficiency.

Share this post


Link to post
Share on other sites

what's to stop them from renaming an exe file to doc and then naming it back again once transferred?

I really think this is more a management issue. You must remember these are adults you are dealing with. If they can't be treated as adults, they may not be worty employees.

Share this post


Link to post
Share on other sites
what's to stop them from renaming an exe file to doc and then naming it back again once transferred?

I really think this is more a management issue.  You must remember these are adults you are dealing with.  If they can't be treated as adults, they may not be worty employees.

I play CS and Starcraft at work when my boss is not around lol. I sometimes lock my room and play it with headphone. My boss knocks and asks why do you lock the door and I reply, "Is it locked again?" lol

P.S. My boss watches porno in his room lol

P.S.S. He got caught by my collegue who's just hired lol.

Share this post


Link to post
Share on other sites
what's to stop them from renaming an exe file to doc and then naming it back again once transferred?

I really think this is more a management issue.  You must remember these are adults you are dealing with.  If they can't be treated as adults, they may not be worty employees.

I play CS and Starcraft at work when my boss is not around lol. I sometimes lock my room and play it with headphone. My boss knocks and asks why do you lock the door and I reply, "Is it locked again?" lol

P.S. My boss watches porno in his room lol

P.S.S. He got caught by my collegue who's just hired lol.

Share this post


Link to post
Share on other sites

The error message I got is as follows:

Ran into problems sending Mail. Response: 550 Error: Message content rejected

DEBUG MODE

Line : 40

File : /home/www/sr.forums/htdocs/includes/smtp.php

Share this post


Link to post
Share on other sites

This is absolutely true. You have to treat your employees as adults. You cannot micromanage them and implement a restrictive policy to control childish irresponsible workers. This martial law approach to computing privileges only serves to undermine what you're trying to accomplish -- that is, to get employees to be productive, motivated, and to use good judgement naturally. When good behaviour can only be obtained through rigorous enforcement, the benefits of enforced behaviour rarely outweigh the negatives.

Having said that, here is how you might go about allowing users to only run authorized programs:

Run: gpedit.msc

User configuration > Administrative templates > System > Run only allowed Windows applications

You should see the following screen, where you can Enable this policy and add programs like Word, Excel, etc:

run_policy.gif

Share this post


Link to post
Share on other sites

I don't have "Run only allowed Windows applications configuration" under Administrative templates > System. Is it only applicable to Windows NT or 2000 server? I'm using Windows XP Pro.

Thx.

Share this post


Link to post
Share on other sites

honold,

What is gpo? I have no experience with corporate/enterprise systems management.

giggy,

You might wan to e-mail Eugene and Davin with the error (likely reviews@storagereview.com and webmaster@storagereview.com). I suspect it is because you have asked for e-mail notification when a reply is posted; I get that too. There is a problem with the auto e-mail send feature... As for why that policy doesn't show on your system, I don't know. Maybe you don't have those kind of privileges.

Share this post


Link to post
Share on other sites
Have a client whom is running a VPN server and is continually having freecellsolitaire etc re-loaded by employees on the network machines. I have logged in as Admin and deleted, renamedhidden attributed all games yet they are being put back on either through users sending freecell as attachment from home or through disk. Users are all on restricted access for workstations at present.

I was told that W2K Policy editor should do the trick, however I am not familiar with setup or config to correct this issue...Could someone advise or suggest other methods of disabling or permanently removing ALL games within 2K_pro ??

To sum up, what has happened is that by treating employees like children, you are wasting more company time by trying to solve the 'problem', than if you just tell them "games are not allowed, you will be fired if it affects your performance." It's one of those misconstrued cause/effect relationships. If someone is a bad employee, they are more likely to goof off at work, and therefore not get things done. If they are a good employee, then they know the value of relieving stress, and will only play games for shot periods of times, which will not affect their work. (To the contrary, by letting them do personal things, they will be happy, and their productivity will be higher.)

If you get draconian, in the name of 'keeping employees' (as opposed to firing the lazy ones) then you will end up losing the good employees as they get fed up with your policies, and only the lazy employees will be left. (Dilbert effect. Try to make the lazy shape up, and the good leave.)

Honestly, if game playing is reducing a specific employee's performance so much that it affects his job, then fire him for not doing his job. Don't try to make him shape up, because he'll just find a new way to slack off. (I am a fan of very liberal employment policies. As long as the employee does their job well, they can do whatever they damn well please, as long as it's legal. If they goof off, and it makes their work suffer, then you fire them for bad work, not for goofing off. Goofing off is only the symptom.)

Share this post


Link to post
Share on other sites
Have a client whom is running a VPN server and is continually having freecellsolitaire etc re-loaded by employees on the network machines. I have logged in as Admin and deleted, renamedhidden attributed all games yet they are being put back on either through users sending freecell as attachment from home or through disk. Users are all on restricted access for workstations at present.

I was told that W2K Policy editor should do the trick, however I am not familiar with setup or config to correct this issue...Could someone advise or suggest other methods of disabling or permanently removing ALL games within 2K_pro ??

To sum up, what has happened is that by treating employees like children, you are wasting more company time by trying to solve the 'problem', than if you just tell them "games are not allowed, you will be fired if it affects your performance." It's one of those misconstrued cause/effect relationships. If someone is a bad employee, they are more likely to goof off at work, and therefore not get things done. If they are a good employee, then they know the value of relieving stress, and will only play games for shot periods of times, which will not affect their work. (To the contrary, by letting them do personal things, they will be happy, and their productivity will be higher.)

If you get draconian, in the name of 'keeping employees' (as opposed to firing the lazy ones) then you will end up losing the good employees as they get fed up with your policies, and only the lazy employees will be left. (Dilbert effect. Try to make the lazy shape up, and the good leave.)

Honestly, if game playing is reducing a specific employee's performance so much that it affects his job, then fire him for not doing his job. Don't try to make him shape up, because he'll just find a new way to slack off. (I am a fan of very liberal employment policies. As long as the employee does their job well, they can do whatever they damn well please, as long as it's legal. If they goof off, and it makes their work suffer, then you fire them for bad work, not for goofing off. Goofing off is only the symptom.)

Share this post


Link to post
Share on other sites
Have a client whom is running a VPN server and is continually having freecellsolitaire etc re-loaded by employees on the network machines. I have logged in as Admin and deleted, renamedhidden attributed all games yet they are being put back on either through users sending freecell as attachment from home or through disk. Users are all on restricted access for workstations at present.

I was told that W2K Policy editor should do the trick, however I am not familiar with setup or config to correct this issue...Could someone advise or suggest other methods of disabling or permanently removing ALL games within 2K_pro ??

To sum up, what has happened is that by treating employees like children, you are wasting more company time by trying to solve the 'problem', than if you just tell them "games are not allowed, you will be fired if it affects your performance." It's one of those misconstrued cause/effect relationships. If someone is a bad employee, they are more likely to goof off at work, and therefore not get things done. If they are a good employee, then they know the value of relieving stress, and will only play games for shot periods of times, which will not affect their work. (To the contrary, by letting them do personal things, they will be happy, and their productivity will be higher.)

If you get draconian, in the name of 'keeping employees' (as opposed to firing the lazy ones) then you will end up losing the good employees as they get fed up with your policies, and only the lazy employees will be left. (Dilbert effect. Try to make the lazy shape up, and the good leave.)

Honestly, if game playing is reducing a specific employee's performance so much that it affects his job, then fire him for not doing his job. Don't try to make him shape up, because he'll just find a new way to slack off. (I am a fan of very liberal employment policies. As long as the employee does their job well, they can do whatever they darn well please, as long as it's legal. If they goof off, and it makes their work suffer, then you fire them for bad work, not for goofing off. Goofing off is only the symptom.)

Share this post


Link to post
Share on other sites

Sorry, I got an error, and it said it hadn't posted, so I tried again, and again, then I thought of just checking. :oops:

Share this post


Link to post
Share on other sites

Thanx for the very GOOD valid replies everyone!! I think we are though moving into a different tangent of my original query... I am an IT consultant that has been servicing this auto dealer for several years...most recently they elected to go to a Linux based server running a firewall and VPN using dual HS ISP's...outlay from the owner was somewhat $40K CDN to get the necessary setupcomponents.. I updated all workstations to W2K as per Car Mfgr requirements and setup VPN. Internet access is presently controlled by the local admin and must be requested and approved beyond the normal sites that are necessary..( ie NO MSN Messenger, gaming sites..etc )

As an owner, I would after spending the $$$ for this network want my employees to be productive and use the access to internet or computer to "streamline" or be more efficiently at productive tasks that they are afterall being paid to do... Let's not forget that no one would pay someone to fix their PC if they did nothing in return !! I, myself don't care for any Windows games..but some do... however everyone of his present employees also have home PC's that they can play freecell on until the sunsets.. My job is to satisfy the clients needs...

Policy editor is apparently the remedy...could someone please advise on process and config as I had requested initially. I understand all of the controversy surrounding this issue, but I think we are heading away from my request...

Share this post


Link to post
Share on other sites
Guest russofris
group policy.  google it (if you're using a 2k server and the clients are 2k or xp, and properly attached to the ad domain)

Better yet, contract out an MCSE or equiv. Having a single NTconfig.pol and one target user group on a domain is fairly easy to set up. If multiple groups are on a single master domain (Developers, Administrative, Managment), it becomes much more difficult. Multiple group.pol files must be made, and things can become a mess unless you are well documented and the correct planning is in place. I recommend user policies rather than machine policies for groups of 100 or more.

Thank you for your time,

Frank Russo

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this