Administrating "public" computer at local church?

I'm administrating a "public" computer, that is the computer at our local church. We use it to record the services in Ableton Live, show lyrics with Easy Worship and so on.. On it we have Moonscape Protection which is a software that takes a snapshot of the computer and allows me to restore it on prompt or schedule it.

Often sommeone needs to install something, so they need an administrator account. (Windows XP) The problem is that every other month someone, and I don't know who, manages to install/get a virus. This leads to full chaos and a unusable computer at several services, and when I take away their administrator privilegies, they complain about not being able to install stuff they need.

I have thought about a program which generates codes you can only use one time to gain administrator privilegies to install a program, so that if anyone needs to install anything they have to call me to get a one-time code to install what they need, if I think the program they intend to install is safe.

Do you know about any programs which will help me? Thank you!

Friend of Kim

Posted 2012-01-08T12:04:50.177

Reputation: 1 301

1Establish a time, once a week, when you will be there to install stuff for them. Then no exceptions outside that time. – Daniel R Hicks – 2012-01-08T14:50:50.410

@DanH The problem is that they need the admin rights on the day of the meeting.. – Friend of Kim – 2012-01-08T14:59:20.773

3@50ndr33 Just wondering, what kind of software needs to be installed during service? – Daniel Beck – 2012-01-08T15:10:13.657

So do I.. People say they play games, and a install box pops up. (virus) But one thing I saw they had installed was a media player for playing of downloaded movies (probably torrents.) – Friend of Kim – 2012-01-08T15:57:11.150

12 computers, ask someone to donate another one, keep one for the pro stuff, locked up physically even. let the other one fall to the wolves – Psycogeek – 2012-01-08T19:20:46.120

Answers

Set up a system where you can remote login to the machine. Give them an IM client with which to get in touch with you. If you are available at the time, remote login and install it for them. If you are not available, have them put the installer for the desired software in a preset folder and you'll get to it next time you check in.

I think keeping the admin password from the users is a good idea.

jonsca

Posted 2012-01-08T12:04:50.177

Reputation: 3 889

For Windows XP you can use Windows SteadyState and its "Windows Disk Protection" so that users can install whatever they like, but in order for those changes to be permanent they need an extra password (I would see you as the only person who would have this password).

There is a nice guide on it at HowtoGeek

Judging by their guide you can specify users who can make permanent changes and users that cannot, I would suggest you create two users, one for yourself and one for everyone else and make yourself the only person able to make permanent changes. It also has a lot of features to prevent users from doing certain things.

It used to be available on the Microsoft website but it appears to have been taken down. You can still get it from Softonic though.

It is not supported on Windows 7 or later Vista service packs.

Mokubai

Posted 2012-01-08T12:04:50.177

Reputation: 64 434

If you allow them to install programs, then you are implicitly allowing them to install viruses. One cannot be exclusive from the other.

It's like asking how can you allow someone to have a master key to the church but restrict them from bringing friends into the building without you knowing.

You should rethink the set of software that is on the computer, or how worship services are conducted. Asking users to plan ahead or make a dry run an hour before hand is quite a reasonable request.

Or find the Control freak in the group and give them the password.

surfasb

Posted 2012-01-08T12:04:50.177

Reputation: 21 453

Umm, I meant that if I can give them a temporary password to install, which only works one time. So, if they need admin rights, they call me and tell me what they need it for, and get the temporary password. – Friend of Kim – 2012-01-08T15:01:32.177

Why not just someone to donate an old XP computer for "general" use so that you can keep the current computer for its primary purpose and virus free?

JonnyBoats

Posted 2012-01-08T12:04:50.177

Reputation: 564

So, we have two computers with a hardware switch when we need to switch between the virus-free computer and the "trouble computer". Hmm, yupp, that's another good solution too. :) – Friend of Kim – 2012-01-08T15:03:07.873