Thirty or So Things to Help You Manage Public Access Computers

by Edward M. Corrado
presented at the 2001 EMAnj Conference
December 3, 2001
The Hilton at Cherry Hill,
Cherry Hill, New Jersey

Table of contents:

##### Operating System Level Security Programs #####

  • CybraryN
       Vendor: Computers By Design

       URL: http://www.cybraryn.com/products/cybraryn.htm

       Description: CybraryN™ is the core offering in the Computers By Design™ line of public access computer management solutions. CybraryN™ is a powerful, client-based software product that runs on your library’s public PCs. Features include: Security, Patron Authentication, Time Control, and Reporting

       Cost: Educational Pricing: Single User License, $129.95; Ten User License, $999.95; Site License, $2,495.95.

  • Fortres 101
       Vendor: Fortres Grand Corp.

       URL: http://www.fortres.com/products/fortres_101.htm

       Description: Fortres 101 is an innovative security agent that resides invisibly between the computer and the user. A computer sentinel, Fortres 101 monitors each action the user makes and determines if that action is legal or not. As a systems administrator for one or one thousand machines, software security is a must. Protecting not only the software and hardware applications, Fortres 101 also protects time and money by preventing damage to files and programs.

       Cost: Educational Pricing: 1 CPU License: $49.00; 15 CPU License: $279.00; 100 CPU License: $495.00; Site License: $595.00.

  • Secure.Solution
       Vendor: The Library Corporation

       URL: http://www.tlcarl.com/tlccarl/products/tools/securesolution.asp

       Description: Secure.Solution is an easily configured tool that helps libraries manage access and functionality of their public workstations. Secure.Solution allows you to set up all your PCs with one configuration containing multiple profiles, and then control which profile is active on a user session-by-session basis. User sessions are started using a Key and the Key a user gets determines how the PC is configured; what it can do, what it can't do, what it can access, and what the screen looks like.

       Cost: ?? - Contact Vendor

  • WinU
       Vendor: Bardon Data Systems

       URL: http://www.bardon.com/winu.htm

          Description: WinU is a full Windows 95/98/ME/NT/2000 user interface replacement with security access control, timeout, logging, web-browser monitoring, remote administration, and many flexible configuration options. It's easy to set up, easy to use, and virtually impossible to circumvent.

       Cost: A single-user license is $59.95, plus the Maintenance Plan subscription (required), plus shipping. Quantity-purchase and educational prices are also available for both the software and the Maintenance Plan.

##### Application Level Security Programs #####
  • Cooler
       Vendor: Fortres Grand Corp.

       URL: http://www.fortres.com/products/cooler.htm

       Description: Cooler is an application security program. Cooler allows an administrator to change the behavior of an application by allowing the administrator to restrict menu options and window controls inside of an application. Cooler also provides the administrator with the ability to have user specific restrictions dependent on whom logs onto the computer.

       Cost: Single User- $19.00; 15 User- $225.00; Building License- $495.00.

  • WinSelect 5.0
       Vendor: Hyper Technologies Inc.

       URL: http://www.winselect.com/pages/products/WS50_Info.htm?B122=More+Info

       Description: Windows programs are not specifically designed for use in public access environments and allow malicious or inexperienced users to disrupt computer use. WINSelect brings these programs under your control, by allowing system administrators in these public environments to selectively control or disable third-party program features and Windows operating system features, such as:
    • 100% Browser control
    • Minimize, Close, Size, Maximize, Move
    • Menus, Dialogs, Printing, Edit Boxes (e.g. URL Box)
    • Opening, Saving and Printing
    • Boot security
    • Start Button, My Computer, Network Neighborhood
    • Desktop Icons, Folders and Shortcuts
    • Hot keys, including Windows Key
    • Desktop and Tooltray Icons
    • Right Mouse button
    • CTRL-ALT-DEL (Windows 9x systems only)

       Cost: 1-50 users, $49.00 per workstation; 51-100, $35.00 per workstation; 101-200, $27.50 per workstation; 201-300, $22.50 per workstation; Unlimited, $7500.00.

##### Hard Drive Level Security Products #####
  • Centurion Guard
       Vendor: Centurion Technologies

       URL: http://www.centuriontech.com/centurionguard.htm

       Description: The Centurion Guard« Hard Drive Protection Device protects your system by write protecting the hard drive at the physical level, similar to the way you write protect your floppy disks by setting the write protect tab. When an application needs to write to the hard drive, the Centurion Guard automatically redirects file writes to a separate non-write protected area on your hard drive. When the system is rebooted, any changes that were made to DOS or Windows are forgotten, and the system is put back to its default configuration.

       Cost: 1-24, $84; 25-99, $79; 100-299, $74; 300-499, $69; 500-999, $64, 1000+, Call.

  • DriveShield
       Vendor: Centurion Technologies

       URL: http://www.centuriontech.com/driveshield.htm

       Description: DriveShield is the new software based laptop/PC hard drive protection from Centurion Technologies, Inc. It allows anyone to reset a system back to its original configuration with a simple reboot. DriveShield write protects the hard drive at the physical sector level, similar to the way you write protect your floppy disk by setting the write protect tab. When an application needs to write to the hard drive, DriveShield automatically redirects file writes to a separate non-write protected area on your hard drive. When the system is rebooted, any changes that were made to Windows are forgotten and the system is restored to its default configuration.

       Cost: 1-24, $39.95; 25-99, $37.95; 100-299, $35.95; 300-499, $33.95; 500-999, $31.95, 1000+, Call.

  • Deep Freeze
       Vendor: Hyper Technologies Inc.

       URL: http://www.winselect.com/pages/deepfreeze/dpfrz_info.htm?B13=More+Info

       Description: Deep Freeze "freezes" your software configuration. Whatever hackers, mischief makers and innocent clickers attempt, their "work" will instantly disappear when the computer is restarted. All settings, files and programs are 100% restored to their original configuration every time. Deep Freeze requires NO setup or configuration. Just install, restart and its working. Save files to a floppy, network, or into a specified Deep Freeze "thawed" space. It's easy to make permanent changes; just turn Deep Freeze off and install or remove your programs or make configuration changes.

       Cost: Educational Pricing (K-12): Single Workstation license, $ 39.95; 15 workstation per building license, $ 268.00; 100 workstation per building license, $ 475.00; Unlimited use per building license, $ 575.00

##### Hard drive Imaging Programs #####

  • Norton Ghost
       Vendor: Symantec

       URL: http://www.symantec.com/sabu/ghost/

       Description: Norton Ghost (TM) provides high-performance utilities for fast and safe system upgrading, backup, and recovery. This new version works faster than ever, supports the Linux« EXT2 file system, writes disk images directly to many popular CDR/RW drives, clones quickly from PC to PC, and enables Windows« XP, 2000, Millennium Edition users to take advantage of its powerful tools.

       Cost: ?? - Contact Vendor

  • PC-Rdist
       Vendor: Pyzzo Software

       URL: http://www.pyzzo.com/pcrdist/

       Description: Whether you need to distribute software, repair broken applications, remove software, or remotely configure workstations, PC-Rdist provides a timesaving and efficient solution. PC-Rdist is designed to synchronize the files and registry data for each computer on the network with a master image located on a file server. The program will update Windows 95, 98, 2000 and NT workstations. Unlike other products that unconditionally replace all files during each update, PC-Rdist incrementally updates only those files that have changed. Since this type of synchronization is much faster, PC-Rdist is useful for day-to-day maintenance of machines on a network.

       Cost: K-12 Pricing: Single computer, $35; 10-node, $250; 25-node, $420; 50-node, $620; 100-node, $825

##### Automatic Logoff / Timeout Programs #####
  • ActiveSaver
       Vendor: WinAbility

       URL: http://www.winability.com/activesaver/

       Description: This freeware screen saver is actually not a screen saver. It is a utility that can be set up as a screen saver, but instead of just showing fancy pictures (as most other screen savers do), ActiveSaver does something useful: it can run a program or open a file, or logoff, restart, or shut down the computer. You may find ActiveSaver useful if you want a program to be run each time your computer is idle for a number of minutes. For example, you can make it run a disk defragmenter or a virus scanner. You can also set it up to open any file instead of running a program (for instance, you can make it play a particular sound, after the computer is idle for some time). ActiveSaver lets you also specify whether you want to initiate the logoff, restart, or shutdown process after the computer is idle long enough. This is especially useful for network administrators whose customers keep forgetting to logoff after they are all done with the work. You can make it display a warning message for some time before actually performing such an action, and the text of the message can be customized by you. Doing so would let the user cancel the action, if he or she wants to continue working with the computer.

       Cost: Free!

  • NetOff
       Vendor: Citadel Technology Software

       URL: http://www.citadel.com/products/netoff.html

       Description: Provides network security for unattended PCs by automatically logging off inactive users. Before logging off, it will send a warning message and also close and save user files.

       Cost: $300 for 10 seats. 30 day free trial download.

##### Specialized Internet Browsers #####
  • CybrarySite
       Vendor: Computers By Design

       URL: http://www.cybraryn.com/products/cybsite.htm

       Description: CybrarySite™ is a special Web browser designed especially for use in public areas such as libraries, schools and information kiosks. CybrarySite™ is based on the Microsoft Internet Explorer core engine to provide your users with a familiar browsing experience while at the same time protecting your browser settings and configuration.

       Cost: Educational Pricing: Single User License, $99.95; Ten User License, $495.95; Site License, $995.95.

  • Public Web Browser (PWB)
       Vendor: TeamSoftware

       URL: http://teamsoftware.bizland.com/projects.htm

       Description: Web Browser designed for use in public areas. This is an exceptional Web browsing application that uses the latest Microsoft Internet Explorer for the browsing engine. You do not have to worry about compatibility, because Public Web Browser is compatible with all web pages and plugins designed to work with Internet Explorer. This application also makes an excellent Windows NT shell when used with “Runapp.exe” through Windows NT policies. Extensively test on Windows NT/2000. Public Web Browser is highly customizable through a configuration file including the following settings:
    • Station Naming
    • Home page
    • Kiosk Mode
    • Text editing tools
    • Show or hide navigation buttons
    • Show or hide URL address box
    • Show or hide text tools
    • History log
    • Favorites (Bookmarks)
    • Print to default or show Printer Dialog box
    • Disable right mouse button
    • Disable local drive access
    • Policy rich text file
    • About rich text file
    • Disable closing browser
    • Disable new window and pop up boxes
    • User login
    • Shell buttons
    • Activity Timer
    • Inactivity Timer
    • And more...

       Cost: Free (as of now); see web site for details

##### Workstation Timers/Reservation Software #####
  • CybraryRSVP
       Vendor: Computers By Design

       URL: http://www.cybraryn.com/products/cybrsvp.htm

       Description: CybraryRSVP™ is a self-service public computer reservation system, giving patrons the ability to reserve library computers in advance. CybraryRSVP™ helps the library provide equitable and fair distribution of computer usage within your library. CybraryRSVP™ can be installed in the library as a kiosk application enabling patrons to make their own reservations through a simple step-by-step process. CybraryRSVP™ can also be installed as an online application on the library’s Web server* enabling patrons to use the Web to reserve computer time from outside the library.

       Cost: Educational Pricing: Server software: $999.95; Single User License, $49.95; Ten User License, $349.95; Site License, $749.95.

  • Internet Station Manager (ISM)
       Vendor: Grand Rapids Public Library

       URL: http://www.grpl.org/ism/

       Description: The Internet Station Manager (ISM) was developed by the Grand Rapids Public Library (Grand Rapids, MI) as a means of controlling users' time on public Internet stations, while reducing staff intervention. It utilizes a variety of open source software (a.k.a. FREE [as in "free beer"]) to allow users to log themselves into, and use limited library resources, while assuring equitable access to all patrons.

       Cost: Open Source!

  • PC Cop
       Vendor: Card Meter Systems, Inc.

       URL: http://www.pc-cop.com/

       Description: PC Cop is a centralized system for the allocation and enforcement of time and use limits for public access computers. It is designed for libraries, schools and other public use facilities and institutions.

       Cost: ?? - Contact Vendor

  • Public Access Terminal Control (PATC)
       Vendor: Thompson-Nicola Regional District Library System

       URL: http://patc.sourceforge.net/

       Description: Developed by the Thompson-Nicola Regional District Library System, the Public Access Terminal Control project is intended to provide an Open Source solution to controlling user access to public computer terminals. The system operates under the premise that there is one specific key application on the public terminal that the user will run (for example, for a public Internet terminal, Netscape). In order to users to access the terminal, they must first authenticate themselves. This is done with the PATC client. The client takes the user's information (such as patron ID) and sends it to the PATC server. The PATC server performs a series of checks: Is the user ID valid? Does the user have time available for the day? Is the user currently logged onto another terminal? In any event, the server responds to the client with the appropriate information for the situation: if the user can't log on, the server sends a message explaining why, if the user can log on, the server tells the client how many seconds the user's session may last for.

       Cost: Open Source!

  • Computer Timer
       Vendor: librarygeek.com

       URL: http://www.librarygeek.com/timer.html

       Description: This is a very simple computer timer that enforces your time limits on public access computers. This timer is meant to be used in conjunction with your current sign-up procedures. It is not an electronic replacement for your sign-up sheets (Maybe one day). Works on Windows 98, 98SE, NT 4.0, and Win 2000 with 800x600 screen resolution. This was originally designed for computers given by the Bill and Melinda Gates Foundation, but will work with other systems.

       Cost: Freeware!

  • Time Limit Manager
       Vendor: Fortres Grand Corp.

       URL: http://www.fortres.com/products/tlm.htm

       Description: Control the amount of time users spend on computers with Time Limit Manager. Each user is allotted a specified amount of time determined by the administrator. Once the user's time expires, computer access is denied.

       Cost: Single CPU License, $25; 100 CPU License, $395

##### Remote Control Software #####
  • pcAnywhere
       Vendor: Symantec

       URL: http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=2

       Description: Symantec pcAnywhereÖ 10.5 supports all 32-bit Windows operating systems, including Windows XP. It's the #1 seller for fast, secure, and easy remote access. If you're an IT professional, Symantec pcAnywhere lets you manage servers and provide helpdesk support remotely.

       Cost: Small Business Pricing (call for Educational Pricing): 1 user, $179.95; 5 users, $719.95; 10 users, $1439.95.

  • TridiaVNC
       Vendor: Tridia Corporation

       URL: http://www.tridiavnc.com/

       Description: The cross-platform, open source, remote control solution. You can view and control a computing desktop from a wide variety of platforms Linux, Windows, and UNIX. Open source VNC promised a better way to support users. Now, Tridia delivers. Tridia Corporation, the worldwide leader in support-grade remote control, has taken the potential of VNC and made it prime-time ready. TridiaVNC is the only supported, commercially enhanced release of VNC. With TridiaVNC, you can support users and applications on any platform with a single, open licensed product.

       Cost: Free (Open Source!), but you can buy support for $495.00

##### Other Security Software #####
  • NSClean and IEClean
       Vendor: Privacy Software Corporation

       URL: http://www.nsclean.com/

       Description: NSClean for Netscape and IEClean for Internet Explorer gives you the difference between real privacy protection and browser security vs. the illusion of. Although you may think you can do this within the browser itself since the "switches" are there...while this important point is missed- everything you "delete" can easily be recovered.

       Cost: Normal Pricing: IEClean or NSClean 10 seat License, $298.95; IEClean or NSCClean 25 seat License, $598.95; Dual IEClean/NSClean 10 seat License $429.95, Dual IEClean/NSClean 25 seat License $798.95 (Dual license allows use of IEClean and/or NSClean on a maximum of ten or twenty-five computers). Educational/Public Libraries/Government/Large orders: Orders above 25 units receive discounts on a sliding scale. There are two additional discounts available for qualified purchasers: 25% government/military, and 50% educational/public library.

  • Tweak UI
       Vendor: Microsoft

       URL: http://www.microsoft.com/ntworkstation/downloads/powertoys/networking/nttweakui.asp

       Description: A free add on as part of the Windows Power Toys package from Microsoft. It allows you to do things like automatically log on to a network and hide network drives. Can run on Windows 2000, NT, ME, 98 or 95 (Not sure about XP).

       Cost: Free Download

  • Windows Policy Editor
       Vendor: Microsoft

       URL: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/policy/syspol_2183.asp

       Description: A sometime overlooked way to help lock down computers running Windows Operating Systems is the built in Policy Editor included with the O/S by Microsoft.

       Cost: Included with the cost of Microsoft Windows Operating Systems.

  • BATSH
       Vendor: Written by Thomas Nyffenegger

       URL: http://www.spydermania.com/gwhs/free.shtml#Batsh

       Description: Batsh is used to run WINDOWS commands from a text file. Line by Line. Like BATCH (.BAT) files in DOS, but with some WINDOWS specific commands, and not all the DOS features. At Rider, BATSH.EXE replaces EXPLORER shell on CD-LAN computers running Windows 9x. This lessens the potential security hazards that the Explorer shell has. It can also be used to map network drives. For more information about Rider's setup, go to ibrary.rider.edu/scholarly/vugm99/index.html.

       Cost: Freeware!

##### Hardware/Physical Security Ideas #####
  • NIC (New Internet Computer)
       Vendor: New Internet Computer Company

       URL: http://www.thinknic.com

       Description: A computer designed for browsing the Internet that has the O/S (Linux) on a CD-ROM and no harddrive. It also comes with a Citrix Client. Because it has no harddrive, patrons cannot mess the harddrive up.

       Cost: $199.99 (no monitor); $319.98 (15" monitor)

  • Disk Locs
       Vendor: Business Machine Security

       URL: http://www.bmsmfg.com/products_disklocks.html

       Description: Security for any type of disk drive, internal or external. Protect against unauthorized use of your equipment with the Disk Loc. Many sizes available. The Disk Loc is the convenient, low cost solution to data control. The front cover removes easily for disk drive access. It mounts in minutes to your equipment. No tools are required for installation. The Disk Loc covers a wide range of security needs. It protects against theft of internal components by controlling removal of the CPU cover on most computers. It enforces software copyright laws. The Disk Loc can cover an entire row of drive bays or guard several disk, tape, or CD-ROM drives.

       Cost: $30.00 each

  • Krazy Glue
       Vendor: Elmer's Products Inc.

       URL: http://www.krazyglue.com/

       Description: Students taking your mouse balls? Seal them in with Krazy Glue! (the balls, not the students!)

       Cost: Not much.

  • Last but not least: Sledge Hammers!
       Vendor: Various

       URL: http://www.homedepot.com

       Description: When all else fails, take a sledge hammer to your computer!

       Cost: $10-40.00