Why Win2k on every station? You could run terminals that communicate with a Terminal Server or even a cluster of terminal servers and then simply restrict what the users can access over the terminals.
Nicko -----Original Message----- From: Ferry van Steen [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 14, 2003 11:38 PM To: [EMAIL PROTECTED] Subject: Internet Cafe Hey there, for the first time I have to setup an internet cafe. I want to use Win2k on the workstations and "cripple" it using the policies it has, then use linux as a firewall/proxy with squid. Having only a proxy and not a gateway should already narrow down a lot of security issues, but I believe kazaa and some others still work through proxies and I have hardly any idea on how secure the win2k policies are... Basically all I want to allow them is using IE on websites/ftp sites, they should be able to download, but only to a single folder and msn messenger should work. Anyways, anyone got any suggestions/comments on what I really have to look out for? I'm thinking it should be reasonably secure, but in places like this you always have the added risc of people wanting to damage the OS/system or use it as a place from which to attack others. Kind regards and TIA, Ferry van Steen
