[Question] Make windows super limited

[Kulverstukas]

Hello. I have one computer that my dad and little bro is using. Most of the time bro plays there, downloading shit he isn't supposed to and I get to reinstall windows every month because it grows into a virus farm.
The PC is running WindowsXP SP3.

Question: how do I make that thing super-limited, like that it wouldn't save changes to C drive, wouldn't allow writing, just reading, to C drive (or other places) or some other way to make it super-limited.
Also suggest a good AV that really protects, free preferably but meh

[Jath]

Group Policy Management Console should do the job in regards to limiting access to drives and anything else really.

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en

[ca0s]

http://www.faronics.com/deepfreeze
Crack is in the internet too.

[Kulverstukas]

Group Policy Management Console should do the job in regards to limiting access to drives and anything else really.

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en

As I understand I need to have SP1 to use that console?

For Windows XP Professional users, you must have the following installed prior to installing the GPMC:
Windows XP Service Pack 1
.NET Framework

I can't install on my machine which is WinXP SP3 too.

[puddi]

just get avast! + superantispyware

[Huntondoom]

just get avast! + superantispyware

good choice!
I have used that combination for so long and it works great!

[Jath]

As I understand I need to have SP1 to use that console?

I can't install on my machine which is WinXP SP3 too.

no, you don't have to be running sp1. it`s Group Policy Management Console with updates and patches. They just call it Group Policy Management Console sp1.

i'm too drunk to explain it right now.

pm me if you want more detail. i'll answer when i'm sober.

[iMorg]

It sounds like you need some type of child lock on the computer that prevents downloads. Preventing writing to C would pretty much be impossible seeing as most software uses that to cache content.

[theellimist]

I personally use Avira and Malwarebytes on my computer, plus, if you use Mozilla Firefox, get Public Fox, it can do all sorts of restrictions for the browser. http://technobuz.com/2011/03/block-download-in-firefox/
And if you aren't using Firefox, get it and then get Public Fox.

[Kulverstukas]

Hmm... @iMorg: yes there is a way. Like in my school there is somehow restrictions set that you have a limited account and can't install pretty much any software, can't write to C:\' C:\WINDOWS\; C:\Program Files; but you can write to "My Documents", so only certain directories are locked and every change you made gets reverted once you restart, and this is what I want to do.

I'll look into those AV's because seems what I have already doesn't do shit.

[Kulverstukas]

You sir, clearly did not understand what I want.

[iTpHo3NiX]

The simplelist way I know of is deepfreeze, after each reboot the computer goes how it was, then when you are using it you can thaw it out until next reboot. You can select certain folders that you would like to stay unfrozen if you'd like as well.

Another option (which is what most schools do, so its more for a network and a lot harder to set up then deep freeze) would be to make an image and boot the image off of the network and have network storage for stuff, and alot of that would be handled through the group policy editor.

Windows+R (Run...) and then type in "gpedit.msc" without quotes will bring you to the group policy editor.

Here's Deep Freezes website:
http://www.faronics.com/en/Products/DeepFreeze/DeepFreezeCorporate.aspx

I will post a download link in a bit ( I need to download and make sure the files clean then re-upload it)

[Kulverstukas]

Thanks. I think I'll go for the DeepFreeze... can't think of any other way.

[xor]

I would go with what Ca0s said.

I used to work at a council that used deep freeze. The person can make what ever changes they like to the system, but as soon as it restarts, it's back to the last state you as the admin froze it at. Really good piece of software.

[mod_bluejay]

Maybe a bit late and maybe not exactly what you are looking for, but you might have a look at this link:

http://support.microsoft.com/kb/307800/en-us

It describes how to make a userprofile mandatory on a Windows XP machine using the local user policy. Also tons of info available if you Google: "xp local mandatory profile".