Locking Down Devices

I work at a library that circulates roughly 40 Sony PRS-T1 and PRS-T2 devices to our public. Although we turned off all of the "remember my password" type settings for the browsers and made sure the Reader Store was prompting for a login, patrons have still been purchasing and downloading content from the reader store. Some people are upset that they've lost money and a few of the titles downloaded have been highly inappropriate and are stuck on the device's Reader Store account even after I delete the item from the device itself. I have noticed that most of the titles being downloaded are free, but I still haven't been able to replicate how the patrons are getting past the sign in page.
Does anyone know of a way to lock the devices down so that patrons can't download/purchase content from the Reader Store? We only want them using the "Public Library" application to check out books on these devices. Thanks!

Thanks for your response. Where on a PRS-T2 when logged into the Reader Store is the "Sign Out" button? I've not located one so far. Also, I had a device I was working with that had not been signed in at all to the reader store (got the prompt to sign in). I went tot he public library app, browsed a bit but never signed in there either. Then when I went back to the Reader Store, the device was suddenly signed in. Any idea how this can happen? The devices are set to not remember passwords, I've cleared all of the form data, cache, passwords, and history and yet it still managed to sign itself in.
Thanks.

Similar Messages

Is there a way to lock down IOS devices to a specific version of IOS?

We got bit pretty hard by the IOS 6.1/exchange 2010 thing but would like to keep Idevices around.
Trying to find options to protect againts IOS updates until the IT staff can test the new version throughly.
Is there a way to lock a device down to a specific IOS version where the user will not get update messages?
I have been checking out MDM companies and all they can do is label a non approved ios version device 'non-compliant' and kick it off the network if its not the correct IOS version.
I can straight block the new OS version from the server, but in the user base someone would accidentially update and then they are locked out.
Is anyone else dealing with the same issues?

You can restrict safari, which won't turn off Internet access, but will prevent browsing through safari. Note: without additional restrictions, other browsers could be installed from the app store if users have the apple ID password.
On the ipad itself, go to settings\general\restrictions and set safari to off.
You may also want to restrict 'installing apps' here to prevent the user from installing additional browsers.
These can also be configured via MDM if you need to do this on a lot of devices.

Lock down X140e BIOS

Hello!
I'm deploying 55 of the Thinkpad x140e to a school, and I want to be able to lock down the BIOS so the students won't be able to boot from other devices or make any other changes in the BIOS. I'm wondering if anyone knows of an application that allows me to lock down the BIOS without having to do it manually on every machine. I'm imaging them with the same image, so if there's an application that can be put on the image beforehand, that would be ideal. Anyone run into a similar situation or know of any solutions?
Thanks in advance for any help you can provide!
Solved!
Go to Solution.

Lenovo has some scripts (and accompanying documentation) for configuring the BIOS through WMI available here:
http://support.lenovo.com/us/en/documents/ht100612
The X140e isn't listed as a supported model, but it might be worth a try anyhow.
How are you deploying the image? If you're using something like MDT or SCCM you would create a task that runs the script as part of the imaging process.

How do I lock down an iPad from having certain apps removed?

Hello,
We are a Microsoft-based enterprise that has purchased iPad 2 devices as a means of reducing costs of wireless services as well as integration with the 3G adapter (to reduce damage and theft). While I have had great success with the iPhone Configuration Utility and an MDM server, I need to ensure that users cannot remove the Find My iPad App which we use to track employees and ensure they do not lose or steal the device (since they can't remove the battery).
What can I do to lock down this app from being removed and also, I want to give these employees access to load whatever they wish on these iPad units. We control their access through a VPN to a Microsoft Terminal Server and with Microsoft Exchange but I don't want iTunes and the CEO's credit card being used to purchase apps. Any ideas anyone? I know that this can be done and if not, it will be done by me.
Brian Tate
Information Technology Manager
Grand Texas Homes Inc
http://www.grandhomes.com

I'm not sure about the apps, but to prevent theft, you'll also need to disable the power button and the ability to restore the ipad. You might also want to superglue in your Sim card because if they remove that, it wont be tracked unless they connect to WiFi.
Also, I'm not so sure it is an app on the iPad. I think it is built into the mail, calendar and contacts options if you have a Mobile me account. http://www.apple.com/ipad/find-my-ipad-setup/

What are the security settings to lock down a form with fillable fields and yet allow someone with Reader to fill in the fields as will as save the form and print it?

What are the security settings to lock down a form with fillable fields and yet allow someone with Reader to fill in the fields as will as save the form and print it?

You want to allow someone to open your document and fill out the form (in the fields you have created), but not change or edit the form, right? Here's the answer - assuming you are using Acrobat Pro and someone will be opening the PDF using at least Acrobat Reader 9 and up:
Tools > Protection > Encrypt < Encrypt with Password
Answer YES to change the security.
A new window opens:
     Do NOT select Document Open (or that will require a password to open the document.)
     Select: Permissions (Check the box next to "Restrict editing and printing of the document.")
     Change the following 2 settings from the drop-down box:
          Printing Allowed: Select High Resolution
          Changes Allowed: Select Commenting, filling in form fields, and signing signature fields
          Leave selected: "Enable text access for screen reader devices for the visually impaired"
          Change Permissions Password (insert a strong password)
          Leave all other settings alone in "Options"
          OK - OK
          Re-enter the Permissions Password (the one you entered above)
          OK - OK
          Save the PDF to apply the security [notice that (SECURED0 will appear after the document title]

HT201304 I need to restrict access to Settings on an iPad so settings like VoiceOver cannot be activated while letting them access multiple apps on the device. Is their any way to restrict access to settings without locking the device with a PIN?

I need to restrict access to Settings on an iPad so settings like VoiceOver cannot be activated while letting them access multiple apps on the device. Is their any way to restrict access to settings without locking the device with a PIN?
This is so our guests cannot tamper or disable the device. We are already using Apple Configurator but their does not seem to be a way to lock down settings without a PIN.

There's a lot of restrictions information in Chapter 19 of the 4.2 User Guide.
http://support.apple.com/manuals/#ipad
By the way, a more extensive version of the User Manual is available at no charge through iBooks.

Keeping IMac's locked down in a computer lab

For those who have lab experience what type of devices or locks are used to keep IMac's from theft in computer labs? I was curious as to what other people use or recommend in this area.

All 3 of my labs are alarmed and supervised at all times so no I've never seen anyone try to take one that's been locked down. Had an LCD stolen once out of an office but it had not been secured. The cables can be cut but it's not as easy as it looks. In IT once in a while someone would need to relocate or surplus a computer that was locked down and no one had the key. I would go and cut the cable with bolt cutters but it usually took a few passes. If you see someone walking around with a set of bolt cutters in their hand then I would be suspicious.
George

My iPhone was accidentally locked down (find my iPhone app)

My iPhone was accidentally locked down with "Find my iPhone" by the previous owner while I was recording a interview for my exams.I already contacted the previous owner, who said that he dealeted my phone device from his "find my iphone" app. The Iphone also inform that my sim-card is locked and asks for the pin-code. But it is not showing the telephones keypad.
Is it still possible to get the recorded file or is it deleted now that my phone is locked?
Hope you can help.
Line Mayland Carlsen

What you need to do is dependent on what is wrong with it. If the screen broke, or you have reason to believe that other hardware damage occurred due either to the fall or it getting wet, then you will need to take or send the iPhone for service. Apple does not repair iPhones, but will replace the entire iPhone for a flat fee; see the Repair Pricing section here:
http://www.apple.com/support/iphone/service/faq/
There are independent iPhone repair services that may be able to fix the iPhone for less. Do a web search for "iphone repair".
Regards.
Forum Tip: It is generally considered inappropriate to type all in uppercase letters in Internet discussions, as text that is typed all in uppercase is by convention considered to be shouting. Uppercase is also more difficult to read, so please use all uppercase sparingly and only when you really mean to shout, which we hope you won’t need to do here .

Locking down call forwarding

I just started a new job, this company doesn't want call forwarding from phones but one of the high level vendors was allowed to have his phone sent to just one number. The last technician figured out how to disallow the change of the forwarding number he set in call manager. I can't for the life of me figure out how he did it. When I set a number in call manager the phone is still allowed to change the number locally and reset it in call manager. I'm really interested to know how he did this.

Hi
In case you want to lock down the call forwarding, you can just remove the CFA button from the softkey template from all the phones. This would prevent users from doing from the phone.
The only option would now be the ccm end user page. In case you want to remove from there as well, use the following enterprise parameter on CCM Administration page :
Show Call Forwarding :This parameter determines whether end users can configure all, none, or specific call forwarding
directives for their phone(s) when using the Cisco Unified CM User Options (ccmuser) window. Call forwarding
options are not provided regardless of the setting in this parameter if the phone template assigned to the user's device does not support call forwarding
With this, what ever CFA settings you put on the phone, users won;t be able to change that.
Regards
Aditya

HELP - Macbook Pro Locked Down

Ok, to make a long story short, I bought a used Macbook Pro and the password I was given is not working. The person I bought the computer from seemed fishy, I should have realized something was wrong before agreeing to buy the computer. The computer seems like it is a demo machine from an Apple Store or some other retail store. It is locked down and I can not gain access to the administrator account. I have tried everything I found on the internet. I called Apple up to inquire about this machine to see if it is marked/reported as being fraudlent/stolen/counterfiet and they confirmed the serial number is fine and it is an official apple computer. They said I have hardware support until end of March 2011, but no longer have software support. Oh by the way, I am new to Macs, this is my first Mac, so I'm not familiar with them. Not a very good first experience. I guess its my fault for buying a used computer without receiving the install/backup disks.
Below is a summary of what is happening and what I tried:
When I turn the computer on, it logs in fine. Everything seems to function fine. But if I try to do anything administratively it asks for password and I can not do anything.
I tried the following things:
- entering single user mode, removing the AppleSetupDone file. After I reboot from that, it just logs in as normal and doesn't prompt for new account. When I went back into single user mode, the AppleSetupDone file was back.
- entered single user mode, changing password via command line. Seems like it changes fine with no errors. After I reboot, logs in fine and I try password I changed to and it doesn't accept it.
- Tried putting OS 10.6.3 into DVD and booting from that by holding c key, but it ends up going to grey screen with Apple logo and does nothing.
- Tried putting OS 10.6.3 into DVD and pressing "Option" key while booting to choose which device to boot from. I choose DVD and it goes to grey screen with Apple logo and does nothing.
- I tried formating the hard drive, went to single user mode, did a rm -rf / Seemed like it erased the hard drive, so I figured it has to boot from DVD. Well when I turned on computer, it booted fine and logged in as normal. Went back into single user mode and everything was restored as was.
- Tried clearing the PRAM and NVRAM thinking maybe there was something in the non-volatile memory, but that did nothing. Logged in as normal and still would not allow me to boot from DVD.
Someone suggested the firmware was password protected, but I had read if you hold the option key down while booting that a lock would appear if the firmware was password protected and that didn't happen, I got the HD or DVD options to boot.
Seems like the computer is locked down somehow to restrict anyone from modifying anything and at bootup, it restores everything to original state. Does anyone have any ideas or suggestions? Does anyone know how Apple stores lock down their demo computers to avoid customers from modifying them? Is there something in the hardware? Are there jumpers set somewhere that could be causing the machine to do a unique protected/recovery bootup? Someone mentioned pulling the hard drive and formatting it in another computer. Do you think this would do it for me?
Thank you for the help,
Kevin

Proof? I bought it used from someone. All I have is the computer and charger. When I talked to the Apple representative on the phone about the serial number, he said the machine has not been registered yet. So what would the proof be?

Locked down RDS Server

Good morning,
I followed this tutorial to lock down my RDS Server but I have one issue.
http://www.it.ltsoy.com/windows/lock-down-remote-desktop-services-server-2012/
When users are in an app they try to attach a file and explorer defaults to the c my documents. Is there a way to change it so it defaults to there network drive?
Also, how can I have there local drives redirect to the RDS server?
Thanks,
Derek

Hi Derek,
Please disable the below policy setting and verify.
Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Do not allow drive redirection
More information.
Make Local Devices and Resources Available in a Remote Session
https://technet.microsoft.com/en-in/library/cc770631.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

I am using a Photoshop cs2, and I wonder if it is possible to keep the settings of the guidelines when closing an image, with the actual document ? It would be nice to have the guidelines locked down, I find it than when opening the same or another image,

I am using a Photoshop cs2, and I wonder if it is possible to keep the settings of the guidelines when closing an image, with the actual document ? It would be nice to have the guidelines locked down, I find it than when opening the same or another image, the guidelines are not locked, it is annoying to have to lock them down again. and it would actually be nice, to ba able to give specific directions when placing the guidelines. Thanks

Then why are the guides unlocked when I reopen a document that I saved with the guides locked ?
Thanks.

How do you modify the web.xml to lock down the pages from a user role

how do you modify the web.xml to lock down the pages from a user role

I'll make a stab at your question:
The following is an example of where a URL is protected within a web.xml deployment descriptor. In this example, the URL /protectedA within the application is protected:

<security-constraint>
<web-resource-collection>
<web-resource-name>protectedA</web-resource-name>
<url-pattern>/protectedA</url-pattern>
</web-resource-collection>

<auth-constraint>
<role-name>sr_developer</role-name>
</auth-constraint>
</security-constraint>
Sun's explaination here:
http://java.sun.com/j2ee/1.4/docs/tutorial/doc/Security4.html

Would like to know how to Completely Lock-down Windows 7 OS

I don't have a general question..
It's more like specifics about how to lock down windows 7 computers..
Here's a little background information...
I have two computers, both with win 7(Pro, and home prem).
A family member can somehow bypass all bios and all windows security services... Everytime I go to work or school, he will power on my desktop and somehow 'hack' into the OS and install keyloggers or viruses so he can obtain my banking or other personal information.
He also unlocks and deletes all the passwords so he can have access whenever he wants..
Can someone please tell me how to do a complete lockdown? This is getting extremely annoying.. I've done everything that I can do; Also considering on switching my major to some sort of computer security. I'm starting to lose my mind over these months.. All
help is appreciated.
I've password protected BIOS
I've disabled administrator accounts, i've put password on the admin and the guest user; locked the option to change passwords..
All help is appreciated. Thank you all in advance.

Hi,
If you are using Windows 7 Professional, Ultimate, or Enterprise, you can use the Local Group Policy Editor to change policies that affect the security of your computer. Please check if the following policies meet you requirements.
[User Configuration\Administrative Templates\Windows Components\Windows Explorer]
Enable these two polices:
Prevent access to drives from My Computer
Hide these specified drives in My Computer
For your reference:
Lock Down PCs with Windows 7:
http://technet.microsoft.com/en-us/windows/gg983426.aspx
Also, restrict Which Programs a User Can Run. You can set rules in AppLocker in the Group Policy Editor that prevents all programs from being run.
In addition, temporarily Lock Your Computer if Someone Tries to Guess Your Password
If you share your computer with other family members or allow your friends to use it, you should have a password on your Windows account so no one else can log into it. However, someone may try to guess your password and log into your account. If this happens,
you can temporarily lock your computer.
You should also periodically change your password.
If you suspect, you family member using a tool to bypass your password. You may use Malicious Software Removal Tool (http://www.microsoft.com/security/pc-security/malware-removal.aspx)
to remove it.
Hope it helps.
Regards,
Blair Deng
Blair Deng
TechNet Community Support

Need suggestion on locking down student imacs

Hello, I just inherited a handful of computer labs. 8 imacs each spread out between 5 schools. 3 labs have internet access and 2 labs do not. Since I'm a complete noob when it comes to Mac OS Security what would someone recommend as my first step to locking down the computers. The students have tons of shortcuts on the desktop,downloaded mp3's, movies, myspace, facebook etc..It's a mess. Is there any 3rd party software that can manage desktops or can Mac OS do it all?
Thanks

Oh another Internet one I forgot...
http://www.netnanny.com/mac?pid=3&gclid=CLmq6-zMzpkCFRFMagoduSShtQ
Parental Controls in Leo...
http://www.apple.com/macosx/features/parentalcontrols.html
For even more control you can do Get Infos from the finder on the files/folders and change permissions so they can't write, only read, or no access.

Locking Down Devices

Similar Messages

Maybe you are looking for