[rozwado1]

I've been out of the Windows loop for awhile so I'm nearly lost when it comes to Windows networking and such.

We have XP terminals in our office and they keep getting F'd up with spyware and such. When our virus blocking fails, we've been stuck with reinstalling software on each PC, which sucks.

I want to know if it's possible to setup a system where all client computers are run from a server, and it's possible to control all of the software re-installs from a single location (i.e. do it once and have every computer re-install). What do I google for - is this something a remote desktop system can do?


**Each client computer can be the same software-wise because all important files are saved on the server we have.

[Macola]

A Citrix presentation server would work. It will be somewhat slow on the client side, depending on the hardware.

[iXavier]

You could also make an image using Norton Ghost or something similar of a clean install and just reimage every PC that gets messed up. That solution is used a lot in the corporate and educational sector.

x.

[ghporter]

First, do a clean install of the OS and all allowable software. Lock it down so everything works together. Now, make all the users just plain users. In XP, they shouldn't be able to load any software themselves. This means that automatic installations that spyware depends on will be shut out (at least the vast majority of them), and the spyware just can't get in.

Now, you WILL catch bloody hell from your users. But these are not THEIR computers-they belong to the company. So there's no reason for them to install ANYTHING that the company didn't already install. If they whine, it's just tough. Not having to rebuild their computers every few weeks will actually improve their (potential) productivity.

What? I have a low appreciation for most computer users? ME?!? You betcha! Too many examples of Saturday morning cartoon adicts who think they can do brain surgery because they saw it in a movie once... But I digress.

Oh, and set up the antivirus software so that it a)updates from a server on your local network, b)automatically updates DAILY, and c)does not allow the user to turn it off, change its settings or otherwise bork with it. Have your server check for virus updates HOURLY (I'm not kidding). I've been in situations where the above (both the configurations and AV setups) have kept thousands of users up and running during serious attacks. It's a pain to set up-but you only have to do that once.