Need help with locking down Windows 8 Metro UI

noobpc

Member
Member
Messages
28
Hi guys,

I have got a pc that my whole family use and I've just completed
a fresh Windows 8 Pro installation.

I have created 2
accounts:-

Admin
Kids

I know that Metro UI cannot
be disabled and I don't mind keeping it, but surely if I want to be able to lock
the kids account, so that they don't accidently mess up, I should be able to at
least stop them from modifying app shortcuts and lockdown the Metro Start
menu?

I currently have loads of apps, such as Admin tools, WinRAR etc.


If I setup the Metro UI to the apps I want, how do I stop them from
removing/adding apps or modifying the menu?
confused.gif


Thanks
 

My Computer

System One

  • OS
    win 8 pro
A) Did you set up their account as a 'standard user', aka requiring your password to do any administrative changes?

B) I think each account has their own start screen and settings? They may be able to mess around on their own start screen, but they shouldn't be able to do much to affect yours if they aren't given enough admin rights.

C) You have Windows 8 Pro, so you should have group policy editor. You may be able to lock things down in there.

D) Make their account a localized account, not a microsoft account. Without being able to input an email and password in the store, they shouldn't be able to install any new apps.
 

My Computer

System One

  • OS
    Windows 8.1 Pro 64-Bit, Ubuntu 13.04 64-Bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom Built
    CPU
    Intel Core i7 950 @ 3ghz
    Motherboard
    Asus Sabertooth X58
    Memory
    Crucial 6GB DDR3 1066mhz Triple Channel
    Graphics Card(s)
    1GB EVGA GTX 460 SE (Nvidia)
    Monitor(s) Displays
    Dual LG Monitors
    Screen Resolution
    1920x1080, 1280x1024
    Hard Drives
    80GB Intel 320 Series SSD
    640GB WD Caviar Blue
    320GB WD MyBook (converted to Internal SATA)
    1TB Seagate Barracuda
    PSU
    Corsair 650TX 650w
    Case
    CoolerMaster HAF 922
    Keyboard
    Logitech G110
    Mouse
    Logitech G500
    Internet Speed
    20mbps Down, 2mbps Up
Thanks for ur reply.

a. Yes, it's standard

b. Yes, but since they can still modify their metro ui..this is where the app shortcuts located, by removing any, they can't add them back. I want to make it read only

c. Changing start menu settings on GPO makes no difference..Can anyone help me on this?

d. It's already localised
 

My Computer

System One

  • OS
    win 8 pro
In addition to Lazure's recommendations, Windows 8 also has enhanced Parental controls. It's called Family Safety. Look for it in control panel.
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    CPU
    Intel i7 3770K
    Motherboard
    Gigabyte Z77X-UD4 TH
    Memory
    16GB DDR3 1600
    Graphics Card(s)
    nVidia GTX 650
    Sound Card
    Onboard Audio
    Monitor(s) Displays
    Auria 27" IPS + 2x Samsung 23"
    Screen Resolution
    2560x1440 + 2x 2048x1152
    Hard Drives
    Corsair m4 256GB, 2 WD 2TB drives
    Case
    Antec SOLO II
    Keyboard
    Microsoft Natural Ergonomic Keyboard 4000
    Mouse
    Logitech MX
You could see if getting rid of the accursed metro stuff from view completely would help.
 

My Computer

System One

  • OS
    7/8/ubuntu/Linux Deepin
    Computer type
    PC/Desktop
Thanks mystere, but family controls does not stop kods from modifying the metro tiles

I said "In addition to" the options outlined, one of those options was to use the group policy editor.
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    CPU
    Intel i7 3770K
    Motherboard
    Gigabyte Z77X-UD4 TH
    Memory
    16GB DDR3 1600
    Graphics Card(s)
    nVidia GTX 650
    Sound Card
    Onboard Audio
    Monitor(s) Displays
    Auria 27" IPS + 2x Samsung 23"
    Screen Resolution
    2560x1440 + 2x 2048x1152
    Hard Drives
    Corsair m4 256GB, 2 WD 2TB drives
    Case
    Antec SOLO II
    Keyboard
    Microsoft Natural Ergonomic Keyboard 4000
    Mouse
    Logitech MX
@siw2 ~ u can't mate...even wid apps such as start8, I believe that a user can simply press a shortcut key and metro will reappear.

@mystere ~ gpo seems to have no affect on metro...any ideas why?
 

My Computer

System One

  • OS
    win 8 pro
Hi there
IMO a better solution would be to have a PC that ONLY the kids use - I certainly wouldn't have a PC shared by kids.

PC's are cheap enough these days and if you set up Internet connection in such a way that they go through YOUR machine to connect to the internet you could control times the can use the internet, log sites they visit and control the amount of time they are on "Farce book" or You Tube.

Kids are quite savvy these days so I wouldn't even THINK of letting then use my private PC's.

Cheers
jimbo
 

My Computer

System One

  • OS
    Linux Centos 7, W8.1, W7, W2K3 Server W10
    Computer type
    PC/Desktop
    Monitor(s) Displays
    1 X LG 40 inch TV
    Hard Drives
    SSD's * 3 (Samsung 840 series) 250 GB
    2 X 3 TB sata
    5 X 1 TB sata
    Internet Speed
    0.12 GB/s (120Mb/s)
Thanks for your reply Jimbo45. The thing is mate, that:-

1. I can't afford nor do I have the space for another pc
2. This PC is used by everyone - My own PC is in a seperate room.
3. This PC is also a family mediacentre, so that i can watch movies in our lounge.

I hope your not going to mind me ranting, but I thought Windows 8 was better security? In all previous versions of Windows that I know of, you could at the very least lock the Start Menu+Taskbar, so kids could not add or remove shortcuts to programs or pin anything to the taskbar.

From what I've gathered so far about this rubbish version 8 of Windows:-
1. The Metro UI cannot be locked to certain apps
2. The Taskbar is unlockable
3. Kids or any user can alter their Menu as they wish without any control
4. You can't stop Metro UI from loading or being activated with a shortcut key

I can go on, but I'm sure you get the idea...where is the so-called Security for Administrators for the Win Pro and Enterprise editions...how would businesses deal with such a loop-hole if they installed Windows for their employees?? :mad:

Surely someone must know?
 

My Computer

System One

  • OS
    win 8 pro
First many of your complaints about why Windows 8 is "rubbish" to you apply equally to pervious versions of Windows.

For instance, you cannot prevent users from deleting icons in their start menu (you can prevent them from deleting icons in the shared start, but not in their personal start menu).

Not sure what you mean by "unlockable".

The Metro UI can be locked to certain apps. Group Policy includes the ability to prevent specific apps from running, or the ability to whitelist only specific apps allowed to run. You can also lock people out of the store.

I don't know of a way to stop the start menu from being able to open. But if you use the afore mentioned things, it shouldn't matter.
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    CPU
    Intel i7 3770K
    Motherboard
    Gigabyte Z77X-UD4 TH
    Memory
    16GB DDR3 1600
    Graphics Card(s)
    nVidia GTX 650
    Sound Card
    Onboard Audio
    Monitor(s) Displays
    Auria 27" IPS + 2x Samsung 23"
    Screen Resolution
    2560x1440 + 2x 2048x1152
    Hard Drives
    Corsair m4 256GB, 2 WD 2TB drives
    Case
    Antec SOLO II
    Keyboard
    Microsoft Natural Ergonomic Keyboard 4000
    Mouse
    Logitech MX
Just keeping your kids out of the store and keeping them from having admin capabilities should be enough.

They cannot fully uninstall a program without providing your password, if I recall. Even then, why would your kids remove icons for stuff they wanna use anyways? Are they the very young kind that just press buttons willy nilly not knowing what they're actually doing?

If they re-arrange the start screen in some weird way, if that works for them then I dunno why it's really an issue. If they unpin something, it can be re-attached to the start screen easily.
 

My Computer

System One

  • OS
    Windows 8.1 Pro 64-Bit, Ubuntu 13.04 64-Bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom Built
    CPU
    Intel Core i7 950 @ 3ghz
    Motherboard
    Asus Sabertooth X58
    Memory
    Crucial 6GB DDR3 1066mhz Triple Channel
    Graphics Card(s)
    1GB EVGA GTX 460 SE (Nvidia)
    Monitor(s) Displays
    Dual LG Monitors
    Screen Resolution
    1920x1080, 1280x1024
    Hard Drives
    80GB Intel 320 Series SSD
    640GB WD Caviar Blue
    320GB WD MyBook (converted to Internal SATA)
    1TB Seagate Barracuda
    PSU
    Corsair 650TX 650w
    Case
    CoolerMaster HAF 922
    Keyboard
    Logitech G110
    Mouse
    Logitech G500
    Internet Speed
    20mbps Down, 2mbps Up
@ Mystere - Sorry, but yes you can make the start menu in win xp, win 7 locked down - i.e. no user should be able to add/remove or modify the layout of the programs once they've been locked - usually this is done via GPO.

You said Metro UI can be locked to certain apps, but could you please be a bit more specific, how? Also how do I prevent users from altering the list of apps? At the moment, I can right-click and choose UNPIN or UNINSTALL and the icons are gone...I want to stop this happening.

@ Lazure - The problem is mate that my kids ages are from 3 to 14. With previous versions of windows, I could use GPO to stop users from, unpinning apps/altering the start menu/removing apps and messing about with other settings...can I do this with metro UI? If so, how?
 

My Computer

System One

  • OS
    win 8 pro
BUMP!

Hello again guys. First of all please accept my apologies for being hasty and judging windows before even getting to know it properly. I have some good news. Last night I went into Group Policy and managed to "somehow" lock all the metro ui apps - so now my family account metro apps cannot be altered/unpinned or uninstalled without admin rights. This is great news as I want beginning to think that windows hadn't provided such security.

The problem I have is that I need help with figuring out which setting(s)in GPO actually helped lockdown the menu, so that I can disabled them when I need to add any additional apps.

Any help would be most appreciated.

Thanks
 

My Computer

System One

  • OS
    win 8 pro
Our family and business uses Secure Lockdown to lock down Windows. The multi-application version lets you add any app you need, but locks out the Windows desktop and the Metro-UI. It's not free, but it's short money for the ease-of-use and piece-of-mind.
 

My Computer

System One

  • OS
    Win 8
BUMP!

Hello again guys. First of all please accept my apologies for being hasty and judging windows before even getting to know it properly. I have some good news. Last night I went into Group Policy and managed to "somehow" lock all the metro ui apps - so now my family account metro apps cannot be altered/unpinned or uninstalled without admin rights. This is great news as I want beginning to think that windows hadn't provided such security.

The problem I have is that I need help with figuring out which setting(s)in GPO actually helped lockdown the menu, so that I can disabled them when I need to add any additional apps.

Any help would be most appreciated.

Thanks

Hello
You have discovered what is the option in gpedit for do not change the apps on the start screen?
 

My Computer

System One

  • OS
    Windows 8 Pro
Back
Top