How to parent-proof my parents computer?

[Ruptga]

Another vote for deep freeze. It has been a long time since I've dealt with it, but if they're the kind of person that you need to protect from themselves then they will not be able to break it.

Even that isn't foolproof though; they could still fall for any number of phishing scams. Hell, my mom has handled IT stuff at home and at dad's office for years, and just last month she got a call from Microsoft and actually let them onto two machines.

 

[her209]

I did make them a standard user account. some type of malware still managed to get onto the system

Do they know what the Administrative account is and the password to it? Also, Malware will sometimes install itself into the user's profile and add itself to auto start on user login.

 

[evident]

I would pull your dad to the side and explain to him how all those links with the pretty girls that say "sexy singles in <location> are waiting for you!" is fake 100% of the time.

actually, it's my mom who uses this computer the most. the idea of her clicking on a link like that cracks me up :thumbsup:

 

[cronos]

Or there's always the Asus chromebox if you want a more desktop kind of setup. I think those are around $160 on Amazon and come very highly recommended.

This. I saw the several 'Chromebook' suggestions in the replies and was going to post Chromebox as the more appropriate desktop replacement.

To add value to this post, here's the link to it.

 

[lxskllr]

I put Ubuntu on my mother's computer two or three years ago, and have had no issues. She got a MS "tech" call a few weeks ago. The "tech" was trying to get her to open the Win event viewer, but it wasn't working. He asked what O/S she was running. She said she didn't know, and that I set it up. The "tech" hung up on her :^D

 

[nageov3t]

I got my mom a Mac.

now when she calls me, I tell her that I don't use Macs so I'm not really familiar with them, but my sister does so she should call her instead.

:thumbsup:

 

[LTC8K6]

I haven't had a single issue, fingers crossed, since installing the full version of Malwarebytes + Windows Security Essentials + running regular user account.

That Malwarebytes blocks a ton of shit.

This.

Not a sign of anything bad in a very long time with that setup.

 

[Fanatical Meat]

I hate to say it but my parent & computer problems disappeared with an mac & iPad.

 

[AznAnarchy99]

I got my mom a Mac.

now when she calls me, I tell her that I don't use Macs so I'm not really familiar with them, but my sister does so she should call her instead.

:thumbsup:

Lmao I do the same thing even though I've worked with plenty of Macs.

 

[J3S73R]

If you have the time,

Standard User
Configure GPO to have set specifics (Local Security Policy in this case)
Whitelist allowed apps to run or certain processes. Do not allow any installs to take place outside of those etc etc

You can surprisingly lock down a windows box pretty damn well if you want to put in the time. You can then export that policy for the future.

 

[MustISO]

Sandboxie Pro and have all browsers launch in the sandbox. I have that on my parents machines along with NOD32 and they're been malware free for 5+ years.

 

[Joe C]

Do a search in the security forum of this site for "software restriction policy". Very strong protection and totaly free.

 

[Fox5]

Install all the programs they need, replace IE with Chrome, turn UAC up to max, and put them on a standard user account.

 

[Kushina]

Buy an iPad.

 

[KeithP]

I did make them a standard user account. some type of malware still managed to get onto the system

A standard user account is only one small part of trying to lock down a windows box. http://www.mechbgon.com/build/security2.html

Browsing/email in Linux is an option but use a virtual machine rather than trying to dual boot.

Chromebooks/tablets have the disadvantage of no remote access. If your parents call and have a question about something you can't login remotely and show them what to do.

Any attempt to set them up on some sort of "idiot proof" (no offense) system will ultimately fail. Idiots always find a way around anything you try to do. If they can't be taught, or are unwilling to learn, about computer security and best practices, the only thing you can do is have a clean disk image handy so you can easily wipe and rebuild the system each time they get infected.

-KeithP

 

[Sattern]

Getting them and teaching them how to use a Macbook would be your best bet.

It's very hard to make one of those crash, although they are a bit pricey.

 

[Squisher]

...Any attempt to set them up on some sort of "idiot proof" (no offense) system will ultimately fail....

-KeithP

I once said to a guy at work, "we need to idiot proof this."

His response was, "that's going to be tough with an infinite number of idiots."

 

[Greenman]

Another Linux vote from me. Put it on my inlaws computer 3 or 4 years back and haven't had an issue since. Fast, free, and foolproof.

 

[balloonshark]

Sandboxie Pro and have all browsers launch in the sandbox. I have that on my parents machines along with NOD32 and they're been malware free for 5+ years.

I have my mother setup with a limited user account, Sandboxie paid and Avira free. Once she closes the browser everything in the sandbox (good or bad) is deleted. I also have her download folder forced to start sandboxed that way if she downloads anything it will run in the sandbox. I also limit what can start in the sandbox so firefox.exe can run and in theory malware.exe can't run.

 

[VirtualLarry]

Well when you think about it, the computer is like another member of your family. You play games with it. You shower it with your love. When it's sick, you nurse it back to health and you cry when it dies unexpectedly.

I must be Octomomdad then...

 

[VirtualLarry]

Even that isn't foolproof though; they could still fall for any number of phishing scams. Hell, my mom has handled IT stuff at home and at dad's office for years, and just last month she got a call from Microsoft and actually let them onto two machines.

"From Microsoft"... right.
http://forums.anandtech.com/showthread.php?t=2397125

 

[vailr]

The i5 desktop machine should be capable of running Chromium OS:
http://chromeos.hexxeh.net/
If staying with Windows: Junkware Removal Tool sometimes detects malware that others (such as Malwarebytes) may miss:
http://www.majorgeeks.com/files/details/junkware_removal_tool.html

 

[evident]

A standard user account is only one small part of trying to lock down a windows box. http://www.mechbgon.com/build/security2.html

Browsing/email in Linux is an option but use a virtual machine rather than trying to dual boot.

Chromebooks/tablets have the disadvantage of no remote access. If your parents call and have a question about something you can't login remotely and show them what to do.

Any attempt to set them up on some sort of "idiot proof" (no offense) system will ultimately fail. Idiots always find a way around anything you try to do. If they can't be taught, or are unwilling to learn, about computer security and best practices, the only thing you can do is have a clean disk image handy so you can easily wipe and rebuild the system each time they get infected.

-KeithP

I did most of the things listed in the link shown, the machine only came with windows 8, not pro so I couldn't go into the deeper settings of gpedit. I set them up with a child account this time and only have whitelisted programs they can run. hopefully this won't be too big of an issue for them lol. planning to put malwarebytes and another antivirus that isn't windows defender on it.

also, thinking about giving them a dual boot option of ubuntu, but it seems like no linux distros support secureboot other than "disable it in bios"