Dual boot with restrictions

  • Thread starter Thread starter Michel777
  • Start date Start date
M

Michel777

Dear community,

our notebooks should be used non-corporate and corporate.

Corporate: the Windows is frozen, unmanaged. No updates, no patches and only
an application is running and only this application can communicate with the
server (db replication). The user can only wiht this application interact, he
has no other access (application, filesystem, USB, network,...).

Non-Corporate: no restrictions, the user bears responsibility for updates,
virusscanning, etc. But in this mode the access to corporate network ist not
allowed. Access to other networks is allowed (e.g. internet provider).

Because of that we need two Windows. The corporate system is definitely XP
teh privat could be also Vista. Questions regarding this:

1. How to install the two windows, that the corporate Windows never be
damaged ?
2. How to distinguish in the corporate network, which Windows is trying
access the network ? A simply safe way would be using two different network
cards, but is surely not mandatory.
3. Is there any further aspect to consider ?

Thank you in advance,

Michel
 
The only possible way that I can see to do that would be to use a third
party boot manager that can hide other partitions when booting the
selected operating system. The boot manager should also have a password
on the maintenance mode so as to prevent users from changing the
partition hiding options. Let's face it, what you are trying to do is
otherwise nearly impossible and the solution I offer is far from
perfect, when booted to the "unrestricted" Windows the users will have
nearly unlimited reign on the computer and with administrative
privileges and proper tools they can destroy the "restricted" Windows
installation. Hiding the corporate installation when booted to the
other one and instructing the users to not attempt to access it is about
all that you can hope for.

John
 
Michel777 said:
Dear community,

our notebooks should be used non-corporate and corporate.

Corporate: the Windows is frozen, unmanaged. No updates,
no patches and only an application is running and only this
application can communicate with the server (db replication).
The user can only wiht this application interact, he has no other
access (application, filesystem, USB, network,...).

Non-Corporate: no restrictions, the user bears responsibility
for updates, virusscanning, etc. But in this mode the access to
corporate network ist not allowed. Access to other networks
is allowed (e.g. internet provider).

Because of that we need two Windows. The corporate system
is definitely XP teh privat could be also Vista. Questions
regarding this:

1. How to install the two windows, that the corporate Windows
never be damaged ?
2. How to distinguish in the corporate network, which Windows
is trying access the network ? A simply safe way would be
using two different network cards, but is surely not mandatory.
3. Is there any further aspect to consider ?

Thank you in advance,

Michel
Click to expand...

The most straight-forward way would be to use 2 laptops, of course,
or a laptop with 2 hard disks (perhaps with one in an external housing),
with a password to get into the BIOS when one switches the
enablement on the hard disks. But it you insist on one laptop and a
boot manager, perhaps one of these would help:
http://www.multibooters.co.uk/managers.html

*TimDaniels*
 
Back
Top