BrianR said:
It's against company policy to have games installed on company computers.
Yet it doesn't seem to stop the employees from installing the games. I
doubt they would be installing the games unless they were intending to
play them.
These games were included in Windows as demonstrations of manipulating
data with the mouse. Since they were designed with the intention of
using the Administrator/Limited/Guest User privileges system to control
access to them, the probability that the game applications would check
places like the registry for clearance to run is low. Basically,
Microsoft considers the issue resolved through limiting the privilege of
installing applications to personnel with administrative accounts.
You MIGHT need to BRIEFLY promote the shared account to administrator
level running a just installed application the first time so that it can
establish some folders for data files. Some Windows 9x/ME compatible
applications might make it necessary for you to adjust their default
data storage location to a folder they will be permitted to modify when
run with a limited account.
A system running under a Limited or Guest account is less vulnerable to
the acquisition of malware like viruses and spyware too. Many malware
applications need the privileges of a running administrative account to
establish themselves.
SOME networked computers are configured to load a fresh image if the OS
and software installations from a central server EACH time they are
started. The OS and associated software installations were automatically
reset to the IS department's default configuration at that time. That
default configuration did NOT include things like the games that came
with Windows. Data files had to be kept on the server, since ALL data
was cleared from the hard drives in the work stations every time they
were shut down. At one time that was implemented through to use of a ROM
on a Network Interface Card (NIC) that acted as a boot "drive" and may
have contained information about where to find the OS image on the
server. I don't know how feasible that would be with the more recent
network interfaces that are integrated into the computer's motherboard.
Check with your IT supplier to see if they have someone with knowledge
about implementing such a system.