NCompass Live - June 28, 2023 http://nlc.nebraska.gov/ncompasslive/ Special monthly episodes of NCompass Live! Join the NLC’s Technology Innovation Librarian, Amanda Sweet, as she guides us through the world of library-related Pretty Sweet Tech. Computers for public use are a service unique to libraries. To provide the best possible protection for the customers that use them and maximize their availability, they need to be properly secured and maintained. Guest Presenter Andrew "Sherm" Sherman, with the Nebraska Library Commission Computer Services team, will take you through the process he has used to do this for the libraries he has provided IT support for.

1. Securing Public Computers
How to protect the public computers and your customers who use them

2. Public computers are a unique service
that requires a secure configuration!
Hardware
BIOS Password
BIOS Boot Order
Speaker
Jacks/Ports
Software
Windows OS Config
Browser Config
MS Office
Reboot/Restore
Time Limiter
Users
Training
Signage
Maintenance
Software Updates
Cleaning

3. The BIOS
(They are unique based on the manufacturer
and the age of computer.)
Password
• Always set and enable the Admin
BIOS password
• You can use the same Admin
password for the Windows OS
Boot Order
• Set the Hard Drive as the first boot
device
• Require the Admin password for the
Boot Menu
• You might need to remove the other
devices from the boot menu
• New PCs ship without an optical
drive
Use Wake-On-LAN?

4. BIOS Admin Password

5. BIOS Boot Options

6. Ports/Jacks
Disable the internal speaker
• Keeps things quieter!
• Disable it in the BIOS? (laptops)
• Unplug it from motherboard?
• Use a headphone extension cord
Need to be accessible and
protected
• Use extension cables!
• Headphone (single, front & back)
• USB (multiple, front & back)
The PC’s Speaker

7. • It must be Windows 10/11. Windows 7/8 are
EOL. Windows 10 EOL is Oct 2025.
• Give the PC a descriptive name. (It can be
changed.)
• Do not set it up with a “Microsoft” login/PIN
• Enable the Administrator login and set its
password
• The Public login should be changed to a
standard user
• Turn off auto updates due to reboot/restore
software
• Windows Defender Antivirus is good enough.
Save your $$$.
• Set up a B&W and Color printer (even if it’s
the same printer)
Windows OS
• Print with a banner/separator page!
• Use Windows Desktop Background for
signage!
• Wired or WiFi connection? (Consider your
printer!)
• Remove the “Bloatware”
• Enable Bluetooth?
• Start up the browser on boot?
• Use Task Scheduler to auto shutdown PCs
at close?
• Install PDF Viewer? (Adobe Reader as
default)

9. Browsers
• Chrome, Edge, and/or Firefox
• Turn off browsing history
• Turn off autofill (password saving)
• Turn off auto updates
• Install and make Google the default
browser and search engine? (63% of
market share)
• Still install FireFox? (3% of market share)
• Set up some bookmarks/favorites?
• Website Shortcuts on Desktop
• Buy MS Office Standard through TechSoup.org
• Install from a USB drive
• Do “custom” install
• Do not install OneNote and Outlook
• Activate with the Office Key
• Skip creation of Microsoft login
• App Shortcuts on Desktop & Taskbar
MS Office

10. Reboot/Restore Software
It’s a nonnegotiable must have!
• What it does…
• Not a filter!
• Microsoft discontinued Steady State in 2011.
• I prefer Faronics’ DeepFreeze!
• Centurion’s SmartShield is cheaper.
• Not a fan of Fortres Grand’s CleanSlate
• Must be disabled to load updates.
• Enterprise Console Management option?
• Automate shutdown of computers at closing time
• Automate start of Computers with Wake-On-LAN
• If your public computers don’t have it, they are
“compromised” and will need to be factory reset.
• What it does…
• Great for setting up a large number
of PCs
• Software available
• Extra hard drive for a backup
Cloning PCs
• What it does…
• Fortres Grand Time Limit Manger
• Ticket or Ticketless
• Provides great usage stats!
Time Limiter?

11. Training
• What’s a “browser”?
• Printing has become the killer app
• The kids will want Roblox & Minecraft
Classic access
• Chromebooks?
• Chrome Enterprise/Google Admin
console
• Printing can be frustrating
• iMacs/iPads?
• Apple School Manager
Signage
• Printing costs
• Reboot/Reset warning
• Use of USB Drive to save work
• Closing Time & Shutdown warning
• Use the Windows Desktop!
• Default Website?
The Users

13. Software Updates
• Use the Windows Admin login
• Windows OS (Office & Edge)
• Browsers (Chrome)
• Adobe Reader
• Any other apps?
• Put up an Out-of-Order sign and run
the updates manually once a month.
Cleaning
• No food!
• Keyboard Covers?
• Cleaning Keyboards and Mice
(disinfecting spray/wipes)
• Cleaning Screens (soft cloth & warm
water
• Compressed air
• Vacuum
Maintenance

14. • Buy used PCs?
• Tend to be pretty old already.
• Upgrade current PC? Memory/Video/HD
• UPS (Uninterruptable Power Supply)
• Definitely on the network gear
• Circulation PC
• Scan barcodes into Notepad as a checkout
backup
• Adobe Creative Suite?
• Acrobat allows PDFs to be edited
• Photoshop!
• $$$
• Requires login
Other considerations
• Lending
• Headphones/USB Drives (Sell them?)
• Laptops/tablets
• Hotspots
• Filtering
• Required for E-rate (CIPA)
• Dedicated kids computers?
• Free options can be too restrictive
• Cybersecurity!
• Register for the NCompass Live on July
26th for a deep dive into filtering
• Makerspaces

15. My contact info:
Andrew “Sherm” Sherman
IT Infrastructure Support Analyst
Nebraska Library Commission
402-471-4559
andrew.Sherman@nebraska.gov