[OPLINTECH] SteadyState and My Documents?

[Dan Will]

Dave,

    It is quite simple to run a batch file at logoff to do this. 

 

Copy the following to a text file and save as a .bat.

 

rd /s /q d:\documents

md d:\documents

echo y| cacls d:\documents /p Administrators:F system:F everyone:c

 

This will delete d:\documents and then recreate it. Edit if you want your
documents file somewhere else.

 

 

Dan Will

Technology Supervisor

Meigs County District Public Library

 <mailto:willda at oplin.org> willda at oplin.org

740.992.5813

740.992.6140 (fax)

 

"When you are growing up there are two institutional places that affect you
most powerfully: 

the church that belongs to God and the public library that belongs to you.  

The public library is the great equalizer." 

Keith Richards

 

 

 

From: oplintech-bounces at oplin.org [mailto:oplintech-bounces at oplin.org] On
Behalf Of Eric Maynard
Sent: Wednesday, September 01, 2010 3:11 PM
To: dave menninger
Cc: oplintech at oplin.org
Subject: Re: [OPLINTECH] SteadyState and My Documents?

 

Dave,

 

I have done this with SteadyState, a shared domain user and a few group
policy settings in combination with a second partition on the drive and a
couple of batch scripts.  

 

The basic concept is that a second partion D:\ is the default for saving
documents from session to session with a logoff and logon (just to be sure)
script that deletes all data on that drive.

 

This works for us since our time management solutions allows for forced
reboots, but I suppose you could also handle it with just the local logons
and the Startup folder as well.

 

Feel free to contact me off list for more details if you're interested.


Eric Maynard
Head of Information Technology,
Holmes County District Public Library
Millersburg, OH  44654
Email [emaynard at holmeslib.org]
Phone [330.674.5972 x.224]
Fax   [330.674.1938] 

"Failure is only the opportunity to begin again more intelligently"





On Wed, Sep 1, 2010 at 2:57 PM, dave menninger
<davemenningerlibrary at gmail.com> wrote:

Hello!

 

This list has been very helpful to me in the past so I'm hoping someone out
there can help me understand this.  We are experimenting with using MS
SteadyState to lock down our Public PCs.  We want to give users a location
on the PC that they can use to store files during their session, but we want
it to be erased between every session.  We have had trouble using other
methods to accomplish this in the past.

 

It looks like you can give users access to the My Documents folder using SS,
but here is our issue: if you block the user from seeing the C:\ drive, then
they are unable to store files in the My Documents folder also.  If you
allow them to see the C:\ drive then everything works fine, but then they
can browse around and look through the whole C:\ disk under My Computer.  If
you hide the C:\ drive from the user and put the My Documents folder on
another drive, then you lose the benefit of SS erasing it after every log
off since SS only erases/restores the system drive.  If you hide My
Computer, then they can't get into the C:\ drive and look around, but they
also can't see the CD/DVD drive, the memory card readers, or any USB drive
that they plug in.

 

All we want is a location for patrons to stash files during their session
that will be reliably erased every time, but we don't want them to be able
to browse the whole C:\ drive.

 

Is this possible using SteadyState?  Are we missing something?

 

In the past we have used a logoff script to erase the files in the user's My
Documents folder, but we experienced issues where certain files were unable
to be erased and the logoff scripts would die or fail, leaving behind extra
cached profiles.  That's why we liked the idea of using SteadyState to
reliably delete everything.  Plus, if we're just going to use a script to
perform the file deletion, then we don't really need SS at all because we
can accomplish the rest of the lockdown using domain policies.

 

Any help would be appreciated.  It seems like a lot of you out there are
using SteadyState.  We're very new to it here.

 

Thanks!

 

~Dave

 

PC Support Specialist

The Public Library of Cincinnati and Hamilton County


_______________________________________________
OPLINTECH mailing list
OPLINTECH at oplin.org
http://mail.oplin.org/mailman/listinfo/oplintech
Search: http://oplin.org/techsearch

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.oplin.org/pipermail/oplintech/attachments/20100901/3dd40161/attachment.html