<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Dave,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> It is quite simple to run a batch file at logoff to do this. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Copy the following to a text file and save as a .bat.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>rd /s /q d:\documents<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>md d:\documents<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>echo y| cacls d:\documents /p Administrators:F system:F everyone:c<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>This will delete d:\documents and then recreate it. Edit if you want your documents file somewhere else.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;color:#1F497D'>Dan Will<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;color:#1F497D'>Technology Supervisor<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;color:#1F497D'>Meigs County District Public Library<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="mailto:willda@oplin.org"><span style='font-size:10.5pt;font-family:Consolas'>willda@oplin.org</span></a></span><span style='font-size:10.5pt;font-family:Consolas;color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;color:#1F497D'>740.992.5813<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;color:#1F497D'>740.992.6140 (fax)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>“When you are growing up there are two institutional places that affect you most powerfully: <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>the church that belongs to God and the public library that belongs to you. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>The public library is the great equalizer.” <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Keith Richards<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> oplintech-bounces@oplin.org [mailto:oplintech-bounces@oplin.org] <b>On Behalf Of </b>Eric Maynard<br><b>Sent:</b> Wednesday, September 01, 2010 3:11 PM<br><b>To:</b> dave menninger<br><b>Cc:</b> oplintech@oplin.org<br><b>Subject:</b> Re: [OPLINTECH] SteadyState and My Documents?<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Dave,<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I have done this with SteadyState, a shared domain user and a few group policy settings in combination with a second partition on the drive and a couple of batch scripts. <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The basic concept is that a second partion D:\ is the default for saving documents from session to session with a logoff and logon (just to be sure) script that deletes all data on that drive.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>This works for us since our time management solutions allows for forced reboots, but I suppose you could also handle it with just the local logons and the Startup folder as well.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Feel free to contact me off list for more details if you're interested.<o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br clear=all>Eric Maynard<br>Head of Information Technology,<br>Holmes County District Public Library<br>Millersburg, OH 44654<br>Email [<a href="mailto:emaynard@holmeslib.org">emaynard@holmeslib.org</a>]<br>Phone [330.674.5972 x.224]<br>Fax [330.674.1938] <br><br>"Failure is only the opportunity to begin again more intelligently"<br><br><br><br><o:p></o:p></p><div><p class=MsoNormal>On Wed, Sep 1, 2010 at 2:57 PM, dave menninger <<a href="mailto:davemenningerlibrary@gmail.com">davemenningerlibrary@gmail.com</a>> wrote:<o:p></o:p></p><div><p class=MsoNormal>Hello!<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>This list has been very helpful to me in the past so I'm hoping someone out there can help me understand this. We are experimenting with using MS SteadyState to lock down our Public PCs. We want to give users a location on the PC that they can use to store files during their session, but we want it to be erased between every session. We have had trouble using other methods to accomplish this in the past.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>It looks like you can give users access to the My Documents folder using SS, but here is our issue: if you block the user from seeing the C:\ drive, then they are unable to store files in the My Documents folder also. If you allow them to see the C:\ drive then everything works fine, but then they can browse around and look through the whole C:\ disk under My Computer. If you hide the C:\ drive from the user and put the My Documents folder on another drive, then you lose the benefit of SS erasing it after every log off since SS only erases/restores the system drive. If you hide My Computer, then they can't get into the C:\ drive and look around, but they also can't see the CD/DVD drive, the memory card readers, or any USB drive that they plug in.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>All we want is a location for patrons to stash files during their session that will be reliably erased every time, but we don't want them to be able to browse the whole C:\ drive.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>Is this possible using SteadyState? Are we missing something?<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>In the past we have used a logoff script to erase the files in the user's My Documents folder, but we experienced issues where certain files were unable to be erased and the logoff scripts would die or fail, leaving behind extra cached profiles. That's why we liked the idea of using SteadyState to reliably delete everything. Plus, if we're just going to use a script to perform the file deletion, then we don't really need SS at all because we can accomplish the rest of the lockdown using domain policies.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>Any help would be appreciated. It seems like a lot of you out there are using SteadyState. We're very new to it here.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>Thanks!<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>~Dave<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>PC Support Specialist<o:p></o:p></p></div><div><p class=MsoNormal>The Public Library of Cincinnati and Hamilton County<o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><br>_______________________________________________<br>OPLINTECH mailing list<br><a href="mailto:OPLINTECH@oplin.org">OPLINTECH@oplin.org</a><br><a href="http://mail.oplin.org/mailman/listinfo/oplintech" target="_blank">http://mail.oplin.org/mailman/listinfo/oplintech</a><br>Search: <a href="http://oplin.org/techsearch" target="_blank">http://oplin.org/techsearch</a><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>