[OPLINTECH] SteadyState and My Documents?

[dave menninger]

Hello!

This list has been very helpful to me in the past so I'm hoping someone out
there can help me understand this.  We are experimenting with using MS
SteadyState to lock down our Public PCs.  We want to give users a location
on the PC that they can use to store files during their session, but we want
it to be erased between every session.  We have had trouble using other
methods to accomplish this in the past.

It looks like you can give users access to the My Documents folder using SS,
but here is our issue: if you block the user from seeing the C:\ drive, then
they are unable to store files in the My Documents folder also.  If you
allow them to see the C:\ drive then everything works fine, but then they
can browse around and look through the whole C:\ disk under My Computer.  If
you hide the C:\ drive from the user and put the My Documents folder on
another drive, then you lose the benefit of SS erasing it after every log
off since SS only erases/restores the system drive.  If you hide My
Computer, then they can't get into the C:\ drive and look around, but they
also can't see the CD/DVD drive, the memory card readers, or any USB drive
that they plug in.

All we want is a location for patrons to stash files during their session
that will be reliably erased every time, but we don't want them to be able
to browse the whole C:\ drive.

Is this possible using SteadyState?  Are we missing something?

In the past we have used a logoff script to erase the files in the user's My
Documents folder, but we experienced issues where certain files were unable
to be erased and the logoff scripts would die or fail, leaving behind extra
cached profiles.  That's why we liked the idea of using SteadyState to
reliably delete everything.  Plus, if we're just going to use a script to
perform the file deletion, then we don't really need SS at all because we
can accomplish the rest of the lockdown using domain policies.

Any help would be appreciated.  It seems like a lot of you out there are
using SteadyState.  We're very new to it here.

Thanks!

~Dave

PC Support Specialist
The Public Library of Cincinnati and Hamilton County
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.oplin.org/pipermail/oplintech/attachments/20100901/3318dfbb/attachment-0001.html