[OPLINTECH] SteadyState and My Documents?

[Eric Maynard]

Dave,

I have done this with SteadyState, a shared domain user and a few group
policy settings in combination with a second partition on the drive and a
couple of batch scripts.

The basic concept is that a second partion D:\ is the default for saving
documents from session to session with a logoff and logon (just to be
sure) script that deletes all data on that drive.

This works for us since our time management solutions allows for forced
reboots, but I suppose you could also handle it with just the local logons
and the Startup folder as well.

Feel free to contact me off list for more details if you're interested.

Eric Maynard
Head of Information Technology,
Holmes County District Public Library
Millersburg, OH  44654
Email [emaynard at holmeslib.org]
Phone [330.674.5972 x.224]
Fax   [330.674.1938]

"Failure is only the opportunity to begin again more intelligently"




On Wed, Sep 1, 2010 at 2:57 PM, dave menninger <
davemenningerlibrary at gmail.com> wrote:

> Hello!
>
> This list has been very helpful to me in the past so I'm hoping someone out
> there can help me understand this.  We are experimenting with using MS
> SteadyState to lock down our Public PCs.  We want to give users a location
> on the PC that they can use to store files during their session, but we want
> it to be erased between every session.  We have had trouble using other
> methods to accomplish this in the past.
>
> It looks like you can give users access to the My Documents folder using
> SS, but here is our issue: if you block the user from seeing the C:\ drive,
> then they are unable to store files in the My Documents folder also.  If you
> allow them to see the C:\ drive then everything works fine, but then they
> can browse around and look through the whole C:\ disk under My Computer.  If
> you hide the C:\ drive from the user and put the My Documents folder on
> another drive, then you lose the benefit of SS erasing it after every log
> off since SS only erases/restores the system drive.  If you hide My
> Computer, then they can't get into the C:\ drive and look around, but they
> also can't see the CD/DVD drive, the memory card readers, or any USB drive
> that they plug in.
>
> All we want is a location for patrons to stash files during their session
> that will be reliably erased every time, but we don't want them to be able
> to browse the whole C:\ drive.
>
> Is this possible using SteadyState?  Are we missing something?
>
> In the past we have used a logoff script to erase the files in the user's
> My Documents folder, but we experienced issues where certain files were
> unable to be erased and the logoff scripts would die or fail, leaving behind
> extra cached profiles.  That's why we liked the idea of using SteadyState to
> reliably delete everything.  Plus, if we're just going to use a script to
> perform the file deletion, then we don't really need SS at all because we
> can accomplish the rest of the lockdown using domain policies.
>
> Any help would be appreciated.  It seems like a lot of you out there are
> using SteadyState.  We're very new to it here.
>
> Thanks!
>
> ~Dave
>
> PC Support Specialist
> The Public Library of Cincinnati and Hamilton County
>
> _______________________________________________
> OPLINTECH mailing list
> OPLINTECH at oplin.org
> http://mail.oplin.org/mailman/listinfo/oplintech
> Search: http://oplin.org/techsearch
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.oplin.org/pipermail/oplintech/attachments/20100901/e72f598d/attachment.html