[OPLINTECH] SteadyState and My Documents?

[David Popeck]

For PC Reservation users, you can run a similar script as part of the
log-off routine.


On Wed, Sep 1, 2010 at 3:20 PM, Dan Will <willda at oplin.org> wrote:
> Dave,
>
>     It is quite simple to run a batch file at logoff to do this.
>
>
>
> Copy the following to a text file and save as a .bat.
>
>
>
> rd /s /q d:\documents
>
> md d:\documents
>
> echo y| cacls d:\documents /p Administrators:F system:F everyone:c
>
>
>
> This will delete d:\documents and then recreate it. Edit if you want your
> documents file somewhere else.
>
>
>
>
>
> Dan Will
>
> Technology Supervisor
>
> Meigs County District Public Library
>
> willda at oplin.org
>
> 740.992.5813
>
> 740.992.6140 (fax)
>
>
>
> “When you are growing up there are two institutional places that affect you
> most powerfully:
>
> the church that belongs to God and the public library that belongs to you.
>
> The public library is the great equalizer.”
>
> Keith Richards
>
>
>
>
>
>
>
> From: oplintech-bounces at oplin.org [mailto:oplintech-bounces at oplin.org] On
> Behalf Of Eric Maynard
> Sent: Wednesday, September 01, 2010 3:11 PM
> To: dave menninger
> Cc: oplintech at oplin.org
> Subject: Re: [OPLINTECH] SteadyState and My Documents?
>
>
>
> Dave,
>
>
>
> I have done this with SteadyState, a shared domain user and a few group
> policy settings in combination with a second partition on the drive and a
> couple of batch scripts.
>
>
>
> The basic concept is that a second partion D:\ is the default for saving
> documents from session to session with a logoff and logon (just to be
> sure) script that deletes all data on that drive.
>
>
>
> This works for us since our time management solutions allows for forced
> reboots, but I suppose you could also handle it with just the local logons
> and the Startup folder as well.
>
>
>
> Feel free to contact me off list for more details if you're interested.
>
> Eric Maynard
> Head of Information Technology,
> Holmes County District Public Library
> Millersburg, OH  44654
> Email [emaynard at holmeslib.org]
> Phone [330.674.5972 x.224]
> Fax   [330.674.1938]
>
> "Failure is only the opportunity to begin again more intelligently"
>
>
>
> On Wed, Sep 1, 2010 at 2:57 PM, dave menninger
> <davemenningerlibrary at gmail.com> wrote:
>
> Hello!
>
>
>
> This list has been very helpful to me in the past so I'm hoping someone out
> there can help me understand this.  We are experimenting with using MS
> SteadyState to lock down our Public PCs.  We want to give users a location
> on the PC that they can use to store files during their session, but we want
> it to be erased between every session.  We have had trouble using other
> methods to accomplish this in the past.
>
>
>
> It looks like you can give users access to the My Documents folder using SS,
> but here is our issue: if you block the user from seeing the C:\ drive, then
> they are unable to store files in the My Documents folder also.  If you
> allow them to see the C:\ drive then everything works fine, but then they
> can browse around and look through the whole C:\ disk under My Computer.  If
> you hide the C:\ drive from the user and put the My Documents folder on
> another drive, then you lose the benefit of SS erasing it after every log
> off since SS only erases/restores the system drive.  If you hide My
> Computer, then they can't get into the C:\ drive and look around, but they
> also can't see the CD/DVD drive, the memory card readers, or any USB drive
> that they plug in.
>
>
>
> All we want is a location for patrons to stash files during their session
> that will be reliably erased every time, but we don't want them to be able
> to browse the whole C:\ drive.
>
>
>
> Is this possible using SteadyState?  Are we missing something?
>
>
>
> In the past we have used a logoff script to erase the files in the user's My
> Documents folder, but we experienced issues where certain files were unable
> to be erased and the logoff scripts would die or fail, leaving behind extra
> cached profiles.  That's why we liked the idea of using SteadyState to
> reliably delete everything.  Plus, if we're just going to use a script to
> perform the file deletion, then we don't really need SS at all because we
> can accomplish the rest of the lockdown using domain policies.
>
>
>
> Any help would be appreciated.  It seems like a lot of you out there are
> using SteadyState.  We're very new to it here.
>
>
>
> Thanks!
>
>
>
> ~Dave
>
>
>
> PC Support Specialist
>
> The Public Library of Cincinnati and Hamilton County
>
> _______________________________________________
> OPLINTECH mailing list
> OPLINTECH at oplin.org
> http://mail.oplin.org/mailman/listinfo/oplintech
> Search: http://oplin.org/techsearch
>
>
>
> _______________________________________________
> OPLINTECH mailing list
> OPLINTECH at oplin.org
> http://mail.oplin.org/mailman/listinfo/oplintech
> Search: http://oplin.org/techsearch
>
>



-- 
David Popeck
Lakewood Public Library
Adult and Electronic Services, Supervisor
216-226-8275, ext. 126