Creating the Secure Managed Desktop: Chapter 11: Full Lockdown with Windows Steadystate

by Jeremy A. Moskowitz

Jeremy Moskowitz's companion book on Group Policy continues with best practices for Desktop Management. This eBook chapter is entitled Full Lockdown with Windows SteadyState and is part of a larger series of chapters from his book, Creating the Secure Managed Desktop. Group Policy's job is to deliver instructions to each operating system component -- and we have to hope that the component is doing its job. What you need is a way to guarantee that a desktop can't be messed with. Group Policy can take you only so far. Just imagine if you could really prevent changes to the hard drive. Really prevent them. Then you'd have something! You'd have full lockdown for the way you want things -- forever. That's what Windows SteadyState (or just SteadyState for short) is all about. The Windows SteadyState handbook is full of useful information to get started on your journey. My goal isn't to replicate that manual. This chapter isn't a series of step-by-steps, but rather a collection of guidance, insights and techniques where the Windows SteadyState manual leaves off. Learn how to: Best prepare for and use Windows SteadyState on XP and Vista to put the real smack-down on the machine Learn best practices for how to install software (and not get snared in the process) Learn WHEN to turn on the smack-down, and when to stay in "just testing" mode Learn how to carve out a "saved area" for sanctioned users on your machines Learn advice (not found anywhere else) about using Windows SteadyState in a domain environment with Group Policy Use our special script to automatically clean up "dirty" machines when no one is logged in. This script is s sooooo good, you're going to want to tell your Mom about it.Seriously. That's how good it is. Trust me, it's good. In this chapter, youll learn how to use Windows SteadyState to fully lock down your machines (with and without Group Policy) to ensure your computers are continually connected. Come to www.GPanswers.com/book to Get signed hardcopies and learn more about the printed book (as well as its companion book Group Policy Fundamentals, Security, and Troubleshooting.). At GPanswers.com, youll also find supplemental downloads for these chapters as well as any downloadables for each chapter. Join the GPanswers.com newsletter list for news and updates.

ebook

First published February 11, 2008