- Optimizing the PC for Shared or Public Use
- Configuring User Accounts
- Configuring Global Computer Restrictions
Like this article? We recommend
Like this article? We recommend
Like this article? We recommend
Configuring Global Computer Restrictions
After you have the user accounts set up, you can review the global restrictions. On the main SteadyState window, click Set Computer Restrictions. Change the settings as desired.
The default configuration (see Figure 4) should work for most, but you might want to check the Prevent users from creating folders and files on drive C:\ option.
)
Setting up Automatic Updates
Next, you should take a moment and schedule when Windows should download updates, so you can keep your system current with any security patches and new features.
On the main SteadyState window, click Schedule Software Updates. You'll probably need to choose the first option, possibly change the time, and then click OK.
Enabling Disk Protection
Now that you have the restrictions put into place, you can secure the hard drive itself. If you enable Disk Protection, any changes that are made to the system, including files that were downloaded or created, are removed when restarting the computer.
A cache file is created and saved when you enable the feature, taking a snapshot of the entire hard drive. After a reboot, the computer will return to that snapshot, so make sure your computer looks just like you want it to before enabling Disk Protection.
If you reformatted your drive and created at least two partitions before reinstalling Windows and then saved account profiles to the blank partition, these accounts are exempt from Disk Protection.
Therefore, any changes to these accounts stored on a secondary partition or another drive, and any changes to their personal folders (My Documents, My Pictures, etc.) aren't removed after restarting the system.
To secure your drive, click Protect the Hard Disk on the main SteadyState window. Then you can choose the On radio button (see Figure 5) and read the prompt before it creates the cache file.
)
Once enabled, you have three options to pick from. The first option makes it work as we've discussed so far. The second option lets you specify a date to start, where any changes until then will be permanent. The last option disables Disk Protection, but doesn't erase the cache file.
Therefore, when you do turn it back on, you don't have to wait again for the cache file to be created.
If you want to install software, make Windows changes, or store files on the computer, make sure that you select either the second or third option.
After making the changes, restart the computer and reactivate Disk Protection.
You're Protected Now!
We've discovered how useful Microsoft's free program, SteadyState, can be for public or shared workstations. We created user accounts and configured all the user and computer restrictions.
Plus we enabled Automatic Updates for Windows and discovered Disk Protection. Now you shouldn't have to worry about your PC getting messed up or infected.
I'll leave you with a few more tips:
- Though computer restrictions don't apply to the computer's Administrator accounts, Disk Protection applies to all accounts[md]the entire computer.
- If you have more than one public or shared computer, think about replicating your settings to other computers. You can export and import all the SteadyState settings and account profiles.
- If you want web filtering, you might want to give OpenDNS a try. It's a free DNS service that offers filtering and other features. It's much better than the parental controls of Internet Explorer or Windows Vista.