Asda’s Place on da’ Internet

Okay, I thought I would add another tutorial quickly. Thios one is for those people who have shared computers and want to make sure that others do not screw the PC’s up when using them. For this we use a tool called Steadystate, which can be downloaded from Microsoft. Steadystate is the best security tool yet, and is great for standalone PC’s not on a Domain Network or covered by Group Policy. Steadystate also works nicely with Group Policy as well.

You can get Steadystate from http://www.microsoft.com/downloads/details.aspx?FamilyId=D077A52D-93E9-4B02-BD95-9D770CCDB431&displaylang=en

Once installed, you need to create a new user. I have only 1 other user on my systems, apart from Administrator, as all users are Domain Users. (Guest User)

Now, click the user you have created, it’s time to get restrictive!

I enable time restrictions on the PC and enable the logoff timer, so that my users can see how long they have left. It is also a good idea to lock the profile of the user, so that thay cannot make any changes. (This is called a Manitory Profile)

Now click the Windows Restrictions Tab

It is up to you how lenient you are with your restrictions. For this Guest user, I have been seriouslly restrictive and have locked off many features and also have locked off the C:\ Drive and the E:\ Drive for security, only allowing access to the DVD RW Drive.  Users can only save to Drive I: and to Floppy \ DVDRW or CDRW. To apply a restriction, just check the relivent box.

OK lets move on to Feature Restrictions

Again, check the boxes for the features you want disabling. This tab allows you to block various features in Internet Explorer, Office and other software. You can also set the homepage for Internet Explorer or allow a certtain page to be accessed from the user account. (great for Children, using the PC)

Finally, we move to the Blocked Programs Tab

This allows you to block various programs, such as Internet Explorer or Card Games. To block a program, click it’s name and click the Blocked button to move it to the blocked list.

When you are ready, click OK to apply all restrictions.

Finally, if you want Steadystate to manage your Computer Updates, select the option on the main screen. You can also protect the hard drive from changes (Not Recommended unless you are on a Domain Network) and set global restrictions.

Now all that is left to do is click Start > logoff and login as your new user and enjoy Steadystate Protection for your family and your PC!

Next week’s tutorial: Hacking MSGina.DLL to customise your Windows Classic Logon Screen.