SteadyState in Active Directory RRS feed

  • Question

  • We want to lock down school computer labs and are looking at SteadyState. We like the disk protect feature most. All computers are in an OU on the Domain and all students are in an OU and have home folders on a server. We want each student to logi with their own ID/password. We want nothing saved perminently on the lab machine; only to home folders. Now, as I think I understand it:

     install SteadyState on each lab computer - BUT NOT configure any settings.
     set up an XPSP3 PC with the admin tools and load the Steadystate adm template.
     use that adm template to configure GPO s for the computers and users.
     turn on disk protection at each computer.
     students will then use their domain account to log on to lab computers - get GPO applied like SteadyState.
     at logoff, any changes to that PC will be deleted.

    I understand there are some issues with disk protection and updates (we are also working on WSUS), the 30 day domain password and antivirus updates. But do we have the general ideas correct?
    Saturday, November 7, 2009 12:23 AM