1. Good Afternoon and Thank You!

3.  Have some Fun!  Learn at least one thing new!  Make myself available to you So please …  Ask questions and enjoy!

4. Presented by: Matthew Hester IT Pro Evangelist Microsoft Corporation mhester@microsoft.com@matthewhesterhttp://aka.ms/matthester My Boss Martin Schray martin.schray@microsoft.com Microsoft Windows Server 2008 R2 Administration Instant Reference

5.  A system in a steady state has numerous properties that are unchanging in time. This implies that for any property p of the system, the partial derivative with respect to time is zero:  Allows you to control configure and revert the configuration of a computer  Used in schools, libraries, internet cafes, kiosks …etc.  Steady State was designed to work with Windows XP and Windows Vista  BUT WHAT ABOUT WINDOWS 7?!?!?!?!??!?!?!?

6.  Creating a Steady State by Using Microsoft Technologies:  http://technet.microsoft.com/en- us/library/gg176676(WS.10).aspx http://technet.microsoft.com/en- us/library/gg176676(WS.10).aspx  Do not forget about Virtualization technologies  Mark Minasi: Steadier State  http://www.steadierstate.com/ http://www.steadierstate.com/  Sami Laiho: Wioski  http://download.sovelto.fi/wioski/default.html http://download.sovelto.fi/wioski/default.html  Jeremy Moskowitz: PolicyPak with or without SteadyState PC’s  http://www.policypak.com/ http://www.policypak.com/

7.  Not all 100% done with GPO  Although there are several new GPO’s  Windows 7 Technology helps  Comes Really Close  Besides there is still backup.

8.  Prevent users from opening Microsoft Office documents from within Internet Explorer  Always display the session countdown  Remove the Printers and Faxes icon  Remove expanded New menu  Specific to Vista: Remove the Administrator user name from the Welcome screen  Internet Explorer:  Search  Folders  Edit  Discussions  Encoding  Size  Full Screen  Media  Print  History  Tools  Non-Microsoft extension buttons  Command Bar  Web Addresses Allowed

9.  New User Profile settings under Computer \Administrative Templates\System\User Profiles  Prevent locked or roaming user profiles that cannot be found on the computer from logging on  Do not cache copies of locked or roaming user profiles for users who have previously logged on to this computer  Permissions:  Prevent users from creating folders and files on drive C  Prevent users from saving files to the desktop  Mandatory user profiles  Lock profile to prevent the user from making permanent changes  Scripts and Task Scheduler Screensaver  Log off after _ minutes of use  Log off after _ minutes idle  Restart computer after logoff  AppLocker/Software Restrictions:  Allow only programs in the Program Files and Windows folders to run  Disable System Tools and other management programs  Disable Notepad and WordPad  Block Programs  UAC New Policies  Prevent changes to Explorer’s advanced registry settings  Prevent changes to Internet Explorer registry settings  Firewall  Prevent Internet access (except Web sites below)

10. Allow only the Classic Start menu Disable AutoComplete Disable keyboard shortcuts that use the Windows Logo key Disable RSS Feeds (Internet Explorer 7 only) Do not allow access to Favorites Do not allow Windows to compute and store passwords using LAN Manager Hash values Do not display user names in the “Log On to Windows” dialog box Do not store user names or passwords used to log on to Windows Live ID or the domain Empty the Temporary Internet Files folder when Internet Explorer is closed Home Page Prevent access to Microsoft Management Console utilities Prevent access to Task Manager Prevent access to the command prompt Prevent access to the registry editor Prevent access to the taskbar Prevent access to Windows Explorer feature: Folder Options, Customize Toolbar, and the Notification Area Prevent AutoPlay on CD, DVD, and USB drives Prevent password changes (also requires removing the Control Panel icon) Prevent printing Prevent programs in the All Users folder from appearing Prevent right-click in Internet Explorer Prevent right-click in the Start menu Prevent right-click in Windows Explorer Prevent users from adding or removing printers Prevent users from locking the computer Prevent write access to USB storage devices Remove Advanced tab in Internet Options Remove CD and DVD burning features Remove Connections tab in Internet Options Remove Content tab in Internet Options Remove Find Files Remove General tab in Internet Options Remove Help menu Remove Internet Options Remove New Windows menu option Remove Privacy tab in Internet Options Remove Programs tab in Internet Options Remove Security tab in Internet Options Remove the Control Panel icon Remove the Control Panel, Printer and Network Settings from the Classic Start menu Remove the Favorites icon Remove the Frequently Used Programs list Remove the Help and Support icon Remove the My Documents icon Remove the My Music icon Remove the My Network Places icon Remove the My Pictures icon Remove the My Recent Documents icon Remove the Network Connections (Connect To) icon Remove the Recycle Bin icon Remove the Run icon Remove the Set Program Access and Defaults icon Remove the Shut Down and Turn Off options from the “Log On to Windows” dialog box and the Welcome screen Remove the Shut Down button Remove Theater Mode Remove View Source Select the drives you want to hide from the user Use Control Panel Classic View

11.  Windows Preinstallation Environment (WinPE)  VHD (virtual hard disk) files  Differencing VHDs  Boot physical PCs from VHDs  Windows Boot Manager  Windows 7 Enterprise or Ultimate 11

12. 12

13.  Wioski is a kiosk-computer  Windows 7 Enterprise or Ultimate Installed into a VHD-file.  Changes written to a differential VHD-file.  If the computer is shutdown while in Kiosk-mode all the changes will be automatically deleted.  Maintenance mode to save changes made to the configuration.  Customizable

14.  Steady Stating is great. It helps you revert at reboot time, or otherwise help with lockdown.  But applications still run.  And, when users run those applications they tend to mess them up.  PolicyPak performs APPLICATION LOCKDOWN and prevents users from messing up their settings inside applications … a perfect fit when Steady Stating your machines!