Update to this discussion. Microsoft released their SteadyState tool for XP which greatly simplifies the task of locking down a system. Everything from completely locked down library computers to mildly-locked down normal user machines.
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx The key is that no writes are allowed to the boot (system) drive. All such writes are stored to a temp cache. On logout/reboot the cache is cleared and system goes right back to its pristine state. The beauty is that it only affects the boot (system) drive so if you put the My Docs and all the user stuff on a network share or second HD the user can make changes there all you want. Many more options for making group policy changes and the such. Podcast discussing many of its uses and benefits here (along with transcript and show notes): http://www.grc.com/securitynow.htm#129 Of course, one can come up with many theories as to why this was such a muted launch. maybe Microsoft didn't want to piss off the Anti-virus /spyware/malware market as this product sort of makes them obsolete. Maybe Microsoft realized that this eliminated one of the key advantages for Vista acceptance in the business world. ---- Brian Weeden On Jan 15, 2008 2:05 PM, Greg Sevart <[EMAIL PROTECTED]> wrote: > I disagree. There are a number of substantial improvements in Vista for > group policy configuration that are great for IT administrators. But people > tend to overlook those things and zero in on the interface. Frankly, the > interface is among the least interesting things about Vista for me. > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:hardware- > > > [EMAIL PROTECTED] On Behalf Of Brian Weeden > > Sent: Tuesday, January 15, 2008 12:05 PM > > To: [email protected] > > > > > Subject: Re: [H] Save XP! > > > > You can make the case for home users to use Vista. I wouldn't, but > > the case can be made. The problem is for business users. There is > > not a single good reason for them to upgrade to Vista and in fact a > > lot of bad reasons. > > > > What improvements have Microsoft added to Vista? DX10 gaming, HD and > > BluRay video playback (via HDCP and lots of DRM of course), cool > > window animations and glassy effects. NONE of those should be used in > > the average workplace and in fact if I were an IT administrator I > > would say they are an argument AGAINST installing Vista. > > >
