| Author | Messages | |
PARRIS
Posts:291
 | | 10/07/2008 5:12 PM |
| I see it as entry level (infant/primary school) and no where near as good as Deepfreeze or Fortress.
I looked at it as part of our PCI-DSS audit and quickly moved on.
Regards,
Mark Parris
-----Original Message-----
From: Brian Desmond <brian@briandesmond.com>
Date: Tue, 7 Oct 2008 20:12:15
To: ActiveDir@mail.activedir.org<ActiveDir@mail.activedir.org>
Subject: AD: RE: Re: [ActiveDir] Clean Machines After User Logout
Is this a Microsoft competitor to products like DeepFreeze and Fortress?
Thanks,
Brian Desmond
brian@briandesmond.com
c - 312.731.3132
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Mark Parris
Sent: Tuesday, October 07, 2008 2:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: Re: [ActiveDir] Clean Machines After User Logout
Having played with Steadystate this line from the 2.5 user guide sums it up..
"Group Policy is more effective than using Windows SteadyState for restricting multiple user accounts across numerous computers on a domain network."
It is almost there, but not quite.....
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Laura E. Hunter
Sent: 07 October 2008 20:01
To: ActiveDir@mail.activedir.org
Subject: AD: Re: [ActiveDir] Clean Machines After User Logout
Or "SteadyState", as the MSFT Marketing folks have renamed the most recent iteration thereof. It's pretty much the same functionality that the SCT offered.
On Tue, Oct 7, 2008 at 1:36 PM, Dan Holme <dan.holme@intelliem.com<mailto:dan.holme@intelliem.com>> wrote:
You'll also want to look at Microsoft's Shared Computer Toolkit, designed specifically with schools in mind...
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Paul Glenn
Sent: Tuesday, October 07, 2008 5:04 AM
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: Re: [ActiveDir] Clean Machines After User Logout
We don't use any GPO settings. Rather, on our 1000 or so machines used for
student labs, we started using Deep Freeze. Much easier for us and takes
care of a lot of problems. Our trouble calls have decreased by about 90%
since installing it.
Paul Glenn
University of Kentucky
On Tue, Oct 7, 2008 at 9:33 AM, Darren Mar-Elia <darren@sdmsoftware.com<mailto:darren@sdmsoftware.com>> wrote:
For XP/2003 systems, there is no equivalent to that Vista policy except to use delprof.exe on some kind of scripted basis. You can't simply delete c:\documents and settings to properly clean up profiles since references to them are held in the registry as well. Delprof.exe will work as long as it has permissions and the profile is not in use, so the ideal scenario is to run it when a user is not logged on (e.g. startup script) .
Darren
****
Darren Mar-Elia
CTO & Founder
SDM Software, Inc.
"The Group Policy Experts"
www.sdmsoftware.com<http://www.sdmsoftware.com/>
Automate Group Policy audits and changes with the GPExpert(tm)
Scripting Toolkit http://www.sdmsoftware.com/group_policy_scripting
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Barber, Matt
Sent: Tuesday, October 07, 2008 5:28 AM
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] Clean Machines After User Logout
There is a new Vista only Group Policy setting called "Delete user profiles older than a specified number of days on system restart," but I don't know of one for XP. Unless someone else does, you could probably script it like you were thinking.
Take care,
Matt Barber
Network Analyst / PC Support
Morrisville State College
315-684-6053
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of James Bensley
Sent: Tuesday, October 07, 2008 8:15 AM
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: [ActiveDir] Clean Machines After User Logout
Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp Items" I have decided to post here as I am after something similar. I am finding that after a user has logged onto a machine their profile folder is now located on that machine at C:\Documents and Settings\<username>" as it should be, however; In the case of my class rooms and teaching labs, I have 50+ folders in the Documents and Settings folder for any user that has every logged onto that machine. This includes user that don't exist anymore, so for example after a student completes their course with us and their user account is deleted from our domain, there user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I did see this somewhere in GPEdit, something like "Don't Cache User Credentials" or something but I can't remember where (I can't remember a lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I wondere if perhaps there was a logoff script that could run that would be someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the "Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM" etc).?
Can anyone advise on what would be the best approach to deal with this. A lot of our courses are music based thus a lot of large files are being chucken around. We used mapped network drives so when profiles in the GB's they aren't taking ages to log on but when it comes to editing the audio masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
--
-----------------------
Laura E. Hunter
Architect, Oxford Computer Group (http://www.oxfordcomputergroup.com)
Microsoft MVP, Directory Services (https://mvp.support.microsoft.com/profile/laura)
Author, Active Directory Consultant's Field Guide (http://tinyurl.com/7f8ll)
Author, Active Directory Cookbook, Second Edition (http://tinyurl.com/z7svl)
| | | |
|
|