Although Windows SteadyState has been available for several months, it was brought to the attention of the computer user community by Security Now! Episode 129. Designed primarily to replace Microsoft's Shared Computer Toolkit and make managing shared access computers much easier, Microsoft's Windows SteadyState has a component called Windows Disk Protection that should prove to be a boon to the security oriented user. Removing unauthorized or unwanted system changes and removing user files becomes as simple as rebooting the computer with this tool running in the background.
The link to Security Now provides access to an mp3 file of the net cast, which gives a good overview of Windows SteadyState. You will also find a link to a page containing screen shots of the application there or simply click this link: Screen Shots. Along with screen shots you will find links to Microsoft's Shared Access web page, which provides information and links to download Windows SteadyState.
Windows SteadyState is for the Windows XP operating system that has Service Pack 2. You will find it also requires that your computer is using the NTFS file system. Windows 9X machines that have been upgraded to Windows XP without changing from FAT32 to NTFS will need to do so in order to use this package. It has been reported that older machines will boot rather slowly with Windows SteadyState running. At this point, a final version for Windows Vista has not been released but Vista users can find and download the 2.5 beta version if you can't wait for the final version.
Once we have had the chance to examine and test Windows SteadyState ourselves, this article will be expanded to provide pointers and other information. Until then the Microsoft Shared Access page provides links to resources, which include a users handbook, a Windows SteadyState community, which is a question and answer type forum and the usual assortment of FAQs, guides and trouble shooters.
Added 02/06/2008
As promised, information will be added as we investigate the Windows SteadyState tool. The users handbook, that was previously mentioned, is well worth the download even for those that are in the habit of "opening the box and tossing aside assembly instructions".
On Microsoft's Shared Access
web page left click the vertical tab labeled "Resources". After looking over the resources available
on this page, focus on the heading "Windows SteadyState resources" and left click "Handbook".
This link takes you to the Microsoft download area where you will find it available
as a 530 Kb. pdf file or as a 4.3 Mb. xps file.
Due to its size, the pdf format may prove to be the download of choice for dial up
Internet users who already have Adobe Reader installed. There are third party pdf readers
available, which you may want to try rather than downloading the 20 some MB. Adobe Reader
installation file. By the way, even the update file for Adobe Reader 8.0 is over 10 MB.
The xps file format, though larger than the pdf, can be viewed by Windows Vista users
without downloading a reader, as can Windows XP users who have the .Net Framework 3.0
and Internet Explorer 7.0 installed. A stand alone xps viewer is available from Microsoft
by searching for the XPS Essentials Pack. For 32 bit systems, this is a 1.9 MB download
for the Vista version or 7.9 MBs for XP. Versions are slightly larger for 64 bit operating
systems but are available.
If you haven't had your fill of downloading, the Windows SteadyState install file will provide you with an additional 3.37 Mb download. This download does require WGA validation prior to receiving the file. Be warned, there are several steps that need to be taken before installing Windows SteadyState. Also, if you look through the handbook you will find that there are some minimum requirements that haven't been mentioned on this page.
Recommended Requirements
- Processor - 300 Mhz. or higher
- RAM - 128 Mb. or higher
-
Hard disk - 1.5 Gb. free space
without Windows Disk Protection -
Hard disk - 4 Gb. free space
with Windows Disk Protection - File System - NTFS
- Windows Scripting must be working
-
Windows Management Instrumentation (WMI)
must be working - Administrator Level Access
Pre-Installation Tasks
-
Uninstall Microsoft Shared Computer Toolkit
for Windows XP - Defragment system drives
- Configure display settings
-
Remove any software that should not be
made available to any user profile. - Clear the Internet History folder
- Delete files in My Documents folder.
-
Download and install the latest critical updates
from the Windows Update Web site - Download and install up-to-date antivirus software
-
Scan for viruses, unwanted software,
and malicious software - Set the Administrator password
-
Install all of the features, services, and programs
that you want to make available to your users
Although the handbook doesn't mention it until much later, you might want to provide a partition on the drive or perhaps another physical hard drive on which to store user files. With Windows Disk Protection in operation, users will be unable to save new files to the system drive on which user account folders are stored by default. Another consideration is that some programs may not work well with the programs data files stored on a partition other than the active one particularly in a networked environment.
Microsoft, Microsoft Office, Windows, Windows XP and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other names have been included in the above text that are trademarks of the respective companies.