The Microsoft Shared Computer Toolkit for Windows XP

The Microsoft Shared Computer Toolkit for Windows XP Chuck Elliott, MS, MCP Director, Customer Services Marshall University Computing Services E-mail: celliott@marshall. edu Phone: 304 -696 -6392 Download slides at http: //users. marshall. edu/~celliott/sharedtoolkit 2006. ppt

What is it? • The Microsoft Shared Computer Toolkit is a set of software tools and documentation that helps make it easy to set up, safeguard, and manage shared computers running Windows XP. Specifically, it helps – restrict local user profiles – defend shared computers against unauthorized changes to the hard disk – enhance the user experience - …according to Microsoft! • The Shared Computer Toolkit is a free add-on to Windows XP 2

Who is it designed for? • The Shared Computer Toolkit is designed for people who manage shared computers – – – in school computer labs public libraries community technology centers Internet cafes other public places • You do not need to be an IT professional to use the toolkit • The toolkit does not require a server infrastructure 3

Pre-Requisites • For the Shared Computer Toolkit – Windows XP (Home, Professional, Media Center Edition, or Tablet PC) – Service Pack 2 – NTFS – Windows Genuine Advantage Validation – User Profile Hive Cleanup Utility (free download and intelligent prompting/installation) • For Windows Disk Protection – At least 2 GB of unallocated or free disk space • beware, some materials specify only 1 or 1. 5 GB needed • Keep in mind, the SCT can only be used by the Admin account under which it was installed 4

Microsoft’s Overview • Let’s look at Microsoft’s Overview 5

Primary Features • • • Windows Disk Protection User Restrictions Profile Manager Accessibility Command-Line tools Handbook 6

Windows Disk Protection • Keeps track of the changes that users or programs make to the Windows partition (typically the C drive), including: – changes made by viruses – spyware – or users who tamper with system files • When the computer restarts – changes are cleared – the hard disk returns to its original state • Some changes need to be saved permanently – Windows Disk Protection lets you schedule critical updates, antivirus updates, and other updates you want to save – Windows Disk Protection also gives you the flexibility to save other changes whenever you choose. 7

User Restrictions • Allow anyone to create restricted local user profiles without having to use such advanced utilities as Group Policy or the Registry Editor. With User Restrictions, you can: – Create a custom desktop for different categories of users – Restrict students or patrons from accessing system resources such as Control Panel, the command prompt, or the Registry Editor. – Prevent or allow access to any data drive on the computer. – Prevent students or patrons from running unauthorized software – Lock a user profile so the profile is refreshed each time a new student or patron logs on. • Locked profiles refresh Internet history, passwords, desktop settings, and other personal information from one session to the next. – Set session timers that force a log off after a pre-determined period of time or after a specified amount of idle time. 8

Profile Manager • Allows you to create an account with a "persistent" user profile on the D drive if the C drive is protected by Windows Disk Protection – For example, a teacher who has a persistent user profile could save documents and not have them cleared by Windows Disk Protection – You can also delete the secured user profiles that you have locked with the User Restrictions tool 9

Accessibility • Makes it possible for users to enable and disable all of the Windows Accessibility features in one easy-to-use interface – – on-screen keyboard large fonts high contrast screen magnifier • You can also create user profiles that have accessibility features enabled by default 10

Command-Line tools • For advanced tasks: – Configure a program, such as Microsoft Internet Explorer, to restart automatically when closed – Configure Windows to log on automatically with a specific account – Remove administrative accounts from the Windows Welcome screen – Disable accounts that should not be available – Configure the computer to sleep (to conserve energy) and then wake to perform critical updates 11

Handbook • Available immediately on installation • Includes step-by-step instructions for properly configuring shared computers and additional guidance for making shared computers more secure • Also available for download here 12

Demo • Will demonstrate – Review of the Getting Started page – User interface for a highly restricted user – How to shutdown/restart and/or log on as admin 13

Improvements Needed • Some inconsistencies in documentation • The toolkit will not automatically correct the time during daylight savings • Critical Updates process causes “Your account is disabled” message; more intelligent error message needed • Integrate support for more anti-virus vendors • Fix Disk-read errors appearing when USB drive remains attached and WDP is saving changes 14

Beware • To log-on as a different user, Ctrl-Alt-Del twice at the welcome screen • Security can easily be thwarted if the computer’s BIOS settings allow booting from devices other than the hard drive (USB, floppies, CDs and DVDs) 15

Online Resources • Microsoft’s Shared Computer Toolkit Home Page – http: //www. microsoft. com/windowsxp/sharedaccess/default. mspx • Microsoft Newsgroup Discussions – http: //www. microsoft. com/communities/newsgroups/list/enus/default. aspx? dg=microsoft. public. windows. sharedaccess • Microsoft’s SCT Introductory Webcast – https: //www 107. livemeeting. com/cc/lmevents/view? id=msft 06290 5 st 6 pm&pw=WTD 654 • Shared Computer Toolkit Users Group (SCTUG) – http: //groups. msn. com/Shared. Computer. Toolkit/ • Download Handbook in PDF – http: //download. microsoft. com/download/e/4/4/e 444 f 831 -6 c 1 c 44 e 5 -927 f-00066 a 3428 c 5/Shared. Computer. Toolkit. Handbook. pdf 16

Q&A • Thank You!! • Questions? • For more information send e-mail to: celliott@marshall. edu 17