SteadyState on Network RRS feed

  • Question

  • Where can I find detailed instructions on how to use SteadyState on a Network environment using Active Directory?  I can't seem to locate in this forum or in the handbook.  I'm looking to only lock down 1 XP Pro machine from everything (inclulding Internet) except 1 program.

    Any help would be great.


    Friday, April 17, 2009 3:30 PM


  • Thanks for the post. I'd like to quote the following paragraph regarding how to use Windows SteadyState under AD environment.


    Windows SteadyState includes a Group Policy template called SCTSettings.adm in the ADM folder commonly located in C:\Program Files\Windows SteadyState. This template reproduces most of the settings included in Windows SteadyState Feature Restrictions tab of the User Settings dialog box, and can be used to deploy restrictions to users who are members of an Active Directory domain.

    Group Policy for a domain can be configured either with the Group Policy Management Console, an add-in tool available for download from Microsoft, or by using the Group Policy Editor built into Active Directory Users and Computers. By adding the SCTSettings.adm template into these tools, you gain access to account restrictions and settings that are appropriate for user accounts on shared computers.

    The SCTSettings.adm Group Policy template included with Windows SteadyState also includes the capability to set idle and mandatory logoff timers, if Windows SteadyState is installed on your computers.

    It is important that you apply these settings only to specific user accounts, so as not to restrict legitimate administrative user accounts on any computers.

       To use Active Directory Users and Computers to manage Windows SteadyState restrictions

    1.    Start Active Directory Users and Computers on a computer running Microsoft Windows Serverä 2003 by clicking Start, and then clicking All Programs.

    2.    Click Administrative Tools. In Active Directory Users and Computers, right-click the organizational unit (OU) for which you want to configure policy, and then click Properties.

    3.    On the Group Policy tab, select the policy you want to modify, and then click Edit.

    4.    Expand User Configuration, right-click the Administrative Templates folder, and then click Add/Remove Templates.

    5.    In the Add/Remove Templates dialog box, click Add and then browse to the location of the SCTSettings.adm template, commonly located in C:\Program Files\Windows SteadyState\ADM.

    6.    Browse the settings in the All Windows SteadyState Restrictions folder and note their similarity to the program and user restrictions settings in Windows SteadyState. Descriptions are given for each setting.

    7.    Make any restrictions changes that you want and then exit Group Policy Editor.


    For detailed information, you can check page 63 on SteadyState handbook. Hope this helps!

    Sean Zhu - MSFT
    • Marked as answer by Sean Zhu - Monday, April 27, 2009 1:46 AM
    Monday, April 20, 2009 7:41 AM