Antivirus and AD in Windows SteadyState RRS feed

  • Question

  • Hello, im working in a company and we have a doubt about using Windows SteadyState. We have a coorporative antivirus so we are wondering if we install SteadyState on all the company computers if we will be able to update the antivirus virus definitions.

    In other way we are wondering if we could import or export users from an Active Directory. I have tried SteadyState in one company computer (where i have logged with my Active Directory account) and when i go to export my account it say it's empty... i can't see any users.

    Well we hope someone could help us.

    Thanks a lot
    Friday, May 8, 2009 6:12 AM


  • Hi Modio, thanks for the post. First of all, I'd like to quote some information in Windows SteadyState handbook on how to use it under AD environment:

    Using Windows SteadyState with Active Directory and Network Domains

    The Active Directory® directory service offers significant benefits for shared computers on a network. Active Directory gives network users controlled access to resources anywhere on the network by using a single set of credentials. It also provides network administrators with an intuitive, hierarchical view of the network, and a single point of administration for all network objects.

    Active Directory provides an environment for centrally managing user accounts that require access to network resources.  In this environment, users must log on with the same credentials on multiple computers, as many educational institutions require. For these reasons, Windows SteadyState has been designed to work as favorably in domain environments as it does for workgroup computers.

    Please note that most of the settings and restrictions available in Windows SteadyState are also available through the Group Policy template (SCTSettings.adm) provided with Windows SteadyState. When considering the installation of Windows SteadyState on shared computers that are connected to a domain network, Group Policy is more effective than using Windows SteadyState for restricting multiple user accounts across numerous computers on a domain network.


    For detailed information, you can check page 58 on the handbook which you can download via the following link:




    To answer your questions:


    1.       If you enable WDP on the clients, you may need to create update script for antivirus programs and virus definition update.

    2.       Windows SteadyState does not detect domain account so no domain account is available in SteadyState -> User Settings.  


    Hope this helps!

    Sean Zhu - MSFT
    • Marked as answer by Sean Zhu - Thursday, May 14, 2009 7:13 AM
    Monday, May 11, 2009 7:29 AM