none
Windows SteadyState FAQ

All replies

  • Audience

    IT administrators

    Symptoms

    You cannot restart the computer after restoring to a point before Windows Disk Protection was turned on.

    Cause

    If System Restore is set to a time before Windows Disk Protection was turned on, and Windows Disk Protection is set to Retain All Changes Temporarily, you will be unable to restart the computer. The only recovery option is to reinstall the operating system.

    Workaround

    Turn off Windows Disk Protection before you perform a system restore.

    To turn off Windows Disk Protection

    1.      Log on as the SteadyState administrator.

    2.      In the Windows SteadyState main dialog box, under Global Computer Settings, click Protect the Hard Disk.

    3.      In the Protect the Hard Disk dialog box, select Off, and then click OK.

    4.      Restart the computer.

     

    Applies To the Following Operating Systems

    Windows Vista

    Windows XP

    Monday, December 29, 2008 11:52 AM
    Moderator
  • Audience

    Windows SteadyState administrators

    Symptoms

    By default, Windows SteadyState contains an option that restricts shared computer users (SCUs) from accessing the registry directly. This setting might prevent the user from saving changes to some settings in the Internet Options dialog box, such as:

             General tab: Home Page

             Security tab: Security level for this zone, and Enable Protected Mode

             Privacy tab: Sites, Advanced, and Default

             Content tab: AutoComplete        

             Programs tab: Default web Browser

             Advanced tab: Advanced Internet Explorer settings

    Cause

    The Prevent changes to Internet Explorer registry settings check box is selected in Windows SteadyState.

    When Windows SteadyState is set to prevent changes to the registry, it restricts permission to change the following subkeys:

     

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings 

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar 

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet settings\Cache

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced  

    Warning: The system registry contains complex system information that is vital to your computer, and an incorrect change to your computer's registry could render your computer inoperable.

    Resolution

    To resolve this issue, remove the following Internet Explorer registry setting restrictions in Windows SteadyState.

    Note: When these check boxes are cleared, it allows the user to save changes to some settings in the Internet Options dialog box.

     

    To remove the Internet Explorer registry setting restrictions in Windows SteadyState:

     

    1.    Log on as a Windows SteadyState administrator.

    2.    In the Windows SteadyState main dialog box, under User Settings, select the user profile that you want to change.

    3.    Click the Feature Restrictions tab.

    4.    Under Internet Explorer restrictions, clear the Prevent changes to Internet Explorer registry settings check box.

    5.    Update the desired registry settings.

    For more information, see Registry Editor Help.

    After you make the desired changes to the Internet Explorer registry settings, we recommend that you turn these restrictions on again.

     

    Applies To the Following Operating Systems

    Windows XP

    Windows Vista

    Monday, December 29, 2008 11:55 AM
    Moderator
  • Audience

    Windows SteadyState administrators

    Symptoms

    All user accounts are disabled or the computer continuously restarts.

    Cause

    Windows Disk Protection encounters an error and cannot start correctly, or Windows SteadyState disables all users when it is not performing Windows updates.

     

    Workaround

    To correct the problem, start Windows in safe mode, and log on as an administrator. Then you can use Windows Disk Protection Recovery to repair Windows Disk Protection.

          

    To log on as an administrator and repair Windows Disk Protection:

    Restart the computer in safe mode. To restart in safe mode, do one of the following:

     In Windows Vista:

    1.    Click the Start button, click the arrow next to the Lock button, and then click Restart.

    2.    Do one of the following:

       If your computers have a single operating system installed, press and hold the F8 key as your computer restarts.

    You need to press F8 before the Windows logo appears. If the Windows logo appears, try again by waiting until the Windows logon prompt appears, then shut down and restart your computer.

       If your computer has more than one operating system, use the arrow keys to highlight the operating system you want to start in safe mode, then press F8.

    3.    On the Advanced Boot Options screen, use the arrow keys to highlight the standard safe mode option, then press ENTER.

    For more information about options, see Windows Vista Help and Support.

    4.     Log on to your computer with a user account that has administrator rights.

    When your computer is in safe mode, you'll see the words Safe Mode in the corners of the display.

    5.    Open Windows SteadyState.

    6.    In the Windows Disk Protection Error dialog box, click Create a new cache file, then click OK.

    7.    To exit safe mode, restart your computer and let Windows start normally.

    In Windows XP:

    1.    Click Start, click Shut Down, click Restart under What do you want the computer to do?  and click OK.

    2.    When you see the message Please select the operating system to start, press F8.

    3.    Use the arrow keys to highlight the appropriate safe mode option, and then press ENTER.

    4.    If you have a dual-boot or multiple-boot system, choose the installation that you need to access by using the arrow keys, then press ENTER.

    5.    Log on as an administrator.

    6.    In the Windows Disk Protection Error dialog box, click Create a new cache file, then click OK.

     

    Applies To the Following Operating Systems

    Windows XP

    Windows Vista

     

    Monday, December 29, 2008 11:58 AM
    Moderator
  • Audience

    Windows SteadyState administrators

    Symptoms

    Certain types of files, such as Windows loader and boot driver files, are not replaced or updated when Windows Disk Protection is set to retain changes temporarily.

    Workaround

    In  Windows SteadyState, set Windows Disk Protection to retain all user changes permanently.

    To set Windows SteadyState Windows Disk Protection:

    1.    In Windows SteadyState, click Protect the Hard Disk.

    2.    Click Retain all changes permanently, and then click OK.

    Applies To the Following Operating Systems

    Windows XP

    Windows Vista

    Monday, December 29, 2008 12:01 PM
    Moderator
  • Audience

    IT administrators

    Symptoms

    If you try to shrink/expand the size of an operating system volume when Windows Disk Protection is turned on, an unexpected error occurs and the operation fails.

    Cause

    Windows Disk Protection does not support shrinking or expanding operating system volumes.

     

    Workaround

    Turn Windows Disk Protection off, and then shrink/expand the size of the operating system volume.

     

    To turn off Windows Disk Protection

    1.      Log on as the Windows SteadyState administrator.

    2.      In the Windows SteadyState main dialog box, under Global Computer Settings, click Protect the Hard Disk.

    3.      In the Protect the Hard Disk dialog box, select Off, then click OK.

    4.      Restart the computer.

     

    Windows Disk Protection will now be turned off so you can shrink/expand the size of the operating system volume. For more information about shrinking/expanding the size of the operating system volume, see Help and Support for your operating system. To protect the shared computer, after shrinking/expanding the size of the operating system volume, turn Windows Disk Protection back on.

    Applies To the Following Operating Systems

    Windows Vista

    Monday, December 29, 2008 12:02 PM
    Moderator
  • Audience

    Windows SteadyState administrators

    Symptoms

    Windows SteadyState uses the Internet to notify Microsoft that Windows SteadyState was installed.

    Cause

    By design.

    Resolution

    To prevent Windows SteadyState from attempting to contact Microsoft, update your registry settings as follows:

     

    To update registry settings:

    1.    Log on to the shared computer as an administrator.

    2.    After finished downloading SteadyState and initiating the installation, disconnect the Internet connection, then complete the installation Windows Steady State.

    3.    If Windows Disk Protection is turned on, make sure that the Retain all changes permanently option is selected. For more information on Windows Disk Protection, see Help for Windows SteadyState.

    4.    Click Start, click Run, type regedit, and then click OK.

    5.    In the Registry Editor, navigate to HKEY_LOCAL_MACHINE \Software\Microsoft\Shared Computer Toolkit.

    6.    Click WGAReport.

    7.    On the Edit menu, click Delete.

    8.    On the Edit menu, click New, and then click DWORD Value.

    9.    Type WGAReportHasSent.

    10.  Set the value to 1, and then click Ok.

    11.  Restart the computer.

    12.  Reconnect the computer to the Internet.

    The computer no longer attempts to contact Microsoft. You can log on to the computer as an administrator and update Windows Disk Protection settings in Windows SteadyState.

     

    Applies To the Following Operating Systems

    Windows Vista

    Windows XP

     

    Monday, December 29, 2008 12:04 PM
    Moderator
  • How can I install Flash ActiveX controls on computers with Windows SteadyState?    

    Audience

    Windows SteadyState administrators

    Question

    How can I install Flash ActiveX controls on computers with Windows SteadyState?

    Answer

    1. Install and configure needed ActiveX controls or plug-ins from an administrator account.

    2. Configure Windows SteadyState restrictions. Uncheck “Third Party Extension Buttons” restriction option:

     

        a. Start Windows SteadyState.

        b. Click the user account -> Feature Restrictions.

        c. Under Internet Explorer Restrictions ->Toolbar Options, make sure “Third Party Extension Buttons” is not selected.

     

    Monday, December 29, 2008 12:06 PM
    Moderator
  • Audience

    Windows SteadyState administrators

    Question

    To protect against update scripts hanging, Windows SteadyState terminates scripts that take longer than 30 minutes to run.  This default timeout value can be changed by modifying the following registry value.

    Answer

    For example, we can modify the registry entry to 90. You can also change to other value that suites your environment:

     

    [HKLM\System\CurrentControlSet\Services\Windows SteadyState\Parameters]

    "UpdateScriptTimeLimitMinutes"=dword:90

     

    Monday, December 29, 2008 12:11 PM
    Moderator
  •  Audience

    IT Administrators

    Question

    How do I find the command line switches necessary for remote management of Disk Protection?

    Answer

    To enabled WDP, run the following command from an administrator account:

     

    "C:\Program files\Windows SteadyState\sctui.exe" /EnableWDPAndReboot

     

    To disable WDP:

     

    "C:\Program files\Windows SteadyState\sctui.exe" /DisableWDPAndReboot

     

    You can create a batch file with the command and then deploy it to your computers. Also, all of these functions are exposed through the WMI-based WDP API.  See http://support.microsoft.com/kb/938335 for examples.

     

    Monday, December 29, 2008 12:13 PM
    Moderator
  •  Audience

    Windows SteadyState administrators

    Symptoms

    After installing Windows SteadyState, Disk Defragmenter does not work.

    Answer

    This behavior is by design.  The disk does not fragment when Windows Disk Protection is enabled because changes are discarded at each reboot.  Windows Disk Protection is also sensitive to the physical layout of files on the disk.  Disk utilities which directly manipulate the structure and layout of files on the disk can corrupt the disk when Windows Disk Protection is enabled.

     

    Monday, December 29, 2008 12:15 PM
    Moderator
  • Will a restart clear the virus from the PC, and leave a clean PC for the next user when Windows Disk Protection is turned on?  

     Audience

    Windows SteadyState administrators

    Question

    Will a restart clear the virus from the PC, and leave a clean PC for the next user when Windows Disk Protection is turned on?

    Answer

    Given the breadth of viruses in the wild, there's no single answer to that question.

     

    If you have Windows Disk Protection enabled, then all changes made to the boot volume (that is, the volume that contains the Windows directory--typically CSmile will be discarded when the system boots.  WDP will not discard changes made to other volumes (other partitions on the same disk or separate disks).  A virus could also hide in the boot sector or MBR of the hard disk as those areas are not part of the boot volume.  The virus would have to have administrator access in order to write to the boot sector or MBR, however.

     

    Also, for security consideration, we highly recommend using virus and spyware protection programs in conjunction with Windows SteadyState.

     

    Monday, December 29, 2008 12:16 PM
    Moderator
  •  Audience

    Windows SteadyState administrators

    Question

    Which restriction setting needs to be deselected so that applications running in the system tray appear?

    Answer

    This restriction is under User Settings -> Windows Restrictions -> General Restrictions -> Prevent access to Windows Explorer features: Folder Options, Customize Toolbar, and the Notification Area. You can adjust this setting to show application icons in the system tray.

     

    Monday, December 29, 2008 12:17 PM
    Moderator
  •  Audience

    Windows SteadyState administrators

    IT administrators

    Symptoms

    In the "User Settings" section of Windows SteadyState console, only local user accounts are detected. You cannot add a domain user account there.

    Answer

    Windows SteadyState does not detect domain accounts. To configure restrictions for domain based user accounts, you can use the Windows SteadyState ADM file (SCTSettings. Adm) from Windows SteadyState installation folders to extend a domain based GPO and configure the restriction settings there.

     

    Monday, December 29, 2008 12:18 PM
    Moderator
  •  Audience

    Windows SteadyState administrators

    Symptoms

    After removing Windows SteadyState, some programs are still blocked.

    Answer

    We need to remove restrictions before removing Windows SteadyState.  Remember to check the following options in Windows SteadyState console before removing it.

         a. Review and disable any unwanted restrictions in "Global Computer Settings", "Set Computer Restrictions".

         b. For each locked user, select the user and unlock the profile.

         c. Cancel all the restrictions in each user.

     

    Monday, December 29, 2008 12:19 PM
    Moderator
  • How can I safely remove USB hardware on computers with Windows SteadyState?  

     Audience

    Windows SteadyState administrators

    Question

    How can I safely remove USB hardware on computers with Windows SteadyState?

    Answer

     

    Method 1: If right-click on menu is disabled, we can also use left click on USB icon on the system tray.

     

    Method 2: Create a desktop shortcut

     

    1.       Create a shortcut on desktop.

    2.       Use "%SystemRoot%\System32\RUNDLL32.EXE shell32.dll,Control_RunDLL hotplug.dll" (without quotation mark) as target.

    3.       Double click the shortcut to remove USB device.

     

    Monday, December 29, 2008 12:20 PM
    Moderator
  • Does Automatic Updates (AU) still work while WDP is enabled and Schedule Software Updates in Windows SteadyState is set to “off”?  

     Audience

    Windows SteadyState administrators

    Question

    Does Automatic Updates (AU) still work while WDP is enabled and Scheduled Software Updates in Steady State is set to off?

    Answer

    When WDP is enabled, it automatically enables SteadyState updates.  When SteadyState updates are enabled, we disable Windows’ own Automatic Updates. 

    We recommend you enable the Schedule Software Updates function in Windows SteadyState, if you need the Automatic Updates feature.

     

    Monday, December 29, 2008 12:22 PM
    Moderator
  • Can I turn off the message about saving files that the user gets when WDP is turned on?  

    Audience

    Windows SteadyState administrators

    Question

    Can I turn off the message about saving files that the user gets when WDP is turned on?

    Answer

    This message comes from bubble.exe.  You can choose a method below to disable the message:

     

    (Note: That this is not recommended.  Bubble.exe is responsible for alerting users that the WDP cache is filling up and the system will reboot soon.  If the user is an admin and WDP is in discard mode, bubble.exe is also responsible for showing the message at shutdown/restart/logoff asking if the admin wants to commit to current changes. )

     

    Method 1: You can remove bubble.exe from HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run . If you follow this method, it’s recommended to ADD bubble.exe to the admin’s HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run key so that you still receive the shutdown/restart/logoff commit dialog.

     

    Method 2: Use SteadyState administrator to log on, choose a restricted account and add bubble.exe  to blocked program list.

     

    Monday, December 29, 2008 12:23 PM
    Moderator
  • I created this shortcut on one of our Public Access Computers here in the library. It's part of out AD domain. But when I click on it, I get a message "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."

    The shortcut works when I'm logged in as Local Administrator and as Domain Administrator but not as User.

    We also are running SteadyState but I don't see any setting there to allow this shortcut to run,

    I set to to ask to run with other credentials, but the patron would have to get a librarian to come over to enter the local password.

    Any suggestions?

     

    Martin Cripps

    Automation

    Cape May County Library

    Tuesday, August 02, 2011 2:52 PM