I want to set up a machine so no one can save any to the hard drive.

Running windows xp and I want to setup a machine so people can't save anything to the hard drive.
we don't use Active Dir. so can it be done some other way?
cdb424ttmAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Delphineous SilverwingGood Ol' GeekCommented:
You need somewhere for temporary files and such to be written.  Without it Windows XP will not run as needed.

You can use group policy (locally) to prevent the C: Drive from showing in Windows Explorer and block Save As dialogue boxes
0
lamaslanyCommented:
You could use Windows SteadyState (http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx)

This should assist you in locking down a non-domain connected machine and ensure that by the simple expediency of a reboot any changes they did manage to make are lost and the clean state is restored.
0
dnudelmanCommented:
In case you want people to be able do use the computer normaly, but when the machine is reset it goes back to the original state, try deepfreeze.
http://www.faronics.com/html/deepfreeze.asp
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

cdb424ttmAuthor Commented:
okay what would the steps to do that be?
0
lamaslanyCommented:
@cdb424ttm:  To whom is your question?

If to me then I'd suggest looking at the Windows SteadyState site as it should provide everything you need.  In addition to a nice GUI to make the file and registry changes easy it also provides the 'reset' functionality of deepfreeze.
0
lamaslanyCommented:
PS:  You might want to watch the 'See how easy it is to use' demo on the SteadyState page
0
cdb424ttmAuthor Commented:
sorry, that was a question to Delphineous:
0
lamaslanyCommented:
Run the group policy editor:

  Click Start > Run  
  Type gpedit.msc and click OK


Set the policy setting:

Local ComputerPolicy
> User Configuration
>> Administrative Templates
>>> Windows Components
>>>> Windows Explorer

Enable the polocy setting 'Hide these specified drives in My Computer' and choose which drives to restrict from the dropdown box.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lamaslanyCommented:
I would strongly recommend SteadyState though if you are unfamiliar with desktop lockdowns as SteadyState can make the above policy change for you.

Windows SteadyState:
http://www.microsoft.com/downloads/details.aspx?FamilyId=D077A52D-93E9-4B02-BD95-9D770CCDB431&displaylang=en

Handbook:
http://www.microsoft.com/downloads/details.aspx?FamilyID=d173452a-ce26-4f26-9c30-982f705f84d2&DisplayLang=en
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.