Discussion:
GP alternative to Deep Freeze
(too old to reply)
jnewby
2010-04-08 16:48:10 UTC
Permalink
I am working with a school district that is migrating from Novell to Server
2008, and we are looking at performing the same functionality of Deep Freeze
through group policies. I saw a policy that appeared to do the same thing,
but I don't remember where it was. Does anyone have any ideas? Essentially,
what Deep Freeze does is prevent any changes made on the computer from being
retained, and when frozen, the system reverts to its original configuration
when rebooted. Thanks!
Florian Frommherz [MVP]
2010-04-09 06:50:28 UTC
Permalink
Howdie!
Post by jnewby
I am working with a school district that is migrating from Novell to Server
2008, and we are looking at performing the same functionality of Deep Freeze
through group policies. I saw a policy that appeared to do the same thing,
but I don't remember where it was. Does anyone have any ideas? Essentially,
what Deep Freeze does is prevent any changes made on the computer from being
retained, and when frozen, the system reverts to its original configuration
when rebooted. Thanks!
With users being "normal users" on the boxes and not "local
administrators", you have good basis to start from. What you can do on
top of that is change the Default User Profile to be mandatory and
non-writable.

Cheers,
Florian
jnewby via WinServerKB.com
2010-04-09 15:00:32 UTC
Permalink
What impact would that have on the users? Basically, the district admin
doesn't want any changes made to be retained when the system is restarted.
Post by Florian Frommherz [MVP]
Howdie!
Post by jnewby
I am working with a school district that is migrating from Novell to Server
2008, and we are looking at performing the same functionality of Deep Freeze
[quoted text clipped - 3 lines]
Post by jnewby
retained, and when frozen, the system reverts to its original configuration
when rebooted. Thanks!
With users being "normal users" on the boxes and not "local
administrators", you have good basis to start from. What you can do on
top of that is change the Default User Profile to be mandatory and
non-writable.
Cheers,
Florian
--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-group-policy/201004/1
Florian Frommherz
2010-04-10 15:12:15 UTC
Permalink
Howdie!
Post by jnewby via WinServerKB.com
What impact would that have on the users? Basically, the district admin
doesn't want any changes made to be retained when the system is restarted.
That greatly depends on what "any changes" means. Are they allowed to
change their desktop wallpapers? No software installation allowed? No
temp data on the boxes? IE cache cleared? You can define pretty much of
all this with Group Policy.

Cheers,
Florian
Andreas Y
2010-04-10 17:55:07 UTC
Permalink
Hello jnewby,

There is no way to achieve what DF does with GP. With GP you can only restrict
functionality and lock the user profile as Florian said. However, DF does
much more. It locks and freezes the whole partition and there is no way you
can achieve this without DF.
Post by jnewby
I am working with a school district that is migrating from Novell to
Server 2008, and we are looking at performing the same functionality
of Deep Freeze through group policies. I saw a policy that appeared
to do the same thing, but I don't remember where it was. Does anyone
have any ideas? Essentially, what Deep Freeze does is prevent any
changes made on the computer from being retained, and when frozen, the
system reverts to its original configuration when rebooted. Thanks!
WakeC
2010-04-12 12:53:53 UTC
Permalink
We used deep freeze for a while. We ditched for the free "Steady State". It
has been more stable and complement GP.
Post by jnewby
I am working with a school district that is migrating from Novell to Server
2008, and we are looking at performing the same functionality of Deep Freeze
through group policies. I saw a policy that appeared to do the same thing,
but I don't remember where it was. Does anyone have any ideas?
Essentially,
what Deep Freeze does is prevent any changes made on the computer from being
retained, and when frozen, the system reverts to its original
configuration
when rebooted. Thanks!
Florian Frommherz
2010-04-12 18:03:25 UTC
Permalink
Howdie!
Post by WakeC
We used deep freeze for a while. We ditched for the free "Steady State". It
has been more stable and complement GP.
Yeah, I second that - SteadyState really is worth a look. It makes
lock-down scenarios easy. I hate the fact, however, that it isn't
(currently) supported on Windows 7. It's Windows XP and Windows Vista
only today :-(

Cheers,
Florian
kj [SBS MVP]
2010-04-13 18:13:56 UTC
Permalink
Post by Florian Frommherz [MVP]
Howdie!
Post by WakeC
We used deep freeze for a while. We ditched for the free "Steady
State". It has been more stable and complement GP.
Yeah, I second that - SteadyState really is worth a look. It makes
lock-down scenarios easy. I hate the fact, however, that it isn't
(currently) supported on Windows 7. It's Windows XP and Windows Vista
only today :-(
Cheers,
Florian
And as I recall, announcements were that no development in those areas
(win7) would occure. <bummed>
--
/kj
Cary Shultz
2010-04-23 15:31:15 UTC
Permalink
I have employed the .adm file to lock down "library" machines at a couple of
our clients.....kiosk would be a better term as these computers are at
Clubs/Organizations for military folk and are open to the public. It works
quite nicely and you sure can not beat the price!
Post by WakeC
We used deep freeze for a while. We ditched for the free "Steady State".
It has been more stable and complement GP.
Post by jnewby
I am working with a school district that is migrating from Novell to Server
2008, and we are looking at performing the same functionality of Deep Freeze
through group policies. I saw a policy that appeared to do the same thing,
but I don't remember where it was. Does anyone have any ideas?
Essentially,
what Deep Freeze does is prevent any changes made on the computer from being
retained, and when frozen, the system reverts to its original
configuration
when rebooted. Thanks!
Marcky king
2011-02-14 21:27:58 UTC
Permalink
Use Rollback Rx. I really don't have the time to argue why it's better, but checkout for yourself http://www.rollbacksoftware.com/#hightlightsContent
Post by jnewby
I am working with a school district that is migrating from Novell to Server
2008, and we are looking at performing the same functionality of Deep Freeze
through group policies. I saw a policy that appeared to do the same thing,
but I do not remember where it was. Does anyone have any ideas? Essentially,
what Deep Freeze does is prevent any changes made on the computer from being
retained, and when frozen, the system reverts to its original configuration
when rebooted. Thanks!
Post by Florian Frommherz [MVP]
Howdie!
With users being "normal users" on the boxes and not "local
administrators", you have good basis to start from. What you can do on
top of that is change the Default User Profile to be mandatory and
non-writable.
Cheers,
Florian
Post by jnewby via WinServerKB.com
What impact would that have on the users? Basically, the district admin
does not want any changes made to be retained when the system is restarted.
--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-group-policy/201004/1
Post by Florian Frommherz [MVP]
Howdie!
That greatly depends on what "any changes" means. Are they allowed to
change their desktop wallpapers? No software installation allowed? No
temp data on the boxes? IE cache cleared? You can define pretty much of
all this with Group Policy.
Cheers,
Florian
Post by Andreas Y
Hello jnewby,
There is no way to achieve what DF does with GP. With GP you can only restrict
functionality and lock the user profile as Florian said. However, DF does
much more. It locks and freezes the whole partition and there is no way you
can achieve this without DF.
Post by WakeC
We used deep freeze for a while. We ditched for the free "Steady State". It
has been more stable and complement GP.
Post by Florian Frommherz [MVP]
Howdie!
Yeah, I second that - SteadyState really is worth a look. It makes
lock-down scenarios easy. I hate the fact, however, that it is not
(currently) supported on Windows 7. it is Windows XP and Windows Vista
only today :-(
Cheers,
Florian
Post by kj [SBS MVP]
And as I recall, announcements were that no development in those areas
(win7) would occure. <bummed>
--
/kj
Post by Cary Shultz
I have employed the .adm file to lock down "library" machines at a couple of
our clients.....kiosk would be a better term as these computers are at
Clubs/Organizations for military folk and are open to the public. It works
quite nicely and you sure can not beat the price!
Submitted via EggHeadCafe
Excel Generate High Quality RoadMaps
http://www.eggheadcafe.com/tutorials/aspnet/3310004f-e1ae-45a7-9bea-7b2b970d1230/excel-generate-high-quality-roadmaps.aspx
Loading...