The Microsoft Shared Computer toolkit is a suite of applications that can be used on a standalone PC in an environment which is open to public access.  The tool kit allows an administrator to apply policies onto the computer so that users cannot change or break a computer system.  One of the main features is called Windows Disk Protection and can be used to restore a computer back to a preconfigured state each time the computer is restarted.

The toolkit is freely downloadable from the Microsoft web site and can be used with Windows XP that has Service Pack 2 installed.  It is best to install the toolkit on a clean machine or a machine that he will be built for a specific task.  The toolkit requires the computer to have undergone Windows Validation checks as well as having another application called the User Hive Profile Cleanup service installed.

Both applications can be downloaded from the from the www.microsoft.com/downloads page, or by using the product links at the end of this article.

The tool kit is broken down into three main areas;

• Windows Disk Protection
• User Profiles
• User Restrictions

Windows Disk Protection

This feature allows the administrator to set aside a portion of the hard drive for restore functions.  The idea behind Windows Disk Protection is that it will prevent both minor and major changes to the operating system.  Changes that are made to a protected system will be discarded when the computer reboots. Windows Disk Protection has a graphical user interface that allows a system administrator to configure the protection options.

The interface has options that will allow process is like Windows Update and AntiVirus updates to be installed on to the computer and bypass the windows disk protection feature.

The interface also allows the administrator to temporarily disable the disk protection so that new applications can be installed or essential changes to be made. These changes are then saved into the Windows partition and are protected by the disk protection feature.

Windows Disk Protection can only protect the C. drive or primary partition of the operating system all other drives are excluded from Windows Disk Protection.

User profiles

The user profile tool allows an administrator to create a new profile or delete a profile for a user account on the computer. The tool allows administrators to move the profile to a new partition or separate hard drive so that the profile can be excluded from the Windows Disk Protection feature.

User restrictions

This tool has a graphical user interface that allows an administrator to select a user account on the computer and customise settings. The tool has settings that control basic features like removing the Run option, hiding the control panel, and preventing access to specified drive letters on a computer and much more.

Enhanced Windows Security

All of these tools work with existing windows control panel applets to enhance the Windows XP interface and provide a further restricted standalone computer.

Although the tool was designed to work on standalone computers, Microsoft have provided an Active Directory group policy template to allow work network administrators to control the extra features offered by the shared computers toolkit.  Using the group policy templates and the shared computer toolkit on a networked workstation can reduce number of problems that may crop up over time on a Windows XP computer.

There are a number of uses that the toolkit offers network administrators such as the ability for workstations to self repair when they are restarted and to remain protected against changes that the casual user might make.

Allows a machine to be used to install and test software that is going to be deployed on a network.  This feature is especially useful when making MSI packages for deployment using group policy.

The tools can also be used to allow students who are developing applications as part of a course to test the applications that may potentially cause damage to the operating system. Any changes that are made are automatically undone.

Windows disk protection can also offer some protection against a virus attack, by destroying the virus on the next reboot.

You can find out more about the Microsoft shed computer toolkit by using the links at the bottom of this page. The Microsoft site has lots of ideas, FAQ’s and documentation but I’m sure you’ll find useful when deciding to deploy the toolkit to computers and standalone environment or on a network.

LINKS

• User Profile Hive CleanUp Service
• Microsoft Shared Computer Toolkit Homepage