WebJunction

Yes, this has come up before. I think the other setting you need to uncheck is “Prevent users from creating folders and files in drive c:\”.

Either that or else leave the above setting on, and unhide the C: drive. I can never remember the correct combination to make this work correctly.

Dale

Yes, if you unhide the C: drive, users will be able to browse the hard drive. I wouldn't want that either, though one thing to remember is that if the Windows Disk Protection is on, they are still unable to make any permanent changes.

But I don't really know the answer from here - I don't think what you are seeing is the way it should be working, so I think there is an error somewhere. I see that you have asked this on the MS SS forum, and while I know responses aren't always quick there, I think that is your best bet for getting at a real solution. One thing I did notice, is that you are trying to save from Word. Also try saving by downloading a file from the internet - does that act the same? I have a vague memory of hearing of an issue like this with the original version of this program, where the problem saving was specific to Word.

In the meantime, if you might also try creating a new public user account with a different name, and using the same original settings, and see if in that account it still prevents you from saving to the desktop.

Yes, I found an old set of instructions we had posted on the old version (called the MS Shared Computer Toolkit), and the issue of saving from Office when you chose to restrict access to C:. If SteadyState is working the same, you are supposed to be able to save from Office if you have the C: drive hidden, and uncheck "Prevent users from creating folders and files in drive C:\" under the global computer settings.

I think you have already done this, so hopefully you will get a response with the update about it happening only with Office.

Dale

Right, that article was originally posted on WJ, and was the one I was referring to. I don't have an installed version, so this is mostly from the <a href="../do/DisplayContent?id=17759">current set of instructions</a> on this site.

"Prevent users from creating folders and files on drive C:\" us a Computer Restrictions setting, so that should be unchecked.

And then Under User Settings and the Windows Restrictions tab, you should:
- Uncheck "Prevent users from saving files to the desktop"
- Check C: in the Hide Drives list at the bottom.

If everything is working correctly, that combination should give you the restriction combination you are looking for. If you still can't save to the desktop, then there is something else going on.

Dale

Yes, this a very annoying issue. I understand it being something you could want or live with in a lot of situations, but it is difficult if patrons have had the ability to do this in the past and expect to be able to now. And I'm actually a bit disappointed that the MS staff don't seem to really understand the issue.

But one thing I wanted to point out, is that even allowing users to view C:, you are still much more protected than it sound like you think you are, assuming you are also using the Windows Disk Protection feature.
- WDP protects your hard drive by wiping out any change that any user makes to anything on the C: drive. This is even true if you log in as the administrator. Deep Freeze actually just gives you the same protection as WDP, but without the added benefits of the locked down profiles. Both of them completely reset the C: drive at restart.
- Additional protection from having system files changed is actually built right in to Windows XP. Since your public accounts are restricted users on the computer, they already have pretty limited access to add, change or delete files on C:\, especially in places like the Windows and Program Files folders. There will always be users who can get around this, but they are relatively rare, and then if they do, restarting the computer will wipe out what they have done.

Deep Freeze has some advantages if you need to protect multiple drives, or are managing a large pool of computers and want its network management features. But in terms of simply protecting C:, I actually like the options in WDP better that make testing new software and configurations easy by allowing changes for a period of time and then reverting back.

Dale

I too am having this same issue. It also was not letting me save documents to the desktop in the admin profile either??? Very strange. If anyone finds a work around I'd love to know.