-------------------------------------------------------------------------------- Windows SteadyState Readme File June 2007 (c) 2007 Microsoft Corporation. All rights reserved. -------------------------------------------------------------------------------- This document provides late-breaking or other information that supplements the documentation for Windows SteadyState. ------------------------ How to Use This Document ------------------------ To view the Readme file on-screen in Microsoft Windows Notepad, maximize the Notepad window. On the Format menu, click Word Wrap. To print the Readme file, open it in Notepad or another word processor, and then use the Print command on the File menu. ------------------------ CONTENTS ------------------------ 1. MINIMUM SYSTEM REQUIREMENTS 2. INSTALLATION 2.1 Shared computer logon after installation may be slow 3. GENERAL INFORMATION 3.1 Fast User Switching is disabled after Windows SteadyState is installed 3.2 AutoAdminLogon is not restored after manually changing cache file size 4. SETTINGS AND OPTIONS 4.1 Session timer may not work with Remote Desktop Connection 4.2 Some shortcut keys are not disabled even when setting is selected 4.3 Some blocked programs are not shown in Block Programs when High Restrictions is selected 4.4 Session timer settings saved for Shared Computer Toolkit user profiles may not work when user profiles are used in Windows SteadyState 5. SOFTWARE UPDATES 5.1 Successful log event will be shown in event log even when Schedule Software Updates fails 5.2 Windows SteadyState does not support automatic updates for Windows Live OneCare 5.3 Windows Update will not automatically update if it has not been initially registered or installed on a Windows SteadyState computer 5.4 Custom scripts may not run successfully if McAfee antivirus program default option is set 6. WINDOWS DISK PROTECTION 6.1 Cache file may grow larger than free space 7. LEGAL NOTICE ========================================== 1. MINIMUM SYSTEM REQUIREMENTS ========================================== The following hardware and software is required to run Windows SteadyState: - Operating System: Microsoft Windows XP Professional, Windows XP Home Edition, or Windows XP Tablet PC Edition with Windows XP Service Pack 2 (SP2) installed (Windows SteadyState does not run with Windows Vista). - Processor: 300 megahertz (MHz) or higher processor clock speed recommended; 233 MHz minimum required (single or dual processor system);* Intel Core/Pentium/Celeron family, or AMD K6/Athlon/Duron family, or compatible processor recommended. - File System: NTFS - Hard Disk: 1.5 gigabytes (GB) of available hard disk space without Windows Disk Protection, or 4.0 GB of available hard disk space with Windows Disk Protection. - Memory: 128 megabytes (MB) of RAM or higher recommended (64 MB minimum supported; may limit performance and some features). - Tools: Windows Scripting and Windows Management Instrumentation (WMI) must be working. ========================================== 2. INSTALLATION ========================================== ------------------------------------------------------------------------------- 2.1 Shared computer logon after installation may be slow ------------------------------------------------------------------------------- After installation of Windows SteadyState, it may take longer to log on to the shared computer than it did prior to Windows SteadyState installation. This delay will only occur on the logon immediately following installation of Windows SteadyState, or if you resize the cache file when you are using the Protect the Hard Disk feature in Windows SteadyState. STATUS: This is a known issue. ========================================== 3. GENERAL INFORMATION ========================================== ------------------------------------------------------------------------------- 3.1 Fast User Switching is disabled after Windows SteadyState is installed ------------------------------------------------------------------------------- The option for Fast User Switching, which is available in Windows XP on computers that are not connected to a network domain, is disabled on the shared computer after Windows SteadyState is installed. WORKAROUND: Users must manually log off from their current session before another user can logon. ------------------------------------------------------------------------------- 3.2 AutoAdminLogon is not restored after manually changing cache file size ------------------------------------------------------------------------------- If your shared computer has automatic logon turned on for the shared computer administrator account so that the logon for the administrator is automatically performed, this setting may be turned off when you change the cache file size in Windows SteadyState and save changes to the hard disk. Administrator logon may not occur automatically, even though the AutoAdminLogon registry setting is set to 1 in the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon WORKAROUND: After changing the cache file size, the Windows SteadyState administrator can logon and manually restore the AutoAdminLogon setting in the Windows registry. For more information on how to reset the AutoAdminLogon registry key, see Microsoft Knowledge Base Article #315231, “How to turn on automatic logon in Windows XP.” If you change the Windows Registry setting for AutoAdminLogon, ensure that the Retain All Changes Permanently option is selected in the Protect the Hard Disk dialog box, and then restart the shared computer to save changes to the Windows Registry file. It is important to note that if you use AutoAdminLogon, using Windows XP becomes more convenient; however, using this feature can pose a security risk to your shared computer. ========================================== 4. SETTINGS AND OPTIONS ========================================== ------------------------------------------------------------------------------- 4.1 Session timer may not work with Remote Desktop Connection ------------------------------------------------------------------------------- If a shared computer user connects to a Windows SteadyState computer through Remote Desktop Connection, session timers applied to the profile for that user may not work. The user may not automatically be logged off at the end of a session or when the shared computer detects idle time session timer settings. WORKAROUND: If shared users must be restricted to a specified number of minutes on a shared computer or logged off after the computer has been idle for a predetermined number of minutes, restrict shared users from using Remote Desktop Connection. ------------------------------------------------------------------------------- 4.2 Some shortcut keys are not disabled even when setting is selected ------------------------------------------------------------------------------- When the Disable Keyboard Shortcuts that Use the Windows Logo Key option is selected on the General Restrictions tab in User Settings, there are two shortcut keys that cannot be disabled. These two shortcut keys are the Windows Logo key + U and the Windows Logo key + L. STATUS: This is a known issue. -------------------------------------------------------------------------------- 4.3 Some blocked programs are not shown in Block Programs when High Restrictions is selected -------------------------------------------------------------------------------- When the High Restrictions user level is selected on the Windows Restrictions tab, users can access only programs available from the Program Files folder and the Windows folder. Notepad and Microsoft Windows WordPad are disabled automatically when the High restrictions level is selected, but these programs are not shown in the Block Programs list in the Block Programs dialog box under User Settings. WORKAROUND: >>>To allow users to use Notepad and WordPad when High Restrictions is selected: 1. In the Windows SteadyState main dialog box, under User Settings, click the user profile under User Settings that you want to modify. 2. On the Windows Restrictions tab, under User Settings, clear the Disable Notepad and WordPad check box. This will reset the Windows restriction level to Custom Restrictions, but all other restrictions selected in the High Restrictions level will still be turned on. 3. If you have Windows Disk Protection turned on, ensure that the Retain All Changes Permanently option is selected in the Protect the Hard Disk dialog box so that changes to the user profiles will be saved to the hard disk. Restart the shared computer to save changes to the user profile. ------------------------------------------------------------------------------ 4.4 Session timer settings saved for Shared Computer Toolkit user profiles may not work when user profiles are used in Windows SteadyState ------------------------------------------------------------------------------ User profiles that were created in the previous version of Windows SteadyState, Microsoft Shared Computer Toolkit for Windows XP, can be used in Windows SteadyState. However, session timer settings applied to Shared Computer Toolkit user profiles may not work accurately or display correctly when the user profile is used with Windows SteadyState. WORKAROUND: If you administer a Shared Computer Toolkit user profile in Windows SteadyState, ensure that you reset session timer settings for previously created user profiles. If you have Windows Disk Protection turned on, ensure that the Retain All Changes Permanently option is selected in the Protect the Hard Disk dialog box so that session timer changes to the user profiles will be saved to the hard disk. Restart the shared computer to save changes to the user profile. For more information on uninstalling Shared Computer Toolkit and installing Windows SteadyState, see the “To Uninstall Shared Computer Toolkit” section in the Windows SteadyState Handbook. ========================================== 5. SOFTWARE UPDATES ========================================== ------------------------------------------------------------------------------- 5.1 Successful log event will be shown in event log even when Schedule Software Updates fails ------------------------------------------------------------------------------- There are some instances when the Schedule Software Updates feature may successfully log an update event in the event log even when the software update has failed to complete. Commonly, the failure of the update process will occur because the specific update requires administrator interaction; for example, an update with a user agreement where you must specify that you agree to the terms. WORKAROUND: Periodically review the updates available on Microsoft Update or for the software you have selected to automatically update. You can manually download and install the updates you want, and then ensure that the Retain All Changes Permanently option is turned on in the Protect the Hard Drive dialog box. For more information on installing updates manually, see the “Manually Download and Install Updates” section in the Windows SteadyState Handbook. --------------------------------------------------------------------------- 5.2 Windows SteadyState does not support automatic updates for Windows Live OneCare --------------------------------------------------------------------------- Windows SteadyState does not currently support Windows Live OneCare signature updates through the Schedule Software Updates feature. WORKAROUND: Windows Live OneCare updates must be manually updated and maintained on a shared computer running Windows SteadyState. For more information, see the “Manually Download and Install Updates” section in the Windows SteadyState Handbook. ----------------------------------------------------------------------------- 5.3 Windows Update will not automatically update if it has not been initially registered or installed on a Windows SteadyState computer ----------------------------------------------------------------------------- When you select the Use Windows SteadyState to Automatically Download and Install Updates option under Schedule Updates, you can specify the frequency of automatic updates. Windows SteadyState will automatically update Microsoft Update, Windows Update, or Windows Server Update Services, depending on which of these is currently used by Windows XP. However, if Windows SteadyState is installed on a computer on which Windows Updates has never been installed or configured, turning on the Windows SteadyState automatic updates feature will not install available Windows Updates automatically and the administrator of the computer will receive no notification that updates are not being installed. You must first run Windows Updates manually to perform the initial registration of Windows Updates components on your computer. After you manually install and configure Windows Updates, you can then schedule Windows SteadyState automatic updates and specify the frequency of Windows Updates downloads. >>>To manually install Windows Updates: 1. Log on as a Windows SteadyState administrator. 2. In the Windows SteadyState main dialog box, under Computer Settings, click Protect the Hard Disk. 3. Select Retain All Changes Permanently. 4. Install the software updates from Windows Updates that you want on the shared computer. There are two ways to initiate the installation of Windows Updates on your computer: • Go to www.windowsupdate.com and register to be informed that updates are available. • Open Automatic Updates in Control Panel. Click Install Updates From the Windows Updates Web Site to initiate the Windows Updates registration of your computer. 5. After Windows Updates are installed manually, restart the shared computer. 6. For increased security on your shared computer, after manual software updates have been installed, select Remove All Changes at Restart in the Protect the Hard Disk dialog box so that additional changes to the shared computer will not be saved. If you have taken the suggested actions described in the “Performing Preinstallation Tasks” section of the Windows SteadyState Handbook prior to installing Windows SteadyState, Windows Updates should perform as detailed in the Scheduling Software Updates section of the Windows SteadyState Handbook. ------------------------------------------------------------------------------- 5.4 Custom scripts may not run successfully if McAfee antivirus program default option is set ------------------------------------------------------------------------------- Windows SteadyState supports custom scripts written in .exe, .vbs, .cmd, and .bat file formats. Custom script updates that are scheduled automatically in Windows SteadyState will run after Microsoft updates have been performed. The MacAfee antivirus program has a default security setting that disallows scripts from running on the computer. This setting may block all scripts from running on a Windows SteadyState computer. WORKAROUND: Turn off the script-blocking setting in the MacAfee antivirus program when running your custom script. For more information on changing this setting in MacAfee antivirus, please refer to the product user guide. Please note that turning off script-blocking settings in your antivirus program may leave the computer running Windows SteadyState unprotected from virus scripts, unwanted software, and malicious software. To better protect your shared computer from the installation of unwanted software, ensure that you turn on the Protect the Hard Disk option, select the Remove All Changes at Restart option, and restart your computer each day. ========================================== 6. WINDOWS DISK PROTECTION ========================================== ------------------------------------------------------------------------------- 6.1 Cache file may grow larger than free space ------------------------------------------------------------------------------- Windows Disk Protection may increase the cache file size to a size greater than the remaining free space on the system drive. For example, if a user creates a very large file or creates multiple large files, Windows Disk Protection will increase the cache size. If the Retain Changes Temporarily or the Retain All Changes Permanently options are selected in Protect the Hard Disk, and changes have been saved to the hard drive repeatedly, the cache file may be greater than free space on the drive. WORKAROUND: Change the cache file size so that the cache file and the free disk space are approximately equal. ADDITIONAL WORKAROUNDS: If your shared computer users need to create and save large files on the shared computer, you can restrict users from saving temporary or working files on the system drive by redirecting their My Documents folder to a location on a partition separate from the system partition. For more information on redirecting the My Documents folder, see “Redirecting the My Documents Folder” in the Windows SteadyState Handbook. You can also redirect the system page file for the shared computer to a partition with free disk space that is separate from the system partition. This will increase available space for the cache file on the system partition. For more information on how to redirect the system page file, see Microsoft Knowledge Base Article #314482, “How to configure paging files for optimization and recovery in Windows XP.” ======================================= 7. LEGAL NOTICE ======================================= The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted in examples herein are fictitious. No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Live, Windows Vista, and SteadyState are trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. All other trademarks are property of their respective owners.