In my office we have a lab of 5 XP Pro based PCs. They PCs each have a local standard (non-admin) account which is locked. We're going to have Symantec Endpoint Protection running. With HDD protection set to drop all changes unless requested to save+restart, and both symantec and Liveupdates put onto the ALLOW Software list, will updates still be able to be done without being scrapped while the locked account is logged on?

Hi CAPT-Irrelevant, first of all, I'd like to inform you that Symantec Endpoint protection is not listed in Windows SteadyState list. Windows SteadyState currently detects and includes scripts for updating the following security products: - Computer Associates eTrust 7.0- McAfee VirusScan- Windows Defender- TrendMicro 7.0 If you are using the Symantec Endpoint Protection, you may need to write write your own custom update script. If you have such script, you can keep those virus definition updates with WDP and "lock account" turned on. Meanwhile, please check the following script and see if that works for you. http://social.microsoft.com/forums/en-US/windowssteadystate/thread/ef92b24c-1cdf-48a6-ac3c-37817a70f590/ Hope this helps! Sean Zhu - MSFT

Hi Sean, Thanks for your response, however the script you speak of, cannot see it.