Hi All,This thread is a summary of the Frequently Asked Questions on Windows SteadyState. We consolidate them and posthere for your reference. If you have any further questions, please kindly start a new thread so that more community members, MVPs, and MSFTs canjoin the discussion and share their ideas. Thanks for your understanding. Windows SteadyState FAQ 1. Troubleshooting: Cannot restart a computer after restoring to a point before Windows Disk Protection was turned on 2. Troubleshooting: Restricting registry access in Internet Explorer using Windows SteadyState 3. Troubleshooting: All User accounts are disabled or computer continuously restarts 4. Troubleshooting: Changes made to files that Windows boot loader accesses when Windows Disk Protection is turned on. 5. Troubleshooting: Cannot shrink/expand the size of a operating system volume when Windows Disk Protection is turned on. 6. Prevent Windows SteadyState from sending installation statistics to Microsoft 7. How do I install Flash ActiveX controls on computers with Windows SteadyState? 8. How do I allow update scripts to exceed the default timeout of 30 minutes? 9. How do I enable or disable Windows Disk Protection remotely or via script? 10. Why doesnt Disk Defragmenter work after installing Windows SteadyState? 11. Will the restart clear the virus from the PC, and leave a clean PC for the next user while Windows Disk Protection is turned on? 12. Which restriction setting needs to be deselected so that applications running in the system tray appear? 13. Why arent domain user accounts listed in the Windows SteadyState console? 14. Some programs are still blocked after removing Windows SteadyState. 15. How can I safely remove USB hardware on computers with Windows SteadyState? 16. Does Automatic Update (AU) still work when WDP is enabled and Schedule Updates in Windows Steady State is set to "off"? 17. Can I turn off the message about saving files that the user gets when WDP is turned on? PLEASE NOTE: Microsoft does not offer formal support for the communities you'll find here. Instead, our role is to provide a platform for people who want to take advantage of the global community of Microsoft customers and product experts. Microsoft may monitor content to ensure the accuracy of the information you'll find, but any information provided by Microsoft staff is offered "AS IS" with no warranties, and no rights are conferred. You assume all risk for your use.

Troubleshooting: Cannot restart a computer after restoring to a point before Windows Disk Protection was turned on Audience IT administrators Symptoms You cannot restart the computer after restoring to a point before Windows Disk Protection was turned on. Cause If System Restore is set to a time before Windows Disk Protection was turned on, and Windows Disk Protection is set to Retain All Changes Temporarily, you will be unable to restart the computer. The only recovery option is to reinstall the operating system. Workaround Turn off Windows Disk Protection before you perform a system restore. To turn off Windows Disk Protection 1. Log on as the SteadyState administrator. 2. In the Windows SteadyState main dialog box, under Global Computer Settings, click Protect the Hard Disk. 3. In the Protect the Hard Disk dialog box, select Off, and then click OK. 4. Restart the computer. Applies To the Following Operating Systems Windows Vista Windows XP

Troubleshooting: Cannot restart a computer after restoring to a point before Windows Disk Protection was turned on Audience IT administrators Symptoms You cannot restart the computer after restoring to a point before Windows Disk Protection was turned on. Cause If System Restore is set to a time before Windows Disk Protection was turned on, and Windows Disk Protection is set to Retain All Changes Temporarily, you will be unable to restart the computer. The only recovery option is to reinstall the operating system. Workaround Turn off Windows Disk Protection before you perform a system restore. To turn off Windows Disk Protection 1. Log on as the SteadyState administrator. 2. In the Windows SteadyState main dialog box, under Global Computer Settings, click Protect the Hard Disk. 3. In the Protect the Hard Disk dialog box, select Off, and then click OK. 4. Restart the computer. Applies To the Following Operating Systems Windows Vista Windows XP

Troubleshooting: Restricting registry access in Internet Explorer using Windows SteadyState Audience Windows SteadyState administrators Symptoms By default, Windows SteadyState contains an option that restricts shared computer users (SCUs) from accessing the registry directly. This setting might prevent the user from saving changes to some settings in the Internet Options dialog box, such as: General tab: Home Page Security tab: Security level for this zone, and Enable Protected Mode Privacy tab: Sites, Advanced, and Default Content tab: AutoComplete Programs tab: Default web Browser Advanced tab: Advanced Internet Explorer settings Cause The Prevent changes to Internet Explorer registry settings check box is selected in Windows SteadyState. When Windows SteadyState is set to prevent changes to the registry, it restricts permission to change the following subkeys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet settings\Cache HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced Warning: The system registry contains complex system information that is vital to your computer, and an incorrect change to your computer's registry could render your computer inoperable. Resolution To resolve this issue, remove the following Internet Explorer registry setting restrictions in Windows SteadyState. Note: When these check boxes are cleared, it allows the user to save changes to some settings in the Internet Options dialog box. To remove the Internet Explorer registry setting restrictions in Windows SteadyState: 1. Log on as a Windows SteadyState administrator. 2. In the Windows SteadyState main dialog box, under User Settings, select the user profile that you want to change. 3. Click the Feature Restrictions tab. 4. Under Internet Explorer restrictions, clear the Prevent changes to Internet Explorer registry settings check box. 5. Update the desired registry settings. For more information, see Registry Editor Help. After you make the desired changes to the Internet Explorer registry settings, we recommend that you turn these restrictions on again. Applies To the Following Operating Systems Windows XP Windows Vista

Troubleshooting: Restricting registry access in Internet Explorer using Windows SteadyState Audience Windows SteadyState administrators Symptoms By default, Windows SteadyState contains an option that restricts shared computer users (SCUs) from accessing the registry directly. This setting might prevent the user from saving changes to some settings in the Internet Options dialog box, such as: General tab: Home Page Security tab: Security level for this zone, and Enable Protected Mode Privacy tab: Sites, Advanced, and Default Content tab: AutoComplete Programs tab: Default web Browser Advanced tab: Advanced Internet Explorer settings Cause The Prevent changes to Internet Explorer registry settings check box is selected in Windows SteadyState. When Windows SteadyState is set to prevent changes to the registry, it restricts permission to change the following subkeys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet settings\Cache HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced Warning: The system registry contains complex system information that is vital to your computer, and an incorrect change to your computer's registry could render your computer inoperable. Resolution To resolve this issue, remove the following Internet Explorer registry setting restrictions in Windows SteadyState. Note: When these check boxes are cleared, it allows the user to save changes to some settings in the Internet Options dialog box. To remove the Internet Explorer registry setting restrictions in Windows SteadyState: 1. Log on as a Windows SteadyState administrator. 2. In the Windows SteadyState main dialog box, under User Settings, select the user profile that you want to change. 3. Click the Feature Restrictions tab. 4. Under Internet Explorer restrictions, clear the Prevent changes to Internet Explorer registry settings check box. 5. Update the desired registry settings. For more information, see Registry Editor Help. After you make the desired changes to the Internet Explorer registry settings, we recommend that you turn these restrictions on again. Applies To the Following Operating Systems Windows XP Windows Vista

Troubleshooting: All User accounts are disabled or computer continuously restarts Audience Windows SteadyState administrators Symptoms All user accounts are disabled or the computer continuously restarts. Cause Windows Disk Protection encounters an error and cannot start correctly, or Windows SteadyState disables all users when it is not performing Windows updates. Workaround To correct the problem, start Windows in safe mode, and log on as an administrator. Then you can use Windows Disk Protection Recovery to repair Windows Disk Protection. To log on as an administrator and repair Windows Disk Protection: Restart the computer in safe mode. To restart in safe mode, do one of the following: In Windows Vista: 1. Click the Start button, click the arrow next to the Lock button, and then click Restart. 2. Do one of the following: If your computers have a single operating system installed, press and hold the F8 key as your computer restarts. You need to press F8 before the Windows logo appears. If the Windows logo appears, try again by waiting until the Windows logon prompt appears, then shut down and restart your computer. If your computer has more than one operating system, use the arrow keys to highlight the operating system you want to start in safe mode, then press F8. 3. On the Advanced Boot Options screen, use the arrow keys to highlight the standard safe mode option, then press ENTER. For more information about options, see Windows Vista Help and Support. 4. Log on to your computer with a user account that has administrator rights. When your computer is in safe mode, you'll see the words Safe Mode in the corners of the display. 5. Open Windows SteadyState. 6. In the Windows Disk Protection Error dialog box, click Create a new cache file, then click OK. 7. To exit safe mode, restart your computer and let Windows start normally. In Windows XP: 1. Click Start, click Shut Down, click Restart under What do you want the computer to do? and click OK. 2. When you see the message Please select the operating system to start, press F8. 3. Use the arrow keys to highlight the appropriate safe mode option, and then press ENTER. 4. If you have a dual-boot or multiple-boot system, choose the installation that you need to access by using the arrow keys, then press ENTER. 5. Log on as an administrator. 6. In the Windows Disk Protection Error dialog box, click Create a new cache file, then click OK. Applies To the Following Operating Systems Windows XP Windows Vista

Troubleshooting: All User accounts are disabled or computer continuously restarts Audience Windows SteadyState administrators Symptoms All user accounts are disabled or the computer continuously restarts. Cause Windows Disk Protection encounters an error and cannot start correctly, or Windows SteadyState disables all users when it is not performing Windows updates. Workaround To correct the problem, start Windows in safe mode, and log on as an administrator. Then you can use Windows Disk Protection Recovery to repair Windows Disk Protection. To log on as an administrator and repair Windows Disk Protection: Restart the computer in safe mode. To restart in safe mode, do one of the following: In Windows Vista: 1. Click the Start button, click the arrow next to the Lock button, and then click Restart. 2. Do one of the following: If your computers have a single operating system installed, press and hold the F8 key as your computer restarts. You need to press F8 before the Windows logo appears. If the Windows logo appears, try again by waiting until the Windows logon prompt appears, then shut down and restart your computer. If your computer has more than one operating system, use the arrow keys to highlight the operating system you want to start in safe mode, then press F8. 3. On the Advanced Boot Options screen, use the arrow keys to highlight the standard safe mode option, then press ENTER. For more information about options, see Windows Vista Help and Support. 4. Log on to your computer with a user account that has administrator rights. When your computer is in safe mode, you'll see the words Safe Mode in the corners of the display. 5. Open Windows SteadyState. 6. In the Windows Disk Protection Error dialog box, click Create a new cache file, then click OK. 7. To exit safe mode, restart your computer and let Windows start normally. In Windows XP: 1. Click Start, click Shut Down, click Restart under What do you want the computer to do? and click OK. 2. When you see the message Please select the operating system to start, press F8. 3. Use the arrow keys to highlight the appropriate safe mode option, and then press ENTER. 4. If you have a dual-boot or multiple-boot system, choose the installation that you need to access by using the arrow keys, then press ENTER. 5. Log on as an administrator. 6. In the Windows Disk Protection Error dialog box, click Create a new cache file, then click OK. Applies To the Following Operating Systems Windows XP Windows Vista

Troubleshooting: Changes made to files that Windows boot loader accesses when Windows Disk Protection is set to Retain a Users Changes Temporarily are not supported Audience Windows SteadyState administrators Symptoms Certain types of files, such as Windows loader and boot driver files, are not replaced or updated when Windows Disk Protection is set to retain changes temporarily. Workaround In Windows SteadyState, set Windows Disk Protection to retain all user changes permanently. To set Windows SteadyState Windows Disk Protection: 1. In Windows SteadyState, click Protect the Hard Disk. 2. Click Retain all changes permanently, and then click OK. Applies To the Following Operating Systems Windows XP Windows Vista

Troubleshooting: Changes made to files that Windows boot loader accesses when Windows Disk Protection is set to Retain a Users Changes Temporarily are not supported Audience Windows SteadyState administrators Symptoms Certain types of files, such as Windows loader and boot driver files, are not replaced or updated when Windows Disk Protection is set to retain changes temporarily. Workaround In Windows SteadyState, set Windows Disk Protection to retain all user changes permanently. To set Windows SteadyState Windows Disk Protection: 1. In Windows SteadyState, click Protect the Hard Disk. 2. Click Retain all changes permanently, and then click OK. Applies To the Following Operating Systems Windows XP Windows Vista

Troubleshooting: Cannot shrink/expand the size of an operating system volume when Windows Disk Protection is turned on Audience IT administrators Symptoms If you try to shrink/expand the size of an operating system volume when Windows Disk Protection is turned on, an unexpected error occurs and the operation fails. Cause Windows Disk Protection does not support shrinking or expanding operating system volumes. Workaround Turn Windows Disk Protection off, and then shrink/expand the size of the operating system volume. To turn off Windows Disk Protection 1. Log on as the Windows SteadyState administrator. 2. In the Windows SteadyState main dialog box, under Global Computer Settings, click Protect the Hard Disk. 3. In the Protect the Hard Disk dialog box, select Off, then click OK. 4. Restart the computer. Windows Disk Protection will now be turned off so you can shrink/expand the size of the operating system volume. For more information about shrinking/expanding the size of the operating system volume, see Help and Support for your operating system. To protect the shared computer, after shrinking/expanding the size of the operating system volume, turn Windows Disk Protection back on. Applies To the Following Operating Systems Windows Vista

Troubleshooting: Cannot shrink/expand the size of an operating system volume when Windows Disk Protection is turned on Audience IT administrators Symptoms If you try to shrink/expand the size of an operating system volume when Windows Disk Protection is turned on, an unexpected error occurs and the operation fails. Cause Windows Disk Protection does not support shrinking or expanding operating system volumes. Workaround Turn Windows Disk Protection off, and then shrink/expand the size of the operating system volume. To turn off Windows Disk Protection 1. Log on as the Windows SteadyState administrator. 2. In the Windows SteadyState main dialog box, under Global Computer Settings, click Protect the Hard Disk. 3. In the Protect the Hard Disk dialog box, select Off, then click OK. 4. Restart the computer. Windows Disk Protection will now be turned off so you can shrink/expand the size of the operating system volume. For more information about shrinking/expanding the size of the operating system volume, see Help and Support for your operating system. To protect the shared computer, after shrinking/expanding the size of the operating system volume, turn Windows Disk Protection back on. Applies To the Following Operating Systems Windows Vista

Prevent Windows SteadyState from sending installation statistics to Microsoft Audience Windows SteadyState administrators Symptoms Windows SteadyState uses the Internet to notify Microsoft that Windows SteadyState was installed. Cause By design. Resolution To prevent Windows SteadyState from attempting to contact Microsoft, update your registry settings as follows: To update registry settings: 1. Log on to the shared computer as an administrator. 2. After finished downloading SteadyState and initiating the installation, disconnect the Internet connection, then complete the installation Windows Steady State. 3. If Windows Disk Protection is turned on, make sure that the Retain all changes permanently option is selected. For more information on Windows Disk Protection, see Help for Windows SteadyState. 4. Click Start, click Run, type regedit, and then click OK. 5. In the Registry Editor, navigate to HKEY_LOCAL_MACHINE \Software\Microsoft\Shared Computer Toolkit. 6. Click WGAReport. 7. On the Edit menu, click Delete. 8. On the Edit menu, click New, and then click DWORD Value. 9. Type WGAReportHasSent. 10. Set the value to 1, and then click Ok. 11. Restart the computer. 12. Reconnect the computer to the Internet. The computer no longer attempts to contact Microsoft. You can log on to the computer as an administrator and update Windows Disk Protection settings in Windows SteadyState. Applies To the Following Operating Systems Windows Vista Windows XP

Prevent Windows SteadyState from sending installation statistics to Microsoft Audience Windows SteadyState administrators Symptoms Windows SteadyState uses the Internet to notify Microsoft that Windows SteadyState was installed. Cause By design. Resolution To prevent Windows SteadyState from attempting to contact Microsoft, update your registry settings as follows: To update registry settings: 1. Log on to the shared computer as an administrator. 2. After finished downloading SteadyState and initiating the installation, disconnect the Internet connection, then complete the installation Windows Steady State. 3. If Windows Disk Protection is turned on, make sure that the Retain all changes permanently option is selected. For more information on Windows Disk Protection, see Help for Windows SteadyState. 4. Click Start, click Run, type regedit, and then click OK. 5. In the Registry Editor, navigate to HKEY_LOCAL_MACHINE \Software\Microsoft\Shared Computer Toolkit. 6. Click WGAReport. 7. On the Edit menu, click Delete. 8. On the Edit menu, click New, and then click DWORD Value. 9. Type WGAReportHasSent. 10. Set the value to 1, and then click Ok. 11. Restart the computer. 12. Reconnect the computer to the Internet. The computer no longer attempts to contact Microsoft. You can log on to the computer as an administrator and update Windows Disk Protection settings in Windows SteadyState. Applies To the Following Operating Systems Windows Vista Windows XP

How can I install Flash ActiveX controls on computers with Windows SteadyState? Audience Windows SteadyState administrators Question How can I install Flash ActiveX controls on computers with Windows SteadyState? Answer 1. Install and configure needed ActiveX controls or plug-ins from an administrator account. 2. Configure Windows SteadyState restrictions. Uncheck Third Party Extension Buttons restriction option: a. Start Windows SteadyState. b. Click the user account -> Feature Restrictions. c. Under Internet Explorer Restrictions ->Toolbar Options, make sure Third Party Extension Buttons is not selected.

How can I install Flash ActiveX controls on computers with Windows SteadyState? Audience Windows SteadyState administrators Question How can I install Flash ActiveX controls on computers with Windows SteadyState? Answer 1. Install and configure needed ActiveX controls or plug-ins from an administrator account. 2. Configure Windows SteadyState restrictions. Uncheck Third Party Extension Buttons restriction option: a. Start Windows SteadyState. b. Click the user account -> Feature Restrictions. c. Under Internet Explorer Restrictions ->Toolbar Options, make sure Third Party Extension Buttons is not selected.

How do I allow update scripts to exceed the default timeout of 30 minutes? Audience Windows SteadyState administrators Question To protect against update scripts hanging, Windows SteadyState terminates scripts that take longer than 30 minutes to run. This default timeout value can be changed by modifying the following registry value. Answer For example, we can modify the registry entry to 90. You can also change to other value that suites your environment: [HKLM\System\CurrentControlSet\Services\Windows SteadyState\Parameters] "UpdateScriptTimeLimitMinutes"=dword:90

How do I allow update scripts to exceed the default timeout of 30 minutes? Audience Windows SteadyState administrators Question To protect against update scripts hanging, Windows SteadyState terminates scripts that take longer than 30 minutes to run. This default timeout value can be changed by modifying the following registry value. Answer For example, we can modify the registry entry to 90. You can also change to other value that suites your environment: [HKLM\System\CurrentControlSet\Services\Windows SteadyState\Parameters] "UpdateScriptTimeLimitMinutes"=dword:90

How do I enable or disable Windows Disk Protection remotely or via script? Audience IT Administrators Question How do I find the command line switches necessary for remote management of Disk Protection? Answer To enabled WDP, run the following command from an administrator account: "C:\Program files\Windows SteadyState\sctui.exe" /EnableWDPAndReboot To disable WDP: "C:\Program files\Windows SteadyState\sctui.exe" /DisableWDPAndReboot You can create a batch file with the command and then deploy it to your computers. Also, all of these functions are exposed through the WMI-based WDP API. See http://support.microsoft.com/kb/938335 for examples.

How do I enable or disable Windows Disk Protection remotely or via script? Audience IT Administrators Question How do I find the command line switches necessary for remote management of Disk Protection? Answer To enabled WDP, run the following command from an administrator account: "C:\Program files\Windows SteadyState\sctui.exe" /EnableWDPAndReboot To disable WDP: "C:\Program files\Windows SteadyState\sctui.exe" /DisableWDPAndReboot You can create a batch file with the command and then deploy it to your computers. Also, all of these functions are exposed through the WMI-based WDP API. See http://support.microsoft.com/kb/938335 for examples.

Why doesnt Disk Defragmenter work after installing Windows SteadyState? Audience Windows SteadyState administrators Symptoms After installing Windows SteadyState, Disk Defragmenter does not work. AnswerThis behavior is by design. The disk does not fragment when Windows Disk Protection is enabled because changes are discarded at each reboot. Windows Disk Protection is also sensitive to the physical layout of files on the disk. Disk utilities which directly manipulate the structure and layout of files on the disk can corrupt the disk when Windows Disk Protection is enabled.

Why doesnt Disk Defragmenter work after installing Windows SteadyState? Audience Windows SteadyState administrators Symptoms After installing Windows SteadyState, Disk Defragmenter does not work. AnswerThis behavior is by design. The disk does not fragment when Windows Disk Protection is enabled because changes are discarded at each reboot. Windows Disk Protection is also sensitive to the physical layout of files on the disk. Disk utilities which directly manipulate the structure and layout of files on the disk can corrupt the disk when Windows Disk Protection is enabled.

Will a restart clear the virus from the PC, and leave a clean PC for the next user when Windows Disk Protection is turned on? Audience Windows SteadyState administrators Question Will a restart clear the virus from the PC, and leave a clean PC for the next user when Windows Disk Protection is turned on? Answer Given the breadth of viruses in the wild, there's no single answer to that question. If you have Windows Disk Protection enabled, then all changes made to the boot volume (that is, the volume that contains the Windows directory--typically C will be discarded when the system boots. WDP will not discard changes made to other volumes (other partitions on the same disk or separate disks). A virus could also hide in the boot sector or MBR of the hard disk as those areas are not part of the boot volume. The virus would have to have administrator access in order to write to the boot sector or MBR, however. Also, for security consideration, we highly recommend using virus and spyware protection programs in conjunction with Windows SteadyState.

Will a restart clear the virus from the PC, and leave a clean PC for the next user when Windows Disk Protection is turned on? Audience Windows SteadyState administrators Question Will a restart clear the virus from the PC, and leave a clean PC for the next user when Windows Disk Protection is turned on? Answer Given the breadth of viruses in the wild, there's no single answer to that question. If you have Windows Disk Protection enabled, then all changes made to the boot volume (that is, the volume that contains the Windows directory--typically C will be discarded when the system boots. WDP will not discard changes made to other volumes (other partitions on the same disk or separate disks). A virus could also hide in the boot sector or MBR of the hard disk as those areas are not part of the boot volume. The virus would have to have administrator access in order to write to the boot sector or MBR, however. Also, for security consideration, we highly recommend using virus and spyware protection programs in conjunction with Windows SteadyState.

Which restriction setting needs to be deselected so that applications running in the system tray appear? Audience Windows SteadyState administrators Question Which restriction setting needs to be deselected so that applications running in the system tray appear? AnswerThis restriction is under User Settings -> Windows Restrictions -> General Restrictions -> Prevent access to Windows Explorer features: Folder Options, Customize Toolbar, and the Notification Area. You can adjust this setting to show application icons in the system tray.

Which restriction setting needs to be deselected so that applications running in the system tray appear? Audience Windows SteadyState administrators Question Which restriction setting needs to be deselected so that applications running in the system tray appear? AnswerThis restriction is under User Settings -> Windows Restrictions -> General Restrictions -> Prevent access to Windows Explorer features: Folder Options, Customize Toolbar, and the Notification Area. You can adjust this setting to show application icons in the system tray.

Why arent domain user accounts listed in the Windows SteadyState console? Audience Windows SteadyState administrators IT administrators Symptoms In the "User Settings" section of Windows SteadyState console, only local user accounts are detected. You cannot add a domain user account there. AnswerWindows SteadyState does not detect domain accounts. To configure restrictions for domain based user accounts, you can use the Windows SteadyState ADM file (SCTSettings. Adm) from Windows SteadyState installation folders to extend a domain based GPO and configure the restriction settings there.

Why arent domain user accounts listed in the Windows SteadyState console? Audience Windows SteadyState administrators IT administrators Symptoms In the "User Settings" section of Windows SteadyState console, only local user accounts are detected. You cannot add a domain user account there. AnswerWindows SteadyState does not detect domain accounts. To configure restrictions for domain based user accounts, you can use the Windows SteadyState ADM file (SCTSettings. Adm) from Windows SteadyState installation folders to extend a domain based GPO and configure the restriction settings there.

Some programs are still blocked after removing Windows SteadyState. Audience Windows SteadyState administrators Symptoms After removing Windows SteadyState, some programs are still blocked. Answer We need to remove restrictions before removing Windows SteadyState. Remember to check the following options in Windows SteadyState console before removing it. a. Review and disable any unwanted restrictions in "Global Computer Settings", "Set Computer Restrictions". b. For each locked user, select the user and unlock the profile. c. Cancel all the restrictions in each user.

Some programs are still blocked after removing Windows SteadyState. Audience Windows SteadyState administrators Symptoms After removing Windows SteadyState, some programs are still blocked. Answer We need to remove restrictions before removing Windows SteadyState. Remember to check the following options in Windows SteadyState console before removing it. a. Review and disable any unwanted restrictions in "Global Computer Settings", "Set Computer Restrictions". b. For each locked user, select the user and unlock the profile. c. Cancel all the restrictions in each user.

How can I safely remove USB hardware on computers with Windows SteadyState? Audience Windows SteadyState administrators Question How can I safely remove USB hardware on computers with Windows SteadyState? Answer Method 1: If right-click on menu is disabled, we can also use left click on USB icon on the system tray. Method 2: Create a desktop shortcut 1. Create a shortcut on desktop. 2. Use "%SystemRoot%\System32\RUNDLL32.EXE shell32.dll,Control_RunDLL hotplug.dll" (without quotation mark) as target. 3. Double click the shortcut to remove USB device.

How can I safely remove USB hardware on computers with Windows SteadyState? Audience Windows SteadyState administrators Question How can I safely remove USB hardware on computers with Windows SteadyState? Answer Method 1: If right-click on menu is disabled, we can also use left click on USB icon on the system tray. Method 2: Create a desktop shortcut 1. Create a shortcut on desktop. 2. Use "%SystemRoot%\System32\RUNDLL32.EXE shell32.dll,Control_RunDLL hotplug.dll" (without quotation mark) as target. 3. Double click the shortcut to remove USB device.

Does Automatic Updates (AU) still work while WDP is enabled and Schedule Software Updates in Windows SteadyState is set to off? Audience Windows SteadyState administrators Question Does Automatic Updates (AU) still work while WDP is enabled and Scheduled Software Updates in Steady State is set to off? Answer When WDP is enabled, it automatically enables SteadyState updates. When SteadyState updates are enabled, we disable Windows own Automatic Updates. We recommend you enable the Schedule Software Updates function in Windows SteadyState, if you need the Automatic Updates feature.

Does Automatic Updates (AU) still work while WDP is enabled and Schedule Software Updates in Windows SteadyState is set to off? Audience Windows SteadyState administrators Question Does Automatic Updates (AU) still work while WDP is enabled and Scheduled Software Updates in Steady State is set to off? Answer When WDP is enabled, it automatically enables SteadyState updates. When SteadyState updates are enabled, we disable Windows own Automatic Updates. We recommend you enable the Schedule Software Updates function in Windows SteadyState, if you need the Automatic Updates feature.

Can I turn off the message about saving files that the user gets when WDP is turned on? Audience Windows SteadyState administrators Question Can I turn off the message about saving files that the user gets when WDP is turned on? Answer This message comes from bubble.exe. You can choose a method below to disable the message: (Note: That this is not recommended. Bubble.exe is responsible for alerting users that the WDP cache is filling up and the system will reboot soon. If the user is an admin and WDP is in discard mode, bubble.exe is also responsible for showing the message at shutdown/restart/logoff asking if the admin wants to commit to current changes. ) Method 1: You can remove bubble.exe from HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run . If you follow this method, its recommended to ADD bubble.exe to the admins HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run key so that you still receive the shutdown/restart/logoff commit dialog. Method 2: Use SteadyState administrator to log on, choose a restricted account and add bubble.exe to blocked program list.

Can I turn off the message about saving files that the user gets when WDP is turned on? Audience Windows SteadyState administrators Question Can I turn off the message about saving files that the user gets when WDP is turned on? Answer This message comes from bubble.exe. You can choose a method below to disable the message: (Note: That this is not recommended. Bubble.exe is responsible for alerting users that the WDP cache is filling up and the system will reboot soon. If the user is an admin and WDP is in discard mode, bubble.exe is also responsible for showing the message at shutdown/restart/logoff asking if the admin wants to commit to current changes. ) Method 1: You can remove bubble.exe from HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run . If you follow this method, its recommended to ADD bubble.exe to the admins HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run key so that you still receive the shutdown/restart/logoff commit dialog. Method 2: Use SteadyState administrator to log on, choose a restricted account and add bubble.exe to blocked program list.

I created this shortcut on one of our Public Access Computers here in the library. It's part of out AD domain. But when I click on it, I get a message "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator." The shortcut works when I'm logged in as Local Administrator and as Domain Administrator but not as User. We also are running SteadyState but I don't see any setting there to allow this shortcut to run, I set to to ask to run with other credentials, but the patron would have to get a librarian to come over to enter the local password. Any suggestions? Martin Cripps Automation Cape May County Library

I created this shortcut on one of our Public Access Computers here in the library. It's part of out AD domain. But when I click on it, I get a message "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator." The shortcut works when I'm logged in as Local Administrator and as Domain Administrator but not as User. We also are running SteadyState but I don't see any setting there to allow this shortcut to run, I set to to ask to run with other credentials, but the patron would have to get a librarian to come over to enter the local password. Any suggestions? Martin Cripps Automation Cape May County Library