 |
 |
Deep Freeze is just one tool in the shed. It works amazingly well at restoring a computer to exact state it was in when it was frozen. Period. That's its primary niche and it is best in class software for this purpose. For pretty much every other feature you're looking for, it sounds like you really should be managing your computers via Active Directory/group policies/remote desktop/etc. It sound's like you should have your computers in a Domain. Assuming you had your computers managed in a Domain and locked down via Group Policies, and protect with anti-virus protection software, DF would be your final line of defense on each workstation. If a user manages to intentionally or accidentally install an unwanted program or change the workstation configuration, DF would effortlessly return the workstation back to the way you want it with absolutely zero tech interaction. I consider it a "must-have" for public computers. It takes just one trip to the computer to repair something a patron did to pay for the DF license for that computer. It's all "profit" after that. Also worthwhile knowing: Microsoft apparently has no plans to continue development of Steady State. There is no SS intended for Windows 7. My 2 cents, Chad ----------------------- Chad Neeper Senior Systems Engineer Level 9 Networks 740-548-8070 (voice) 866-214-6607 (fax) -- Full LAN/WAN consulting services -- -- Specialized in libraries and schools -- Chris Cooper wrote: > > We are preparing to purchase DF Enterprise on a grant for the main > reason stated in this discussion: “centrally managing” our PCs. I have > been using the Gates PAC tool / Shared Computer Toolkit / SteadyState > since 2002, when we received our first Gates grant. We are currently > running Windows XP, CA eTrust anti-virus* and PC Reservation by > Envisionware (plus LPT.One print management). I have all computers > configured to run Windows and eTrust updates daily through > SteadyState’s Disk Protection tool, and it is working very well. > > The only reason I am tempted to even consider DF is because of the > central management feature (92 public PCs and growing, and only one > desktop support person). However, now I am having reservations about > it because it won’t help me to control the following: > > Locking down – Add printers, control panel, task manager, change > password, network places, viewing and changing C: drive, run command, > management console, autoplay CDs, locking the workstation, keyboard > shortcuts, access to certain programs, etc, etc. I will still have to > use SteadyState and touch each and every computer to make changes. I > still cannot control these computers remotely, like I could if I were > on a domain (which I am not, on this network) with SMS or Remote > Desktop. I’ve tried TightVNC but it’s a bit hoaky and unreliable. > > I also cannot centrally customize desktop icons or IE toolbars, menu > items and favorites with DF; I still can’t centrally update certain > applications (like Adobe) without a script (I really don’t do > scripting), and I can’t add/remove printers from the console. Am I > right? So aside from doing what SteadyState Disk Protection does from > one location, can someone tell me…why do I want DF? > > *Chris Cooper* | Library PC Technician > Everett Public Library <http://www.epls.org/> > (425.257.8039 | [log in to unmask] <mailto:[log in to unmask]> > > *BTW, just between the two of us – we went without virus protection > for years because of disk protection. But we are now using it simply > to protect our patrons, not necessarily our hard drives. We don’t want > them bringing in or taking malware elsewhere. > > > > *From:* Library NT [mailto:[log in to unmask]] *On Behalf Of > *Simon Heres > *Sent:* Monday, April 05, 2010 11:04 AM > *To:* [log in to unmask] > *Subject:* Re: [LIBNT-L] Deep Freeze and anti-virus software > > > > We've been using DF for about 10 years as well. Would not do without > it. But as stated elsewhere, it does not provide realtime protection > from viruses, malware, what have you, which can do their destruction > on your network before you reboot to wipe it out. > > > > Other protection is a must. DF is only to retore a PC to it's > previous state, devoid of changes made by previous users. > > > > Works well with updates as we schedule MS updates, AV updates, and > even scans, etc. during thaw times. > > > > For users docs, we've created a thaw space (call Save Here), and > redirected My Documents to it for a default save location, and a > shortcut to it on the desktop, and configured all apps to save there > by default as well. We've denied users ability to save anywhere else, > using GP or local NTFS permissions (i.e. deny write to desktop). I run > a script every few days to empty the thawspace of saved files. This > works very well for us. > > > > DF admin is great. Makes working with large amount of PCs easy. > Worth the upgrade cost. > > > > Simon Heres > > Biola University Library > > La Mirada, CA > > > > ------------------------------------------------------------------------ > > *Library NT <[log in to unmask] > <mailto:[log in to unmask]>> writes:* > > I have to agree here. It is not a substitute by any stretch of the > > imagination. Whatever manages to get infected can sit there and fester > > for hours before a reboot. Not my idea of a good time. ;-) Anti-virus is > > a must. Having this type of software in place has been a life saver for > > us. The 2 working together allows us to open the computers to act a > > little more like a "home" computer but yet, we can protect ourselves. > > > > So those of you on deep freeze - it seems like it's a pretty solid > > product. What issues (if any) have you come across with patrons saving > > documents, pictures, etc temporarily on the desktop / my documents / etc > > while they are working on them? > > > > We are currently experiencing an issue where the patron does just that > > and for an unknown reason, the system then kicks back stating that the > > file cannot be found. Yet, you can see it plain as day where ever they > > have saved it. Reboot the machine, all is well again but the customer > > has lost all their work. This is a new problem that has cropped up in > > the current version but there has not yet been a solution that has > > worked from the vendor. We're going on at least 8 months of this and > > customers are getting more and more vocal about this... Yes, you can > > tell them tough cookies, but that isn't exactly customer friendly nor > > does it help the poor guy who spent an hour on their resume only to lose > > it all. We've been in contact with 2 other sites with the same issue (a > > local high school and another library somewhere - I forget where.) > > > > Anyone run into any AD GPO policies that makes things difficult? :) > > > > Thanks for the stories so far! :-D I think we're going to set up a test > > box or two. ;-) If you have more, I am certainly willing to listen! ;) > > > > Thanks, > > Gretchen Garcia > > MCLD IT Services > > [log in to unmask] <mailto:[log in to unmask]> > > > > -----Original Message----- > > From: Library NT [mailto:[log in to unmask]] On Behalf Of GRAY, > > PAUL > > Sent: Monday, April 05, 2010 10:19 AM > > To: [log in to unmask] <mailto:[log in to unmask]> > > Subject: Re: Deep Freeze and anti-virus software > > > > Short answer -- YES you need both - especially if it is on a network. > > Deep Freeze does a WONDERFUL job of cleaning up any changes - > > intentional or unintentional made on a machine. > > Love it -- would not want to have to to my job without it. > > BUT - > > Deep Freeze does NOT BLOCK anything from coming into your computer. > > Unless you reboot your system several times a day - > > Virsuses, Malware, can still invade your system - compromise information > > - spread itself to the patron's jump drive etc before you ever have a > > reason to reboot. > > > > To me - Deep Freeze is a supplement to -- not a substitute for standard > > safety practices. > > > > Opinions stated are my own etc etc etc > > > > Paul H Gray > > TCC NE Library > > Hurst, Tx > > ________________________________ > > From: Library NT [[log in to unmask] > <mailto:[log in to unmask]>] On Behalf Of Hartung, Steven > > [[log in to unmask] <mailto:[log in to unmask]>] > > Sent: Monday, April 05, 2010 12:09 PM > > To: [log in to unmask] <mailto:[log in to unmask]> > > Subject: [LIBNT-L] Deep Freeze and anti-virus software > > > > Can I expand Gretchen's question and ask if anyone is using Deep Freeze > > as the only solution in protecting their machines, or if you find the > > need to continue with a virus protection software as well. Thanks. > > > > Steven Hartung > > Pamunkey Regional Library > > 804.537.6214 office > > 804.537.6389 fax > > > > From: Library NT [mailto:[log in to unmask]] On Behalf Of Sylvia > > MacKenzie > > Sent: Monday, April 05, 2010 12:58 PM > > To: [log in to unmask] <mailto:[log in to unmask]> > > Subject: Re: [LIBNT-L] Deep Freeze > > > > We have used Deepfreeze at our library for over 10 years and have had no > > problems with it. Currently we are using deepfreeze version 6 which > > allows you to do administration from one computer to all your public > > computers. > > > > We use it on over 100 computers. Deepfreeze works on Vista and windows 7 > > as well as XP > > > > I wouldn't recommend steady state as it is only for XP and vista. > > > > Microsoft won't be continuing its use on Windows 7. We tried on > > different computers and had a lot of problems with it. It may be free > > but not worth the aggravation for the problems it caused. What steady > > state is - is a really locked down guest account so you will run into > > limitations with it and problems using some of the operating system > > whereas deepfreeze doesn't do that. Faronics offers discounts for > > libraries for volume licensing. We use PC Reservation and their print > > management system and it doesn't affect it at all. Deepfreeze also works > > on 64 bit systems You can download an evaluation from > > www.faronics.com <http://www.faronics.com><http://www.faronics.com> if > you want to test it. > > > > Sylvia MacKenzie > > > > Colchseter East Hants Public Library > > > > Truro NS Canada > > > > From: Library NT [mailto:[log in to unmask]] On Behalf Of > > Vermeersch, Scott M. > > Sent: Monday, April 05, 2010 1:25 PM > > To: [log in to unmask] <mailto:[log in to unmask]> > > Subject: Re: [LIBNT-L] Deep Freeze > > > > You may also want to look at Microsoft SteadyState. Similar to > > Deepfreeze but free. > > > > Scott Vermeersch > > Systems Analyst > > Mayo Clinic Libraries > > E-mail: [log in to unmask] > <mailto:[log in to unmask]><mailto:[log in to unmask]> > > __________________________ > > Mayo Clinic > > 200 First Street SW > > Rochester, MN 55905 > > www.mayoclinic.org <http://www.mayoclinic.org><http://www.mayoclinic.org/> > > > > ________________________________ > > From: Library NT [mailto:[log in to unmask]] On Behalf Of Wong, > > Channing > > Sent: Monday, April 05, 2010 11:07 AM > > To: [log in to unmask] <mailto:[log in to unmask]> > > Subject: Re: [LIBNT-L] Deep Freeze > > We use deep freeze with library online and trend micro. It works fine in > > that setup. If any problems or virus warnings come up staff can just > > restart the machine and it'll be like nothing has happened. > > > > The only real issue is scheduling updates to be done as the machines are > > frozen. This includes windows updates or any software installed > > including trend. There is a scheduler to setup update times. It is a > > good product. They will to unifying their management console eventually > > so I'm told so you can admin all their software from one panel. > > > > On Apr 5, 2010, at 9:00 AM, "Gretchen Garcia - LIBRARY" > > <[log in to unmask] > <mailto:[log in to unmask]><mailto:[log in to unmask]>> > wrote: > > Good morning LibNT! ;-) I am curious about your stories (good and bad) > > about using Deep Freeze in your environment. Especially if you have your > > public machines on a domain and use any sort of PC access management > > system (We are using SAM.) We are currently running XP and using Trend > > Micro as our Anti-virus. > > We seem to be running into walls using our current solution and we're > > not getting the response we would like from the vendor. > > Any and all stories (again, good, bad and ugly) would be appreciated. > > ;-) Thanks much! > > Thanks, > > Gretchen Garcia > > MCLD IT Services > > [log in to unmask] > <mailto:[log in to unmask]><mailto:[log in to unmask]> > > http://www.mcldaz.org > > "There are 10 types of people in this world. Those who understand binary > > and those who don't." =) > > > > Email Disclaimer: http://www.co.marin.ca.us/nav/misc/EmailDisclaimer.cfm > > >