Re: OT: Inhibiting persistent changes to a workstation

From	Don Y <this@isnotme.com>
Newsgroups	sci.electronics.design, comp.arch.embedded
Subject	Re: OT: Inhibiting persistent changes to a workstation
Date	2013-09-28 09:32 -0700
Organization	Aioe.org NNTP Server
Message-ID	<l270a3$lrc$1@speranza.aioe.org> (permalink)
References	<l25gll$vdb$1@speranza.aioe.org> <t8nd49te149ool1ebh2egvj44i57h8fh92@4ax.com>

Cross-posted to 2 groups.

Show all headers | View raw

Hi Rich,

On 9/28/2013 6:56 AM, Rich Webb wrote:
> On Fri, 27 Sep 2013 19:59:07 -0700, Don Y <this@isnotme.com> wrote:
>
>> Well, today I was formally told that W7 will be installed on
>> these machines (see "OT: Disk 'imaging' SW" thread).
>>
>> *And*, I've been asked to set up 10 machines in a "lab"
>> for students to "drop in", as needed.
>>
>> [For the record, I don't run W7 so have only casual experience
>> with it and its capabilities]

>> So, I'm looking for something that will "discard" any changes
>> made to a system (W7) after a login session terminates.
>
> I use the Windows "Enhanced Write Filter" (EWF) on XPe machines
> running off of compact flash to make them stateless: the boot medium
> is write-inhibited with "changes" written to a RAM cache.
>
> <http://msdn.microsoft.com/en-us/library/ms940853(v=WinEmbedded.5).aspx>

This must be similar to how the various sandboxes are implemented:
intercept the writes and divert them elsewhere (RAM or a chunk of
disk set aside for this purpose).

> It looks like some folks are using it successfully with Windows 7
> <http://www.mp3car.com/winnt-based/140081-ewf-on-windows-7-32-bit-or-64-bit-enhanced-write-filter.html>
>
> Downside: it's "boot" based not "login" based. It's also possible to
> disable EWF, make changes, and re-enable EWF. That's good, making it
> possible to upgrade/modify the base system but, of course, it's also
> vulnerable to hacking if somebody really wanted to get at it.

So, it's not something "Administrator" controlled?  I.e., could
I create an unprivileged "Student" user and enforce this on
his actions -- while letting a privileged user avoid it
entirely?

Thread

OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-27 19:59 -0700
  Re: OT:  Inhibiting persistent changes to a workstation Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2013-09-27 21:46 -0700
    Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-27 23:01 -0700
  Re: Inhibiting persistent changes to a workstation "Tim Williams" <tmoranwms@charter.net> - 2013-09-28 02:25 -0500
    Re: Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 09:21 -0700
      Re: Inhibiting persistent changes to a workstation "Tim Williams" <tmoranwms@charter.net> - 2013-09-28 12:31 -0500
        Re: Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 13:21 -0700
          Re: Inhibiting persistent changes to a workstation "Tim Williams" <tmoranwms@charter.net> - 2013-09-29 01:47 -0500
      Re: Inhibiting persistent changes to a workstation "Tim Williams" <tmoranwms@charter.net> - 2013-09-28 12:33 -0500
        Re: Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 13:27 -0700
  Re: OT:  Inhibiting persistent changes to a workstation Tom Gardner <spamjunk@blueyonder.co.uk> - 2013-09-28 10:34 +0100
    Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 16:23 -0700
      Re: OT:  Inhibiting persistent changes to a workstation Herbert Kleebauer <klee@unibwm.de> - 2013-09-29 10:50 +0200
        Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-29 09:15 -0700
  Re: OT:  Inhibiting persistent changes to a workstation mike <ham789@netzero.net> - 2013-09-28 04:00 -0700
    Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 09:29 -0700
      Re: OT:  Inhibiting persistent changes to a workstation mike <ham789@netzero.net> - 2013-09-28 13:15 -0700
        Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 13:20 -0700
          Re: OT:  Inhibiting persistent changes to a workstation Paul <paul@pcserviceselectronics.co.uk> - 2013-09-28 23:07 +0100
            Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 15:41 -0700
  Re: OT:  Inhibiting persistent changes to a workstation Rich Webb <webb.ra@example.net> - 2013-09-28 09:56 -0400
    Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 09:32 -0700
      Re: OT:  Inhibiting persistent changes to a workstation Jeff Liebermann <jeffl@cruzio.com> - 2013-09-28 09:58 -0700
        Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 16:35 -0700
        Re: OT:  Inhibiting persistent changes to a workstation Spehro Pefhany <speffSNIP@interlogDOTyou.knowwhat> - 2013-09-28 20:12 -0400
          Re: OT:  Inhibiting persistent changes to a workstation Jeff Liebermann <jeffl@cruzio.com> - 2013-09-28 18:09 -0700
            Re: OT:  Inhibiting persistent changes to a workstation krw@attt.bizz - 2013-09-29 11:24 -0400
              Re: OT:  Inhibiting persistent changes to a workstation Jeff Liebermann <jeffl@cruzio.com> - 2013-09-30 10:24 -0700
                Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-30 12:11 -0700
                Re: OT:  Inhibiting persistent changes to a workstation Jeff Liebermann <jeffl@cruzio.com> - 2013-10-01 00:12 -0700
                Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-10-01 17:37 -0700
                Re: OT:  Inhibiting persistent changes to a workstation krw@attt.bizz - 2013-10-02 15:32 -0400
                Re: OT:  Inhibiting persistent changes to a workstation krw@attt.bizz - 2013-09-30 19:39 -0400
          Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 18:33 -0700
  Re: OT:  Inhibiting persistent changes to a workstation Jeff Liebermann <jeffl@cruzio.com> - 2013-09-28 09:37 -0700
    Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 16:38 -0700
      Re: OT:  Inhibiting persistent changes to a workstation Jeff Liebermann <jeffl@cruzio.com> - 2013-09-28 18:30 -0700
        Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-28 18:39 -0700
  Re: OT:  Inhibiting persistent changes to a workstation David Brown <david.brown@removethis.hesbynett.no> - 2013-09-29 23:13 +0200
    Re: OT:  Inhibiting persistent changes to a workstation Don Y <this@isnotme.com> - 2013-09-29 15:43 -0700
  Re: OT:  Inhibiting persistent changes to a workstation Don Y <This.is@not.Me> - 2013-11-17 01:06 -0700

csiph-web