Cleaning a Multi-User machine

[Torotech]

Hi All,

I have a multi-user machine that executives use. For security reasons, I would like an automatic way to "clean" the computer after they log out. The executives leave their files on it, and Im concerned that other users could potentially get these files. .doc, .xls and .ppt on the desktops and indivdual "My Documents", are my main concerns. All suggestions are welcome!

Best Regards,
Todd

 

[longhair]

Torotech,
what rights do they have? are they using a generic account or do they all have their own user id? if their own user id then see #1
1)if only user rights then other users will not be able to get to the desktop or mydocs folder (although admins & maybe powerusers can) if i remember correct - you may want to check this out.
2) you could check out the vbs forum and use that or a batch job to delete the files. i'll check to see if there's a way to key a script on logout.
3) perhaps set up a gpo?
regards,
longhair

 

[longhair]

Torotech,
check out:

http://www.tek-tips.com/viewthread.cfm?qid=906647

regards,
longhair

 

[chipk]

I would enable roaming profiles for these users and secure the location of those profiles on the network. Then I would use GPO to delete cached copies of profiles upon logoff:

http://support.microsoft.com/?id=274152

This would apply to all computers, however.

 

[ArizonaGeek]

If any of these dont fit your need you can always create a Ghost image of the PC at a point you like then if its small enough throw a bootable USB key in with the image and reload every thing. I've got an 8gb key and can reload a computer in less than 5 minutes. I can even transfer the image across our network in about 10 minutes. This is probably a bit more drastic than you need but just another solution to add to the pile of other good ones.

Cheers
Rob

 

[Torotech]

My Friends,

Thanks for all the replies. To answer your questions, most of them ARE full administrators. I don't care for deleting their profiles each time, because of the user specific things they will lose. I will look into the VBS ideas, though.

 

[Auger282]

you could always go with a clean slate computer .. or a computer that everytime it reboots goes back to its configuration or orig image.

we use them in school environments because the kids can format the disk... reboot and its just like new for the next class...

http://www.fortresgrand.com/products/cls/cls.htm

 

[linney]

Microsoft Shared Computer Toolkit for Windows XP

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

http://www.microsoft.com/downloads/...857D-92B716077A84&displaylang=en&Hash=MMJP77F

 

[elmurado]

I like eraser-you can schedule it so that it deletes profiles securely-ie with 7 passes(or more) and rewrites filling up with 1's and 0's.

http://www.heidi.ie/eraser/

Also has a ute called DBAN that can do a whole drive.