E-Mail:

Prevent End-User System Changes With Deep Freeze Part I

End users tinkering with their desktop PCs can be a major headache for the help desk. But now there is a way to make end-user damage disappear by simply rebooting the PC, thanks to a product called Deep Freeze from Faronics Technologies. Version 6.2 has been certified by Microsoft with their official "Works with Windows Vista" designation.

How Deep Freeze works
Although Deep Freeze is a desktop lockdown utility, it operates differently than other such products. Instead of actively preventing end-user changes, Deep Freeze runs passively in the background. Users are free to make any changes to the system that they like. They can install programs, delete files, and change Windows settings. When the system is rebooted, though, all of the changes are undone and the system is restored to the state at which Deep Freeze was installed.

How does Deep Freeze accomplish this?
According to Vik Khanna, director of sales for Faronics Technologies, once Deep Freeze is installed it "freezes" all the used space on a particular hard drive partition. No permanent changes can then be made to that partition unless Deep Freeze is disabled or uninstalled or Deep Freeze Professional’s ThawSpace feature is used.

Just how Deep Freeze manages to lock a partition’s contents, Khanna wouldn’t say-to protect Deep Freeze’s patent-pending technology. The process does not, however, involve any imaging of the hard drive; in fact, Khanna touts Deep Freeze as an alternative to the repeated imaging that is often performed on open-environment computers, such as those found in school computer labs or corporate training classrooms.

But Deep Freeze’s power doesn’t come without a price. No permanent changes can be made to a partition once it has been frozen-including saving files. If a user saves a file to a "frozen" C: drive, it will be lost once the machine is rebooted-this includes information saved in Outlook PST files and Internet Explorer Favorites. Any programs that automatically save information to the frozen drive will need to be configured so they use an alternative location, such as a network drive or separate hard drive partition. Help desks must also configure their PCs to boot from the hard drive first for Deep Freeze to be totally effective. Otherwise, individuals would be able to boot from a floppy and bypass Deep Freeze.

One Comment

I’ve heard of this program for a while, which makes his claim of patent-pending a little odd.

That aside, the concept is very interesting. The one question I have is what happens if a user acquires malware or a virus before rebooting. It would appear to be allowed to do its damage.

We’re suffering from similar problems at work, like most IT staff. We’re using group policy for part of our protection. The other part is that we image the pc the moment it’s built and put the image on the hard drive. When it has to be rebuilt (and it almost *always* has to be rebuilt), the image is right where we need it. This cuts downtime to an absolute minimum.

Thanks for the tip.

What Do You Think?

 

Want to Start a Blog Here for Free?

Are you an expert in one subject or another? If your goal is to help others and dispense your hard-earned information back to the community, get involved in our community site today! You can write about anything - no matter the topic. Exceptional candidates will be offered the chance to contribute to (and generate revenue from) the main Lockergnome site. Join us today!

GnomeREPORT - Dec 4, 2008

Are We Ready For Opera 10?

Tips - Dec 3, 2008

Using Sysprep To Create An XP Image

Microsoft, Resources - Nov 28, 2008

60-Day Trial Of Microsoft Office Project

71 queries / 0.427 seconds.