If you share your PC with many users, some of whom may be messy users with a habit of littering files and changing settings, or you might just be a privacy nut who doesn’t like to leave any traces behind, either way, a new and previously unannounced feature in Windows 7 called “PC Safeguard” might just be what you’re after.
First noticed by the enthusiasts at JCXP.net, “PC Safeguard”, as it is called in the Windows 7 user account settings, prevents specified standard user accounts (cannot be applied to admin accounts) from making permanent and unwanted changes by removing all changes and files saved after the user logs off.
Credit where credit is due, this feature is not fundamentally new. Since 2005, Microsoft has offered a tool previously known as the “Shared Computer Toolkit” now “Windows SteadyState” to both Windows XP and Vista users to do exactly this function and a little more. The interesting thing however is that the feature is now baked into Windows 7 – making it more widely known to users as well as simplifying the process drastically.
To enable this feature, click on the “Set up PC Safeguard” link when managing a user account. Select the “Turn on PC Safeguard” option, apply and wait approximately 5 minutes whilst it ponders about the question of life. It might seem like it’s not responding, but trust me, the magic is happening.
If you’re big brother with a soft spot, you can also tweak the Safeguard feature to allow users to access individual hard drive volumes. One scenario where this might be useful is to set up a small 1GB partition where the user can secure their files without resorting to removable media.
Now when that user logs on, they are presented with this message window reminding them their files will be removed after log off. Also when they try to add files to their user folders, a popup appears, reminding the impending vaporization.
From this point on, the user experience is identical to any other standard user’s. They can access applications installed for all-users, change wallpapers and themes and download files. There’s no performance impact, nor additional restrictions. The difference however is that everything will be reverted to a blank state the next time they log in. Metaphorically speaking, it’s like IE8’s InPrivate or Google Chrome’s Incognito for user profiles.
I suspect this feature will be fined tuned in the coming Windows 7 builds to inherit some of the more advanced features of SteadyState (ex. time restriction and application blacklist) but I can already see this very popular with home and public computers.
Update: To the contrary, this feature has actually been removed from Windows 7 since the beta builds.
34 Comments
Fowl
Hopefully this will be the default for the Guest account. It is quite anoying having to manually set the acl on the guest account’s profile as to prevent it from:
a) becoming huge
b) privacy
Frank
Nice, but I still would’ve preferred some sort of sandboxing tool that I can just install an application to without it affecting anything else, without having to log into a different account. Would be ideal for when you have to download some poorly written third party app just to convert a file or something.
William
Great for Internet Cafes or when my friends ‘borrow’ my computer. Im loving WIndows 7 more and more by the day. I think Vista was a required pain to get to this. I take my hat off for Sinofsky and all the microsofties. If Apple dare carry on thier stupid childish adverts Ill throw my iPhone in the bin!
Nitz
I’m glad they’re finally offering SteadyState as part of the core OS. A feature I’ve been using for quite some time for public-access computers, I’ve always felt that this is something that should at least ship with the enterprise versions of the operating system.
albertpkmn
Long Zheng………. is the writer Chinese?
RC
He’s Australian.
Jon Laslow
Is there any hint as to whether this will be available for domain-joined systems, and available to be setup via Group Policy? I’d love to be able to stop paying for DeepFreeze license renewals and use this instead, however being able to have a degree of remote management and be able to turn it on or off based on a User/Group or GPO would be absolutely required.
madonion
i can’t really imagine this being useful for anything other than the guest account which should have it on by default.
surely any account you actively set up is going to be using the computer frequently enough that deleting all their files when they log would just be inpractical.
Chris Haaker
Long – can you get a copy of the cool Windows7 wallpaper that doesnt seem to come with Windows7 that we got at PDC? The login screen wallpaper? The blue, underwater looking light from above wallpaper? Gracias and ciao!
David Taraso
Madonion: This feature is targeted more towards schools or public environments such as a web cafe, or even for families with young children that might have fun messing around with settings.
Chris Haaker: http://www.istartedsomething.com/20081028/download-the-official-pdc-20 08-wallpaper/
theoriginalsomeone
it’s the Windows Disk Protection feature of SCT/SteadyState? Awesome!! Best of all, it’ll work with 64-bit since it’ll be part of the OS. I guess this offers “registry safeguard” as well because the registry eventually is a set of files in %windir%\system32\config and %userprofile%.
bernard
You know, this reminds me of something our IT does for our lab computers. They use a program called Deep Freeze which essentially does the same thing, and works both for the MAC and PC. I’m going to tell them about it, see if when we upgrade to 7 if we should use this technology instead of Deep Freeze.
David Taraso
You brought up an interesting point actually theoriginalsomeone , and that is PC Safeguard doesn’t appear to be included in the 64-Bit build.
http://www.jcxp.net/david/NoSafeguardIn64.PNG
trent
NTUSER.MAN ??
Anthony
Woot, it’s like ‘pr0n mode’ for the desktop. save files and movies, then log off and know youre safe.. all under the unsuspecting guest account
Manan
I’ve had a pretty bad experience with something like this. We were setting up the college comps for LAN Gaming and the lab in-charge did not tell us that the machine was sand-boxed, they had a software called Deep Freeze installed on all the comps, we installed the games unawares and shut down the comps only to come next day and find everything gone. We performed the sequence 3 times only to hit our heads with the wall on realizing that the machine must’ve been sand-boxed.
Responder
@Manan
LOL, I’m sure exactly that’s why they sandboxed the lab computers!!!
Bad experience for you as a student, great experience for the admins.
Nick W
Do you have any information on the link “Link Online Accounts” to your user profile in W7? The link seems pretty interesting, but is broken and I haven’t seen anything else on it.
Michel de Rooij
@trent: Good point.
Rowdy
I’m using build 6801, 32 bit, but I can’t seem to find this feature?
I’m having the same screen as the 64bit screenshot posted above by David.
Long Zheng
@Rowdy: Are you sure it’s a standard user?
hutchi
Rowdy,
I also have build 6801, 32-bit, and i cannot find this feature anywhere.
xaml
Why the heck wouldn’t SteadyState let itself get installed on Windows Server 2008?
Rowdy
@Long Zheng:
Yes, i’m sure it’s a standard user. I also tried it with/without a password and things like that.
I suppose this features depends on the processor used then, the same as with DEP, that won’t run on older processors either.
John
I agree with Frank. When I first saw the title to this entry I thought it was a built in application sandbox. I hope hope they integrate that as well… oh wait, I’ll just submit it to the Windows 7 Taskforce site. =]
John
Lol I also had a similar experience to Manan.
Mike
I never had this option before. I had it installed along side another operating system.
I decided to reinstall windows, letting it take the entire drive. During the installation, windows created a hidden
system partition at 200mb, and afterards, after creating the standard account, the pc safeguard option was available. Perhaps it could have to do with letting Windows 7 take the entire drive, or to have a Windows System partition.
Dennis Baker
How is this fundamentally different from mandatory profiles (ntuser.dat –> ntuser.man) apart from being easier for the lay person to work with?
Win7Guru
Hey Long,
I recently installed am currently dual booting Win7 RC and Win7 Beta 7000 and I have a question regarding the PC Safeguard feature. Is it missing for a reason in RC?
I have followed the guide and done some research and no luck. Please help me.
Long Zheng
@Win7Guru: Yeah it appears to be removed with Windows 7 since the beta.
Dominic
el calendario de niurka y bobby
maricopa county jail records
formal letter format
sss online inquiry
media player 10 codecs
resignation letter sample
chopper frames
free printable graph paper for kindergarten
writing worksheets
arm numbness
The Patri0t
^ That’s SPAM, Long, and do you have any idea why this feature was removed? I was looking forward to this one.
shishir asati
ausome !!
updates …
abx
hi…
im not sure if it work as much with deep freeze interprise…BUT can’t find dp for win 7
il try this…
gudluck to me wewewewewewewe
Leave a Reply
Sandbox users with Windows 7 PC Safeguard - istartedsomething | WinSe7en
[...] that keeps a computer clean by eliminating all changes a user makes. See the original post at: Sandbox users with Windows 7 PC Safeguard – istartedsomething Tags: [...]
Windows 7’s PC Safeguard sandboxes user accounts
[...] via iStartedSomething ] [...]
The CTRAN weblog » Blog Archive » Sandbox users with Windows 7 PC Safeguard
[...] Found this over at istartedsomething.com [...]
Windows 7 - Page 2 - FreddysHouse
[...] This also looks pretty good as a more integrated feature: Sandbox users with Windows 7 PC Safeguard – istartedsomething [...]
Tobbis Blog » Mit Windows 7 im Sandkasten arbeiten
[...] eben bei istartedsomething gelesen, dass mit Windows 7 eine Funktion namens “PC Safeguard” Einzug halten wird, die den [...]
Otra dosis de novedades en Windows 7
[...] un usuario invitado termine de utilizar el ordenador, todos los cambios sean borrados. Pues ahora Windows 7 nos permitirá hacer esto sin recurrir a software adicional. Bastará con activar el modo “Safeguard” para un [...]
Otra dosis de novedades en Windows 7 | Planeta Tecnologia
[...] un usuario invitado termine de utilizar el ordenador, todos los cambios sean borrados. Pues ahora Windows 7 nos permitirá hacer esto sin recurrir a software adicional. Bastará con activar el modo “Safeguard” para un [...]
Más novedades de Windows 7 (Parte II) | Geekets
[...] Fuente: Started Something [...]
G@boWeb » Otra dosis de novedades en Windows 7
[...] un usuario invitado termine de utilizar el ordenador, todos los cambios sean borrados. Pues ahora Windows 7 nos permitirá hacer esto sin recurrir a software adicional. Bastará con activar el modo “Safeguard” para un determinado [...]
Sandbox Standard User Accounts In Windows 7 | I'm Just Being Manan
[...] had posted that Windows 7 will feature a that will allow admins sandbox user accounts on the PC. Apparently, back then it was called PC Safeguard, it now has been renamed to Guest [...]
novedades en Windows 7 at Blog Borchani Studios
[...] un usuario invitado termine de utilizar el ordenador, todos los cambios sean borrados. Pues ahora Windows 7 nos permitirá hacer esto sin recurrir a software adicional. Bastará con activar el modo “Safeguard” para un determinado [...]