Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

we're going to be rolling out some laptops with Windows 7 Home Premium 64-bit on them to clients and are looking for ways to lock down the majority of Windows settings (version, updates, etc.).

I know SteadyState (free tool from Microsoft) has worked well for many users of XP and Vista, but sadly there's no Windows 7 support.

After some Googling, it looks like Deep Freeze may be an option. Are there any other tools out there that people have used and like? Any other ideas?


share|improve this question

Use GPOs (even local ones) to lock it down. There's tons of info on MS's website.

MS also publishes framework documents regarding security practices, for Windows 7.

One you think you've got it locked down a bit, run the MBSA and it'll generate a report on any glaring errors it finds.

I'd also recommend dumping the Home Edition, get Pro/Ent/Ult (something made for business).

Running gimmicky "we'll plug up all your security holes" software tends to give you the impression that you don't need to think about security practices. While it might tighten up security, users are by far the biggest security problems.

share|improve this answer
+1 Also: create users as limited users, not members of Administrators. – jscott Jul 20 '10 at 13:08

Just recently MS released information on how to create a SteadyState like environment in Windows 7, hope this helps someone:

Group Policy Settings for Creating a Steady State

Windows SteadyState Reference Spreadsheet

Creating a Steady State by Using Microsoft Technologies

share|improve this answer
All but the third link are now dead. Sad. – Chris Moschini May 11 '11 at 19:41
@chris - I've updated the links – edusysadmin May 14 '11 at 16:52

We use DeepFreeze at the college where I work on all public machines, and it's great. However, it might be a little too restrictive for what you want.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.