<BUTTON ID=btnStartup class=Startup tabindex=1 accesskey="G" TITLE="Select this check box to make Getting Started open at logon (ALT+G)" style="width=20em;height=42px;" onmouseover="Light btnStartup, true" onmouseout="Light btnStartup, false" onclick="ClickStartup()"><img ID=Startup src="graphics/chkbox-0.gif" align="absmiddle"><b> <ID id="_locStartupText">Show <u>G</u>etting Started at Startup</ID></b></BUTTON>
<H1 id=Title>Getting Started with the Shared Computer Toolkit</H1>
<p id=TitleText >Welcome to the Microsoft Shared Computer Toolkit for Windows XP. Getting Started provides a quick and easy way to use the Toolkit and learn about its basic functionality.</p>
<hr>
<TABLE id=Quick class=q><tr><td>
<TR><td id=Q0>Quick access to useful utilities, tools, and resources:</td></TR>
<BUTTON id=Expand ACCESSKEY="S" TITLE="Expand/Collapse All Steps (ALT+S)" tabindex=15 class=2 onmouseover="Light Expand, true" onmouseout="Light Expand, false" onclick="ExpandAll">Expand All <u>S</u>teps</BUTTON>
<BUTTON ID=Step1 ACCESSKEY="1" CLASS=H2 tabindex=16 title="Click to expand/collapse this step (ALT+1)" onmouseover="Light Step1, true" onmouseout="Light Step1, false" onclick="ButtonClick Step1Text, dStep1, True">Step <u>1</u>. Prepare the Disk for Windows Disk Protection<SPAN ID=dStep1 CLASS=down>ê</SPAN></BUTTON>
<H3 ID=Step1Text STYLE="display:block">
<div id="wdpPrereq" style="display:none">
<p ID=S1a><b>Important:</b> The prerequisites for Windows Disk Protection have not been completed. Use a partition resizing utility to reduce the size of the Windows partition and leave at least 1024 MB or 10 percent of the disk (whichever is greater) as unallocated disk space <i>after</i> the Windows partition.</p>
<p ID=S1b>Review Chapter 2, "Prepare the Disk for Windows Disk Protection" in the Handbook to learn how to use <a ID=Norton tabindex=17 onmouseover="Light Norton, true" onmouseout="Light Norton, false" href="http://go.microsoft.com/fwlink/?LinkId=47542">Norton PartitionMagic 8.0</a> to create the unallocated disk space required by Windows Disk Protection.</p>
<p ID=S1c>Alternatively, you can use another disk partitioning product such as <a ID=TeraByte tabindex=18 onmouseover="Light TeraByte, true" onmouseout="Light TeraByte, false" href="http://go.microsoft.com/fwlink/?LinkId=46756">TeraByte Unlimited BootIt Next Generation</a>; available as a fully-working trial download with instructions on the TeraByte Unlimited Web site.</P>
<p ID=S1d>If you cannot prepare the disk as described, you can still use the other tools in the Toolkit.</p>
<p ID=S1e>Use the Disk Management utility in Windows XP to view the current disk configuration and compare it to the recommended configuration described in the Handbook.</p>
<p id="wdpEnabled" style="display:none">Windows Disk Protection is <b>On</b>.<br><br><b>Warning: </b>Windows Disk Protection clears all disk changes made to the Windows partition with each restart, by default. Be sure to <b>Save Changes</b> in Windows Disk Protection after you install new software, change Windows settings, or make any other changes you want to keep.</p>
<p id="wdpDisabled" style="display:none">The disk is properly prepared and Windows Disk Protection is <b>Off</b>.</p>
<p id="wdpQuery" style="display:inline">Querying Windows Disk Protection status... please wait.</p>
<P ID=pStep2 Title="These computer security settings make shared computers more secure.">The User Restrictions tool applies restrictions on a per-user basis. The following security settings, on the other hand, are applied to everyone who uses this computer. It is highly recommended that you check all of these computer security settings on shared computers:</P>
</td>
</tr>
<tr id=trLastLogon TITLE="To improve security by not revealing administrative accounts used recently.">
<td><LABEL ID=Step2a For=chkLastLogon onmouseover="Light Step2a, true" onmouseout="Light Step2a, false">Prevent account names from being saved in the CTRL+ALT+DEL logon dialog.</LABEL></td></tr>
<tr id=trNoLMHash TITLE="To improve the security of local password storage. Password change required to activate.">
<td><LABEL ID=Step2b For=chkNoLMHash onmouseover="Light Step2b, true" onmouseout="Light Step2b, false">Force Windows to store passwords in a secure format (not using LMHash).</LABEL></td></tr>
<tr id=trNoAcctCache TITLE="To improve privacy and make Windows Messenger and MSN Messenger faster to use. (Restart required to activate.)">
<td><LABEL ID=Step2c For=chkNoAcctCache onmouseover="Light Step2c, true" onmouseout="Light Step2c, false">Prevent Windows from caching Passport or domain credentials within user profiles.</LABEL></td></tr>
<tr id=trPreventWindir TITLE="This setting changes the access control list (ACL) in the root of C: to prevent users from creating files and folders within. It does not affect the ACLs for other folders.">
<td><LABEL ID=Step2e For=chkProfileErrAction onmouseover="Light Step2e, true" onmouseout="Light Step2e, false">Prevent logon to locked (or roaming) user profiles that cannot be found.</LABEL></td></tr>
<tr id=trDelRoamingCache TITLE="To improve the privacy of locked user profiles by removing cached user files and history at logoff.">
<td><LABEL ID=Step2f For=chkDelRoamingCache onmouseover="Light Step2f, true" onmouseout="Light Step2f, false">Remove cached copies of locked (or roaming) user profiles to improve privacy and save disk space.</LABEL></td></tr>
<tr id=trWelcomeOffComp TITLE="To prevent users from accidentally turning off the computer.">
<td><LABEL ID=Step2h For=chkOfficeIE onmouseover="Light Step2h, true" onmouseout="Light Step2h, false">Prevent Microsoft Office documents from opening within Internet Explorer.</LABEL></td></tr>
<tr id=trWelcomeLogon TITLE="The Welcome screen and does not require users to type in a user name to log on.">
<td><LABEL ID=Step2i For=chkWelcomeLogon onmouseover="Light Step2i, true" onmouseout="Light Step2i, false">Use the Welcome screen to simplify the log on process for users.</LABEL></td></tr>
<tr id=trWelcomeRemAcct TITLE="To prevent users from learning the Toolkit administrator account name.">
<td><LABEL ID=Step2j For=chkWelcomeRemAcct onmouseover="Light Step2j, true" onmouseout="Light Step2j, false">Remove <span id="welcomeUser">the Toolkit administrator</span> from the Welcome screen. <b>Important: </b>Press CTRL+ALT+DEL twice to log on to accounts not listed in the Welcome screen.</LABEL></td></tr>
</TABLE>
<P ID=pStep2a><b>Note: </b>Many of these check boxes take effect immediately, while some require a restart to take effect.</P>
<P ID=pStep2b>In addition to the settings above, it is important to have a strong password. Click <b>Test your Password</b> to ensure the Toolkit administrator account isn't using an easily guessable password.</P>
<P ID=srpAdminA><b>Software Restriction Policy (SRP) on this computer does not apply to Administrative accounts.</b></p>
<p ID=srpAdminB>This is likely because SRP has been configured previously on this computer.</p>
<p ID=srpAdminC>If you want to use the User Restrictions tool to restrict Administrative accounts, you need to take action so that this Warning no longer appears when you run Getting Started.</p>
<BUTTON id=srpHandbook tabindex=34 onmouseover="Light srpHandbook, true" onmouseout="Light srpHandbook, false" onmouseover="Highlight(true)" onmouseout="Highlight(false)" onclick='Run("Handbook")'><img align="absmiddle" src="graphics/Handbook.ico"><b> Open the <u>H</u>andbook</b></BUTTON>
<p ID=srpAdminD>Review <i>Chapter 7: Troubleshooting - Software Restriction Policy</i> in the Handbook for details on configuring SRP to apply to administrators in addition to users.</P>
</H3>
<BUTTON ID=Step3 ACCESSKEY="3" CLASS=H2 tabindex=35 title="Click to expand/collapse this step (ALT+3)" onmouseover="Light Step3, true" onmouseout="Light Step3, false" onclick="ButtonClick Step3Text, dStep3, True">Step <u>3</u>. Create a Public Account for Shared Access<SPAN ID=dStep3 CLASS=down>ê</SPAN></BUTTON>
<H3 ID=Step3Text STYLE="display:none">
<p ID=S3a>Click <b>Open User Accounts</b>, create a local limited user account called <b>Public</b> (or a name you prefer), and then close User Accounts.</p>
<BUTTON ID=Step3User tabindex=36 onmouseover="Light Step3User, true" onmouseout="Light Step3User, false" onclick='Run("User")'><img align="absmiddle" src="graphics/UserAccounts.ico"><b> Open User Accounts</b></BUTTON>
</H3>
<BUTTON ID=Step4 ACCESSKEY="4" CLASS=H2 tabindex=37 title="Click to expand/collapse this step (ALT+4)" onmouseover="Light Step4, true" onmouseout="Light Step4, false" onclick="ButtonClick Step4Text, dStep4, True">Step <u>4</u>. Configure the Public User Profile<SPAN ID=dStep4 CLASS=down>ê</SPAN></BUTTON>
<H3 ID=Step4Text STYLE="display:none">
<p ID=S4a>Click <b>Log off now</b> and log on as the Public account to do the following:</p>
<UL>
<LI ID=S4a1>Set the desktop wallpaper and other Windows preferences.</LI>
<LI ID=S4a2>Add and configure one or more printers.</LI>
<LI ID=S4a3>Configure first time settings and accept license agreements for programs such as Windows Media Player and Microsoft Office.</li>
</UL>
<p ID=S4b><b>Important:</b> If first time settings are not configured, each user will be asked to complete the same initial steps each time they log on (after you use the User Restrictions tool to lock the profile).</p>
<p ID=S4c>When finished, log on as the Toolkit administrator and then return here (<b>Getting Started</b>) to complete the remaining steps.</p>
<BUTTON ID=Step5 ACCESSKEY="5" CLASS=H2 tabindex=39 title="Click to expand/collapse this step (ALT+5)" onmouseover="Light Step5, true" onmouseout="Light Step5, false" onclick="ButtonClick Step5Text, dStep5, True">Step <u>5</u>. Restrict and Lock the Public User Profile<SPAN ID=dStep5 CLASS=down>ê</SPAN></BUTTON>
<H3 ID=Step5Text STYLE="display:none">
<p ID=S5a>Click <b>Open User Restrictions</b>, select the Public user profile and:</p>
<UL>
<LI ID=S5a1>Select the <b>Lock this profile</b> check box to prevent user changes and Internet history from being saved.</LI>
<LI ID=S5a2>Select the <b>Recommended Restrictions for Shared Accounts</b> check box to make the account more secure for shared access.</LI>
<LI ID=S5a3>Configure the <b>General Settings</b> as you feel appropriate.</LI>
<LI ID=S5a4>Click <b>OK</b> to apply the restrictions and close the tool.</LI>
</UL>
<BUTTON id=Step5Restrict tabindex=40 onmouseover="Light Step5Restrict, true" onmouseout="Light Step5Restrict, false" onclick='Run("Restrict")'><img align="absmiddle" src="graphics/Restrict.ico"><b> Open User Restrictions</b></BUTTON>
</H3>
<BUTTON ID=Step6 ACCESSKEY="6" CLASS=H2 tabindex=41 title="Click to expand/collapse this step (ALT+6)" onmouseover="Light Step6, true" onmouseout="Light Step6, false" onclick="ButtonClick Step6Text, dStep6, True">Step <u>6</u>. Test the Public User Profile<SPAN ID=dStep6 CLASS=down>ê</SPAN></BUTTON>
<H3 ID=Step6Text STYLE="display:none">
<P ID=S6a>Click <b>Log off now</b> and log on as Public to test the restricted user profile, confirm that the necessary programs are available and working, and that the restrictions are appropriate.</P>
<P ID=S6b>When finished, log on as the Toolkit administrator and then return here (<b>Getting Started</b>) to complete the remaining steps.</P>
<LI ID=S7a2>Ensure that <b>Critical Updates </b>are enabled and scheduled to occur daily while the computer is not in use.</LI>
<LI ID=S7a3>Click <b>OK</b> to finish and then click <b>Yes</b> when asked to restart the computer.</LI>
</UL>
<P ID=S7b><B>Important:</B> When Windows Disk Protection is on, return to the Windows Disk Protection tool to save changes of any kind to the Windows partition. For example, <b>Save changes with next restart</b> is required when you install new programs or make any Windows configuration changes while Windows Disk Protection is on.</P>
<P ID=S7c><b>Note:</b> The <i>Windows partition </i>is usually the C: drive, which contains Windows and other programs.</P>
<BUTTON id=Step7WDP tabindex=44 onmouseover="Light Step7WDP, true" onmouseout="Light Step7WDP, false" onclick='Run("DiskProtect")'><img align="absmiddle" src="graphics/DiskProtect.ico"><b> Open Windows Disk Protection</b></BUTTON>
</H3>
<BUTTON ID=Step8 ACCESSKEY="8" CLASS=H2 tabindex=45 title="Click to expand/collapse this step (ALT+8)" onmouseover="Light Step8, true" onmouseout="Light Step8, false" onclick="ButtonClick Step8Text, dStep8, True">Step <u>8</u>. You're Done! Learn More About the Toolkit<SPAN ID=dStep8 CLASS=down>ê</SPAN></BUTTON>
<H3 ID=Step8Text STYLE="display:none">
<p ID=S8a>The Handbook includes additional best practices and steps you should consider for improving the security and reliability of your shared computers, as well as several advanced topics.</p>
<BUTTON ID=Step8Handbook tabindex=46 onmouseover="Light Step8Handbook, true" onmouseout="Light Step8Handbook, false" onclick='Run("Handbook")'><img align="absmiddle" src="graphics/Handbook.ico"><b> Open the Shared Computer Toolkit Handbook</b></BUTTON>
<p ID=S8b>Help describes each tool in more detail, and provides information about several useful command-line tools that may interest you.</p>
<BUTTON ID=Step8Help tabindex=47 onmouseover="Light Step8Help, true" onmouseout="Light Step8Help, false" onclick='Run("Help")'><img align="absmiddle" src="graphics/Help.gif"><b> Open the Shared Computer Toolkit Help</b></BUTTON>
