ASP Developer Network - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com

ASPDeveloper

ASPDeveloper.Net / VirtualServerFAQ.COM

Make sure you go to our home page for:

* Virtual Server 2005 FAQ
* ASP.Net 2.0 Information
* ASP.Net 2.0 Streaming Tutorials
* ASP.Net 2.0 HTML based Tutorials

Made possible by Business Internet Technology Shop (BitShop)

Virtual PC

Recent Virtual PC posts

* No sound in Vista?
* Mini newsgroup FAQ for the week of 8/3/2008
* virtual pc on vista basic.
* Error installing Windows XP on Virtual PC
* Unrecoverable Processor error encountered
* GetShortPathName issue
* New VM Wizard stuck on Quick Launch Bar on Virtual PC 2007 SP1
* VPC and serial port fixes
* multiple monitors
* A note on saved VMs
* Cannot connect to CISCO VPN from Virtual PC
* Few questions
* Does Software Restriction Policy on Host Affect a Guest OS?
* Can"t start a 486 game
* VMWare gives it away for free
* A point of curiosity
* transfer files from vista to virtual pc.
* VirtualBox, anyone?
* Dual Monitor Support
* Doom in Win Me in VirtualPC

Add Solution

Special windows account for VirtualPC

Source: microsoft.public.virtualpc
Sent: 08/03/2008
From: kakii <(email address - cut out)>
Message:

It is about win xp pro sp3, connected to LAN.
In LAN a DSL-Router as central point with USB external drive,
some Vista WLAN client,
and sometimes some other WLAN clients.

The win xp computer should get special account for usage
by our guests. Account with limited permissions, non-admin.

This account should be allowed only to
- run VirtualPC 2007 Virtual Machine created for this user
- use this virtual machine
- access from virt. machine the host's optical drives
- access from virt. machine the flash cards reader and digital cameras
connected to host
- access the external drive connected to router
- close the virtual machine sessions
- log off from host account
- shut-down the host windows

So before setting up the OS on virtual machine,
the first natural step is to configure permissions and restrictions
for the host special account. Installation and setup of
OS on virtual machine is planned not until the
host configuration is completed.

Security policies or similar (group policies) don't seem
to be the optimal way for this network setup.
Getting familiarized with this technique is time consuming.
There are plenty of help documentations but none
of them I have read presents the conceptual basics well.

So I searched for alternatives and found the Microsoft's
SteadyState. Also in this case it doesn't seem to be
pretty simple and quick in setup.

See the chapter "Optimize the PC before installing":
Maintain user privacy
- Delete files in My Documents folder and any other personal files on
the disk
- Clear the Internet History folder and any other history caches you
might have
- Clear temporary folders and delete temporary files

Do these recommendations it apply for all host's accounts or that one
only to be secured by SteadyState ?

See the chapter "Optimize performance":
- Uninstall software that will not be used by any user
There is some other account on the host used by its owner
for regular work. All installed software is in use.

See the chapter "Optimize performance":
- Defragment system drives to help ensure the computer is as fast as
possible. Note: Defragmentation is a critical step before using Windows
Disk Protection.
In my back-up process creation of complete image (no differential, no
incremental) is necessary after this step - time consuming.

What solution would you recommend for securing this special
host account ?
What are your experiences with MS SteadyState regarding
setup and management overhead ?

Post Reply | This is Spam! | Mark as Spam

Related Messages

Re: Update: requirements

Sent: 08/03/2008
From: Robert Comer <(email address - cut out)>
Message:

>- burning data to optical media

If it's optical media on the local PC, neither VPC, nor Virtual
Server, can do this.

--
Bob Comer <Microsoft MVP Windows - Virtual Machine>

On Sun, 03 Aug 2008 17:44:39 +0200, kakii <(email address - cut out)> wrote:

Show quoted text

>
>Guests are using this PC for following purposes
>- Accessing internet (web, mail clients, communicator like skype)
>- connecting digital cameras and/or flash cards, presenting the photos
>- burning data to optical media
>
>All above tasks to be carried out on virtual machine

Re: Special windows account for VirtualPC

Sent: 08/03/2008
From: kakii <(email address - cut out)>
Message:

The goal is to limit access to the host's resources
as wide as possible, except for those needed for
achieving targets listed in the thread start-up message.

Update: Special windows account for VirtualPC

Sent: 08/03/2008
From: kakii <(email address - cut out)>
Message:

It is about a private PC.
Used mainly by the owner for regular tasks.

Asked questions apply to a special account
to be used by quests. Guests don't use this
PC as often/intensive as the owner.

Update: requirements

Sent: 08/03/2008
From: kakii <(email address - cut out)>
Message:

It is desired that the host PC does automatically the system shutdown
as soon as the Guest user closes the virtual machine.

Re: Special windows account for VirtualPC

Sent: 08/03/2008
From: Bo Berglund <(email address - cut out)>
Message:

On Sun, 03 Aug 2008 16:28:58 +0200, kakii <(email address - cut out)> wrote:

Run your guests as vm's under virtual server 2005 then.
Make them start with the host system and keep the host out of reach
for the people using the guests. You can lock away the host in a
cupboard.

Instead let them connect to the guests from a different XP PC on the
network using Remote Desktop. THis XP PC you can have full control
over in terms of what is available on it since it just serves as a RDP
client.
This also has the advantage of allowing full screen mode without
taxing the host system too much. Especially if you want full screen at
higher resolutions...

--
Bo Berglund

Show quoted text

>
>The goal is to limit access to the host's resources
>as wide as possible, except for those needed for
>achieving targets listed in the thread start-up message.

Update: requirements

Sent: 08/03/2008
From: kakii <(email address - cut out)>
Message:

Guests are using this PC for following purposes
- Accessing internet (web, mail clients, communicator like skype)
- connecting digital cameras and/or flash cards, presenting the photos
- burning data to optical media

All above tasks to be carried out on virtual machine

Re: Update: requirements

Sent: 08/03/2008
From: Bo Berglund <(email address - cut out)>
Message:

On Sun, 03 Aug 2008 17:44:39 +0200, kakii <(email address - cut out)> wrote:

Can be done
Not possible
Not possible
You're out of luck... :-(

--
Bo Berglund

Show quoted text

Re: Update: requirements

Sent: 08/03/2008
From: kakii <(email address - cut out)>
Message:

Bo Berglund wrote:

VirtualPC 2007 help says following
"Using other removable devices
You can access removable drives on the host operating system, such as
USB–connected hard drives and Zip drives, by using shared folders. For
more information about setting up shared folders for use between a host
operating system and a virtual machine, see Managing shared folders for
virtual machines."

Two another topics - you are right, not possible.

Show quoted text

> On Sun, 03 Aug 2008 17:44:39 +0200, kakii <(email address - cut out)> wrote:
>
>> Guests are using this PC for following purposes
>> - Accessing internet (web, mail clients, communicator like skype)
> Can be done
>> - connecting digital cameras and/or flash cards, presenting the photos
> Not possible
>> - burning data to optical media
> Not possible
>> All above tasks to be carried out on virtual machine
> You're out of luck... :-(
>

Post Reply | This is Spam! | Mark as Spam

Other groups

Virtual PC (Mac)(3592)	Virtual PC(12844)	Virtual PC (French)(496)
Virtual Server 2005(6245)

Our Sponsors

Virtual Server 2005 Info Here!
http://www.aspdeveloper.net

Wiki

Blogs

Articles

Image galleries

File galleries

Forums

Maps

Directories

ASP Developer Network (since 1996) - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com
Copyright © 1997-2005 by BitShop, Inc. All Rights Reserved.
No content may be reproduced in any form without written permission from BitShop, Inc.
We will be honored to assist with reproduction rights on our material if you contact us.
We also can provide print articles for your magazine, private training seminars at your site, and conference presentations.
Thank you for visiting. Please bookmark our site if you found it useful!
If you wish to make a donation it will help further the development of these free resources: