Security settings protect the computer from being compromised or damaged by user activities. The Security Settings options in Windows SteadyState include:

• Remove the Administrator user name from the Welcome screen (requires pressing CTRL+ALT+DEL twice to log on to accounts not listed)
  The Windows Welcome screen lists all user account names residing on that computer. Selecting this option removes the Administrator user name from the list on this screen. To log on as Administrator, you must press CTRL-ALT-DEL twice to bring up the traditional logon screen.
  

  Note:
  When a Windows SteadyState computer is connected to a domain network, this setting is unavailable.

• Remove the Shut Down and Turn Off options from the Log On to Windows dialog box and Welcome Screen
  Selecting this option prevents users from shutting down or turning off the computer from the Log On to Windows dialog box and the Welcome screen.
  
• Do not allow Windows to compute and store passwords using LAN Manager
  Selecting this option helps promote secure password storage by disabling the LanMan hash (LMHash) form of each password. LMHash is an encryption mechanism used to support backward compatibility with earlier Windows operating systems.
  
• Do not store user names or passwords used to log on to Windows Live ID or the domain
  Selecting this option prevents Windows XP or Windows Vista from saving users’ Windows Live ID account and domain credentials and forces users to enter this information each time they begin a session. This improves privacy and prevents users from logging on with the credentials of people who have previously used the computer.
  

  Note:
  If you select this option, you must restart Windows for it to become active.

• Prevent users from creating folders and files in drive C:\
  Selecting this option changes the access control list (ACL) in the root of the system drive to prevent users from creating files and folders.
  
• Prevent users from opening Microsoft Office documents from within Internet Explorer
  Selecting this option helps to ensure that Microsoft Office applications host their own documents so that the optional Microsoft Office software restriction works correctly.
  
• Prevent write access to USB storage devices (requires restart of the computer)
  Selecting this option prevents users from saving files or data to USB storage devices.
  

© 2007 Microsoft Corporation. All rights reserved.