Applying Change and Configuration Management

Meeting the Needs of Task-Based Users

Task-based users typically do not have a computer that is considered theirs. When they log off a computer, no data files of computer settings should be left behind. These users cannot install any applications, create files outside their network share, or alter the local computer from its administrator-configured state. In some cases, these computers might be Windows Terminal Services clients.

The following illustrates how change and configuration management might be applied to task-based users:

Basic User Data Management. All aspects apply to non-kiosk-style environments. The desktop is redirected. There is no local storage. For kiosks, local profiles are deleted when the user logs off.
Advanced User Data Management. Roaming User Profiles are used only if this is a non-kiosk-style environment. No data should be left behind.
Basic Settings Management. The desktop is redirected. Computer settings are strictly controlled.
Advanced Settings Management. The desktop is redirected. Computer settings are strictly controlled.
Basic Software Installation and Maintenance. Most applications are installed on a computer (rather than user) basis. Where user-assigned applications are needed, they should be run from the network.
Advanced Software Installation and Maintenance. Applications are only assigned. Prohibit software installation from anyplace but the network.
Basic Remote OS Installation. Access to remote installation options is removed completely so that installations are performed only by administrative or Help desk personnel. Alternatively, installation options are restricted so that the operating system installation becomes automatic.