The Perfect XP System

Set up a low-maintenance, hassle (virus and spyware) free Windows XP computer.

Requirements

Deep Freeze by Faronics - maintains a fixed base image, dropping all file changes after a reboot. Deep Freeze Enterprise is required.
Partitioning Tool - creates and manages partitions.

Basis

The basic idea consists of two separate software programs, Deep Freeze and Software Virtualization Solution, which work together to create a fixed system, yet seamlessly keeps user data and applications in place. As a result, the system will maintain a consistent base on the system partition while allowing the user to modify his or her own profile and data on a separate data partition.

Deep Freeze

Deep Freeze is a kernel driver that sits between Windows and the disk. This program intercepts all write commands and wipes any changes upon reboot.

Deep Freeze instantly protects and preserves baseline computer configurations. No matter what changes a user makes to a workstation, simply restart to eradicate all changes and reset the computer to its original state - right down to the last byte. Expensive computer assets are kept running at 100% capacity and technical support time is reduced or eliminated completely. The result is consistent trouble-free computing on a truly protected and parallel network, completely free of harmful viruses and unwanted programs.

Altiris SVS

Altiris SVS accomplishes a similar task to Deep Freeze at the application level. This program intercepts all application writes to the disk (files and registry) and stores them in SVS's own repository. To run a program, simply enable it in SVS, and the desired application will appear to be installed "automagically".

Altiris® Software Virtualization Solution™ (SVS™) is a new way to use software. By placing applications and data into managed units called Virtual Software Packages™ (VSP's™), SVS allows you to instantly activate, deactivate, or reset applications, to completely avoid conflicts between applications, and to remove them cleanly without altering the base Windows installation. Say goodbye to "DLL Hell" and "Registry Rot". Getting apps and data into VSP's is simple with an included tool.

Product integration

While frozen, all changes saved to the system partition are lost upon reboot. However, new applications installed to Altiris SVS with the correct configuration will retain their data.

Instructions

1. Backup & Plan

This is a required step, as the "perfect xp system" will require a clean install of Windows XP. It is also advisable to create a plan. Make sure to read through this guide before attempting any actions.

2. Format & Partition

Split the primary hard drive into two separate partitions: a system drive and a data drive.

3. Install XP & Software

Install the operating system with any essential base software, i.e. Office. Make sure to update the software and OS. It is also wise to clean up the base image with software such as CCleaner.

4. Install SVS

Grab a copy of Altiris SVS and install. The default redirection folder will need to be changed to the data partition. Here is an example to install the redirection folder to D:\fslrdr
msiexec.exe /i Software_Virtualization_Agent.msi
PRODUCT_KEY=[product key] INSTALL_ADMIN=1 D_FSLRDR=D:\fslrdr INSTALLDIR=C:\SVSAgent

The D_FSLRDR parameter specifies the SVS file redirection folder, and the INSTALLDIR parameter specifies the Altiris SVS Program folder.

A PRODUCT_KEY is also required, but is free from Altiris for personal use.

5. Move the profiles

To preserve user profiles, the C:\Documents and Settings\ folder must be moved to the data partition. Modify the following registry key:
Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\WindowsNT\CurrentVersion\ProfileList
Name: ProfilesDirectory

Change this value to the the new profiles directory on the data partition. For example, it may be located at D:\Documents and Settings or D:\Profiles.
Then, change the sub-keys' ProfilesDirectory value for all users, listed under their Windows Security ID to their specific directory, i.e. D:\Profiles\Joe.

6. Bridge the registry

Because the SVS stores its settings in the protected Windows registry, a workaround must be made to keep changes to Altiris.

First, create an empty file called REDIRECT.HIVE in the fslrdr folder. Change the HKLM\SYSTEM\Altiris\FSL\DefaultRegRedirect value to fslrdr.

Then, create two batch files which will import/export the Altiris registry section:

Startup.bat
@ECHO OFF
dfc get /isfrozen
IF ERRORLEVEL 1 GOTO FROZEN
IF ERRORLEVEL 0 GOTO THAWED
GOTO END
:FROZEN
reg load HKLM\fslrdr D:\fslrdr\REDIRECT.HIVE
reg import D:\fslrdr\fsl.reg
GOTO END
:THAWED
GOTO END
:END

Shutdown.bat
@ECHO OFF
dfc get /isfrozen
IF ERRORLEVEL 1 GOTO FROZEN
IF ERRORLEVEL 0 GOTO THAWED
GOTO END
:FROZEN
SVSCMD * D -F
reg export "hklm\system\Altiris\FSL" D:\fslrdr\fsl.reg
reg unload HKLM\fslrdr
GOTO END
:THAWED
GOTO END
:END

Make sure to change directory paths as needed.

Copy the export and import files to
C:\WINDOWS\System32\GroupPolicy\Machine\Scripts\[Shutdown]/[Start]respectively.

Then, open the Group Policy Editor by running
gpedit.msc
Go to: Computer Configuration > Windows Settings > Scripts(Startup/Shutdown) and register the previous batch files.

These steps should ensure a up to date SVS registry. Simply make sure the exported/imported registry files remain intact. As a backup, I recommend exporting the fsl.reg nightly, in case the computer has any issues shutting down:
Backup.bat
@ECHO OFF
dfc get /isfrozen
IF ERRORLEVEL 1 GOTO FROZEN
IF ERRORLEVEL 0 GOTO THAWED
GOTO END
:FROZEN
reg export "hklm\system\Altiris\FSL" D:\fslrdr\fsl.reg
GOTO END
:THAWED
GOTO END
:END

7. Freeze the computer

Change Deep Freeze's state to frozen and reboot.

Congratulations! You now have a computer that will run in perfect condition through time. However, you may be thinking: how do I install new programs? It is a hassle to reboot every time you want to install something. This is where Altiris SVS comes in handy.

8. Installing new programs

New programs can be installed through SVS. To install a new application, use the wizard to create a new layer. This will then step you through the installation process.

Please know: not all programs will work under SVS, most notably applications with device drivers. Install those programs directly before freezing your computer. Here are some common programs, and tips on how to set them up in SVS.

Maintenance

You will still need to maintain your computer occasionally. To install Windows Updates, antivirus updates, and program updates (programs not installed through SVS), you must unfreeze the computer. Reboot into the "thawed" desktop, do your maintenance tasks, and reboot back into a frozen state.