Protecting the System Volume with Disk Protection
Published: January 28, 2013
Applies To: Windows MultiPoint Server 2012
New in Windows MultiPoint Server 2012 is the option to instantly erase any changes to the system volume each time the computer is started. If the Disk Protection feature is enabled, any modifications to the drive. such as configuration corruption or the introduction of malware, are undone the next time the computer restarts. This is a convenient feature for administrators who want to ensure that a known “good” or “golden” software image is loaded every time. Automatic updates or software patching can be scheduled, for example, in the middle of the night. The planning consideration is whether you want to have end users be able to make changes, such as installing software, from the Internet. With this feature enabled, if you want users to be able to store files, the file share will need to be outside of the system volume.