Protecting the System Volume with Disk Protection
MultiPoint Services provides the option to instantly erase any changes to the system volume each time the computer is started. If you enable the Disk Protection feature, any modifications to the drive, such as configuration corruption or the introduction of malware, are undone the next time the computer restarts. This is a convenient feature for administrators who want to ensure that a known “good” or “golden” software image is loaded every time. Automatic updates or software patching can be scheduled, for example, in the middle of the night. The planning consideration is whether you want to have end users be able to make changes, such as installing software, from the Internet. With this feature enabled, if you want users to be able to store files, the file share will need to be outside of the system volume.