Slide 13 of 28
Notes:
On a Green or fully controlled PC the user does not have to belong to the local administrators group. Because we want to protect the user from unintended errors and prohibit the state of the PC. The basic setup of a green PC restricts the file access to the local disk ( we were inspired by in some features of the ZAK) As a result, some tools cannot be used (e.g. regedit, service manager, performance tool, ...)
The great advantage is that the user cannot install applications which affect the installed applications, because the user cannot override existing files.
After the basic setup some applications are preinstalled on the green PC. The user can also install and uninstall whatever he wants. The installation script is similar to the yellow installation script except that the user is not ask for a local path and after copying files to the local disk the file access to these file is also restricted, that the user cannot delete this files.
Updates are installed automatically at logon. The user is asked, if he wants to install the update now or at the next logon.
