Abstract: Protection of a writable disk through utilization of a protection partition is provided. Critical updates and other designated program updates can be automatically applied to the writable disk without user intervention. Machine account password changes for domain-joined computers can be initiated and saved during a critical update and/or save change process. Local user account password changes can be permanently saved using the save change process, thus preserving the password change. Information directed to the protection partition can be saved to the writable media through a user save request. The information in the protection partition can be retained indefinitely and/or deleted without affecting the writable media. The protection partition can be automatically refreshed upon each restart. A user can interact with the disk protection system through a user interface that facilitates modifying one or more parameter associated with the protection partition.

Abstract: The ability to apply local machine restrictions on a per-user basis on machines that do not use a directory service is provided. A script that loads a user registry hive through a user interface is provided. The user interface provides a means for an authorized user to apply machine restrictions to a plurality of users. Through interaction with the user interface the registry hive is modified and applied to the appropriate user profile.