User manual FARONICS DEEP FREEZE ENTERPRISE 6

This page intentionally left blank SecurityNotice Deep Freeze does not protect against booting from a floppy drive or CD-ROM drive. The CMOS should be configured to prevent booting from the floppy drive or CD-ROM drive (i.e. set to boot to the hard drive) and the CMOS must be password protected. This is a normal precaution for most public access computers. The Windows Registry, the computer CMOS and the boot sector are protected by Deep Freeze from within Windows. TechnicalSupport Every effort has been made to design this software for ease of use and to be problem free. If problems are encountered, contact Technical Support: Email: Phone: Hours: ContactInformation Web: Email: Phone: Fax: Hours: Address: support@faronics.com 800-943-6422 or 604-637-3333 7:00am to 5:00pm (Pacific Time) www.faronics.com sales@faronics.com 800-943-6422 or 604-637-3333 800-943-6488 or 604-637-8188 7:00am to 5:00pm (Pacific Time) Faronics Technologies USA Inc. Suite 170 ­ 2411 Old Crow Canyon Road San Ramon, CA 94583 USA Faronics Corporation 620 - 609 Granville St. Vancouver, BC V7Y 1G5 Canada AboutFaronics Faronics develops and markets intelligent utilities for absolute control of multi-user computing environments. Faronics' market-leading solutions have dramatically impacted the day-to-day lives of thousands of information technology professionals and computing lab managers, ensuring 100% availability of systems. Our user-driven, powerful technology innovations benefit educational institutions, libraries, government organizations and corporations. Incorporated in 1996, Faronics has two offices situated in the USA and Canada. Last modified: January, 2007 © 2007 Faronics Corporation. All rights reserved. Deep Freeze, Faronics, Faronics Anti-Executable, Faronics System Profiler, FreezeX, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners. This page intentionally left blank Contents Deep Freeze Overview .......................................................................................................................................7 About Deep Freeze .........................................................................................................................................................7 System Requirements .....................................................................................................................................................7 Deep Freeze Enterprise Components ..........................................................................................................................7 Deep Freeze Configuration Administrator .......................................................................................................8 Installing the Configuration Administrator ................................................................................................................8 Initializing the Customization Code ............................................................................................................................8 Re-Initializing the Customization Code......................................................................................................................9 Using the Configuration Administrator ....................................................................................................................10 Welcome Tab .................................................................................................................................................................10 Toolbar ......................................................................................................................................................................10 File Menu ..................................................................................................................................................................11 Password Protection................................................................................................................................................11 Configuration Tab ........................................................................................................................................................12 Passwords .................................................................................................................................................................12 Drives ........................................................................................................................................................................13 Restart/Shutdown ....................................................................................................................................................15 Maintenance .............................................................................................................................................................16 Advanced Maintenance ..........................................................................................................................................18 Miscellaneous...........................................................................................................................................................19 One Time Passwords Tab ............................................................................................................................................21 Create Programs Tab ....................................................................................................................................................22 Uninstalling the Configuration Administrator.........................................................................................................23 Deep Freeze Enterprise Console .....................................................................................................................24 Creating the Enterprise Console ................................................................................................................................24 Activating the Enterprise Console..............................................................................................................................24 Using the Enterprise Console .....................................................................................................................................25 Status Icons...............................................................................................................................................................25 View Options ...........................................................................................................................................................26 Managing Communication Between the Console and Workstations ...................................................................26 Managing Deep Freeze with the Console ..................................................................................................................27 Updating Deep Freeze Software ............................................................................................................................28 Sending Text Messages to Workstations...............................................................................................................28 Target Installing Deep Freeze ................................................................................................................................29 Updating a Deep Freeze Configuration File ........................................................................................................30 Dynamically Updating a Deep Freeze Configuration File .................................................................................31 Scheduling Deep Freeze Tasks ....................................................................................................................................33 Assigning Workstations to Scheduled Tasks........................................................................................................35 Deleting a Task.........................................................................................................................................................36 Scheduled Task Properties .....................................................................................................................................36 Managing Network and Groups .................................................................................................................................37 Adding a New Group ..............................................................................................................................................37 Building a User Defined Group Structure............................................................................................................37 Importing Groups from Active Directory............................................................................................................38 Adding Workstations to a User Defined Group ..................................................................................................38 Sorting Groups Alphabetically ..............................................................................................................................38 Importing or Exporting Groups to File ................................................................................................................38 Viewing the Console Log File .....................................................................................................................................38 Installing Deep Freeze .....................................................................................................................................39 Attended Install or Uninstall .......................................................................................................................................39 Uninstalling Deep Freeze .......................................................................................................................................40 Silent Install or Uninstall .............................................................................................................................................41 Silent Install or Uninstall Using a Shortcut ...............................................................................................................41 Network Install on Multiple Workstations ................................................................................................................42 Installing Over Existing Deep Freeze Versions ........................................................................................................42 Installing Using Imaging .............................................................................................................................................42 Target Install ..................................................................................................................................................................42 Managing Deep Freeze Workstations..............................................................................................................43 Workstation Logon .......................................................................................................................................................43 Boot Control..................................................................................................................................................................43 Network ........................................................................................................................................................................44 Clone ..............................................................................................................................................................................44 One Time Passwords ....................................................................................................................................................44 ThawSpace .....................................................................................................................................................................45 Permanent Software Installations, Changes, or Removals ......................................................................................45 Deep Freeze Command Line Control (DFC.EXE) ..........................................................................................46 DFC Return Values.......................................................................................................................................................47 Batch File Example .......................................................................................................................................................47 Update Mode .................................................................................................................................................................48 Remote Administration ...................................................................................................................................49 Remote Console ............................................................................................................................................................49 Server Service ................................................................................................................................................................49 Remote Control Enabled (RCE) Console ..................................................................................................................49 Differences Between Server Service and RCE Console ...........................................................................................50 Creating a Server Service .................................................................................................................................50 Configuring the Server Service ..................................................................................................................................51 Updating the Server Service from the Console ........................................................................................................51 Configuring a Remote Control Enabled (RCE) Console ................................................................................52 Setting Up a Remote Console ..........................................................................................................................54 Connecting to a Remote Console ..............................................................................................................................55 Ports and Protocols Explained ........................................................................................................................56 Appendix A: Network Examples......................................................................................................................57 Example 1 - Single Subnet ...........................................................................................................................................58 Example 2 - Multiple Subnets One Console .............................................................................................................59 Example 3 - Multiple Subnets Remote Control Enabled Console .........................................................................60 Example 4 - Multiple Subnets Central Server Service .............................................................................................61 Example 5 - Multiple Subnets Multiple Server Services ..........................................................................................62 Appendix B: Troubleshooting a Remote Console Connection .......................................................................63 No Clients In the Console ...........................................................................................................................................63 Port is in Use Error When Starting the Console ......................................................................................................64 DeepFreezeOverview AboutDeepFreeze With over five million installations, Deep Freeze has a proven track record of non-restrictive, complete Windows protection. Deep Freeze provides network administrators with a simple and 100% successful method of maintaining desktop systems and reduces software technical support to an absolute minimum. Completely invulnerable to hacking, Deep Freeze instantly protects and preserves original computer configurations. No matter what changes a user makes to a workstation, simply restart to eradicate all changes and reset the computer to its original state. Computing environments are easier to manage and maintain, and expensive computer assets are kept running at 100% capacity. The result is a truly protected and parallel network, completely free of harmful viruses and unwanted programs. SystemRequirements The Deep Freeze Configuration Administrator and the Enterprise Console require Windows 2000/XP/Vista to function properly. Deep Freeze requires Windows 95/98/Me/2000/XP/Vista and 10% free hard drive space. The hardware requirements are the same as the recommended requirements for the host operating system. DeepFreezeEnterpriseComponents Deep Freeze uses different colored icons to represent the functions of its components. Files identified by a red icon should generally only be installed on an administrator computer, while yellow icons should generally only be installed on workstations: Deep Freeze Enterprise Configuration Administrator installation file The Configuration Administrator application is used to create customized, preconfigured workstation installation program files, Workstation Seeds, the Enterprise Console, and generate One Time Passwords The Enterprise Console application is used to centrally deploy, monitor, manage, and maintain Deep Freeze installations Optional: The Server Manager is used to install, uninstall, manage and maintain the Deep Freeze Enterprise Server Service that allows Remote Console operation A customized Deep Freeze workstation installation file is created in the Configuration Administrator and deployed to workstations within the enterprise Optional: A Workstation Seed is used to Target Install Deep Freeze from the Enterprise Console; this Seed can be freely imaged with no license restrictions to enable rapid deployment DeepFreezeConfigurationAdministrator The Configuration Administrator is intended to be installed only on the computer used to administrate Deep Freeze. The Configuration Administrator is used to create a customized Deep Freeze installation file pre-configured with passwords, schedules, Workstation Seeds, the Enterprise Console, and the Server Service Manager. It is also able to generate One Time Passwords. InstallingtheConfigurationAdministrator Complete the following steps to install the Configuration Administrator: 1. Insert the CD-ROM from the media package into the CD-ROM drive. 2. Select Install Deep Freeze Enterprise Administrator in the window that appears on the desktop. If Deep Freeze has been downloaded via the Internet, double-click the file DF6Ent.exe to begin the installation process. The following screen appears: 3. Follow the steps presented. Read and accept the license agreement. 4. Click Install and the Configuration Administrator is installed on the computer. InitializingtheCustomizationCode Open the Configuration Administrator by selecting the following path from the Start menu: Start > All Programs > Faronics > Deep Freeze 6 Enterprise > Deep Freeze Administrator The Deep Freeze Enterprise Customization window appears the first time the Configuration Administrator is opened. Deep Freeze requires the administrator to enter a Customization Code to initialize the Configuration Administrator. The code must be at least eight characters long and may consist of any combination of alpha-numeric characters. This code is not a password that can be used to access Deep Freeze. It is a unique identifier that encrypts the Configuration Administrator, the Enterprise Console, the workstation installation files, the One Time Password Generation System, and Deep Freeze Command Line Control. The Customization Code ensures that no other administrators can access or control a workstation. Multiple Deep Freeze administrators controlling the same group of workstations should use a matching Customization Code. After entering a customization code, the following dialog appears: The Customization Code must be recorded and guarded with care. Faronics is unable to recover a lost or forgotten Customization Code! Re-InitializingtheCustomizationCode If another administrator wants to create installation files with the same Configuration Administrator using a different Customization Code, the DFInit6.exe program should be run. This resets the existing Customization Code for the Configuration Administrator. Enter a new Customization Code. Click OK for the new Customization Code to become active. UsingtheConfigurationAdministrator The Configuration Administrator is used to create a customized Deep Freeze installation program preconfigured with passwords, schedules, and other options. There are four main tabs for accessing the various options available: Welcome, Configuration, One Time Passwords, and Create Programs. WelcomeTab The Welcome tab provides contact information for Faronics, including a link to the company and Technical Support Web sites. Toolbar The Toolbar is available at the top of every tab in the Configuration Administrator. The following five buttons provide convenient access to some of the most commonly used functions: Create a New Configuration File Save a Configuration File Access Help Menu Open a Configuration File Save a Configuration File with a new name 10 FileMenu The File Menu contains the same options as those available on the Toolbar, with the additions of Password Protection, Create Server Console, Create Server Manager, Create Workstation Seed, and Create Workstation Install Program. PasswordProtection Password Protection offers an optional layer of security for the administrator. To password protect access to the Configuration Administrator, complete the following steps: 1. 2. 3. Check the Protect with password box. Enter and confirm the password Click OK to set the password or Cancel to exit the dialog without setting a password. 11 ConfigurationTab The Configuration tab has six sub-tabs used to configure various options. After all the desired configuration options have been selected, a customized workstation installation program file is ready to be created. This program file is used to install a pre-configured version of Deep Freeze on workstations. Passwords Deep Freeze Enterprise allows the administrator to choose up to 15 passwords, in addition to the One Time Password Generation System. To create a password, complete the following steps: 1. 2. Check Enable on the appropriate line. From the Type drop-down list, choose the preferred kind of password. The following options are available: Workstation: designated for use at a workstation Command Line: for use with Command Line Controls; the Command Line Control tool (DFC.exe) does not function unless at least one Command Line password is defined 3. 4. 5. LANDesk: designated for use through the LANDesk Management Suite Console. Optional: For Workstation passwords, check the User Change checkbox to allow a user to change the password at the workstation. Enter the password. To set a password to become active and expire on specified dates, check the Timeout checkbox and use the drop-down calendars to specify an Activation date and Expiration date. NOTE: Deep Freeze can use both One Time Passwords (OTPs) and fixed passwords. The OTP feature is always available and cannot be disabled. The fixed workstation passwords, defined in the Passwords tab, are optional. 12 Drives The Drives tab is used to select which drives are to be Frozen (protected by Deep Freeze) or Thawed (unprotected), and to create a ThawSpace--a virtual partition on a Frozen drive where data can be saved permanently. Frozen Drives By default, all drives are Frozen. To put a drive in a Thawed state, clear the checkbox of the preferred drive. In the example above, the C: drive is checked, but not the D: drive. This results in all workstations with only a C: drive being Frozen. Workstations with a D: partition or drive have a Frozen C: drive and a Thawed D: partition or drive. While only local drives (partitions or physical drives) can be Frozen, all drive letters are shown because the pre-configured installation file may be installed on many workstations with various hardware and software setups. Thaw External Hard Drives External hard disks connected via USB or IEEE 1394 (FireWire) are exempt from Deep Freeze protection by default on Windows 2000/XP/Vista workstations (i.e. they are not Frozen). To put the external drives in a Thawed state, check the USB and/or IEEE 1394 (FireWire) checkboxes. Network drives and removable media drives (floppy, memory keys, CD-RW, etc.) are not affected by Deep Freeze and therefore cannot be Frozen. ThawSpace ThawSpace is a virtual partition on a workstation that can be used to store programs, save files, or make permanent changes. All files stored in the ThawSpace are saved after a restart, even if the workstation is Frozen. To create a ThawSpace in the installation program, complete the following steps. 1 1. In the ThawSpace pane, check Create. 2. The ThawSpace Drive option is used to select the drive letter assigned to the ThawSpace. The default letter is T:, but it can be changed to any available letter. The next available letter is used if the selected drive letter already exists on a workstation when Deep Freeze is installed. 3. The Size option reflects the size of the ThawSpace; the default size is 1 GB and the minimum size is 16MB. Workstations running Windows 95/98/Me can host a maximum ThawSpace of 2GB. Workstations running Windows 2000/XP/Vista can host a maximum ThawSpace of 1 TB when using the NTFS file system or 4GB when using the FAT32 file system. If the workstation does not have enough free space to accommodate the selected ThawSpace size, the size of the ThawSpace is adjusted downward to ensure proper operation of the workstation. 4. Workstations running Windows 95/98/Me must use the FAT16 file system for a ThawSpace. Workstations running Windows 2000/XP/Vista use the NTFS file system by default, but this can be changed to FAT32 by selecting the radio button. 5. Check Retain existing ThawSpace to retain an existing ThawSpace on a Windows 2000/XP/ Vista workstation when Deep Freeze is uninstalled. If the option to include a ThawSpace has also been checked, the existing ThawSpace is retained during re-installation. A dialog is always displayed asking if the ThawSpace should be retained or deleted during an Attended Uninstall, regardless of whether Retain Existing ThawSpace has been checked. This option is not displayed if the uninstall is performed through the console. 14 Restart/Shutdown The Restart/Shutdown tab is used to schedule restarts or shutdowns. Restart/Shutdown Schedule To create a Restart/Shutdown schedule, complete the following steps: 1. In the Restart/Shutdown Schedule pane, check the days of the week the schedule will occur on. Optional: Check Set One Change All so all changes made apply to all schedules. 2. Choose Restart or Shutdown from the Restart/Shutdown drop-down list. 3. Enter the time the restart or shutdown is scheduled to happen in the Time field. Idle Restart/Shutdown Schedule In the Idle Restart/Shutdown Schedule pane, check Enable to configure a shutdown or restart after a specified period of inactivity. Choose Restart or Shutdown from the drop-down list, and indicate the number of minutes of inactivity that must pass before the workstation automatically restarts or shuts down. NOTE: Idle time is defined as no mouse or keyboard activity. Notification If the specified idle time passes, a dialog box appears on the workstation indicating that the workstation is about to restart or shutdown. Enter the number of minutes this dialog will remain on the screen for in the Warn user for: field (one minute by default). When the dialog is displayed, the user has the option to cancel the restart or shutdown by using the keyboard or mouse. Only one Restart/Shutdown per day can be scheduled; if the workstation needs to be automatically restarted on a more frequent basis, the Idle Time restart should be used, and/or the console scheduler (see p.33). 1 Maintenance The Maintenance tab is used to schedule a time when Deep Freeze is Thawed and when upgrades, new installations, maintenance, or any other permanent changes can be made. To create and configure a Maintenance Schedule, complete the following steps: 1. Check the box beside each day of the week when the Scheduled Maintenance will happen. Optional: Check Set One Change All to apply certain changes made for one day of the week to all other days. 2. 3. Enter the time to start the Scheduled Maintenance period and to restart the workstation into the Thawed state in the Start Time field. Optional: Check Disable Keys to prevent the keyboard and mouse from functioning on the workstation during the maintenance period. If this option has been checked, the workstation displays the following dialog during the maintenance period: 1 4. From the Run drop-down list, choose an action to occur during the maintenance period. Choose Batch file to allow workstations to run a Batch file automatically during the maintenance period. A custom Batch file can be entered on the Advanced Maintenance tab. Choose the Windows Updates to allow workstations to automatically install critical updates for Windows 2000/XP/Vista during the maintenance period via the Internet or an SUS server. The choice to use an SUS server and specify the server's IP address configured on the Advanced Maintenance tab. Enter the time to complete the Scheduled Maintenance period and to restart the workstation into the Frozen state in the Stop Time field. If the Stop Time precedes the Start Time, the Stop Time is assumed to be during the next day. Optional: check the Shutdown box to shut the workstation down at the conclusion of the maintenance period instead of restarting it. If Shutdown is checked, the workstation is Frozen the next time it is started. The Run Windows Updates feature does not actually perform updates, but makes the call to have the normal update method take place during the maintenance period. If the computer is off at the start of the maintenance period, the maintenance will not occur. The computer will not automatically turn on for the maintenance period unless a Wake-on-LAN call is scheduled in the console. 5. 6. 1 AdvancedMaintenance The Advanced Maintenance tab is used to specify SUS or WSUS server and batch file options for a Scheduled Maintenance period. Windows Update To use an SUS (Microsoft Software Update Services) or a WSUS (Windows Software Update Services) server for Windows critical updates, check Use SUS/WSUS Server and specify the server's IP address or server name. If Use SUS/WSUS Server is unchecked, Windows critical updates are downloaded via the Internet for each workstation individually. Microsoft SUS client can be downloaded at: http://www.microsoft.com/windows2000/downloads/recommended/susclient/default.asp Microsoft SUS server can be downloaded by searching for SUS server at: http://www.microsoft.com Run batch file with By default, customized batch files execute using the local System account. If the updates to be deployed are located on file servers that require authentication, check Specified User Account and enter the account Login ID, Password, and Domain to access the file servers. This applies to Windows 2000/XP/Vista only. Batch File Enter a custom Batch file to run during the maintenance period on days specified on the Maintenance tab. The same Batch file applies to all days that Run Bat File has been checked. The following options are available when running custom Batch files: · To clear the current batch file, click New · To load an existing file, click Open and browse to the location of the file · To save the contents of the field, click Save and browse to the preferred save location The batch file can be any command or series of commands that the command processor can run. Users can run custom scripts that require the use of a third-party scripting engine by calling the script from the batch file as if it was being run from the command line. 1 Miscellaneous The Miscellaneous tab is used to configure the network communications protocol that the Enterprise Console uses, as well as various security options. Network Communication between the Deep Freeze Enterprise Console and workstations with Deep Freeze installed can use two different modes: LAN Mode or LAN/WAN Mode. LAN: Check the LAN radio button to configure Deep Freeze to communicate within a Local Area Network (LAN). LAN mode is a self-configuring mode that requires only a port number; the default port is 7725. The port number can be changed if it is in conflict with other programs on the LAN. In LAN mode, the Deep Freeze workstations and the Enterprise Console find each other through UDP broadcasts. These broadcasts only occur when workstations or the Enterprise Console are started, ensuring that there is little network traffic associated with workstation and Console communication. LAN/WAN: Check the LAN/WAN radio button to configure Deep Freeze to communicate in both a LAN and a WAN (wide area network). LAN/WAN can be used in either a LAN or WAN environment and over the Internet. This mode uses an IP address or the computer name, along with a port number, to allow communication between the console and the managed workstations. The following two methods are available to identify the Console: · specify the Console IP, which must be static · specify the Console Name, in which case the IP can be dynamic When the Enterprise Console is behind a firewall or a NAT (network address translation) router, the firewall or router must be configured to allow traffic to pass through to the Enterprise Console. Depending on the firewall or router, workstations may need to be configured with the IP address of the firewall so that traffic can be forwarded. These settings can be changed on local workstations using the Network tab. 1 For more information on configuring and using Deep Freeze in a specific network environment, refer to Appendix A--Network Examples or contact Technical Support. If a port number other than the default of 7725 is used, care should be taken to ensure that there are no conflicts with applications already running on the network. Wellknown ports (0­1023) should be avoided and any Registered Ports (1024­49151) should be checked for conflicts before deployment. A complete listing of the ports assigned to various applications can be found on the Internet Assigned Numbers Authority web site at http://www.iana.org/assignments/ port-numbers. Advanced Options · Win 9x Prevent break outs from "Autoexec.bat": Check this option if the Windows 9x workstations are using the autoexec.bat file to execute programs before Windows starts; this prevents users from aborting the execution of the autoexec.bat file and gaining access to the system in an unprotected state Use Hard reboot when Thawed: Check this option to force workstations to perform an immediate restart when leaving the Thawed state; this option should be selected if the workstations experience problems shutting down when leaving the Scheduled Maintenance period · Local Policies Enable Deep Freeze local policies: For enhanced security, Deep Freeze removes the following local privileges: debugging programs, modifying firmware, and changing the system time; uncheck this option to use existing privileges Allow user to change the clock: Check this option to allow Frozen users to adjust the system clock. · Disable Command Line options: This option is checked by default. Unchecking this option allows for further customization of the Deep Freeze installation program when using the Silent Install System; checking this option prevents the pre-existing configuration choices from being changed during installation · Stealth Mode Show Frozen icon in system tray: Check this option to display the Deep Freeze is installed and the workstation is Frozen Show Thawed icon in system tray:Check this option to display the Deep Freeze is installed but the workstation is Thawed icon to indicate that icon to indicate that If the options to show a Deep Freeze icon in the System Tray are unchecked, the keyboard shortcut CTRL+ALT+SHIFT+F6 must be used to access the logon dialog · Control Windows Updates: This option is checked by default. This option allows Deep Freeze to override any Group Policy settings pertaining to Windows Updates. 20 OneTimePasswordsTab The One Time Passwords tab is used to generate temporary passwords for Deep Freeze that expire at midnight on the day they were generated. A One Time Password (OTP) can be useful if, for example, a Deep Freeze password is forgotten or if a configuration file was created without any passwords defined. An OTP can also be used to provide access to a workstation for an individual performing maintenance duties without requiring that individual to know the permanent Deep Freeze password. To create an OTP, complete the following steps: 1. Select either the Password valid for one use only radio button or the Password valid for multiple uses radio button. All OTPs expire at midnight on the day they were created, regardless of type. 2. Enter the OTP Token from the workstation that requires the OTP into the Token field. The OTP Token for the workstation is located in the logon dialog, as shown below. OTPtoken 3. Click Generate. 21 CreateProgramsTab The Create Programs tab is used to create customized Deep Freeze installation program files with all of the options that were configured in the Configuration tab. Click the appropriate icon to create one of the following programs: · Full Workstation Installation file: used to install Deep Freeze on workstations using an Attended Install, the Silent Install System, or a Target Install. The Workstation Seed is included in this file; it is not necessary to install the Workstation Seed if the Full Workstation Installation program is going to be installed. The file name for this program is DF6Wks.exe. Workstation Seed: a small program that allows administrators to remotely install and control workstations from the Enterprise Console. The Workstation Seed can be installed as part of a master image and then deployed via imaging software. All workstations on the LAN with the Workstation Seed installed are displayed in the Enterprise Console. The file name for this program is DF6WksSeed.exe. Enterprise Console: used to centrally deploy, monitor, manage, and maintain Deep Freeze installations. The console should only be installed on an administrator's computer. The file name for this program is DF6Console.exe. Server Manager: a program that installs the Deep Freeze Enterprise Server Service to allow Remote Console operation. The file name for this program is DF6ServerServiceManager.exe. · · · All files are saved to the Install Programs folder within the Deep Freeze 6 Enterprise folder by default. Alternate locations can be chosen and the file name can be changed if desired. It is recommended that a naming convention is used if the administrator is creating multiple customized installation files. 22 UninstallingtheConfigurationAdministrator Complete the following steps to uninstall the Configuration Administrator: 1. Open the Add/Remove Programs utility in the Windows Control Panel by selecting the following path from the Start menu: Start > Control Panel > Add or Remove Programs 2. 3. Select Deep Freeze Administrator - Enterprise and click the Change/Remove button. Follow the steps presented and the Configuration Administrator will be uninstalled from the computer. 2 DeepFreezeEnterpriseConsole The Deep Freeze Enterprise Console displays the status of all Frozen, Thawed, and Target workstations on the network and allows the administrator to perform specific tasks on those workstations. Detailed status information is available with selective or group reporting. The Enterprise Console allows administrators to remotely perform the following tasks: · Immediately Target Install workstations · Selectively Freeze, Thaw, or Thaw Locked one or more workstations · Dynamically update Restart/Shutdown, Maintenance, and Advanced Maintenance settings · Restart or shutdown workstations · Power on workstations equipped with a Wake-on-LAN network card · Update Deep Freeze software · Schedule tasks directly from the console · Send messages to workstations · Import groups and containers from Active Directory The console can only wake a workstation from a powered-down state if the workstation is properly configured to power on when a Wake-on-LAN packet is received. CreatingtheEnterpriseConsole To create an Enterprise Console, click the icon on the Create Programs tab. A standard Save As dialog displays. The default Save location for the console program is: C:\Program Files\Faronics\Deep Freeze 6 Enterprise\ Install Programs ActivatingtheEnterpriseConsole As a security feature of Deep Freeze Enterprise, when the DF6Console.exe file is copied to a new workstation, the console must be activated. When it is run for the first time on the new workstation, a dialog displays with an OTP Token. Enter this token in the Configuration Administrator's OTP Generation System. An OTP is generated. Enter it in the dialog and the Console will run. The Enterprise Console runs on Windows 2000/XP/Vista, and 2000 and 2003 Server. The computer on which the Enterprise Console is installed must not have an installation of the Workstation Seed or a full Deep Freeze installation. 24 UsingtheEnterpriseConsole Launch the Enterprise Console by double-clicking the DF6Console.exe file created by the Configuration Administrator. StatusIcons The Enterprise Console displays the status of the workstations on the local area network with the following icons beside or above the workstation name, depending on the view selected: Workstations that have the Deep Freeze Workstation Seed installed but do not have Deep Freeze installed; Deep Freeze can only be remotely installed on workstations with this icon. Workstations with Deep Freeze installed in a Frozen state Workstations with Deep Freeze installed in a Thawed state Workstations with Deep Freeze installed in a Thawed Locked state Workstations that are currently powered down Workstations that are currently in maintenance mode Workstations whose communication with the console has been interrupted 2 ViewOptions The Enterprise Console has three view options: Icons, Details, and List. Use the View menu to select a preferred appearance. The View menu can also be used to view the log for selected workstations or to remove the selected workstation(s) from History. ManagingCommunicationBetweentheConsoleandWorkstations A workstation can lose communication with the Console for any of the following reasons: · · · The workstation is powered off manually or is shut down without warning The network is experiencing heavy traffic or outages The workstation's network settings are changed to indicate a new Console In most cases, communication with the workstation is re-established when the workstation is powered on or when the conditions causing the communications breakdown are rectified. It may take several minutes for the workstation to report back to the Console and re-establish communication. If communication cannot be re-established, contact Technical Support for troubleshooting steps. 2 ManagingDeepFreezewiththeConsole The Enterprise Console contains a toolbar at the top of the screen that allows quick access to the functions of the Console. These commands can also be accessed using the contextual menu, as shown below, that appears by right-clicking on a specific workstation. When a particular action is chosen, the selected workstation performs the action and the status icons update accordingly. Specific icons are disabled if the selected workstation does not support that action. For example, a workstation that has a Target Icon, will not show the option to be Thawed or Frozen, because the program has not been installed yet. 2 UpdatingDeepFreezeSoftware To update Deep Freeze workstations with a new version of Deep Freeze, complete the following steps: 1. 2. 3. 3. 4. In the Configuration Administrator of the new version of Deep Freeze, create a blank workstation installation file. In the console, select the workstations to be updated; these workstations can be in either a Frozen or Thawed state. Right-click, and select Update Deep Freeze from the contextual menu. Alternatively, click the icon in the console toolbar. A standard Open file window appears. Select the blank workstation file and click Open. The selected workstations update to the new version of Deep Freeze software, but retain all settings from the current version. This feature works only with Deep Freeze 6.0 and higher. SendingTextMessagestoWorkstations To send a text message to one or more workstations, complete the following steps: 1. 2. 3. 4. Select the preferred computer(s) to send a message to. Right-click, and select Send text message from the contextual menu. Alternatively, click the icon in the console toolbar. Type the message in the dialog that appears and click Send. A dialog appears asking for confirmation to send the message to the selected workstations. Click OK to send or Cancel to close the dialog without sending the message. 2 TargetInstallingDeepFreeze Complete the following steps to remotely install a Full Workstation Installation on any workstation that has the Workstation Seed installed. 1. Right-click on one or multiple workstations and select Install, as shown below. 2. A dialog box appears, asking if the installation should proceed. Click OK. A dialog box appears to select the file to be installed on the remote workstation. 3. Select the installation file to use and click Open. 4. The workstation installs Deep Freeze and restarts. 5. Once the installation is complete, The Enterprise Console reflects the change in the workstation's status, and shows it as Frozen. 2 UpdatingaDeepFreezeConfigurationFile Complete the following steps to update the configuration on one or many workstation(s) with the settings of an existing .rdx file. 1. Right-click on the workstation(s) and select Update Configuration, as shown below. 2. A message appears asking for an existing .rdx file to be located. 3. 4. Click OK. A standard Open File dialog appears to select an .rdx file. Locate a file and click Open to update the configuration on the selected workstation(s) with the settings in the .rdx file. Click Cancel to cancel the configuration update. If the Network options in the new configuration have changed, the workstation(s) may lose communication with the existing Enterprise Console. If communication with the workstations is lost, check the Network settings on the updated workstations to ensure that the port numbers and/or IP address of the Console have not been changed. Changes to passwords take effect immediately. All other changes take effect after each workstation is restarted. ThawSpace and/or Frozen Drives cannot be changed through updating the configuration file. 0 DynamicallyUpdatingaDeepFreezeConfigurationFile Complete the following steps to dynamically update the configuration on a single or multiple workstations. 1. Right-click on the workstation(s) and select Update Maintenance from the contextual menu. Or, select the desired workstation(s) and click the Update Maintenance icon in the toolbar. 2. A red bar with six buttons appears at the bottom of the Workstations window. 3. Choose one of the following options: Click New to create a new sub-configuration set. Click Import to import the settings from an existing Deep Freeze Configuration file (.rdx) or Deep Freeze Workstation Installation File (.exe) into the sub-configuration window. In either case, a Configuration Screen, similar to the Configuration Administrator, appears containing a sub-configuration set of Restart/Shutdown, Maintenance, and Advanced Maintenance. 1 4. The three tabs on the Configuration Screen can be used to update the configuration on remote workstations. For further information about the options on each tab, refer to the sections in the Configuration Administrator documentation for Restart/Shutdown, Maintenance, and Advanced Maintenance. After the preferred configuration settings have been chose, close the Configuration Screen. The following message appears: 5. Click OK. 6. In the Workstations window, select the desired workstation(s) to be dynamically updated with the new configuration settings. 7. Click Send on the red bar to send the new configuration settings to the selected workstation(s). After sending the new configuration settings to the selected workstations, the following options are available: Click Save As to save the current settings of the Configuration Screen to a file. A standard Save File dialog displays where a location and file name can be specified. Click Edit at any time to re-open the Configuration Screen with the current settings intact. Click Close to clear the contents of the Configuration Screen and exit out of the dynamic configuration mode. When updating the configuration on the workstation, the Restart/Shutdown, Maintenance, and Advanced Maintenance options are updated with the new settings. On Windows 9x machines only, all changes take effect after the workstation is restarted. 2 SchedulingDeepFreezeTasks To schedule a Deep Freeze task in the Enterprise Console using the Scheduled Task Wizard, complete the following steps: 1. Open the Scheduled Task Wizard in one of the following ways: · · click Scheduler in the Network and Groups pane and click the Add Task icon right-click on Scheduler in the Network and Groups pane, and choose Add Task In either case, the following screen displays: 2. 3. Choose the preferred task and click Next. In the following screen, enter a name for the task. Task names must be unique; no two tasks can have the same name. 4. Click Next. The following screen displays: 5. 6. Choose the preferred task execution schedule: Daily, Weekly, Monthly, or One time only. Click Next. The following screen displays: 7. Select the start date and time that the task will execute on. NOTE: If the task is set to execute on a One time only basis, and the starting date is in the past, the task will not execute. If the task is set to execute on a Daily, Weekly or Monthly basis, and the starting date is in the past, the task will execute, but will start on the same day on the following week or month. 4 8. Click Next. The following screen displays: 9. Click Finish to complete the task schedule. AssigningWorkstationstoScheduledTasks After a task has been scheduled, it appears under the Scheduler in the Network and Groups section of the console. To assign workstations to a task, select the preferred computers from the Workstations pane in the console and drag them onto the preferred task. To see which computers are assigned to a specific task, click on the task. The assigned computers appear in the Workstations pane. To delete a workstation from a task, click on the workstation and press Delete. DeletingaTask To delete a task, click on the task and press Delete. ScheduledTaskProperties To see the properties of a task, right-click the task name and select View Properties. The following screen displays: The properties of a task cannot be changed after it has been created. Only the workstations that will execute the task can be changed by adding or deleting workstations. The Enterprise Console must be running for the scheduled tasks to execute. ManagingNetworkandGroups The Enterprise Console automatically arranges workstations by their workgroup or domain. Click on the appropriate workgroup or domain to view the workstations in that workgroup or domain. The Enterprise Console can be used to define specific groups in order to arrange workstations. AddingaNewGroup To add a new group, complete the following steps: 1. In the Network and Groups pane, right-click on User Defined Groups and choose Add User Defined Group. The following dialog appears. 2. Enter the name of the group to be added and click Add. The group appears under User Defined Groups in the Network and Groups pane. BuildingaUserDefinedGroupStructure After a group has been added, one or more sub groups can be added below it, and further sub-groups can be added indefinitely as a way to differentiate between environments, as in the example shown below: ImportingGroupsfromActiveDirectory If the group structure has already been designed within Active Directory, that structure can be imported directly into the console. To do this, right-click on User Defined Groups and choose Import user defined groups from Active Directory, or choose the option from the Tools menu. The Active Directory group with all its subgroups appears under User Defined Groups. NOTE: When this function is used, the console will import groups and containers from the domain that the console is logged into. AddingWorkstationstoaUserDefinedGroup Workstations can be added to a group by dragging them from the Workstations pane to the preferred group, or by using an automatic filter set during the creation of the groups. Automatic group filtering allows workstations to be added to user defined groups automatically. The workstations are added based on their workstation name. Wildcards (*, ?) can be used to add workstations based on a specific segment of the name. Example: Lab1-* adds all workstations with names starting with Lab1- . SortingGroupsAlphabetically To sort the User Defined Groups alphabetically, right-click on User Defined Groups and choose Sort Groups Alphabetically. ImportingorExportingGroupstoFile To import groups from a file or export groups to a file, choose the preferred option from the Tools menu. ViewingtheConsoleLogFile The Enterprise Console keeps a log of the status and activity history of all connected workstations. The log stores information for the previous 48 hours. Information older than 48 hours is automatically deleted from the log. To view the log file for one or many workstations, right-click on the workstation(s) and select Show Log for Selected Workstations. To sort the log file, click on a preferred heading. To export the log file as a .csv file, right-click and select Export to file, as shown: InstallingDeepFreeze After a customized installation program file has been created using the Configuration Administrator, Deep Freeze can be deployed to workstations using an Attended Install, a Target Install, the Silent Install System, or as part of an imaging process. All background utilities and antivirus software should be disabled and all applications should be closed prior to installation. These programs may interfere with the installation, which could result in Deep Freeze not functioning correctly. The workstation restarts after any type of installation is completed. Deep Freeze must be in a Thawed state for any type of uninstall to succeed. Any existing ThawSpace will be deleted during an uninstall if: · the option to retain existing ThawSpace was not checked in the Configuration Administrator · the ThawSpace was not created with Deep Freeze Enterprise Version 5 or later · the ThawSpace is on a Windows 95/98/Me workstation AttendedInstallorUninstall To install or uninstall Deep Freeze, complete the following steps: 1. Run the installation program file (DF6Wks.exe) on the workstation. The following screen appears. 2. Click Install to begin the installation. Follow the steps presented, then read and accept the license agreement. Deep Freeze installs and the workstation restarts. Click Uninstall to uninstall Deep Freeze. Uninstall can only be clicked if Deep Freeze has previously been installed. If there is an existing ThawSpace, Deep Freeze displays a dialog asking if it should be retained or deleted. UninstallingDeepFreeze The Enterprise Console can be used to uninstall Deep Freeze completely or to uninstall Deep Freeze but leave the Workstation Seed. A workstation must be in a Thawed state in order to uninstall the program. To uninstall Deep Freeze on a workstation and leave the Workstation Seed, right-click on the Thawed workstation(s) and select Uninstall - Leave Seed, as shown above. Or click the icon on the toolbar To completely uninstall Deep Freeze and the Workstation Seed, select the workstation(s) to be uninstalled and click the Uninstall icon on the Toolbar. The workstation must be Thawed before Deep Freeze can be uninstalled. The Enterprise Console prompts for confirmation. Once the uninstall is confirmed, Deep Freeze uninstalls and the workstation restarts. 40 SilentInstallorUninstall Deep Freeze can be rapidly installed to many workstations over a network using the Silent Install System. Any deployment utility that allows execution of a command line on a remote workstation can implement the Silent Install System. After the Silent Install is complete, the system immediately restarts. The command line has the following options: Syntax [/Install] [/Install /Seed] [/Uninstall] [/Uninstall /Seed] [/PW=password] [/AllowTimeChange] [/Freeze=C,D,...] [/Thaw=C,D,...] [/USB] [/FireWire] Description Install Deep Freeze using installation file Install only the specified workstation seed file Uninstall Deep Freeze Uninstall Deep Freeze and leave the workstation seed installed Set a password during installation Allow system clock to be changed Freeze only drives listed (Thaw all others) Thaw only drives listed (Freeze all others) Exempt external USB hard disks from protection (Windows 2000/XP/ Vista only) Exempt external FireWire hard disks from protection (Windows 2000/ XP/Vista only) DF6Wks.exe /Install /Freeze=C /PW=password Example Command Line: In the example, the Deep Freeze installation program file is named DF6Wks.exe. Only the C: drive will be Frozen. Any other drives on the workstation will be Thawed. If the workstation only has a C: drive, the [/Freeze] switch can be omitted. A password (password) will be created. After executing the command, Deep Freeze will install and the workstation will restart Frozen and ready to use. The Silent Install System does not work without the [/Install] or [/Uninstall] switch. Deep Freeze must be in a Thawed state before [/Uninstall] can be used. To run the configuration command line options, Disable Command Line options on the Miscellaneous tab must be cleared. SilentInstallorUninstallUsingaShortcut Deep Freeze can be installed directly on a workstation without having to use the installation dialog box by completing the following steps. 1. 2. 3. 4. Locate the Deep Freeze installation program file (DF6Wks.exe) on the target workstation. Right-click on the icon and choose Create Shortcut. Right-click on the shortcut and choose Properties. Edit the path of the Target field by typing /install or /uninstall at the path's end. and Settings\DF6Wks.exe" /install Example Shortcut Target:"C:\Documents Double-clicking on the new shortcut results in the immediate installation or uninstallation of Deep Freeze, followed by a restart of the workstation. Deep Freeze must be in a Thawed state before /uninstall can be used. 41 NetworkInstallonMultipleWorkstations The Silent Install System can also be used to install Deep Freeze on multiple workstations over a network. If the workstations on the network use logon scripts, the scripts can be used to install Deep Freeze on all networked workstations automatically. All workstations will restart Frozen and ready for use after installation has completed. Use the following command line syntaxes to create an install error report log file: · \\Server Name\Share Name\DF6Wks.exe /Install >> dfinstall.log NOTE: the dfinstall.log file must exist prior to running this command. InstallingOverExistingDeepFreezeVersions Unless the Update Deep Freeze Software feature is used in the console (for Deep Freeze 6.0 and higher), all existing Deep Freeze versions must be uninstalled prior to performing any new Deep Freeze installation. InstallingUsingImaging Deep Freeze has been designed to work with all major imaging and desktop management software. Use either an Attended Install or the Silent Install System to install Deep Freeze on a master image. Deep Freeze must be prepared for deployment before finalizing a master image. To prepare the master image for deployment, restart the workstation into a Thawed state and log on to Deep Freeze using the keyboard shortcut CTRL+SHIFT+ALT+F6. Select the Clone tab, and click Set Flag. After imaging, the workstations require an additional restart for Deep Freeze to correctly detect the changes in disk configuration. If the workstations are imaged in an unattended mode, steps should be taken to ensure the workstations are restarted to allow the configuration to update. To return to the Frozen state after imaging is complete, set Deep Freeze to Boot Thawed on next n number of restarts (in the master image) so that after n number of restarts, the workstation is automatically Frozen. Alternatively, use Deep Freeze Command Line Control to Freeze selected workstations. TargetInstall Deep Freeze can also be deployed using a Target Install from the Enterprise Console. 42 ManagingDeepFreezeWorkstations WorkstationLogon Use one of the following ways to access Deep Freeze on a workstation. · If the Deep Freeze icon is shown in the System Tray, hold down the SHIFT key and doubleclick the Deep Freeze icon · Use the keyboard shortcut CTRL+SHIFT+ALT+F6 Either method brings up the logon dialog. Enter the administrator password and click OK to log on to Deep Freeze. As an additional security feature, Deep Freeze prevents dictionary attacks by automatically restarting the workstation after 10 unsuccessful login attempts. BootControl The Boot Control tab is used to set the mode Deep Freeze will be in after the next restart. Choose one of the following options: Boot Frozen to ensure that the workstation is Frozen the next time it is restarted Boot Thawed on next to ensure that the workstation is Thawed each time it is restarted for the next specified number of restarts Boot Thawed to ensure that the workstation is Thawed each time it is restarted Select the radio button next to the desired choice and click OK for the changes to take effect. 4 Network The Network tab can be used to configure the network options on a workstation. To choose either the LAN or the LAN/WAN method of communication, click the preferred radio button. When the WAN radio button is selected, a valid IP address for the Enterprise Console must be entered in the Console IP field. The default port number can be changed by unchecking Use Default Port and entering the desired port number. For further information on network configuration, refer to Appendix A. Clone The Clone tab is used to prepare master images for the deployment process. For more information refer to the Install Using Imaging section. OneTimePasswords A One Time Password (OTP) can be generated using the Configuration Administrator. The Configuration Administrator requires a token from the workstation in order to generate an OTP. The OTP Token for the workstation is located in the Deep Freeze logon dialog. Refer to the Configuration Administrator documentation for more information about the One Time Password Generation System. An OTP can be used one or more times after it has been generated (depending on the options set when it was generated). All OTP passwords expire at midnight on the day they were created. An OTP must be used to logon to Deep Freeze if no passwords were created for the Deep Freeze configuration file. 44 ThawSpace ThawSpace is a virtual partition on a workstation that can be used to store programs, save files, or make permanent changes. All files stored in the ThawSpace are saved after a restart, even if the workstation is Frozen. ThawSpace is only available if it was set to be created in the Deep Freeze Configuration Administrator. Any existing ThawSpace is deleted during an uninstall if any of the following apply: · the option to retain existing ThawSpace was not checked in the Configuration Administrator · the ThawSpace was not created with Deep Freeze Professional Version 5 or later · the ThawSpace is on a Windows 95/98/Me workstation PermanentSoftwareInstallations,Changes,orRemovals Workstations must be Thawed for any permanent changes to take effect. Installation of software often requires one or more restarts to complete the installation. It is recommended that the Boot Control tab is used to allow the workstation to restart with Deep Freeze Thawed until installations or changes are finished. 4 DeepFreezeCommandLineControl(DFC.EXE) The Deep Freeze Command Line Control (DFC) offers network administrators increased flexibility in managing Deep Freeze workstations. DFC works in combination with third-party enterprise management tools and/or central management solutions. This combination allows administrators to update workstations on the fly and on demand. It is important to note that DFC is not a stand-alone application. DFC integrates seamlessly with any solution that can run script files, including standard run-once login scripts. The DFC executable is not installed by default as part of the workstation install package on client computers. The file must either be copied to the local computers prior to the DFC commands being run or must be placed in a network share accessible by the computer and run from that network share. The DFC executable is installed in same directory as the Configuration Administrator: C:\Program Files\Faronics\Deep Freeze 6 Enterprise\DFC.exe DFC commands require a password with command line rights. OTPs cannot be used. Syntax DFC password /BOOTTHAWED Description Restarts workstation in a Thawed state; only works on Frozen workstations Sets workstation to restart Thawed the next time it restarts; only works on Frozen workstations and does not force workstation to restart Restarts workstation into a Frozen state; only works on Thawed workstations Sets up workstation to restart Frozen the next time it restarts; only works on Thawed workstations and does not force workstation to restart Restarts workstation in a Thawed state with keyboard and mouse disabled; only works on Frozen workstations Sets up workstation to restart in a Thawed state with keyboard and mouse disabled; only works on Frozen workstation and does not force a restart to DFC password /THAWNEXTBOOT DFC password /BOOTFROZEN DFC password /FREEZENEXTBOOT DFC password /BOOTTHAWEDNOINPUT DFC password /THAWLOCKNEXTBOOT DFC password /UPDATE = [path installer file] Sets up workstation to restart in a Thawed state and install a Deep Freeze update Queries workstation if it is Frozen. Returns 0 if Thawed. Returns 1 if Frozen. Replaces Deep Freeze configuration information. Works on Thawed or Frozen workstations. Password changes are effective immediately. Other changes require restart. DFC get /ISFROZEN DFC password /CFG=[path] depfrz.rdx 4 DFCReturnValues On completion of any DFC command, the DFC returns the following values: Value 0 1 2 3 4 5-* Description SUCCESS or Boolean FALSE, for commands returning a Boolean result Boolean TRUE ERROR - User does not have administrator rights ERROR - DFC command not valid on this installation ERROR - Invalid command ERROR - Internal error executing command BatchFileExample The example below shows how to check for a specific error level using a DOS Batch file: @ECHO OFF DFC.EXE get /isfrozen IF Errorlevel 5 GOTO Error5 IF Errorlevel 4 GOTO Error4 IF Errorlevel 3 GOTO Error3 IF Errorlevel 2 GOTO Error2 IF Errorlevel 1 GOTO Error1 IF Errorlevel 0 GOTO Error0 :Error5 Echo Errorlevel 5 Goto END :Error4 Echo Errorlevel 4 Goto END :Error3 Echo Errorlevel 3 Goto END :Error2 Echo Errorlevel 2 Goto END :Error1 Echo Errorlevel 1 Goto END :Error0 Echo Errorlevel 0 Goto END :END This section checks the Errorlevel that DFC provides to the operating system. This section contains the actions that should be performed for each Errorlevel. Actions can be placed between the ECHO Errorlevel # statement and the Goto END statement for each of the detected error levels. To use this Batch file to automatically Thaw a Frozen workstation, the following section of the Batch file would have to change to the following: :Error1 Echo Errorlevel 1 DFC.EXE password /BOOTTHAWED Echo Goto END 4 UpdateMode Update Mode is an advanced feature of Deep Freeze Enterprise that requires an understanding of command line scripting. Update Mode can be used to automatically create updated versions of an existing installation set of Deep Freeze Enterprise by executing a special update command. The command automatically updates any or all of the following files that are present in the Faronics > Deep Freeze 6 Enterprise > Install Programs directory, including the following sub-directories: · · · · Workstation install files Workstation Seed files Enterprise Console Server Service Manager In the example below, the district office has received a new version of Deep Freeze Enterprise and can automatically update any existing Deep Freeze installation files at a remote location. WorkstationInstallFile WorkstationSeed EnterpriseConsole ServerServiceManager DistrictOffice RemoteLocation Faronics>DeepFreeze Enterprise>Install Programs The update command does not require a password, but does require a Customization Code. Use the following command syntax: \PathToFile\DF6ent.exe /update="Customization Code" c:\dfupdate.log · · · · must be replaced with the actual path to the installation file (DF6ent.exe) DF6ent.exe must be the actual name of the installation file (it may differ if it was downloaded) Customization Code must be in quotes if there is a space in it Customization Code must match the old installation files' Customization Code PathToFile If the Server Service Manager is running on the remote computer when the command is issued, it stops, updates, and then restarts. The log file provides full details of exactly which files were updated. The update process may take a few minutes to complete. Update Mode does not update the existing version of Deep Freeze on workstations. Workstations must be updated using the Enterprise Console. 4 RemoteAdministration RemoteConsole A remote console is a small utility that runs on a remote machine and acts as a communications hub that other consoles can connect to in order to control and view Deep Freeze workstations. This utility is not used on its own. There are two components that incorporate this Remote Console utility: the Server Service and the Deep Freeze Enterprise Remote Control Enabled Console. ServerService The Server Service is a service that is installed and configured using the Server Service Manager (SSM). The Server Service uses the Remote Console utility to allow the administrator of Deep Freeze to segment the connections to the clients. In a basic environment, the clients connect directly to the Deep Freeze Enterprise console. Clients with either the Deep Freeze workstation or seed installed send packets every 30 seconds to the console. In smaller networks, there are no issues using the console this way. In more complex environments, involving multiple subnets spread across multiple physical locations, the packets have more switches to pass through and must travel a greater distance to the console. The more of these factors, the greater the chance the packets may fail to reach the console. The Server Service reduces these types of issues. The Server Service acts as a middle layer between the clients and the console. Instead of sending packets directly to the console, they send packets to the Server Service. In turn, a Deep Freeze Enterprise console also connects remotely to the Server Service. The Server Service can have more than one console connected to it at any given time. In a LAN/WAN setup, the console must be run on a machine with a static IP. Using the Server Service, a console can be portable. Deep Freeze administrators can run the console on lap tops. These consoles could connect remotely to the Server Service from any location on the network to see the client machines. The administrators would plug into the network, connect to the Server Service, and see the client machines. It is recommend to install the Server Service on a server, because the IP is normally static and the server is on all the time. RemoteControlEnabled(RCE)Console It is possible to set up a Deep Freeze Enterprise console so other enterprise consoles can connect to it and see the client machines. This Remote Control Enabled (RCE) console works on a concept that is very similar to the Server Service. Like the Server Service, an RCE console uses the Remote Console utility. In order to turn a console into an RCE console, the remote control must be enabled. By default, this option is disabled. When it is disabled, a label at the bottom of the enterprise console reads Remote Control Disabled. When it is enabled, other enterprise consoles can connect to this enterprise console. At that time, the label reads Remote Control Enabled. 4 DifferencesBetweenServerServiceandRCEConsole The following table shows the differences between the Server Service and a Remote Control Enabled (RCE) console: ServerService RCEConsole Runs as a service Allows multiple consoles to connect to it Does not allow the console to run on the same machine as the server Cannot be easily shut down; less likely to lose connectivity Can run several ports under one service Runs as a process Allows multiple consoles to connect to it Can be used as a regular console Can be easily shut down; more likely to lose connectivity Can only run one port per RCE Console CreatingaServerService In order to set up a Server Service, the Server Service Manager (SSM) program must be created. This is done using the Deep Freeze Enterprise Configuration Administrator. Once the SSM has been created, it can be run on the preferred machine to install and configure the Server Service. To create the Server Service Manager, complete the following steps: 1. Open the Deep Freeze Configuration Administrator. 2. Click on the Create Programs tab. The following screen appears: 3. Click Create Server Manager to create the DF6ServerServiceManager.exe. A prompt to save the file follows. By default, the file is saved to ...\Program Files\Faronics\Deep Freeze 6 Enterprise\Install Programs. The created program can now be deployed to the machine where the service is to be installed. 0