What would you like to do ? Help us find the most requested user's guides Upload your
user manual Search for a user manual Register Login and access your manuals Reset your password

	Browse all user guides
	The FARONICS DEEP FREEZER PROFESSIONAL 5 product forum
	Upload your user manual
	Sign-up Log in
	Help us find the most requested user's guides
	Include the add-on to download manuals from your site, forum or blog
	Frequently Asked Questions
	Contact Diplodocs team
ALL GUIDES BY CATEGORY Domestic Appliance TV & Audio Car & Motorcycle Phone Computer Camera & Video Music Sport Gardening & Housekeeping Video Game & Software Jewelry & Watch Baby & Toys Hygiene & Health Other

Last modified: June, 2005 Deep Freeze Security Notice Deep Freeze does not protect against booting from a floppy drive or CD-ROM drive. The CMOS should be configured to prevent booting from the floppy drive or CD-ROM drive (i.e. set to boot to the hard drive) and the CMOS must be password protected. This is a normal precaution for most public access computers. The Windows Registry, the computer CMOS and the boot sector are protected by Deep Freeze from within Windows. Technical Support Every effort has been made to design this software for ease of use and to be problem free. If problems are encountered, contact Technical Support: Email: Phone: Hours: Contact Information Web: Email: Phone: Fax: Hours: Address: support@faronics.com 800-943-6422 or 604-540-8199 7:00am to 5:00pm (Pacific Time) www.faronics.com sales@faronics.com 800-943-6422 or 604-540-8199 800-943-6488 or 604-540-8179 7:00am to 5:00pm (Pacific Time) Faronics Technologies USA Inc. Suite 170 ­ 2411 Old Crow Canyon Road San Ramon, CA 94583 USA Faronics Corporation Suite 202 ­ 145 Schoolhouse Street Coquitlam, BC V3K 4X8 Canada ©1999-2005 Faronics Corporation. All rights reserved. Deep Freeze, FreezeX and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners. 3 This page intentionally left blank Contents Deep Freeze Overview ............................................................................................................................................. 7 About Deep Freeze .........................................................................................................................................................7 System Requirements .....................................................................................................................................................7 Deep Freeze Professional Components .......................................................................................................................7 About Faronics ................................................................................................................................................................7 Deep Freeze Configuration Administrator .............................................................................................................. 8 Installation .......................................................................................................................................................................8 Customization Code Initialization ...............................................................................................................................9 Customization Code Re-Initialization .........................................................................................................................9 Using the Configuration Administrator ................................................................................................................. 10 Welcome Tab .................................................................................................................................................................10 Toolbar ...........................................................................................................................................................................10 File Menu .......................................................................................................................................................................11 Configuration Tab ........................................................................................................................................................12 Passwords.......................................................................................................................................................................12 Frozen Drives ................................................................................................................................................................13 Restart/Shutdown .........................................................................................................................................................14 Maintenance ..................................................................................................................................................................15 Advanced Maintenance ...............................................................................................................................................17 Custom Batch Files .......................................................................................................................................................17 ThawSpace .....................................................................................................................................................................18 Win9x .............................................................................................................................................................................19 Miscellaneous ................................................................................................................................................................20 Create Programs ...........................................................................................................................................................21 One Time Password Generation System ...................................................................................................................22 Uninstalling the Configuration Administrator.........................................................................................................23 Deploying Deep Freeze.......................................................................................................................................... 24 Attended Install or Uninstall .......................................................................................................................................24 Silent Install or Uninstall .............................................................................................................................................25 Silent Install or Uninstall using a Shortcut................................................................................................................25 Network Install on Multiple Workstations ................................................................................................................26 Install Over Existing Deep Freeze Versions ..............................................................................................................26 Install Using Imaging ...................................................................................................................................................26 Using Deep Freeze ................................................................................................................................................. 27 Workstation Logon .......................................................................................................................................................27 Boot Control..................................................................................................................................................................27 Change Password ..........................................................................................................................................................28 Clone ..............................................................................................................................................................................28 One Time Passwords ....................................................................................................................................................29 Using ThawSpace ..........................................................................................................................................................29 Permanent Software Installations, Changes, or Removals ......................................................................................29 Deep Freeze Command Line Control (DFC.EXE) .................................................................................................. 30 DFC Boot Control ........................................................................................................................................................30 DFC Status Query.........................................................................................................................................................30 Configuration Update ..................................................................................................................................................30 DFC Return Values.......................................................................................................................................................31 Batch File Example .......................................................................................................................................................31 5 This page intentionally left blank Deep Freeze Overview About Deep Freeze With over five million installations, Deep Freeze has a proven track record of non-restrictive, complete Windows protection. Deep Freeze provides network administrators with a simple and 100% successful method of maintaining desktop systems and reduces software technical support to an absolute minimum. Completely invulnerable to hacking, Deep Freeze instantly protects and preserves original computer configurations. No matter what changes a user makes to a workstation, simply restart to eradicate all changes and reset the computer to its original state. Computing environments are easier to manage and maintain, and expensive computer assets are kept running at 100% capacity. The result is a truly protected and parallel network, completely free of harmful viruses and unwanted programs. System Requirements The Deep Freeze Configuration Administrator requires Windows 2000 or XP to function properly. Deep Freeze requires Windows 95/98/Me/2000/XP and 10% free hard drive space. The hardware requirements are the same as the recommended hardware requirements for the host operating system. Deep Freeze Professional Components Deep Freeze uses different colored icons to represent the functions of its components. The Configuration Administrator application is used to create customized, preconfigured workstation installation program files, Workstation Seeds, the Enterprise Console, and generate One Time Passwords. A customized Deep Freeze workstation installation file based on configuration options; to be installed onto Windows 95/98/Me/2000/XP workstations. About Faronics Faronics develops and markets intelligent utilities for absolute control of multi-user computing environments. Faronics' market-leading solutions have dramatically impacted the day-to-day lives of thousands of information technology professionals and computing lab managers, ensuring 100% availability of systems. Our user-driven, powerful technology innovations benefit educational institutions, libraries, government organizations and corporations. Incorporated in 1996, Faronics has two offices situated in the USA and Canada. An ambitious growth strategy and global outlook has Faronics striving to reach new markets. Future diversification of Faronics' utilities will provide innovative and unique solutions, continuing to enhance user productivity. 7 Deep Freeze Configuration Administrator The Configuration Administrator is intended to only be installed on the computer used to administrate Deep Freeze. The Configuration Administrator is used to create a customized Deep Freeze installation program pre-configured with passwords, schedules, and other options. Installation Complete the following steps to install the Configuration Administrator: 1. Insert the CD-ROM from the media package into the CD-ROM drive. 2. Select Install Deep Freeze Professional Administrator in the window that appears on the desktop. If Deep Freeze has been downloaded via the Internet, double-click the file DF5Pro.exe to begin the installation process. The following screen appears: 3. 4. Follow the steps presented. Read and accept the license agreement. Click Install and the Configuration Administrator is installed on the computer. 8 Customization Code Initialization Open the Configuration Administrator by selecting the following path from the Start menu: Start > Programs > Faronics > Deep Freeze Professional > Deep Freeze Administrator The Deep Freeze Professional Customization window appears the first time the Configuration Administrator is opened. Deep Freeze requires the administrator to enter a Customization Code to initialize the Configuration Administrator. The code must be at least eight characters long and may consist of any combination of alpha-numeric characters. This code is not a password that can be used to access Deep Freeze. It is a unique identifier that completely encrypts the Configuration Administrator, the workstation install program, the One Time Password Generation System, and Deep Freeze Command Line Control. The Customization Code ensures that no other administrators can access or control a workstation. Multiple Deep Freeze administrators controlling the same group of workstations should use a matching Customization Code. The Customization Code must be recorded and guarded with care. Faronics is unable to recover a lost or forgotten Customization Code! Customization Code Re-Initialization If another administrator wants to create installation files with the same Configuration Administrator using a different Customization Code, the DFInit5.exe program should be run. This resets the existing Customization Code for the Configuration Administrator. Enter a new Customization Code. Click OK for the new Customization Code to become active. Once a new Customization Code has been assigned, the Configuration Administrator will no longer work with previously configured installations. To work with previous installations, use the DFInit5.exe program to reset the Customization Code back to its original settings. 9 Using the Configuration Administrator The Configuration Administrator is used to create a customized Deep Freeze installation program preconfigured with passwords, schedules, and other options. There are four main tabs for accessing the various options available: Welcome, Configuration, One Time Passwords, and Create Programs. Welcome Tab The Welcome tab provides contact information for Faronics, including a link to our company and Technical Support Web sites. Toolbar The Toolbar is available at the top of every tab in the Configuration Administrator. There are five buttons that provide convenient access to some of the most commonly used functions. Save changes to open configuration file Create new configuration file Show help file Open existing configuration file Save configuration file to different folder 10 File Menu The File Menu contains similar options to those on the Toolbar, with the addition of Create Workstation Install Program and Password Protection, Create Workstation Install Program can be used to create a Deep Freeze installation program file after the configuration is complete. Password Protection offers another layer of security for the administrator. Use this screen to optionally password protect access to the Deep Freeze Configuration Administrator application. 11 Configuration Tab The Configuration tab has eight sub-tabs along the bottom used to configure various options. After all of the desired configuration options have been selected, a customized workstation installation program file is ready to be created. This program file is used to install a pre-configured version of Deep Freeze on workstation computers. Passwords Deep Freeze Professional allows the administrator to choose up to four passwords that work in addition to the One Time Password Generation System. To create a password, check Enable on the appropriate line. Enter the password. The following configuration options are available when assigning passwords: · Passwords can be designated for use at a workstation (WKS) or for use with Command Line Controls (CMD). The Command Line Controls do not function unless at least one CMD password is defined. Passwords designated as WKS can use the User Change checkbox. Selecting this option allows the user to change the password at the workstation. Passwords can optionally be set to become active and expire at a specified date. Checking Timeout to the right of a password causes that password to be activated on the Activation date and to expire at midnight on the Expiration date. · · 12 Frozen Drives The Frozen Drives tab is used to select which drives are to be Frozen (protected by Deep Freeze) or Thawed (unprotected). Checked drives are Frozen by Deep Freeze. Only local drives (partitions or physical drives) can be Frozen. All of the drive letters are shown because the pre-configured installation file may be installed on many workstations with various hardware and software setups. In the example above, the C: drive is checked, but not the D: drive. This results in all workstations with only a C: drive being Frozen. Workstations with a D: partition or drive have a Frozen C: drive and a Thawed D: partition or drive. External hard disks connected via USB or IEEE 1394 (FireWire) are exempt from Deep Freeze protection by default on Windows 2000/XP workstations (i.e. they will not be Frozen). If USB and/or IEEE 1394 (FireWire) is unchecked, or if the workstation is running Windows 95/98/Me, these types of external hard disks are Frozen if their corresponding drive letter is checked. Network drives and removable media drives (floppy, memory keys, CD-RW, etc.) are not affected by Deep Freeze and therefore cannot be Frozen. 13 Restart/Shutdown The Restart/Shutdown tab is used to schedule restarts or shutdowns. To create a Restart/Shutdown schedule, check Enable Restart/Shutdown Schedule. The following options are available when configuring the Restart/Shutdown schedule: · · · Check Set One Change All to apply a change made for one day of the week to all other days. Check the days of the week the schedule will apply to, and the time the restart or shutdown will happen. Check Enable Idle Restart/Shutdown to configure the number of minutes required before the workstation automatically performs a restart or shutdown during periods when there is no keyboard or mouse activity. The workstation restarts only once after the Idle Time has expired. Keyboard or mouse activity is then required to restart the Idle Timer. If there has been no keyboard or mouse activity for the specified period of time, a dialog box appears on the workstation indicating that the workstation is about to restart or shutdown. This dialog remains on the screen for the number of minutes indicated in the Cancellable for: field (one minute by default). When the dialog is displayed, the user has the option to cancel the restart or shutdown by using the keyboard or mouse to continue working. Only one Restart/Shutdown per day can be scheduled. If the workstation needs to be automatically restarted on a more frequent basis, the Idle Time restart should be used. 14 Maintenance The Maintenance tab is used to schedule a time when Deep Freeze is Thawed. A Thawed workstation is available for upgrades, new installations, maintenance, or any other permanent changes. To create and configure a Maintenance Schedule, complete the following steps. As indicated, some of the steps are optional: 1. 2. Check Enable Thawed Maintenance Schedule to enable the schedule. Check the box beside each day of the week when a Maintenance schedule is desired. Optional: Check Set One Change All to apply certain changes made for one day of the week to all other days. Enter the time to restart the workstation into the Thawed state in the Start Time field. Optional: Check Disable Keys to prevent the keyboard and mouse from functioning on the workstation during the Maintenance period. If this option has been checked, the workstation displays the following dialog during the Maintenance period: 3. 4. 15 5. 6. Enter the time to restart the workstation into the Frozen state in the Stop Time field. Optional: check the Shutdown checkbox to shut the workstation down at the conclusion of the Maintenance period instead of restarting it. If Shutdown is checked, the workstation is Frozen the next time it is started. If the Stop Time precedes the Start Time, the Stop Time is assumed to be during the next day. The Maintenance period must be at least five hours in duration for the Run Windows Updates feature to function. If a smaller duration has been entered, the Stop Time automatically adjusts to create a five hour duration. Optional: Check the Run WU radio button to allow workstations to install critical updates to Windows 2000/XP automatically during the Maintenance period via the Internet or an SUS server. The choice to use an SUS server and specify the server's IP address is on the Advanced Maintenance tab. Optional: Check the Run Bat File radio button to allow workstations to run a batch file automatically during the Maintenance period. A custom batch file can be entered on the Advanced Maintenance tab. Run WU and Run Bat File cannot both be checked for the same day of the week. The Run Windows Updates feature will not actually perform updates, but will make the call to have the normal update method take place during the Maintenance period. 7. 16 Advanced Maintenance The Advanced Maintenance tab is used to specify SUS server and batch file options for a scheduled Maintenance period. Insert custom batch file here To use an SUS (Microsoft Software Update Services) server for Windows critical updates, check Use SUS Server and specify the server's IP address or server name. If Use SUS Server is unchecked, Windows critical updates are downloaded via the Internet for each workstation individually. Microsoft SUS client can be downloaded at: http://www.microsoft.com/windows2000/downloads/recommended/susclient/default.asp. Microsoft SUS server can be downloaded by searching for SUS server at: http://www.microsoft.com. Custom Batch Files Enter a custom batch file to run during the Maintenance period on any days specified on the Maintenance tab. The same batch file applies to all days that Run Bat File has been checked. The following options are available when running custom batch files: · · · · To clear the current batch file, click New. To load an existing text file into the Batch File field, click Open. A standard Open File dialog is displayed where a file can be selected. To save the contents of the Batch File field to a text file, click Save. A standard Save File dialog is displayed where a location and file name can be specified. Customized batch files execute with local system privileges. If the updates to be deployed are located on file servers that require authentication, the Auto Login option must be enabled. Enter the authorized account Login ID, password, and domain to access the file servers. This option works on Windows 2000/XP only. 17 ThawSpace The ThawSpace tab is used to create a virtual partition on a workstation that can be used to store programs, save files, or make permanent changes. All files stored in the ThawSpace are saved after a restart, even if the workstation is Frozen. Complete the following steps to create a Thawspace. 1. Check Include a ThawSpace to create a ThawSpace in the installation program. The Host Drive is the workstation drive that is the source for the ThawSpace virtual partition. It is automatically detected by Deep Freeze and cannot be changed. 2. The ThawSpace Drive option is used to select the drive letter assigned to the ThawSpace. The default letter is T:, but it can be changed to any available letter. The next available letter is used if the selected drive letter already exists on a workstation when Deep Freeze is installed. 3. The Size option is used to select the ThawSpace size. The minimum space allowed is 16MB. Workstations running Windows 95, 98, or Me can host a maximum ThawSpace of 2GB. Workstations running Windows 2000 or XP can host a maximum ThawSpace of 100GB when using the NTFS file system or 4GB when using the FAT32 file system. If the workstation does not have enough free space to accommodate the selected ThawSpace size, the size of the ThawSpace is adjusted downward to ensure proper operation of the workstation. 4. Workstations running Windows 95/98/Me must use the FAT16 file system for a ThawSpace. Workstations running Windows 2000/XP use the NTFS file system by default, but this can be changed to FAT32 by selecting the radio button. 5. Check Retain Existing ThawSpace to retain an existing ThawSpace on a Windows 2000/XP workstation when Deep Freeze is uninstalled. If the option to include a ThawSpace has also been checked, the existing ThawSpace is retained during re-installation. Deep Freeze always displays a dialog asking if the ThawSpace should be retained or deleted during an Attended Uninstall, regardless of whether Retain Existing ThawSpace has been checked. 18 Win9x The Win9x tab is used to configure options applicable to workstations running Windows 95/98/Me. · Check Use Hard Reboot When Thawed to force workstations to perform an immediate restart when leaving the Thawed state. This option should be selected if the workstations experience problems shutting down when leaving the Scheduled Maintenance period. · Check Prevent Break Outs from "Autoexec.bat" if the Windows 9x workstations are using the autoexec.bat file to execute programs before Windows starts. This prevents users from aborting the execution of the autoexec.bat file and gaining access to the system in an unprotected state. 19 Miscellaneous The Miscellaneous tab is used to configure various other options. · Display Options: These checkboxes are used to select whether the Frozen and Thawed Deep Freeze icons are shown in the System Tray. The icon indicates that Deep Freeze is installed and the workstation is Frozen. The icon indicates that Deep Freeze is installed but the workstation is Thawed. The Deep Freeze logon dialog can be accessed by holding down the SHIFT key and double-clicking an icon. If the Show Frozen or Show Thawed icons are unchecked in Display Options, and are removed from the workstation's System Tray, the keyboard shortcut, CTRL+ALT+SHIFT+F6, must be used to access the logon dialog. · Enable Deep Freeze Local Policies: For enhanced security, Deep Freeze removes the following local privileges: debugging programs, modifying firmware, and changing the system time. Uncheck this option to use existing privileges instead. Allow User to Change the Clock: Check this option to allow Frozen users to adjust the system clock. This feature can only be used if there is no Maintenance Schedule set. Selecting this option disables the Maintenance Schedule if one has been set. · Disable Command Line Options: This option is checked by default. Unchecking it allows for further customization of the Deep Freeze installation program during installation using the Silent Install System. Checking it prevents the pre-existing configuration choices from being changed during installation. · 20