FARONICS DEEP FREEZE ENTERPRISE, Manual

Page 1: ...Deep Freeze Enterprise User Guide 1...

Page 2: ...rved Faronics Deep Freeze Faronics Core Console Anti Executable Faronics Device Filter Faronics Power Save Faronics Insight Faronics System Profiler and WINSelect are trademarks and or registered trad...

Page 3: ...e Customization Code 19 Update Mode 19 One Time Passwords 21 Using Deep Freeze Configuration Administrator 23 Accessing the Configuration Administrator 24 Toolbar and Menus 24 Passwords Tab 26 Drives...

Page 4: ...a Task Immediately 60 Deleting a Task 60 Scheduled Task Properties 60 Managing Network and Groups 61 Adding a New Group 61 Building a User Defined Group Structure 61 Importing Groups from Active Dire...

Page 5: ...s 91 Example 1 Single Subnet 92 Example 2 Multiple Subnets One local service 93 Example 3 Multiple Ports Console Accessed Remotely 94 Example 4 Multiple Subnets Multiple local services 95 Appendix C T...

Page 6: ...Deep Freeze Enterprise User Guide 6 Contents...

Page 7: ...Deep Freeze Enterprise User Guide 7 Preface This user guide explains how to install configure and use Deep Freeze Enterprise Topics Important Information Technical Support...

Page 8: ...s of thousands of information technology professionals Fueled by a market centric focus Faronics technology innovations benefit educational institutions health care facilities libraries government org...

Page 9: ...onics com Phone 800 943 6422 or 1 604 637 3333 Hours 7 00am to 5 00pm Pacific Time Contact Information Web www faronics com Email sales faronics com Phone 800 943 6422 or 1 604 637 3333 Fax 800 943 64...

Page 10: ...Deep Freeze Enterprise User Guide 10 Preface...

Page 11: ...d on a computer any changes made to the computer regardless of whether they are accidental or malicious are never permanent Deep Freeze provides immediate immunity from many of the problems that plagu...

Page 12: ...to be left as free space Both 32 and 64 bit versions of Windows are supported Windows XP x64 must have Service Pack 2 or later installed Faronics recommends a minimum of 256 MB of system memory in the...

Page 13: ...llations A customized Deep Freeze workstation installation file is created in the Configuration Administrator and deployed to workstations within the enterprise This file includes the Workstation Seed...

Page 14: ...Deep Freeze Enterprise User Guide 14 Introduction...

Page 15: ...15 Deep Freeze Enterprise User Guide Installing Deep Freeze This chapter describes the installation process of Deep Freeze Topics Installation Overview Customization Code One Time Passwords...

Page 16: ...nstallation files and Workstation Seeds The Deep Freeze Enterprise Console installs automatically with the Deep Freeze Configuration Administrator Complete the following steps to install the Configura...

Page 17: ...se Key in the License Key field or select the Use Evaluation check box to install in Evaluation mode Click Next The Evaluation version of Deep Freeze is valid for 30 days After 30 days all Deep Freeze...

Page 18: ...alling Deep Freeze 7 Once the installation process is completed the Customization Code screen appears 8 Specify the Customization Code and click Next The Customization Code must be a minimum of eight...

Page 19: ...e used to automatically create updated versions of existing files of Deep Freeze Enterprise by executing a special Update command This command completes two tasks Updates previous versions of the Deep...

Page 20: ...file it may differ if it was downloaded Customization Code must be in quotes if there is a space in it Customization Code must match the old installation files Customization Code The log file provides...

Page 21: ...for example a Deep Freeze password is forgotten or if a configuration file was created without any passwords defined An OTP can also be used to provide access to a computer for an individual performi...

Page 22: ...Deep Freeze Enterprise User Guide 22 Installing Deep Freeze...

Page 23: ...e Using Deep Freeze Configuration Administrator Topics Accessing the Configuration Administrator Passwords Tab Drives Tab Embedded Events Tab Maintenance Tab Advanced Options Tab Creating Workstation...

Page 24: ...tected by Deep Freeze Toolbar and Menus Toolbar The Toolbar is available at the top of every tab in the Configuration Administrator The buttons allow users to make a New configuration file rdx to Open...

Page 25: ...of security for the administrator To password protect access to the Configuration Administrator complete the following steps 1 Open the File menu and select Password Protection 2 Select the Protect w...

Page 26: ...ine for use with Command Line Controls The Command Line Control tool DFC exe does not function unless at least one Command Line password is defined LANDesk designated for use with the Deep Freeze Plug...

Page 27: ...ed by Deep Freeze during a reboot Frozen Drives By default all drives are Frozen To put a drive in a Thawed state clear the check box of the preferred drive While only local drives partitions or physi...

Page 28: ...lected drive letter already exists on a computer when Deep Freeze is installed When a Drive Letter is selected from the drop down and used to create a ThawSpace it is removed from the drop down When a...

Page 29: ...e accessed via the Windows Explorer Existing ThawSpace The Retain existing Thawspace check box is selected by default to prevent ThawSpaces created during previous installations from being deleted A d...

Page 30: ...onds to a USB hard drive and F corresponds to an IEEE 1394 FireWire hard drive The USB and IEEE 1394 FireWire check boxes are selected in the Always Thaw External Hard Drives pane the external hard dr...

Page 31: ...ed since they exist on the target computer Events scheduled through the Scheduled Tasks Wizard in the Enterprise Console exist on the Enterprise Console and not on the target computers Therefore a con...

Page 32: ...played in the Event Properties pane Event Name Specify a name for the event Day Select the day or specify if the event will occur on Weekdays or Weekends Start Time Select the Start Time Allow User to...

Page 33: ...es pane Event Name Specify a name for the event Day Select the day or specify if the event will occur on Weekdays or Weekends Start Time Select the Start Time Allow User to Cancel Event Select the che...

Page 34: ...pdates and other permanent changes take place The Maintenance Event can be scheduled by completing the following steps Select Maintenance from the Event Type drop down in the Event Management pane and...

Page 35: ...not allowed to cancel the event The computer will not shut down after the maintenance period The keyboard and mouse are not disabled during the maintenance period The Maintenance Event is configured...

Page 36: ...tart or Shutdown and specify the time interval in minutes Show message Select the check box to display a message Specify the time interval in minutes and enter a brief message Example In the above scr...

Page 37: ...Novell specify the Login ID Password Tree Context and Server Windows Update To use an SUS Microsoft Software Update Services Server or a WSUS Windows Software Update Services Server for Windows critic...

Page 38: ...nning custom batch files To clear the current batch file click New To load an existing file click Open and browse to the location of the file To save the contents of the field click Save and browse to...

Page 39: ...in conflict with other programs on the LAN In LAN mode the Deep Freeze target computer and the Enterprise Console find each other through UDP broadcasts These broadcasts only occur when computer or t...

Page 40: ...s the pre existing configuration choices from being changed during installation Enable Deep Freeze local policies For enhanced security Deep Freeze removes the following local privileges debugging pro...

Page 41: ...pdated on all connected computers For more information on updating directly through the Enterprise Console refer to the Licensing section Manually on each computer The License Key can be updated manua...

Page 42: ...erprise Console for deployment on target computers To create a Workstation Seed click the Create button in the Configuration Administrator toolbar and select Create Workstation Seed The Workstation Se...

Page 43: ...oles Connecting to a Remote Console Managing Deep Freeze with the Console Licensing Scheduling Deep Freeze Tasks Assigning Computers to Scheduled Tasks Managing Network and Groups History Adding compu...

Page 44: ...s and containers from Active Directory Generate One Time Passwords Schedule Actions Customize the Enterprise Console Update the License Key The Enterprise Console can only wake a computer from a power...

Page 45: ...lowing icons beside or above the computer name depending on the view selected Icon Definition Target Computers that have the Deep Freeze Workstation Seed installed but do not have Deep Freeze installe...

Page 46: ...communication with the computer is re established when the computer is powered on or when the conditions causing the communications breakdown are rectified It may take several minutes for the computer...

Page 47: ...ervice Adding a local service Connection 1 To add local service connection select Tools Network Configuration 2 To add a connection select Add and specify the port number 7725 in this case 3 To enable...

Page 48: ...option is selected 2 Select a port from the Local Service connections list and click Edit 3 The edit dialog appears that allows for the port to be controlled remotely and password protected 4 To remov...

Page 49: ...g connections must be edited to allow them to be accessed remotely Setting up Remote Control Enabled Connections To allow a connection to be accessed remotely perform the following steps 1 Open Tools...

Page 50: ...Console dialog appears 2 In the Connect to Remote Console dialog specify the connection details such as Remote Console Name Remote Console IP Port number and Password This information is provided by...

Page 51: ...chosen the selected computer performs the action and the status icons update accordingly Specific icons are disabled if the selected computer does not support that action For example a computer that h...

Page 52: ...the following steps to remotely install a Full Workstation Installation on any computer that has the Workstation Seed installed 1 Right click on one or multiple computers and select Install A dialog...

Page 53: ...ings from an existing Deep Freeze Configuration file rdx or Deep Freeze Workstation Installation File exe into the sub configuration window In either case a Configuration Screen similar to the Configu...

Page 54: ...Click Send on the menu bar to send the new configuration settings to the selected computer s The following message is displayed 6 After sending the new configuration settings to the selected computer...

Page 55: ...ls Licensing 3 The Deep Freeze License dialog is displayed 4 Click Edit and enter the License Key in the License Key field 5 Click Update License The License Key is automatically updated on all comput...

Page 56: ...ing ways click Scheduler in the Network and Groups pane and click the Add Task icon right click on Scheduler in the Network and Groups pane and choose Add Task The following screen is displayed 2 Doub...

Page 57: ...reeze Tasks 57 Deep Freeze Enterprise User Guide 4 Depending on the choice of task execution the time and date configuration options that follow will vary Click Next 5 Click Finish once the configurat...

Page 58: ...Deep Freeze Enterprise User Guide 58 Using Deep Freeze Enterprise Console The default start time for a task is five minutes from the current time...

Page 59: ...Groups pane of the Console To assign computers to a task select the preferred computers from the Workstations pane in the Console and drag them onto the preferred task Or drag a group onto the task To...

Page 60: ...To see the properties of a task right click the task name and select View Properties The following screen displays The properties of a task cannot be changed after it has been created Only the compute...

Page 61: ...s Adding a New Group To add a new group complete the following steps 1 In the Network and Groups pane right click on User Defined Groups and choose Add Group 2 The Add Group dialog appears 3 Enter the...

Page 62: ...port from the Active Directory 1 Select Tools Import Groups from Active Directory or click the LDAP icon located in the sidebar 2 The following dialog appears Select either the Microsoft tab or the No...

Page 63: ...ry The Enterprise Console stores the history of the target computers To view history click History in the Networks and Groups pane To delete computer s from History select the computer s right click a...

Page 64: ...Defined Groups and select Sort Groups Alphabetically Removing Workstations from User Defined Group To remove a computer from a Group right click on the computer in User Defined Groups and select Remo...

Page 65: ...rting the appropriate xml file in the Deep Freeze Console For more information on Custom Actions the structure of the custom action file and details about various parameters refer to Appendix E Contro...

Page 66: ...e information on PsExec visit http www faronics com pstools Configure 1 Go to Action Custom Actions 2 Select Remote Execute 3 Enter the PSExec Location or browse to select the location 4 The Executabl...

Page 67: ...o to Action Custom Actions 2 Select Push and Install MSI file 3 Enter the PSExec Location or browse to select the location 4 The Executable path and the Working Directory are added automatically The E...

Page 68: ...e Custom Action to be deleted 3 Click Delete Importing Custom Actions To import Custom Actions complete the following steps 1 Go to Action Menu Custom Actions 2 Click Import 3 Browse to select the xml...

Page 69: ...ist of settings available in that category Select or clear the individual check boxes as required Alternatively select or clear the entire categories at once Settings that are cleared will not be avai...

Page 70: ...erprise Console right click its icon located in the taskbar and select Restore DF6 Console Close Deep Freeze Console and leave the network connections running This closes the Console but keeps the con...

Page 71: ...ted during an uninstall if the option to retain existing ThawSpace was not checked in the Configuration Administrator the ThawSpace was not created with Deep Freeze Enterprise Version 5 or later Atten...

Page 72: ...am To uninstall Deep Freeze on a computer and leave the Workstation Seed right click on the Thawed workstation s and select Uninstall Leave Seed as shown above Or click the icon on the toolbar To comp...

Page 73: ...er executing the command Deep Freeze will install and the computer will restart Frozen and ready to use The Silent Install System does not work without the Install or Uninstall switch Deep Freeze must...

Page 74: ...e scripts can be used to install Deep Freeze on all networked workstations automatically All workstations will restart Frozen and ready for use after installation has completed Use the following comma...

Page 75: ...n to ensure the computers are restarted to allow the configuration to update To return to the Frozen state after imaging is complete set Deep Freeze to Boot Thawed on next n number of restarts in the...

Page 76: ...Guide 76 Using Deep Freeze Enterprise Console Check for Updates Deep Freeze allows you to check if there are newer versions available Go to Help Check for updates This checks if there are newer versio...

Page 77: ...Guide Managing Deep Freeze Computers This chapter describes managing computers where Deep Freeze is installed Topics Login Screen Status Tab Password Tab Network Tab ThawSpace Tab Permanent Software I...

Page 78: ...old down the SHIFT key and double click the Deep Freeze icon If Deep Freeze is in Stealth Mode use CTRL ALT SHIFT F6 keyboard short cut Either method brings up the logon dialog 2 Enter the administrat...

Page 79: ...pecified number of restarts When that number of restarts is exceeded the computer will boot Frozen Boot Thawed to ensure that the computer is Thawed each time it is restarted Select the radio button n...

Page 80: ...Tab The Password tab allows you to change the password 1 Specify a new password in the Enter new password field 2 Confirm the new password by re entering the same password in the Confirm password fiel...

Page 81: ...e network options on a computer To choose either the LAN or the WAN method of communication click the preferred option The default port number can be changed by clearing the Use Default Port check box...

Page 82: ...vailable if it was set to be created in the Deep Freeze Configuration Administrator After uninstalling Deep Freeze all the ThawSpaces become visible When Deep Freeze is reinstalled the ThawSpaces are...

Page 83: ...lps administrators overcome challenges with maintaining the configuration of their computers in a production environment Deep Freeze protects computers from unauthorized changes viruses and malware th...

Page 84: ...Deep Freeze Enterprise User Guide 84 Managing Deep Freeze Computers...

Page 85: ...85 Deep Freeze Enterprise User Guide Deep Freeze Command Line Control This chapter describes using the Deep Freeze Commands Topics Deep Freeze Command Line Control DFC EXE DFC Command Line Syntax...

Page 86: ...grates seamlessly with any solution that can run script files including standard run once login scripts DFC commands require a password with command line rights OTPs cannot be used List all commands b...

Page 87: ...if Frozen DFC password CFG path depfrz rdx Replaces Deep Freeze configuration information Works on Thawed or Frozen computers Password changes are effective immediately Other changes require restart D...

Page 88: ...the status of the license and the expiry date of the license if any The different possible types of license and the associated return codes are 111 None Unlicensed Deep Freeze is not licensed and will...

Page 89: ...as the clients and Remote Console connection use the same port there should not be any port conflicts between the different components Ports can also be used to divide the clients If the local servic...

Page 90: ...Deep Freeze Enterprise User Guide 90 Appendix A Ports and Protocols...

Page 91: ...services Each example explains how different Deep Freeze components interact in different networking environments In the following examples the client machines have either the Deep Freeze workstation...

Page 92: ...the simplest networking environment It is also the easiest to configure The following diagram shows the network topology The client machines represented by the computer icons are located on the same s...

Page 93: ...nario similar to Example 1 Single Subnet both the clients and the connection hosted by the Console are using the same port This port is configured in the Deep Freeze Configuration Administrator in the...

Page 94: ...iagram shows the network topology In this scenario the host has set up a connection using the local service Looking at the above diagram three other Consoles connect to the host in order to see the cl...

Page 95: ...uters use port B The Console in the technical support department uses the connections hosted by both lab and library Consoles Any console not directly communicating with a computer should have the loc...

Page 96: ...Deep Freeze Enterprise User Guide 96 Appendix B Network Examples...

Page 97: ...exist the computer install must be configured to run under the LAN WAN settings 3 Something on the network is blocking the port used between the Console and the clients Check for a connection using a...

Page 98: ...ll file on the computer If the uninstall option is displayed the Workstation Install file or Workstation Seed is installed and can be uninstalled If the uninstall option does not appear the Workstatio...

Page 99: ...s into a Thawed state uninstall Deep Freeze or perform other IT exclusive tasks The Console Customizer can be launched from Tools Console Customizer We will leave Console functions Activation selected...

Page 100: ...uters Frozen just in case a computer is ever accidentally left Thawed by IT staff Leaving all other options cleared will ensure a teacher is unable to permanently modify a computer Finally we will cle...

Page 101: ...Enterprise The file can be edited to add additional actions like the one explained below xml version 1 0 encoding UTF 8 Deep Freeze Default Custom Action file CUSTOMDEFINEDACTIONS ACTION1 CAPTION ENGL...

Page 102: ...le menu or submenu ENGLISH Caption ENGLISH Text in various languages GERMAN Caption GERMAN Text in various languages JAPANESE Caption JAPANESE Text in various languages SPANISH Caption SPANISH Text in...

Page 103: ...ges FRENCH USERNAME Param FRENCH FRENCH Text in various languages CAPTION USERNAME PARAMS LOG Defines behavior of the log file APPEND y APPEND Defines if log file will be appended or created new FILEN...

Page 104: ...s can be passed to the executed application or script through the Enterprise Console Parameter Usage WKSNAME Workstation name DOMAIN Workstation domain IP Workstation IP PORT Workstation port STATUS W...