Welcome to the video tutorial for the Deep Freeze Enterprise Configuration Administrator.
The goal of this tutorial is to create a Deep Freeze Enterprise Console and a workstation installation file.
Weíll begin by installing the Configuration Administrator, the E on our desktop.
The idea behind the Configuration Administrator is to have a tool that allows the system administrator to pre-configure all the Deep Freeze Enterprise settings and then create the installation files to be deployed. The Configuration Administrator is not Deep Freeze itself; it does not contain the Deep Freeze protection.
The Configuration Administrator is a powerful tool and therefore should only be installed by the person who will administer the deployment of Deep Freeze.
Let us proceed with the setup right now.
Double-click the E icon.
Accept our license agreement by clicking I Accept, and then click Install to finish the installation of the Configuration Administrator.
Once the installation is complete, click OK.
To launch the Configuration Administrator, go to Start> All Programs> Faronics> Deep Freeze 6 Enterprise and select Deep Freeze Administrator.
The first dialog box prompts us for a Customization Code.
The Customization Code is very important. Deep Freeze Enterprise is designed to have a very high level of security. The Customization Code is the key that will be used to encrypt all our Deep Freeze deployments, making them absolutely unique. This means that no rogue user or other malicious person can control your Deep Freeze workstations.
We do want our Customization Code to be something which is long and confusing, but something that we can personally remember. It should be at least 8 characters long and consist of any alphanumeric characters. Spaces are welcome.
After entering the Customization Code and clicking OK a message appears recommending the administrator to write down or print the Customization Code since it cannot be recovered and it will be needed in future Deep Freeze deployments.
We have now initialized our Configuration Administrator.
Letís start with the Configuration tab which has 6 different sub-tabs. These sub-tabs are used to configure passwords, drives, restart and shutdown schedules, maintenance windows, advanced maintenance, and other options.
Deep Freeze Enterprise provides outstanding password management.
We are going to create 3 passwords out of a total of 15 that we could create.
The first password will work at the workstation level Ė this means that this password can be used to access Deep Freeze from the workstations and cannot be changed locally.
The second password will also work at the workstation level but this time the user will be able to change it from the workstation.
The last password will not work at the workstations, but will work with our command line control tool. The command line control tool allows administrators to manage Deep Freeze workstations from their preferred Desktop Management Solution such as SMS, ZENWorks, Altiris, etc. More information on the command line control tool can be found in the Faronics Content Library at Faronics.com.
All types of passwords can be set with activation and expiration dates.
The next sub-tab is Drives. By default, Deep Freeze protects all fixed hard drives. It is important to mention that removable media and network drives are never affected by Deep Freeze but the entire alphabet is listed for prudence. If you want to leave some drives unprotected just uncheck the drive letter and Deep Freeze will not freeze it.
We also can specify whether we want to always exempt external hard disks connected via USB or FireWire, or if we want to have the default drive letter setting apply instead.
Here, we can also set up a ThawSpace, an optional area that can be created to allow for permanent data storage on a Frozen workstation. We can pick the size of the ThawSpace and the drive letter. The size can be anywhere from 16 megabytes right up to 1 terabyte with NTFS.
In Windows 2000 and XP we can also check the Retain Existing ThawSpace option. This will allow the existing ThawSpace and its contents to move over to the next version of Deep Freeze in the event of an upgrade.
Letís move on to the Restart / Shutdown settings. This power-saving feature will help you to reduce your energy bill. We are going to shut down the workstations at 5:00pm every day except on Mondays. The Idle restart or shutdown option can be used to refresh or turn off workstations that have been unattended for 40 minutes or any time we set. The shutdown or restart process can be cancelled at the workstation during the specified time frame.
On Mondays, we want to set up a maintenance schedule, so at the selected time we have a window where the systems are in a Thawed state and therefore available for permanent changes, such as software updates. The systems will shutdown at the end of the Maintenance period.
During the maintenance schedule, if we donít want anybody to use the computer, we can disable the keyboard and mouse.
We can have Deep Freeze call on Microsoft protocols to do automatic Windows updates. If we check this feature, the workstations will connect to the Microsoft website, download the latest critical updates and install them. This is a fantastic value-added feature.
Of course, having hundreds of workstations accessing the Microsoft website simultaneously is inefficient. Therefore, an SUS server can be specified on the Advance Maintenance settings.
Simply check the Use SUS option and type in the server address. Now the workstations will download the updates from your SUS server instead of the Microsoft website.
Deep Freeze Enterprise provides even further flexibility by allowing users to run their own batch file during Maintenance periods. Examples of how to use batch files to perform antivirus updates can be found in the Faronics Content Library at Faronics.com.
Here you can manually type, open, or paste a custom batch file that Deep Freeze will run. By default, Deep Freeze runs the batch file using system level privileges. If domain privileges are needed you can use a specific user account to run the batch file.
The last sub-tab is Miscellaneous. On the Network pane we specify how we want our workstations and the Enterprise Console to communicate. It is important that our network settings coincide when we create our programs. The Enterprise Console and workstation installation file network settings must match.
For the Enterprise Console and the workstations to automatically communicate within the same LAN subnet, we use the LAN setting. The LAN/WAN settings provide a broader choice of options and are used when the Enterprise Console must communicate with workstations across a LAN, WAN, or the Internet. Further information including network topology diagrams can be found in the Faronics Content Library at Faronics.com.
On the Advanced Options pane there is one notable feature called Stealth Mode. Here we can specify whether Deep Freeze icons are displayed in the System Tray or not.
We have prepared our entire configuration. Now we are ready to create our custom installation files and the Enterprise Console. All of these files will be encrypted with our long and confusing Customization Code that we set up at the very beginning. Letís go to the Create Programs tab to begin.
We click the C icon to create and save our Enterprise Console. A confirmation message pops up, informing us that the Enterprise Console has been successfully created.
Now we click the W icon to create and save our workstation installation file. This is the file that will be installed on all of the workstations to be protected by Deep Freeze.
The Workstation Seed and the Server Service Manager are optional components and are beyond the scope of this tutorial.
Other tutorials are available in the Faronics Content Library at Faronics.com. They cover topics such as rapid network deployment, the Silent Install System, Command Line Control, the Server Service Manager, the Enterprise Console, multiple Enterprise Consoles, integration with third-party management solutions, and much more.
Thank you very much; we just had a walk through of the Faronics Deep Freeze Enterprise Configuration Administrator.