FARONICS DEEP FREEZE ENTERPRISE Guide

TECHNICAL WHITEPAPER
Last modified: June 25, 2009
www.faronics.com
© 1999 - 2009 Faronics Corporation. All rights reserved. Faronics, Deep Freeze,
Faronics Core Console, Faronics Anti-Executable, Faronics Device Filter, Faronics
Power Save, Faronics Insight, Faronics System Profiler, and WINSelect are
trademarks and/or registered trademarks of Faronics Corporation. All other
company and product names are trademarks of their respective owners.
Faronics
Toll Free Tel: [phone]
Toll Free Fax: [phone]
International Tel: [phone]
International Fax: [phone]
Deep Freeze Enterprise - Advanced Maintenance & Autologon

ENTERPRISE
2
Introduction
is white paper provides detailed instructions to set up a Deep Freeze Maintenance Period and
perform updates that require a user to be logged on to the computer.
Normally, Deep Freezecanperform any updatesontheworkstationbecauseithas local system privileges,
but when the updates are allocated on servers that require authentication access, an autologon script
must be run.
SettingupaScheduledMaintenancePeriod
ere are two ways to set up a scheduled Maintenance Period.
1. Set it up when conguring the Deep Freeze Enterprise installation les with the Conguration
Administrator. is is the best method for new deployments.
2. Create or update the Maintenance Period using the Enterprise Console.
CreatingandUpdatingtheMaintenancePeriod
e following instructions elaborate on how to create or update a Maintenance Period with the
Enterprise Console, assuming Deep Freeze has already been deployed throughout the network.
1. Open the Enterprise Console. Select any workstation and right-click on it.
2. Select UpdateEmbeddedEventsfromthecontextualmenu.Or,selectthe desiredworkstation(s)
and click the Update Embedded Events icon in the toolbar. .
3. A menu bar with six buttons appears at the bottom of the Workstations window.
4. Click New to create a new sub-conguration set.
e Conguration Screen, similar to the Conguration Administrator, appears containing a
sub-conguration set of Embedded Events and Maintenance.
5. Click on the Embedded Events tab and congure the options as desired.

ENTERPRISE
3
6. Add an Event for each day of the week that the Maintenance Period will occur.
7. Enter the time to start the Maintenance Period in the Start Time eld.
8. Optional:Check Disable Keyboard and Mouse to prevent the keyboard and mouse from
functioning on the computer during the Maintenance Period.
9. From the Run drop-down list, choose an action to occur during the Maintenance Period.
Select Batch le to allow computers to run a Batch le automatically during the Maintenance
Period. A custom batch le can be entered on the Maintenance tab.
Select Windows Updates to allow computers to automatically install critical Windows updates
during the Maintenance Period via the Internet or an SUS/WSUS server. e choice to use an
SUS/WSUS server and specify the server’s IP address is congured on the Maintenance tab.
10. Enter the time to complete the Maintenance Period and to restart the computer into the
Frozen state in the End Time eld.
If the End Time precedes the Start Time, the End Time is assumed to be during the next day.
11. Optional:Check Shutdown aer Maintenance to shut the computer down at the conclusion
of the Maintenance Period instead of restarting it. If Shutdown is checked, the computer is
Frozen the next time it is started.
ConguringOtherOptions
e Run Bat radio button allows the computers to run a batch le automatically during the Maintenance
period. Click on the Advanced Maintenance tab and enter the following lines in the Batch File window,
as shown below:
UpdatingWorkstationConguration
1. When the Conguration screen is closed, a pop-up message appears, requesting the
administrator to select the computers to send the new conguration to.

ENTERPRISE
4
2. Select the computers to be updated and click Send.
is updates all the selected computers’ conguration on-the-y, meaning the computers
don’t have to be in the awed state for the conguration updates to take place.
CreatingtheAutologonandAutologoffRegistryFiles
Before tweaking the registry, do a full system backup. If anything goes wrong, data
may be lost and Windows may need to be reinstalled. As Microso states, editing the
registry “... is not supported by Microso. Use this method at your own risk.”
To congure workstations to login automatically aer reboot, the Windows Registry has to be edited.
To edit the Windows Registry, complete the following steps:
1. Login to any workstation as the local Administrator and click Start > Run.
2. Enter Regedit. Once the Registry Editor is running, locate the following registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\
Winlogon]
3. Before editing the Registry, export a copy of the current values of the Winlogon key.
Select Export Registry File from the Registry Menu, as shown below:

ENTERPRISE
5
4. In the File Name eld, type AutologOFF and click Save.
Establish the domain name, account name, and password of the account that performs updates. Since
this account is used to modify Registry settings, it must belong to the Administrators group.
5. Assign values for: DefaultDomainName, DefaultUserName, and DefaultPassword.

ENTERPRISE
6
e DefaultDomainName and DefaultUserName values may already exist.
e DefaultPassword value may not. If it does not, complete the following steps to create it:
A. On the Edit menu, click New > String Value.
B. In the Value Name eld, type DefaultPassword.
C. In the String Editor eld, type the account’s password.
6. Find the AutoAdminLogon Value Name and double click on it.
7. Change the Value Data from 0 to 1.
8. If the Value Name doesn’t exist, go to the Edit menu and select New > String Value.
Enter AutoAdminLogon in the Value Name eld. Enter 1in the Value Data box.
9. e new values must be exported to a new REG le.
Select the Winlogon key and repeat the Export Registry File procedure, but this time name
the REG le AutologON.
10. Exit the Registry Editor.
At this point you should have two REG les saved, AutologON.reg and AutologOFF.reg
CreatingtheAutologOFF.batBatchFile
e AutologOFF.bat le modies the Registry back to its original settings and disables the autologon
option. It is on this batch le where you place the set of commands that will perform the desired
updates. Aer all updates are done, the batch le shuts down the computer.
e following is a sample batch le:
@ECHO OFF
REGEDIT.EXE /s c:\AutologOFF.reg
REM ENTER YOUR CUSTOMIZED BATCH FILE HERE
SHUTDOWN -t 01
is le should be saved in a shared folder on a server accessible to all workstations.
Summary
When the computers reboot into Maintenance Mode at the scheduled time (18:00) the batch le
entered on the Maintenance tab runs, performing three tasks:
1. It modies the Windows Registry to allow automatic logons.
2. It schedules AutologOFF.bat to run at 18:15 to give the workstations time to start up.
3. It reboots the workstations.
AutologOFF.bat sets up the original values to the Winlogon key in the Registry, performs the updates,
and shuts down the workstations.