FARONICS DEEP FREEZE MAC User manual

is page intentionally le blank

3
DeepFreezeMacSecurityNotice
Apple provides an application called Open Firmware Password that can be used to ensure that all keys
that affect the normal start up of the computer are disabled. is prevents users from pressing the keys
necessary to boot into single-user mode or boot from an alternative volume at start up. To download
the Open Firmware Password application, refer to Apple’s instructions at:
http://www.apple.com/support/downloads/openfirmwarepassword.html
For Mac OS X 10.4 or later, the updated version of this application can be copied from the soware
installation disc, located at Applications/Utilities on the disc.
Intel-based Macintosh computers can be protected by firmware passwords as well. e firmware in an
Intel-based computer uses Extended Firmware Interface (EFI) technology - Open Firmware is used in
computers that use PowerPC processors.
TechnicalSupport
Every effort has been made to design this soware for ease of use and to be problem free. If problems
are encountered, contact Technical Support:
Email: [e-mail]
Phone: [phone] or 604-637-3333
Hours: 7:00 am to 5:00pm (Pacific Time)
ContactInformation
Web: www.faronics.com
Email: [email protected]m
Phone: [phone] or 604-637-3333
Fax: [phone] or 604-637-8188
Hours: 7:00 am to 5:00pm (Pacific Time)
Address: USA
2411 Old Crow Canyon Road, Suite 170
San Ramon, CA 94583
USA
Canada
609 Granville Street, Suite 620
Vancouver, BC V7Y 1G5
Canada
Europe
Siena Court, e Broadway
Maidenhead, Berkshire
SL6 1NJ UK
Email: [e-mail]
Phone: [phone]
Fax: [phone]
Last modified: January, 2010
© 2010 Faronics Corporation. All rights reserved. Deep Freeze, Faronics, Faronics Anti-Executable, Faronics Power Save, Faronics
System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product
names are trademarks of their respective owners.

is page intentionally le blank

5
Contents
Deep Freeze Mac Overview ...............................................................................................................................7
About Deep Freeze .........................................................................................................................................................7
About Apple Remote Desktop (ARD) .........................................................................................................................7
Command Line Control Capability .............................................................................................................................7
System Requirements.....................................................................................................................................................7
Important Terminology .................................................................................................................................................7
About Faronics................................................................................................................................................................7
Installing Deep Freeze .......................................................................................................................................8
Installing Using a Customized Deep Freeze Installer ................................................................................................8
Installing Using the Basic Deep Freeze Installer ........................................................................................................8
Installing via Apple Remote Desktop...........................................................................................................................8
Installing Over Previous Versions ................................................................................................................................8
Using Xgrid with Deep Freeze Mac .............................................................................................................................8
Using the Deep Freeze Controller .....................................................................................................................9
Opening the Deep Freeze Controller...........................................................................................................................9
Creating the First User...................................................................................................................................................9
Updating the License Key aer Installation..............................................................................................................10
Boot Control Tab ..........................................................................................................................................................11
Drives Tab......................................................................................................................................................................12
awSpace Tab..............................................................................................................................................................13
Adding a Global awSpace ..................................................................................................................................13
Adding a User awSpace......................................................................................................................................14
Removing a User or Global awSpace ...............................................................................................................14
Resizing a awSpace...................................................................................................................................................15
Limitations of Resizing a awSpace.........................................................................................................................16
Maintenance Tab...........................................................................................................................................................16
Mapping Tab..................................................................................................................................................................18
DF Users Tab .................................................................................................................................................................19
Adding, Deleting, and Editing DF Users ..............................................................................................................19
Uninstall Tab .................................................................................................................................................................20
Exporting and Importing Configurations.................................................................................................................20
Using Deep Freeze............................................................................................................................................21
Deep Freeze Icons.........................................................................................................................................................21
Saving Documents........................................................................................................................................................21
Soware Installation and Permanent Changes.........................................................................................................21
Checking for Deep Freeze Updates............................................................................................................................21
Appendix I: Deep Freeze Assistant and Customizing the Installer................................................................22
Appendix II: Apple Remote Desktop v.3.0 Integration...................................................................................29
Adding Targeted Computers to the Task List ...........................................................................................................32
Using and Editing Tasks...............................................................................................................................................32
Sample Command Line Scripts ..................................................................................................................................33
Deep Freeze Legacy Commands ................................................................................................................................34

is page intentionally le blank

7
DeepFreezeMacOverview
AboutDeepFreeze
Deep Freeze Mac provides a completely non-restrictive working environment where there is no need
to be concerned about system damage or corruption; a simple restart eradicates all changes and ensures
that the standard system configuration is available at all times.All changes to a computer are temporary
for that working session, including installation or removal of soware and application preference
configuration. e need for IT professionals to perform rebuilds, re-image, or troubleshoot computers
is eliminated, resulting in a reduction in IT expenditures and an increase in computer uptime.
AboutAppleRemoteDesktop(ARD)
Apple Remote Desktop is Apple Computer’s complete desktop management solution for Mac OS X.
Faronics does not provide sales or technical support information for Apple Remote Desktop. More
information regarding ARD can be found at http://www.apple.com/remotedesktop.
CommandLineControlCapability
Tasks referred to in Appendix II for use with ARD can also be used in other third-party command line
control programs.
SystemRequirements
Deep Freeze Mac requires Mac OS X Tiger v10.4.11, Leopard v10.5.1 and up, or Snow Leopard v10.6.0
and up.
Deep Freeze Mac is a Universal application (Intel and PPC compatible).
ARD integration requires Apple Remote Desktop version 2.2 or later.
A minimum of 256 MB RAM is recommended.
ImportantTerminology
A Frozen volume or partition is completely restored to its exact original configuration and contents
upon each restart of the computer.
A awed volume partition functions normally, as it would if Deep Freeze was not installed.
AboutFaronics
Faronics develops and markets intelligent solutions for absolute control of multi-user computing
environments. Faronics’ market-leading solutions have dramatically impacted the day-to-day lives
of thousands of information technology professionals and computing lab managers by ensuring
100% availability of systems. Our user-driven, powerful technology innovations benefit educational
institutions, healthcare facilities, libraries, government organizations and corporations. Incorporated
in 1996, Faronics has two offices situated in the USA and Canada. An ambitious growth strategy and
global outlook has Faronics striving to reach new markets. Future diversification of Faronics’ utilities
will provide innovative and unique solutions that will continue to enhance user productivity.

8
InstallingDeepFreeze
Installation and configuration of Deep Freeze Mac requires administrative access.
Deep Freeze Mac is downloadable via the Internet.
InstallingUsingaCustomizedDeepFreezeInstaller
A customized Deep Freeze Installer pre-configured with up to four usernames/passwords and
environment-specific application settings can be created using the Deep Freeze Assistant. Refer to
Appendix I for more information.
InstallingUsingtheBasicDeepFreezeInstaller
To install Deep Freeze on a single computer, complete the following steps:
1. Double-click the file DFX Version.pkg to begin the installation process. (Depending on
the configuration, the file extension may not be visible). e installer is displayed. Click
Continue.
2. Read the Security Notice and click Continue.
3. Enter the License Key. If no License Key is specified, Deep Freeze will expire in 30 days.
4. Click Install and Deep Freeze is installed on the computer.
5. Click Restart to restart the computer.
Upon completion of a successful installation and aer the computer has been restarted, Deep Freeze is automatically
configured to put all drives and partitions into a Frozen state (unless otherwise configured through the Deep
Freeze Assistant). Drives and volumes that are to be put in a awed state can be specified using the Deep Freeze
Controller aer the install and restart following the install.
InstallingviaAppleRemoteDesktop
Deep Freeze is distributed as a standard installation package file and can therefore be installed over a
network using Apple Remote Desktop’s Install Packages command. Refer to the Apple Remote Desktop
user guide for more information. Refer to Appendix II for more information about controlling Deep
Freeze over a network using Apple Remote Desktop.
InstallingOverPreviousVersions
It is recommended that all previous versions of Deep Freeze Mac be uninstalled before installing a
newer version.
Deep Freeze Mac should not be booted in Target Disk Mode when Frozen. e cache
files will be invalidated and the program will become corrupt. If booting in Target Disk
Mode, ensure the computer is in a awed state.
UsingXgridwithDeepFreezeMac
In order for Xgrid to work properly on a Frozen Macintosh, the Xgrid folder must be symlinked to a awed
partition. When the computer is awed the /private/var/xgrid folder must be mapped to a awed location
(either the Global awSpace or a awed partition) and then symlinked to its original location.
Use terminal to do the following:
•sudo cp -R /private/var/xgrid “some awed location” (another partition OR the Global
awSpace)
•sudo rm -R /private/var/xgrid
•sudo ln -s “some awed location”/xgrid /private/var/xgrid

9
UsingtheDeepFreezeController
If all drives and partitions are Frozen on a computer, a user can create, save, change, and delete files.
However, all changes are temporary, unless a awSpace or awed partition is being utilized. e
complete contents of a Frozen drive or volume are restored at restart.
All changes made in the Deep Freeze Controller only take effect aer a restart.
OpeningtheDeepFreezeController
Use one of the following three options to open the Deep Freeze Controller:
•Browse to Applications > Faronics > DFXControl.app and double-click.
•Press Ctrl + Opt + Shi + F6.
•Click the Deep Freeze icon in the menu bar and select Login.
CreatingtheFirstUser
1. Unless a Deep Freeze user (DF User) was created using the Deep Freeze Assistant, the first
time Deep Freeze Controller is opened, there are no DF Users present. A prompt appears to
create a user, as shown:
2. Click Create DF User. e following dialog appears:

10
3. Enter a user name and password, and verify the password.
NOTE: If Apple Remote Desktop (ARD) is going to be used to manage Deep Freeze Mac
deployments, ensure that only alpha-numeric characters are used in the password, or the
remote tasks will fail.
4. Click OK to finish creating the first user.
5. e Deep Freeze Controller screen appears, with seven tabs: Boot Control, Drives, awSpace,
Maintenance, Mapping, DF Users, and Uninstall.
When opening the Deep Freeze Controller again, the login window appears as shown:
Enter a valid DF User Name and password and click OK.
e Deep Freeze Controller screen appears with the Boot Control tab active.
UpdatingtheLicenseKeyafterInstallation
To update the License Key aer installation, complete the following steps:
1. Open DFX Control menu.
2. Select Enter License Key. e License Key dialog is displayed.
3. Enter the License Key and click OK.

 11
BootControlTab
e Boot Control tab is used to change the status of Deep Freeze on a computer.
Use the three radio buttons provided to change the state of Deep Freeze:
•To set the computer to a Frozen state, choose Boot Frozen.
•To set the computer to a awed state for a specified number of restarts, choose Boot awed
on Next and specify the number of restarts (the number entered must be between 1-99).
•To set the computer to a awed state, choose Boot awed.
To restart the computer aer making changes, click Restart.
e following configuration options are available:
•To hide the Frozen icon, select the Hide Frozen Icon in menu bar checkbox.
•To hide the awed icon, select the Hide awed Icon in menu bar checkbox.
•To display Frozen partitions without a Deep Freeze icon,select the Don’t badge Frozen partitions
checkbox.
•To set the workstations to restart when a user logs out, select the Restart instead of Log Out
checkbox.
•To display the workstation status (Frozen or awed) remotely in Apple Remote Desktop, select
the Show Status in Apple Remote Desktop checkbox and select the desired Information Field.
e workstation will now write Frozen or awed to the selected Information Field during boot
time.
To view this status information in Apple Remote Desktop, select Edit > View Options and select
the matching Computer Info Field (1–4). Workstations will now show their current status, and
groups of workstations can be sorted by this status column.
To save any changes made, click Apply; changes take effect aer a restart.

12
DrivesTab
When the Drives tab is selected, Deep Freeze searches the computer and lists the drives present on a
computer. e drives listed can be put into a Frozen state or a awed state.
All drives on the computer are initially Frozen by default, unless otherwise specified in the Deep Freeze
Assistant (see Appendix I for more information). If you have created a partition to save user data and
did not designate it as a awed partition in the Assistant, put that partition in a awed state by
deselecting the corresponding checkbox in the Frozen column.
To save any changes made, click Apply; the changes take effect aer a restart.
Removable media such as external FireWire or USB hard drives or keychain drives are
not displayed and can not be Frozen.

 13
ThawSpaceTab
e awSpace tab is used to create virtual awed partitions where documents and changes are
retained persistently on Frozen computers. Administrators can create a User awSpace for each User,
or a Global awSpace that all users can share. e awSpace tab displays only the users that have
awSpace.
Global and User awSpaces are easily distinguishable by the icons displayed in the Type column. e
icon represents the Global awSpace, and the icon represents a User awSpace.
awSpaces can be added or deleted from within the tab using the Add and Delete buttons. awSpaces
are sized in MB or GB and can range from 1 MB to 120 GB.
e computer must be in a awed state to create or modify a awSpace. If a awSpace was set up
using the Deep Freeze Assistant, a dialog (with a progress bar) appears stating that awSpaces are
being created. e Global awSpace and user awSpace are displayed as removable media on the
desktop. Other users’ awSpaces are displayed as a folder with restricted access.
A maximum of one Global and 32 User awSpaces can be created on each computer. e User awSpaces
are visible for mapping purposes. awSpaces appear as removable media on the Desktop. To have User
awSpaces tagged with the users’ chosen icons, select the Tag User awSpace with icon checkbox.
AddingaGlobalThawSpace
To create a Global awSpace, complete the following steps:
1. Click Add. e following dialog appears listing users without a awSpace:

14
2. In the dialog that appears, select Global awSpace from the list of User Names.
3. In the Size field, enter the size of the awSpace and use the drop down menu to choose if it
is sized in MB or GB. e default size of the Global awSpace is 1 GB.
4. Click Add, or click Cancel to return to the tab without adding the awSpace.
5. In the awSpace tab, click Apply to create the new awSpace. A dialog prompts for the
administrative username and password.
AddingaUserThawSpace
To create a awSpace for a particular user on the drive, complete the following steps:
1. Click Add.
2. In the dialog that appears, select the user that the awSpace will be created for.
3. In the Size field, enter the size of the awSpace and use the drop-down menu to choose if it
is sized in MB or GB. e default size of the User awSpace is 10 MB.
4. Click Add, or click Cancel to return to the tab without adding the awSpace.
5. In the awSpace tab, click Apply to create the new awSpace. A dialog prompts for the
administrative username and password.
A Global awSpace is accessible to all users. However, the user awSpace is accessible
only to the particular user. On Mac OS X 10.4, other users’ awSpaces will not be
displayed on the Desktop. On Mac OS X 10.5 and 10.6, when a user logs in, other users’
awSpaces will be displayed on the Desktop as a folder with restricted access.
It is not possible to remove an existing awSpace and retain its contents. Removing
a awSpace that has a user mapped to it will prevent the user from logging on to the
computer. It is recommended that the user be mapped to an alternate location before
the awSpace is removed.
RemovingaUserorGlobalThawSpace
To remove a User or Global awSpace, complete the following steps:
1. Select the awSpace to be deleted and click Delete. A dialog appears, asking for confirmation
of the deletion.
2. Click Delete to permanently delete the awSpace or Cancel to return to the tab with the
awSpace retained.
3. Click Apply. A dialog prompts for the administrative username and password. e change will
take effect on the next restart.
Alternatively, Deep Freeze Mac can be uninstalled in order to remove any awSpaces.
If you unmount the awSpace virtual drive, it is restored upon log out/log in or restart.
On a Frozen workstation, if a awSpace is physically deleted, the awSpace is restored
upon restart but the contents are deleted.
Before removing a awSpace, remove its profile or folder mapping.

 15
ResizingaThawSpace
Once a awSpace is created, it can be resized by either increasing or decreasing the size of the
awSpace. Complete the following steps to resize one or more awSpaces.
1. Click awSpace. Select one or more awSpaces and click Resize.
2. e following dialog is displayed:
3. In the New Size field, enter the size of the awSpace and use the drop-down menu to choose
if it is sized in MB or GB. e default size of a awSpace (User awSpace and Global
awSpace) is 10 MB.
4. Click OK to resize the awSpace(s), or Cancel to return to the tab without resizing the
awSpace(s).
5. In the awSpace tab, click Apply to resize the awSpace(s). A dialog prompts for the
administrative username and password. e change will not take effect without a restart.
Resizing a awSpace is supported only on Mac OS X 10.6 or higher. Once a awSpace
is resized, the changes will take effect only aer a restart.

16
LimitationsofResizingaThawSpace
e minimum awSpace size is the actual data space being used or 1 MB (whichever is higher) and
the maximum awSpace size is the actual partition size or 120 GB (whichever is lower). Increasing
the size of a awSpace does not have any limitations. However, reducing the size of a awSpace may
not be possible in some circumstances.
For example, a 10 MB awSpace is successfully resized when increased to 20 MB even if data is
stored on the entire awSpace. However, if a 10 MB awSpace is reduced to anything less than 10
MB, it may not be possible to resize a awSpace depending on where the data is written. If the data is
distributed over the 10 MB space, the awSpace cannot be resized.However, if the data is written only
at the start of the awSpace, it can be resized to the limit where there is continuous free space till the
end of the awSpace.
MaintenanceTab
e Maintenance tab is used to schedule a Maintenance Period when the computer will be automatically
awed to allow Apple Soware Updates to be permanently applied. e computer must be Frozen for
the Maintenance schedule to start.
CreatingandNamingMultipleMaintenanceSchedules
To create multiple individually named Maintenance Schedules, complete the following steps:
1. On the Maintenance Tab, click Add.
e default Schedule 1 tag appears in the list on the le side of the tab. Each additional schedule
added will have that default tag, but can be renamed.
2. To rename a schedule, double-click the tag to be renamed.
e field becomes editable.
3. Enter the new schedule name. Up to 10 individually named Maintenance Schedules can be
created.

 17
ConguringandEditingMaintenanceSchedules
To configure a schedule, click the name of the schedule to be configured.
en choose from the following options to configure the Maintenance Schedule:
•To turn the Maintenance Period on, click the Activate Maintenance Schedule option.
•From the Day drop-down menu, select a day of the week when the schedule will occur.
•Use the From and To fields to enter the period of time that the Maintenance will occur.
•Select the Once Only checkbox to create a one-time only schedule; if this checkbox is not selected,
the schedule recurs on a weekly basis.
•Select Install Apple Soware Updates to install any available Apple Soware Updates.
•Select Lock Out User to prevent a user from accessing the computer during the Maintenance Period.
•Select Warn User At to provide a message to users warning them that the computer will be taken
over at a specified time, and enter the warning time in the field provided.
•Use the Message for User text box to enter a custom message for the user, explaining that the
Maintenance Schedule will take place at a specified time; by inserting %d as a variable into the
message, Deep Freeze will automatically display the number of minutes until the Maintenance
Period begins. (Again, %d is a variable corresponding to the number of minutes between the
current time and the time that scheduled Maintenance will begin.)
•Select Shutdown Aer Maintenance to shut the computer down aer the Maintenance Period is complete.
e minimum time allowed for a Maintenance Period is 10 minutes.
To save any changes made, click Apply; the changes take effect aer a restart.

18
MappingTab
e Mapping tab is used to map the user’s home folder to a specific awSpace or partition, or to map
elements of a user’s home folder to a specific awSpace or partition. is feature is only available at
the administrator level. e current logged in user can not be mapped.
To map a user’s home folder to a target destination, select the user’s account and under User Location
select one of the options available: Boot Volume, User awSpace, Partition, or Custom.
Boot Volume is option maps the user account to the volume the operating system is booted
from.
User awSpace is option maps the user account to the corresponding User awSpace created
for this user. It is not recommended that User awSpaces be renamed because a
renamed awSpace will prevent access from the original user account.
Partition e user account can be mapped to a specific partition listed in the Drives tab.
Custom is option lets certain elements (pictures, movies and, music, etc.) of a user
account be mapped to the User awSpace/Partitions. To do this, click on
the element and select the awSpace/Partition that it will be mapped to.
Custom mapped users must be located on the boot volume. Users can not
be mapped entirely to their User awSpace/any other volume and then
partially custom mapped to another location.
For bookmarks, the location must exist to be mapped; e.g. if a user has never
run Safari, it can not be mapped. Deep Freeze does not create the folders and
bookmarks for a user.
If an attempt to map to a location with insufficient space is made, the mapping action
will not take place.
e Short Name must match the Home Directory name in System Preferences >
Accounts > Account_Name > Advanced Options for mapping to work.

 19
DFUsersTab
e DF Users tab allows administrators to manage the Deep Freeze users present on a computer. ere
are a maximum of four users permitted on each computer, but only the first user (the admin user) can
create, edit, and delete other DF Users.
Adding,Deleting,andEditingDFUsers
To add a new user, complete the following steps:
1. Click Add. A properties dialog appears, as shown.
2. Enter the DF User Name and Password and verify the password.
NOTE: If Apple Remote Desktop (ARD) is going to be used to manage Deep Freeze Mac
deployments, ensure that only alpha-numeric characters are used in the password or the
remote tasks will fail.
3. Click OK to save the changes to the user profile, or click Cancel to exit with no changes
saved.
To delete a DF User, click Delete. A dialog appears asking for confirmation of the deletion. Click Cancel
to exit the dialog, or click Delete to delete the DF User permanently. ere must always be at least one
DF User present; the first DF User created can not be deleted.
To edit the properties of a DF User, click Edit. Edit the User Name and Password in the properties
dialog as needed.

20
UninstallTab
A computer must be in a awed state for the Uninstall option to be available. If the computer is in
a Frozen state, the Uninstall option is not available. If there are existing awSpaces on a computer,
choose either to retain or delete them by selecting the preferred button.
If the option to retain awSpaces is chosen, all existing awSpaces are moved to the boot volume (/
Volumes/username.dmg). To access the boot volume, launch the Terminal and change the directory to
the boot volume /Volumes/username.dmg. awSpaces must be mounted manually by double-clicking
the icon.
To uninstall Deep Freeze, click Uninstall.
e computer restarts and Deep Freeze is uninstalled.
All program components are permanently deleted when Deep Freeze is uninstalled.
Before removing a awSpace, remove its profile or folder mapping.
ExportingandImportingCongurations
A file containing the configuration information set in the Deep Freeze Controller can be exported as a
property list file. e property list can be imported into another Deep Freeze Controller and deployed
to targeted computers.
To export the configurations set in the Deep Freeze Controller, click Export and save the file to a
preferred location.
To import a configuration file, click Import and browse to the location of the saved file. e computer
must be restarted for any changes to take effect from the imported file.
Drives, awSpace, and mapping pages are not exported or imported since they are not relevant to
other computers.