FARONICS DEEP FREEZE MAC User manual

B316<71/:E67B3>/>3@
:Oab[]RWTWSR(/^`WZ  &
eeeTO`]\WQaQ][
''' &4O`]\WQa1]`^]`ObW]\/ZZ`WUVba`SaS`dSR
2SS^4`SShS/\bW3fSQcbOPZSO\RE7<ASZSQbO`Sb`ORS[O`Ya
O\R]``SUWabS`SRb`ORS[O`Ya]T4O`]\WQa1]`^]`ObW]\
/ZZ]bVS`Q][^O\gO\R^`]RcQb\O[SaO`Sb`ORS[O`Ya]TbVSW``Sa^SQbWdS]e\S`a
4O`]\WQa
B]ZZ4`SSBSZ(&'"!$"
B]ZZ4`SS4Of(&'"!$"&&
7\bS`\ObW]\OZBSZ($"$!%!!!!
7\bS`\ObW]\OZ4Of($"$!%&&&
2SS^4`SShS;OQ0Sab>`OQbWQSa


Introduction
is document was created to give administrators a set of guidelines to follow to ensure Deep Freeze
Mac is set up and deployed in the most ideal way.
Implementation
is section explains the recommended methods to initially congure your Deep Freeze Mac
environment and deploy it to your clients. is section also explains additional conguration settings
recommended by Faronics to secure the machines.
SystemRequirements
Deep Freeze Mac requires Mac OS X Panther v10.3, Tiger v10.4., or Leopard v10.5.
Deep Freeze Mac is a Universal application (Intel and PPC compatible).
Apple Remote Desktop integration requires ARD version 2.2 or later.
A minimum of 256 MB RAM is recommended.
InstallationConguration
e Deep Freeze Assistant allows for the creation of pre-congured installer packages that contain
settings that are applied when deployed. ese include, but are not limited to: usernames/passwords,
Maintenance Schedule settings, and awSpaces. ese packages can then be deployed manually or
via ARD (or any other soware deployment tool) so that dierent Deep Freeze settings can easily be
deployed based on the requirements of the labs or environment.
e Deep Freeze Assistant is included on the Deep Freeze Mac disk image. One important item to
remember is to set your installation boot state to Boot awed (at least for one restart) if you are pre-
conguring awSpaces for your installer package. Deep Freeze Mac needs to be in a awed state to
create the awSpaces aer installation.
Deep Freeze Assistant can also directly install Deep Freeze specic Saved Tasks into the ARD console
on a chosen Mac. ARD tasks are not part of the customized Deep Freeze installation package. ARD
must not be running in order for the task installation to be successful.
InstallationDeployment
Before Installation: It is highly recommended that a Verify Disk (via Disk Utility or similar utility) be
run on the drive on which Deep Freeze Mac is to be installed. is will test the disk to see if any further
repairs are necessary. A faulty or fragmented drive may cause Deep Freeze to install improperly, which
may compromise the system, so a defrag is recommended. Running a Repair Disk Permissions is also
recommended. e cleaner the system the better!
InstallingRemotely
To install Deep Freeze Mac via Apple Remote Desktop, select Manage > Install Packages... from the
Install Packages window. You can choose the desired Deep Freeze installer package and the computers
(or groups of computers) to which you want Deep Freeze Mac deployed. is deployment can be
scheduled through ARD for automated execution.
InstallingManually
To install Deep Freeze on a single computer, double-click the DFX Version.pkg le and follow the steps
presented. Click Install and Deep Freeze is installed on the computer. A restart is required to complete
the installation.
Upon completion of a successful installation and aer a restart, Deep Freeze is automatically congured
to put all drives and partitions on the into a Frozen state. e drives and volumes that are to be put in
a awed state must be specied using the Deep Freeze Controller or via Apple Remote Desktop.

 
NOTE: It is recommended that all previous versions of Deep Freeze Mac OS X be uninstalled before
installing a newer version.
InstallationOrderWithOtherProducts
In order to properly install environments that contain both Deep Freeze Mac and any other product,
either of the following two methods can be used:
• Install the other program(s) rst and then install Deep Freeze Mac. is ensures that the
additional programs are part of the Frozen system.
• Install Deep Freeze Mac rst in a awed state, then install the other program(s). is ensures
that the additional programs are not deleted when the computer(s) is rebooted. e computer
then needs to be set back into a Frozen state.
SecuringYourSystem
Apple provides an application called Open Firmware Password that prevents users from pressing
the keys necessary to boot into single-user mode or boot from an alternative volume at start up. To
download the Open Firmware Password application, refer to Apple’s instructions at:
http://www.apple.com/support/downloads/openrmwarepassword.html
For Mac OS X 10.4 or later, the updated version of this application can be copied from the soware
installation disc, located at Applications > Utilities on the disk. Please note that Intel-based Macintosh
computers can be protected by rmware passwords as well by using Extended Firmware Interface
(EFI) technology.
RetainingUserData
In an environment where the user data needs to be stored on the local machine, it is possible to set up
an area where the user data can be stored. is involves redirecting data to a awed location, either
a Global or Individual awSpace or a awed partition. is re-directing, or Mapping, can be done
directly in the Deep Freeze Mac user interface on the Mapping tab. Refer to the Deep Freeze Mac
documentation for more information.
ManagingDeepFreezeMacWorkstations
Now that Deep Freeze Mac has been deployed, the following information provides recommendations
for managing a Deep Freeze Mac deployment.
AppleRemoteDesktopIntegration
As mentioned above, the Deep Freeze Assistant can install tasks for use with Apple Remote Desktop.
ey appear in their own Deep Freeze folder on the ARD sidebar. ese tasks can be used as supplied or
as a starting point for controlling Deep Freeze with ARD. Each task mirrors a Deep Freeze Controller
command, although you can also remotely request the Deep Freeze status from any Mac via ARD.
To use the tasks, they must be edited to add site-specic information, eg. usernames and passwords.
For ARD to perform the tasks, the target computer(s) for the task must be specied, the target
computer(s) must have Deep Freeze installed and a user on the target computer must be specied to
run the command.
To target computers with a particular ARD task, select the desired task and drag the preferred
workstations or group of workstations into the lower portion of the task window. e number of
computers assigned to a specic task appears at the bottom of the window
As with deploying the Deep Freeze Mac installer package, any Deep Freeze task can be scheduled
through ARD for automated execution.


LANDeskIntegration
Deep Freeze Mac also integrates (via the Deep Freeze Mac plug-in for LANDesk) with the LANDesk
Management Suite Console, where Deep Freeze tasks can be created, scheduled, and deployed. e
plug-in supports LDMS v8.6.1 and v8.7, Deep Freeze Enterprise v6.0 and higher, and Deep Freeze Mac
v3.1 and higher. is plug-in version will not work with the LANDesk Management Web Console.
For full instructions on managing Deep Freeze Mac through the LANDesk console, refer to the Deep
Freeze Mac Plug-in to LANDesk documentation.
CommandLineControlIntegration
e Deep Freeze Mac-specic ARD tasks can be run (even if ARD is not employed) with several
dierent third-party enterprise management tools and/or central management solutions; this includes
executing commands in Terminal while connected to a remote workstation via SSH.
AppleSoftwareUpdates
To automatically download and install Apple Soware Updates, use the Schedule tab in the Deep Freeze
Controller to set up an automatic awed period during which time the updates can be performed on
the workstations.
During the scheduled maintenance, the Lock Out User option can be set so that the keyboard and
mouse are disabled at the workstation, allowing for updates to only take place via the network without
user interference.
ThawSpaces
e awSpace tab in the Deep Freeze Controller is used to create virtual awed partitions where
documents and changes can be saved persistently on Frozen computers. Administrators can create a
personal awSpace for each local user, or a global awSpace that all local users can share.
awSpaces can be added or deleted from within the tab using the Add and Delete buttons. A computer
must be in a awed state to create or modify a awSpace, and a restart is required to enable any
additions, modications, or deletions made to awSpaces. awSpaces appear as removable media
on the Desktop so les can be easily dragged to them for saving.
“Stealth”Mode
By using the Boot Control tab in the Deep Freeze Controller, an administrator has the option to show
or hide the Deep Freeze menu bar icons (blue for Frozen, red for awed), as well as whether to show a
badge of the Deep Freeze icon on any Frozen drives or volumes on the Mac. By choosing to hide these
options, the administrator can eectively run in “stealth mode” so that users will be visually unaware
the Deep Freeze is installed on the computer.
Upgrading
To check if the installed version of Deep Freeze Mac is the most current one, select Help > Check For
Updates. A dialog appears, stating if your version is up to date or if there is a more current one available
for download. It is recommended that all previous versions of Deep Freeze Mac OS X be uninstalled
before installing a newer version.
Uninstalling
A machine must be in a awed state for the Uninstall option to be available via the Uninstall tab. If the
machine is in a Frozen state, the Uninstall option is not available. If there are existing awSpaces on
a machine, choose either to retain or delete them by selecting the preferred radio button.
e computer requires a restart and all Deep Freeze program components are permanently deleted
during the uninstall process.