Lenovo THINKPAD L420 Quick reference guide

LenovoAutoLockDeploymentGuide
Updated:March,2011

LenovoAutoLockDeploymentGuide
Updated:March,2011

Note:Beforeusingthisinformationandtheproductitsupports,readthegeneralinformationinAppendix
A“Notices”onpage7.
FirstEdition(March2011)
©CopyrightLenovo2011.
LIMITEDANDRESTRICTEDRIGHTSNOTICE:IfdataorsoftwareisdeliveredpursuantaGeneralServicesAdministration
“GSA”contract,use,reproduction,ordisclosureissubjecttorestrictionssetforthinContractNo.GS-35F-05925.

Contents
Preface.................v
Chapter1.Overview..........1
Chapter2.Installation.........3
InstallingAutoLock..............3
ConsiderationsforinstallingAutoLock......3
Chapter3.WorkingwithGroupPolicy
andADMXles.............5
AddingADMXles..............5
Generalsettings...............5
AppendixA.Notices..........7
Trademarks.................8
©CopyrightLenovo2011iii

ivLenovoAutoLockDeploymentGuide

Preface
ThisguideisintendedforITadministrators,orthosewhoareresponsiblefordeployingtheLenovo®
AutoLockprogram(hereinafterreferredtoasAutoLock)tocomputersintheirorganization.Thepurpose
ofthisguideistoprovidetheinformationrequiredforinstallingAutoLockononeormorecomputers,
andtheinformationaboutthecommonadministrativetasksassociatedwithmanaginggrouppolicies.
Implementinganautomaticcomputerlockstrategythroughouttheentireorganizationwillenhancethe
securityofcondentialdata.
ThisdeploymentguidewillprovideinstructionsandsolutionsforworkingwithAutoLock.Ifyouhave
suggestionsorcomments,communicatewithyourLenovoauthorizedrepresentative.Thisguideis
updatedperiodically,andyoucancheckthelatestpublicationontheLenovoSupportWebsiteat
http://www.lenovo.com/support.
©CopyrightLenovo2011v

viLenovoAutoLockDeploymentGuide

Chapter1.Overview
AutoLocklockscomputersautomaticallybydetectinghumanpresencethroughfacialfeaturerecognition.
Lockingacomputerduringuserabsencecanprotectcondentialdatafromunintentionalexposure.When
theadministratorenforcestheautomaticlockstrategyoncomputersthroughouttheentireorganization,it
willenhancethecondentialdatasecurity.
AutoLockprovidesdetailedtimesettingstostartcameradetection,toshownoticationbeforelocking,and
tolockthecomputer.Whenitisenabled,AutoLockwilllockcomputersatthepresettime.Also,AutoLock
enablestheadministratortoturnitsfunctionofftemporarilytoavoidaccidentallylockingthecomputer.
©CopyrightLenovo20111

2LenovoAutoLockDeploymentGuide

Chapter2.Installation
ThischapterprovidesinformationaboutinstallingAutoLock.
InstallingAutoLock
ToinstallAutoLock,dothefollowing:
1.StarttheMicrosoft®Windows®7operatingsystem,andthenloginwithadministrativeprivileges.
2.ExtracttheAutoLocksoftwarepackagetotheharddiskdrive,forexample:
c:\swtools\readyapps\autolock
3.ClickStart➙Run.
4.Basedondifferentinstallationmethods,dooneofthefollowing:
•ToinstallAutoLockinteractively,typethefollowing:
<path>\setup.exe
•ToinstallAutoLockwithoutuserinteraction,typethefollowing:
<path>\setup.exe/SP-/VERYSILENT/NORESTART/SUPPRESSMSGBOXES
Note:Ifyourcomputerdoesnothaveanintegratedcamera,theAutoLockinstallationprocesswillbe
cancelled.
ConsiderationsforinstallingAutoLock
VariousfunctionsinAutoLockhavedependencyonhardware,integratedcamera,BIOS,drivers,andother
ThinkVantage®Technologies.Whenafunctionisnotsupportedonaclientcomputer,thefunctionishidden
inAutoLock.Installingthelatestversionofthefollowingsoftwareisstronglyrecommendedtogetthefull
rangeoffunctionsinAutoLock.
•BIOSupdate
•Integratedcameradriver
•Hotkeydriver
©CopyrightLenovo20113

4LenovoAutoLockDeploymentGuide

Chapter3.WorkingwithGroupPolicyandADMXles
GroupPolicyandAdministrativeT emplate(ADMX)lesprovideadministratorstheabilitytomanage
computers,groups,endusers,domains,securitypolicies,andanytypeofuser‐denedobjects.With
GroupPolicyandADMXles,administratorsdenesettingsthatcanbeappliedtocomputersorusersin
thedomain.LenovoprovidesAutoLockADMXlesforWindows7clientcomputers,withtheAutoLock
generalpolicysettings.
AddingADMXles
Designedtosaveyourtimeandeffort,LenovoprovidestheAutoLockADMXlessupportingtheWindows7
operatingsystem,andtheWindowsServer2008R2operatingsystemoritslaterversions.Y oucanusethe
AutoLockADMXleswiththeGroupPolicyEditortosetthepoliciesforAutoLock.TheADMXlescanbe
downloadedfromtheLenovoSupportWebsite.
ToaddtheAutoLockADMXlestotheGroupPolicyEditor,dothefollowing:
1.ExtracttheAutoLock‐GP .zipletothelocaldirectory.
2.CopytheAutoLock.admxletotheC:\Windows\PolicyDenitionsdirectory.
3.CopytheAutoLock.admlletotheC:\Windows\PolicyDenitions\en-USdirectory.
4.OnthecomputerrunningtheActiveDirectory,clickStart➙Run,andtypegpedit.msc.TheLocalGroup
PolicyEditorwindowopens.TheLocalGroupPolicyEditorwillautomaticallyreadalltheADMXles
savedintheC:\Windows\PolicyDenitionsdirectory.
5.UndertheComputerCongurationsection,expandAdministrativeT emplatesandnavigateto
ClassicAdministrativeT emplates.AnewitemnamedLenovoThinkVantageComponentsispresent.
6.ExpandLenovoThinkVantageComponents,andasub-itemnamedAutoLockispresent.
Generalsettings
GeneralsettingpoliciesenableadministratorstoconguretheAutoLockgeneralsettings.
ToconguregeneralsettingpoliciesontheWindows7operatingsystem,underComputerConguration,
clickAdministrativeTemplates➙LenovoThinkVantageComponents➙AutoLock➙Setting.
Thistableprovidesdetailedinformationabouteachpolicysetting.
Table1.Generalsettings
PolicysettingsDescription
Denesecond(s)todisplay
notication
Ifyouenablethispolicysetting,youareallowedtospecifythetimespanbetween
displayingnoticationandlockingthecomputer.
Note:Thetimespanbetweendisplayingnoticationandlockingthecomputer
shouldbeshorterthanthetimespanbetweendetectingnofacialfeatureand
lockingthecomputer.
DeneLenovoAutoLock
execution
Ifyouenablethispolicysetting,youareallowedtospecifywhetherornotto
enableAutoLock.
Denesecond(s)tobegin
cameradetectionfromwhenthe
keyboardormouseisnotinuse
Ifyouenablethispolicysetting,youareallowedtospecifythetimewhenthe
cameradetectionbeginstowork.
Denethebehaviorwhenthe
cameraisdisabled
Ifyouenablethispolicysetting,youareallowedtotemporarilyturnoffAutoLock
orlockthecomputer,whenthecameraisusedbyotherapplications.
©CopyrightLenovo20115

Table1.Generalsettings(continued)
PolicysettingsDescription
Denesecond(s)tolock
computerwhennofacialfeature
isdetectedfor
Ifyouenablethispolicysetting,youareallowedtospecifythetimespanbetween
detectingnofacialfeatureandlockingthecomputer.
Note:Thetimespanbetweendetectingnofacialfeatureandlockingthecomputer
shouldbelongerthanthetimespanbetweendisplayingnoticationandlocking
thecomputer.
Turnofftheautomaticlock
functionwhileaseconddisplay
isconnected
Ifyouenablethispolicysetting,youareallowedtotemporarilyturnoffAutoLock
whenaseconddisplayisconnected.
Displaynoticationbeforethe
computerautomaticallylocks
Ifyouenablethispolicysetting,youareallowedtoselectwhetherornottodisplay
noticationbeforelockingthecomputer.
6LenovoAutoLockDeploymentGuide

AppendixA.Notices
Lenovomaynotoffertheproducts,services,orfeaturesdiscussedinthisdocumentinallcountries.Consult
yourlocalLenovorepresentativeforinformationontheproductsandservicescurrentlyavailableinyour
area.AnyreferencetoaLenovoproduct,program,orserviceisnotintendedtostateorimplythatonlythat
Lenovoproduct,program,orservicemaybeused.Anyfunctionallyequivalentproduct,program,orservice
thatdoesnotinfringeanyLenovointellectualpropertyrightmaybeusedinstead.However,itistheuser's
responsibilitytoevaluateandverifytheoperationofanyotherproduct,program,orservice.
Lenovomayhavepatentsorpendingpatentapplicationscoveringsubjectmatterdescribedinthis
document.Thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents.Youcansend
licenseinquiries,inwriting,to:
Lenovo(UnitedStates),Inc
Morrisville,NC27560
USA
Attention:LenovoDirectorofLicensing
LENOVOPROVIDESTHISPUBLICATION“ASIS”WITHOUTWARRANTYOFANYKIND,EITHEREXPRESS
ORIMPLIED,INCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTIESOFNON-INFRINGEMENT,
MERCHANTABILITYORFITNESSFORAPARTICULARPURPOSE.Somejurisdictionsdonotallow
disclaimerofexpressorimpliedwarrantiesincertaintransactions,therefore,thisstatementmaynotapply
toyou.
Thisinformationcouldincludetechnicalinaccuraciesortypographicalerrors.Changesareperiodically
madetotheinformationherein;thesechangeswillbeincorporatedinneweditionsofthepublication.
Lenovomaymakeimprovementsand/orchangesintheproduct(s)and/ortheprogram(s)describedinthis
publicationatanytimewithoutnotice.
Theproductsdescribedinthisdocumentarenotintendedforuseinimplantationorotherlifesupport
applicationswheremalfunctionmayresultininjuryordeathtopersons.Theinformationcontainedinthis
documentdoesnotaffectorchangeLenovoproductspecicationsorwarranties.Nothinginthisdocument
shalloperateasanexpressorimpliedlicenseorindemnityundertheintellectualpropertyrightsofLenovo
orthirdparties.Allinformationcontainedinthisdocumentwasobtainedinspecicenvironmentsandis
presentedasanillustration.Theresultobtainedinotheroperatingenvironmentsmayvary.
Lenovomayuseordistributeanyoftheinformationyousupplyinanywayitbelievesappropriatewithout
incurringanyobligationtoyou.
Anyreferencesinthispublicationtonon-LenovoWebsitesareprovidedforconvenienceonlyanddonotin
anymannerserveasanendorsementofthoseWebsites.ThematerialsatthoseWebsitesarenotpartof
thematerialsforthisLenovoproduct,anduseofthoseWebsitesisatyourownrisk
Anyperformancedatacontainedhereinwasdeterminedinacontrolledenvironment.Therefore,the
resultinotheroperatingenvironmentsmayvarysignicantly.Somemeasurementsmayhavebeenmade
ondevelopment-levelsystemsandthereisnoguaranteethatthesemeasurementswillbethesame
ongenerallyavailablesystems.Furthermore,somemeasurementsmayhavebeenestimatedthrough
extrapolation.Actualresultsmayvary.Usersofthisdocumentshouldverifytheapplicabledatafortheir
specicenvironment.
©CopyrightLenovo20117

Trademarks
ThefollowingtermsaretrademarksofLenovointheUnitedStates,othercountries,orboth:
Lenovo
ThinkVantage
Microsoft,Windows,andWindowsVistaarethetrademarksoftheMicrosoftgroupofcompanies.
Othercompany,product,orservicenamesmaybetrademarksorservicemarksofothers.
8LenovoAutoLockDeploymentGuide