Deep Freeze Enterprise User Guide
Last modified: January, - 2011 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Faronics Core, Faronics Anti-Virus, Anti-Executable, Faronics Device Filter, Faronics Power Save, Faronics Insight, Faronics System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.

Contents

Preface. 7
Important Information. 8 About Faronics. 8 Product Documentation. 8 Technical Support. 9 Contact Information. 9

Introduction. 11

Deep Freeze Overview. 12 System Requirements. 12 Deep Freeze Enterprise Files. 13
Installing Deep Freeze. 15
Installation Overview. 16 Installing Deep Freeze Configuration Administrator and Enterprise Console. 16 Customization Code. 19 Re-Initializing the Customization Code. 19 Update Mode. 19 One Time Passwords. 21
Using Deep Freeze Configuration Administrator. 23
Accessing the Configuration Administrator. 24 Toolbar and Menus. 24 Passwords Tab. 26 Drives Tab. Frozen Drives. ThawSpace. Existing ThawSpace. Always Thaw External Hard Drives. Embedded Events Tab Restart. Shutdown. Maintenance. Idle Time. 41
Maintenance Tab. Run batch file with:. Windows Update. Batch File. Advanced Options Tab. Network. Advanced Options. Stealth Mode. License.
Creating Workstation Install Program and Workstation Seed. 43
Using Deep Freeze Enterprise Console. 45
Deep Freeze Enterprise Console. Launching the Enterprise Console Activating the Enterprise Console. Status Icons.
Managing Communication Between the Console and Workstations. 48 Configuring the local service. 48 Editing or Removing a local service Connection. 50 Remote Consoles. 51 Setting up Remote Control Enabled Connections. 51 Connecting to a Remote Console. 52 Managing Deep Freeze with the Console. Updating Deep Freeze Software. Sending Messages to Computers. Target Installing Deep Freeze. Updating a Deep Freeze Configuration File. Dynamically Updating a Deep Freeze Configuration. 54 55
Licensing. 57 Scheduling Deep Freeze Tasks. 58 Assigning Computers to Scheduled Tasks Executing a Task Immediately. Deleting a Task. Scheduled Task Properties. 63 64
Managing Network and Groups. Adding a New Group. Building a User Defined Group Structure. Importing Groups from Active Directory.
History. 65 Adding computers to a Group. 66 Configure Custom Actions. Control with RDC. Remote Execute. Push and Install MSI file. Deleting, Importing and Exporting Custom. Actions.. 70
Console Customizer. 71 Deep Freeze Enterprise Console Shutdown. 72 Installing Deep Freeze on the Workstation. 73 Attended Install or Uninstall. 73 Uninstalling Deep Freeze on the Workstation via the Console. 74 Silent Install or Uninstall. Example Command Line. Silent Install or Uninstall Using a Shortcut. Network Install on Multiple computers. Installing Over Existing Deep Freeze Versions Installing Using Imaging. Target Install. 77

Check for Updates. 78

Managing Deep Freeze Computers. 79
Login Screen. 80 Status Tab. 81 Status on Next Boot. 81
Clone. 81 License. 81 Password Tab. 82 Network Tab. 83 ThawSpace Tab. 84 Permanent Software Installations, Changes, or Removals. 85
Deep Freeze Command Line Control. 87
Deep Freeze Command Line Control (DFC.EXE). 88 DFC Return Values. 88 DFC Command Line Syntax. 89
Appendix A Ports and Protocols. 91 Appendix B Network Examples. 93
Example 1 - Single Subnet. 94 Example 2 - Multiple Subnets One local service. 95 Example 3 - Multiple Ports, Console Accessed Remotely. 96 Example 4 - Multiple Subnets Multiple local services. 97
Appendix C Troubleshooting a Remote Console Connection. 99
No Clients In the Console. 99 Port is in Use Error When Starting the Console. 100

Deep Freeze Overview System Requirements

Deep Freeze Overview

System Requirements
Deep Freeze is supported on: Windows 2000, XP, Vista and Windows 7 Deep Freeze requires 10% of the hard drive to be left as free space Both 32 and 64 bit versions of Windows are supported Windows XP x64 must have Service Pack 2 or later installed Faronics recommends a minimum of 256 MB of system memory in the protected systems The Deep Freeze Configuration Administrator and Enterprise Console are supported on: Windows 2000, XP, Vista, Windows 7, Server 2000, 2003 and and 64 bit versions are supported
Deep Freeze Enterprise Files
Deep Freeze uses different colored icons to represent its components. Files identified by a red icon should generally only be installed on an administrative computer. Icon Definition Deep Freeze Enterprise Configuration Administrator and Enterprise Console installation file.
The Configuration Administrator application is used to create customized, pre-configured, computer installation program files and Workstation Seeds.
The Enterprise Console application is used to centrally deploy, monitor, manage, and maintain Deep Freeze installations.
A customized Deep Freeze workstation installation file is created in the Configuration Administrator and deployed to workstations within the enterprise. This file includes the Workstation Seed. If the Deep Freeze workstation installation file is installed, the Workstation Seed is not required to be installed separately.
A Workstation Seed enables seamless communication between the Enterprise Console and computers on a network. When the Workstation Seed is installed on a computer, the computer becomes visible on the Enterprise Console. Once a computer is visible on the Enterprise Console, various actions such as Restart, Shutdown and Wake-on-LAN can be performed on the computer remotely. Deep Freeze can also be installed remotely on visible computer thereby allowing Deep Freeze related actions on remote computers.

Installing Deep Freeze

This chapter describes the installation process of Deep Freeze.
Installation Overview Customization Code One Time Passwords

Installation Overview

Installing Deep Freeze Configuration Administrator and Enterprise Console
The Configuration Administrator is intended to be installed only on the computer used to administrate Deep Freeze. The Configuration Administrator is used to create customized Deep Freeze installation files and Workstation Seeds. The Deep Freeze Enterprise Console installs automatically with the Deep Freeze Configuration Administrator. Complete the following steps to install the Configuration Administrator: 1. Insert the CD-ROM from the media package into the CD-ROM drive. 2. Select Install Deep Freeze Enterprise Administrator in the window that appears on the desktop. 3. If Deep Freeze has been downloaded via the Internet, double-click the file DFEnt.exe to begin the installation process. The following screen appears:

In the example below, the district office has received a new version of Deep Freeze Configuration Administrator and can automatically update any existing Deep Freeze Workstation Install files and Workstation Seeds at a remote location.
The update command does not require a password, but does require a Customization Code. Use the following command syntax: \PathToFile\DFEnt.exe /update=Customization Code c:\dfupdate.log PathToFile must be replaced with the actual path to the installation file (DFEnt.exe) DFEnt.exe must be the actual name of the installation file (it may differ if it was downloaded) Customization Code must be in quotes if there is a space in it Customization Code must match the old installation files Customization Code
The log file provides full details of exactly which files were updated. The update process may take a few minutes to complete. Update Mode does not update the existing version of Deep Freeze on computers. Computers must be updated using the Enterprise Console.

One Time Passwords

The One Time Passwords Generation System is used to generate temporary passwords for Deep Freeze that expire at midnight on the day they were generated. One Time Passwords dialog can be accessed from Tools>One Time Passwords in the Enterprise Console. For more information refer to Using Deep Freeze Enterprise Console. File>One Time Passwords in the Configuration Administrator. For more information refer to Using Deep Freeze Configuration Administrator.
A One Time Password (OTP) can be useful if, for example, a Deep Freeze password is forgotten or if a configuration file was created without any passwords defined. An OTP can also be used to provide access to a computer for an individual performing maintenance duties without requiring that individual to know the permanent Deep Freeze password. To create an OTP, complete the following steps: 1. Select either Password valid for one use only or Password valid for multiple uses. All OTPs expire at midnight on the day they were created, regardless of type. 2. Enter the OTP Token from the computer that requires the OTP into the Token field. The OTP Token for the computer is located in the logon dialog, as shown below.

3. Click Generate.

The Deep Freeze Command Line interface does not support the use of One Time Passwords.
Using Deep Freeze Configuration Administrator
Accessing the Configuration Administrator Passwords Tab Drives Tab Embedded Events Tab Maintenance Tab Advanced Options Tab Creating Workstation Install Program and Workstation Seed
Accessing the Configuration Administrator
Open the Configuration Administrator by selecting the following path from the Start menu: Start > All Programs > Faronics > Deep Freeze 7 Enterprise > Deep Freeze Administrator The Configuration Administrator provides various tabs to configure passwords, Frozen drives, Windows Updates, Embedded Events and Licensing. Once the settings have been configured, a Workstation Install file is created. The Workstation Install file can be installed on the computers that need to be protected by Deep Freeze.

Restart on Logoff - Select this check box to Restart the computer automatically when it is logged off. If this option is selected, the computer is restarted when a user logs off. The following events can be scheduled in the Embedded Events Tab:

Restart

The Restart event can be scheduled by completing the following steps:
Select Restart from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Day - Select the day, or specify if the event will occur on Weekdays or Weekends. Start Time - Select the Start Time. Allow User to Cancel Event - Select the check box if the user is allowed to cancel the event. Show message - Select the check box to display a message on the computer before the event occurs. Specify the time interval in minutes and enter a brief message to be displayed before the event occurs.
The message This computer will reboot in %d seconds is displayed in the Message to be displayed before the Event field. This message can be edited. Add the word minutes in the message after %d to include the word minutes as part of the message.
Example In the above screen, an Embedded Event has been created to restart the computer daily at 12:00 AM. The Embedded Event is configured to display a message to the user 1 minute before the Restart event.

Shutdown

The Shutdown event can be scheduled by completing the following steps:
Select Shutdown from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Day - Select the day, or specify if the event will occur on Weekdays or Weekends. Start Time - Select the Start Time. Allow User to Cancel Event - Select the check box if the user is allowed to cancel the event. Show message - Select the check box to display a message on the computer before the event occurs. Specify the time interval in minutes and enter a brief message to be displayed before the event occurs.
Example In the above screen, an Embedded Event has been created to shutdown the computer daily at 12:00 AM. The Embedded Event is configured to display a message to the user 1 minute before the Shutdown event.

Maintenance

Maintenance Events are scheduled for ensuring successful software updates or other permanent changes on the computer. A Maintenance Event has a Start Time and an End Time. During this period, the software updates and other permanent changes take place. The Maintenance Event can be scheduled by completing the following steps:

Select Maintenance from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Day - Select the day, or specify if the event will occur on Weekdays or Weekends. Start Time - Select the Start Time. End Time - Select the End Time. The minimum interval is 15 minutes. Run - Select Batch File to run a batch file. Select Windows Updates to enable Windows Updates. Deep Freeze requires Windows Update Agent (version 7.2.6001.788 or higher) to ensure that Windows Update can execute properly.
Allow User to Cancel Event - Select the check box if the user is allowed to cancel the event. Shutdown after Maintenance - Select the check box to shutdown the computer after Maintenance. Disable Keyboard and Mouse - Select the check box to disable keyboard and mouse during Maintenance. Show message - Select the check box to display a message on the computer Before and During the event. Specify the time interval in minutes and enter a brief message to be displayed before the event starts.
Deep Freeze will automatically update the computer with Critical Updates, Security Updates, and Service Packs during Windows Update.
The message This computer will reboot in %d for Maintenance is displayed in the Message to be displayed before the Event field. This message can be edited. Add the word minutes in the message after %d to include the word minutes as part of the message. Adequate time required for Windows Updates must be set while creating the Maintenance event.
Example Anti-Virus programs require regular virus definition updates to protect the system. Virus definitions can be updated during a Maintenance Event. In the above screen, a Maintenance Event has been created to schedule a maintenance period at the computer daily between 12:00 AM and 1:00 AM. No Batch Files or Windows Updates are to be run during the maintenance period. The user is not allowed to cancel the event. The computer will not shut down after the maintenance period. The keyboard and mouse are disabled during the maintenance period. The Maintenance Event is configured to display a message to the user 3 minutes before the event starts. The following message will be displayed on the computer at 12:00 AM The computer will reboot in 3 minutes for maintenance. During the maintenance period, the following message is displayed on the computer This computer is in Maintenance Mode. To ensure that the virus definitions are applied permanently, schedule the virus definition update for your Anti-Virus program so that it starts after Deep Freeze successfully starts the Maintenance Event and ends before Deep Freeze ends the Maintenance Event. During the Maintenance Event, the computers managed by Deep Freeze reboot Thawed. This ensures that the virus definitions downloaded and updated by the Anti-Virus program stay permanently on the system. Hence the system is fully protected by Anti-Virus and Deep Freeze. Faronics Anti-Virus: Faronics Anti-Virus works with Deep Freeze and does not require a Maintenance Event for updating virus definitions. Faronics Anti-Virus can update virus definitions even when the computers managed by Deep Freeze are in a Frozen state. Other Anti-Virus Programs: All other Anti-Virus programs require scheduling a Maintenance Event to update virus definitions. Alternatively, virus definitions can be applied when the computers managed by Deep Freeze are in a Thawed state.

Idle Time

The Idle Time event can be scheduled by completing the following steps:
Select Idle Time from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Restart or Shutdown - Select Restart or Shutdown and specify the time interval in minutes. Show message - Select the check box to display a message. Specify the time interval in minutes and enter a brief message. After the computer is started, the Idle Time counter becomes active only after the first keyboard or mouse activity has been initiated.
Example In the above screen, the Idle Time Event is set to Restart when the computer is idle for 20 minutes. A message is displayed to the user for 1 minute after the idle time has elapsed. The computer will restart unless the user cancels the event in the message dialog displayed.

Maintenance Tab

The Maintenance tab is used to specify an SUS (Microsoft Software Update Services) or WSUS (Windows Software Update Services) Server and batch file options for a Scheduled Maintenance period.

Run batch file with:

Select Microsoft Network and select if the account to be used is a System account or a Specified user account. If you select Specified user account, specify the Login ID, Password, and Domain. For Novell Network, select Novell, specify the Login ID, Password, Tree, Context, and Server.

Windows Update

To use an SUS (Microsoft Software Update Services) Server or a WSUS (Windows Software Update Services) Server for Windows critical updates, select the option Use SUS/WSUS Server and enter the IP address or Hostname. If Use SUS/WSUS Server is not selected, Windows critical updates are downloaded via the Internet for each computer individually. Select the Windows Update Logfile path. Browse to select the log file path and click OK. If the path is empty, Deep Freeze will create a default log file DFWuLogfile.log under the Faronics folder. Microsoft SUS client and SUS/WSUS server can be downloaded at: http://www.microsoft.com.

Batch File

Enter a custom batch file to run during the Maintenance Period. The same batch file applies to all Maintenance Periods for which a batch file will be run. The following options are available when running custom batch files: To clear the current batch file, click New To load an existing file, click Open and browse to the location of the file To save the contents of the field, click Save and browse to the preferred save location

Connecting to a Remote Console
Once a Remote Console has been established by the hosting Console it can be accessed by other Consoles from a different machine. 1. Select the Connect to Remote Console icon in the side bar or by right-clicking on the network item. Upon selection the Connect to Remote Console dialog appears:
2. In the Connect to Remote Console dialog, specify the connection details such as Remote Console Name, Remote Console IP, Port number, and Password. This information is provided by the administrator of the host Console. Once entered, this information can be retrieved by right-clicking a port in the Network and Groups Pane and selecting Properties.
If the connection to a Remote Console has been severed, it can be reconnected by clicking the Reconnect to Remote Console icon in the sidebar or by right-clicking on an entry in the Network and Groups pane.
Managing Deep Freeze with the Console
The Enterprise Console contains a toolbar at the top of the screen that allows quick access to the functions of the Console.
These commands can also be accessed using the contextual menu, as shown below, that appears by right-clicking on one or more computers. When a particular action is chosen, the selected computer performs the action and the status icons update accordingly.
Specific icons are disabled if the selected computer does not support that action. For example, a computer that has a Target icon, will not show the option to be Thawed or Frozen, because the program has not been installed yet.
Updating Deep Freeze Software
To update Deep Freeze computers (where Deep Freeze 6.3 or higher is installed) with a new version of Deep Freeze, complete the following steps: 1. In the Configuration Administrator of the new version of Deep Freeze, create a blank workstation installation file.
2. In the Enterprise Console, select the computers to be updated. These computers can be in either a Frozen or Thawed state. 3. Right-click, and select Update Deep Freeze from the contextual menu. 4. A standard Open file window appears. Select the blank computer file and click Open. 5. The selected computers update to the new version of Deep Freeze software, but retain all settings from the current version. This feature works only on computers with Deep Freeze 6.3 and higher currently installed.

Sending Messages to Computers
To send a message to one or more computers, complete the following steps: 1. Select the computer(s) to send a message. 2. Right-click and select Send Message from the contextual menu. 3. Type the message in the dialog that appears and click Send. A dialog appears asking for confirmation to send the message to the selected computers. 4. Click OK to send or Cancel to close the dialog without sending the message.
Target Installing Deep Freeze
Complete the following steps to remotely install a Full Workstation Installation on any computer that has the Workstation Seed installed. 1. Right-click on one or multiple computers and select Install. A dialog is displayed, asking if the installation should proceed. Click OK. 2. A dialog box appears to select the file to be installed on the remote computer. 3. Select the installation file to use and click Open. 4. The computer installs Deep Freeze and restarts. 5. Once the installation is complete, the Enterprise Console reflects the change in the computers status, and displays it as Frozen.
Updating a Deep Freeze Configuration File
Complete the following steps to update the configuration on one or many computer(s) with the settings of an existing.rdx file. (An.rdx file is a file containing the conditions specified in the Deep Freeze Configuration Administrator). 1. Right-click on the computer(s) and select Update Configuration, as shown below. 2. A message appears asking for an existing.rdx file to be located. 3. Click OK. A standard Open File dialog appears to select an.rdx file. 4. Locate a file and click Open to update the configuration on the selected computer(s) with the settings in the.rdx file. Click Cancel to cancel the configuration update.
If the Network options in the new configuration have changed, the computer(s) may lose communication with the existing Enterprise Console. If communication with the computers is lost, check the Network settings on the updated computers to ensure that the port numbers and/or IP address of the Console have not been changed.
Changes to passwords take effect immediately. All other changes take effect after each computer is restarted. ThawSpace and/or Frozen Drives cannot be changed through updating the configuration file.

Dynamically Updating a Deep Freeze Configuration
Complete the following steps to dynamically update the configuration on a single or multiple computers. 1. Right-click on the computer(s) and select Update Embedded Events from the contextual menu. Or, select the desired computer(s) and click the Update Embedded Events icon in the toolbar. 2. A menu bar with six buttons appears at the bottom of the Workstations pane. Choose one of the following options: Click New to create a new sub-configuration set. Click Import to import the settings from an existing Deep Freeze Configuration file (.rdx) or Deep Freeze Workstation Installation File (.exe) into the sub-configuration window. In either case, a Configuration Screen, similar to the Configuration Administrator, appears containing the Embedded Events tab and Maintenance tab.
The two tabs on the Configuration Screen can be used to update the configuration on remote computers. Close the Configuration Screen after making the necessary changes in configuration. For further information about the options on each tab, refer to Using Deep Freeze Configuration Administrator. The following message is displayed:
3. Click OK. 4. In the Workstations pane, select the required computer(s) to be dynamically updated with the new configuration settings. 5. Click Send on the menu bar to send the new configuration settings to the selected computer(s). The following message is displayed.
6. After sending the new configuration settings to the selected computers, the following options are available: Click Save As to save the current settings of the Configuration Screen to a file. A standard Save File dialog displays where a location and file name can be specified. Click Edit at any time to re-open the Configuration Screen with the current settings intact. Click Close to clear the contents of the Configuration Screen and exit out of the dynamic configuration mode.
When updating the configuration on the computer, the Embedded Events and Maintenance tab options are updated with the new settings.

Licensing

The License Key can be updated via the Enterprise Console. To update the License Key, complete the following steps: 1. Launch the Enterprise Console. 2. Go to Tools > Licensing. 3. The Deep Freeze License dialog is displayed.
4. Click Edit and enter the License Key in the License Key field. 5. Click Update License. The License Key is automatically updated on all computers communicating with the Enterprise Console. If a computer is offline (shut down or disconnected from the network), the License Key is updated when the computer communicates with the Enterprise Console the next time.
Scheduling Deep Freeze Tasks
To schedule a Deep Freeze task in the Enterprise Console using the Scheduled Task Wizard, complete the following steps: 1. Open the Scheduled Task Wizard in one of the following ways: click Scheduler in the Network and Groups pane and click the Add Task icon right-click on Scheduler in the Network and Groups pane, and choose Add Task

To uninstall Deep Freeze on a computer and leave the Workstation Seed, right-click on the Thawed workstation(s) and select Uninstall (Leave Seed), as shown above. Or click the icon on the toolbar. To completely uninstall Deep Freeze and the Workstation Seed, select the computer(s) to be uninstalled and click the Uninstall icon on the toolbar. The computer must be Thawed before Deep Freeze can be uninstalled. The Enterprise Console prompts for confirmation. Once the uninstall is confirmed, Deep Freeze uninstalls and the computer restarts.
Silent Install or Uninstall
Deep Freeze can be rapidly installed to many computers over a network using the Silent Install System. Any deployment utility that allows execution of a command line on a remote computer can implement the Silent Install System. After the Silent Install is complete, the computer immediately restarts. The command line has the following options: Syntax [/Install] [/Install /Seed] [/Uninstall] [/Uninstall /Seed] [/PW=password] [/AllowTimeChange] [/Freeze=C,D,.] [/Thaw=C,D,.] [/USB] [/FireWire] Description Install Deep Freeze using installation file Install only the specified Workstation Seed file Uninstall Deep Freeze Uninstall Deep Freeze and leave the Workstation Seed installed Set a password during installation* Allow system clock to be changed* Freeze only drives listed (Thaw all others)* Thaw only drives listed (Freeze all others)* Exempt external USB hard disks from protection Exempt external FireWire hard disks from protection

Example Command Line

DFWks.exe /Install /Freeze=C /PW=password In the above example, the Deep Freeze installation program file is named DFWks.exe. Only the C: drive will be Frozen. Any other drives on the computer will be Thawed. If the computer only has a C: drive, the [/Freeze] switch can be omitted. A password (password) will be created. After executing the command, Deep Freeze will install and the computer will restart Frozen and ready to use. The Silent Install System does not work without the [/Install] or [/Uninstall] switch. Deep Freeze must be in a Thawed state before [/Uninstall] can be used. To run the configuration command line options, Disable Command Line options on the Advanced Options tab must be cleared.

Example 4 - Multiple Subnets Multiple local services
In this example, there are two separate locations. The following is a list of assumptions that are made regarding this particular example: the locations are spread apart and have only a minimal connection to each other there is a network administrator at each location who is responsible for looking after Deep Freeze at that location both locations need to be administered from a third location Location 1 (a computer lab on campus) uses port A to communicate with the clients and the connections hosted by the Console. The school librarys computers use port B. The Console in the technical support department uses the connections hosted by both lab and library Consoles. Any console not directly communicating with a computer should have the local service turned off.
In this example, the Remote Consoles are set up at each location and a local service is used:
The following diagram shows the network topology:
The benefit of this setup is that it allows all the packets sent from the clients in Location 1 to be contained at that location. The less distance a packet must travel, the less chance there is of the packet failing. The administrator in the lab can connect to the local service in the same location 1 but cannot connect to the local service in the library. The reason for this is that the lab administrator does not know the password to access the local service for the library. The same goes for the administrator in the library. If technical support knows the password to both local services (lab and library) the local service at both locations can be connected to, in order to administer all the clients.

Appendix C

Troubleshooting a Remote Console Connection
No Clients In the Console
The following are some common reasons why clients fail to appear in the Console. 1. Windows XP/Vista clients may have the firewall turned on. With Windows XP SP1, the firewall must be turned off. With Windows XP SP2 or later including Vista, either the firewall must be turned off or the ports being used must be added to the Exceptions tab. Deep Freeze requires both TCP and UDP protocols; therefore, one exception should be added for each. 2. The Console and clients do not contain the correct network settings. If the Console is set up to run under one port and the clients are using another, they will not be able to see each other. Also, if the computers are configured for LAN/WAN, the IP must be equal to the IP of the machine where the Console is running. The default LAN setup works as long as all the machines running the computer and Console exist on the same subnet. However, if a VLAN is being run, or if there are several subnets where the clients exist, the computer install must be configured to run under the LAN/WAN settings. 3. Something on the network is blocking the port used between the Console and the clients. Check for a connection using a ping. The clients are unable to send packets to the Console/Remote Console because there does not seem to be a route to the host. Attempting to ping the IP of the Console/Remote Console does not seem to work. To resolve this issue, make sure the two machines can connect to each other. If a server, router, or switch on the network is not allowing the port to get through, the clients will not be seen. By default, 7725 is the port being used. 4. The workstations were created under a different Customization Code than the Console. When the Deep Freeze Configuration Administrator is first run, a prompt for a Customization Code appears. This code is very important as it encrypts the software. This means that any workstations created are encrypted with this Customization Code. If a Console was created using another administrator that was installed with a different Customization Code, it cannot see workstations created under the original code. The workstations and Console must be created under a Configuration Administrator installed using the same exact Customization Code.

Defines behavior of the log file Defines if log file will be appended or created new Defines filename Defines command which will be executed. Here, parameters and/or console items can be used Defines working directory
106 Appendix E Deep Freeze Action Files - RDC Example

Console Parameters

The following console parameters can be passed to the executed application or script through the Enterprise Console: Parameter %%WKSNAME%% %%DOMAIN%% %%IP%% %%PORT%% %%STATUS%% %%CFGDATETIME%% %%MAC%% %%DFVERSION%% Usage Workstation name Workstation domain Workstation IP Workstation port Workstation status Workstation configuration date/time Workstation MAC address Workstation Deep Freeze version

Deep Freeze Enterprise & Deep Freeze Server Enterprise - Update Procedure

TECHNICAL WHITEPAPER

Last modified: March 23, 2010
Faronics Toll Free Tel: 800-943-6422 Toll Free Fax: 800-943-6488 International Tel: +1 604-637-3333 International Fax: +1 604-637-8188

www.faronics.com

1999 - 2010 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Faronics Core Console, Faronics Anti-Executable, Faronics Device Filter, Faronics Power Save, Faronics Insight, Faronics System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.

ENTERPRISE

Contents
Introduction.....3 Updating Deep Freeze Enterprise (Non-Server Edition)....4 Step 1 (Option A) Update Mode (Deep Freeze Enterprise Non-Server Edition)..5 Step 1 (Option B) Manually Update all Components (Deep Freeze Enterprise Non-Server Edition).6 Updating the Configuration Administrator and Enterprise Console...6 Installing the New Configuration Administrator and Enterprise Console...7 Updating Existing Workstation Install Files and Workstation Seeds...8 Updating the Server Service Manager....8 Step 2: Remotely Updating the Installed Workstations (Deep Freeze Enterprise Non-Server Edition)..9 Updating Deep Freeze Enterprise Version 5.x, 6.0, 6.1, 6.2 to 6.6 (Non-Server Edition)..10. Change Port Number.....10 Updating Deep Freeze Locally on a Workstation....11 Updating Deep Freeze Server Enterprise (Server Edition)...12. Update Script for Deep Freeze Server Enterprise Console...13 Running the Update Script for Deep Freeze Server Enterprise Console...15

Introduction

This document provides a step-by-step overview of the process to update an installation of Deep Freeze Enterprise and Deep Freeze Server Enterprise. Deep Freeze Enterprise has two editions: Deep Freeze Enterprise: This is a Non-Server Edition. Deep Freeze Enterprise runs on NonServer Operating Systems. Deep Freeze Server Enterprise: This is a Server Edition. Deep Freeze Server Enterprise runs on Server Operating Systems.
The following sections explain different ways to update Deep Freeze Enterprise (Non-Server Edition) and Deep Freeze Server Enterprise (Server Edition).
Updating Deep Freeze Enterprise (Non-Server Edition)
A Deep Freeze Enterprise deployment (6.2 and lower) consists of five components, as shown below:
Configuration Administrator
Workstation Install File Workstation Seed Enterprise Console

Server Service Manager

As of Deep Freeze 6.3 (and higher), the Enterprise Console and Server Service Manager have been combined into a single component. To update the Server Service component users will need to access the Tools -> Network Settings menu in the Enterprise Console to configure the Server Service. The Enterprise Console and the Server Service Manager are both able to control and administer workstations running prior versions of Deep Freeze, provided that they have the same Customization Code. Therefore, if the update process is resolving a problem in the Enterprise Console, the Configuration Administrator, or the Server Service Manager, then the Workstation Seeds and workstation install files may not require an immediate update. Updating Deep Freeze settings using a.rdx file will not be successful if the Enterprise Console and Deep Freeze Client (on the workstation) have different versions. The.rdx file just updates the Deep Freeze configuration. The.rdx file does not perform a Deep Freeze version upgrade. Two steps are required to completely update all Deep Freeze Enterprise components: 1a. or Automatically update all components using Update Mode. 1b. Manually update all components. 2. Remotely update the installed workstations. Licensing was introduced from Deep Freeze version 6.5 onwards. The License Key can be updated in the following ways: Through the Workstation Install file - The License Key is updated in the Configuration Administrator and a Workstation Install file is created. The License Key is now part of the Workstation Install file. Through the Enterprise Console - The License Key can be updated directly on the Enterprise Console via Tools > Licensing. When the License Key is updated in the Enterprise Console, it is automatically updated on all connected computers. Through the Deep Freeze Client - The License Key can also be updated at the workstation by logging into Deep Freeze and editing the License Key field. The default port number for Deep Freeze has changed. If upgrading from version 5 to version 6.x, the port number must be changed to 1971. Refer to page 10 for complete instructions for upgrading from version 5 to 6.

Step 1 (Option A) Update Mode (Deep Freeze Enterprise NonServer Edition)
Update Mode is an advanced feature of Deep Freeze Enterprise that requires a thorough understanding of command line scripting. Update Mode can be used to automatically update an existing installation set of Deep Freeze Enterprise to a newer version by executing a special update command. The command automatically updates any of the following files present in the <DRIVE>:\Program Files\Faronics\Deep Freeze 65 Enterprise\Install Programs folder: Workstation install files Workstation Seed files.rdx Configuration Files 64-bit systems will be Program Files x86 instead of Program Files in the path. When updating from an older version of Deep Freeze to 6.5x and 6.61, the existing version files must be manually copied into the Install Programs folder in order to be successfully updated. In the example below, the district office has received a new version of Deep Freeze Enterprise and can automatically update any existing Deep Freeze files at a remote location.
The update command does not require a password, but does require a Customization Code. The following command syntax must be used:
\PathToFile\df65ent.exe /update=Customization Code <DRIVE>:\dfupdate.log
must be replaced with the actual path to the installation file (df65ent.exe) df65ent.exe must be the actual name of the installation file Customization Code must be in quotes if there is a space in it Customization Code must match the old files Customization Code

PathToFile

The Remote Server service has to be updated manually. The update process may take a few minutes to complete. This process requires a third party tool to Update Mode does not update the existing version of Deep Freeze on workstations. Workstations must be updated using the Enterprise Console. Installing Deep Freeze 6.5 will not remove or update the existing installation of the Deep Freeze Server Service. As only one service can be running at a given time, the older service will be shut down and the 6.5 service activated. To remove the older versions of the Deep Freeze Server Service, the existing installation of Deep Freeze should be uninstalled or the service entries deleted manually from the system. This can be done by running the installer to uninstall Deep Freeze.
Step 1 (Option B) Manually Update all Components (Deep Freeze Enterprise Non-Server Edition)
Updating the Configuration Administrator and Enterprise Console Any update to a Deep Freeze installation begins with the Configuration Administrator. Complete the following steps to update the Configuration Administrator: 1. Copy existing install files to a safe location for backup and archival purposes. By default, install files are located in the following directory: (for 6.5 and higher) <DRIVE>:\Program Files\Faronics\Deep Freeze 65 Enterprise\Install Programs (for 6.4 and lower until 5.x) <DRIVE>:\Program Files\Faronics\Deep Freeze 6 Enterprise\ Install Programs (for 5.x) <DRIVE>:\Program Files\Faronics\Deep Freeze 6 Enterprise\DF5 Install Programs Any install files in this directory should be copied to a new location indicating the version number of the software. These install files should only be stored as a record of the configuration information that they contain and should not be installed in a production environment once the update is complete. 2. Uninstall the existing Configuration Administrator from the administrator computer via Start > Control Panel > Add or Remove Programs

Select Deep Freeze Administrator - Enterprise (for Deep Freeze 5.x) or Deep Freeze 6 - Enterprise (for Deep Freeze 6.x) and click Change/Remove. Follow the steps presented and the Configuration Administrator is uninstalled from the computer.
Installing the New Configuration Administrator and Enterprise Console Complete the following steps to install a new version of the Configuration Administrator on the administrator computer. 1. Double-click the file DF65Ent.exe to begin the installation process. 2. Follow the steps presented. Read and accept the license agreement. 3. Enter the License Key in the License Key field. 4. Click Install and the Configuration Administrator and Enterprise Console are installed on the computer 5. Once installation is completed, the workstation will prompt for the end user to enter a Customization Code. Enter the same Customization Code used for the previously installed copy of Deep Freeze. Clicking OK will display a confirmation of the Customization Code assigned in plain text and will provide an option to print for future reference. If the Customization Code is not entered correctly it can be re-entered using the DFInit.exe application located in: (for 6.5 and higher) <DRIVE>:\Program Files\Faronics\Deep Freeze 65 Enterprise\Install Programs However, none of the previously installed workstations will be controllable until the Customization Code is correct.
The Customization Code must be recorded and guarded with care. Faronics is unable to recover a lost or forgotten Customization Code! Once a new Customization Code is assigned, the Configuration Administrator will no longer work with previously configured installations. To work with previous installations, use the DFInit.exe program to reset the Customization Code back to its original settings.
Updating Existing Workstation Install Files and Workstation Seeds Complete the following steps to update new Workstation Install Programs or new Workstation Seeds using the Configuration Administrator. 1. 2. 3. Open previously created files by clicking File > Open. Select a file from the standard Open dialog box that appears. Click Open. Click Create > Create Workstation Install Program or Create > Create Workstation Seed. Click Save to save the Workstation Install Program or Workstation Seed at a predefined location. Clicking Save As will create a.rdx file.
Updating the Server Service Manager This is applicable only to Deep Freeze versions lower than 6.3. To update a workstation running the Server Service, administrators will need to uninstall the server service for older versions of Deep Freeze. Thereafter, administrators can either install a full copy of the Configuration Administrator, and the Enterprise Console. Or, copy the DFConsole.exe application to the workstation or server running the server service and activate the console on the workstation being updated.

Step 2: Remotely Updating the Installed Workstations (Deep Freeze Enterprise Non-Server Edition)
To update workstations running Deep Freeze 6.3 or higher, complete the following steps: 1. 2. 3. Open the Configuration Administrator. Click Create > Create Workstation Install Program. Save the Workstation Install Program on the computer as Update Only.
5. Open the Enterprise Console. Right-click on one or more workstation(s) and select Update icon on the toolbar or Update Deep Freeze in the context menu. 6. Browse and select the Workstation Install File Update Only.exe and click OK. 7. Deep Freeze is remotely updated on all the selected workstations. The workstations are rebooted up to three times.
Updating Deep Freeze Enterprise Version 5.x, 6.0, 6.1, 6.2 to 6.6 (Non-Server Edition)
The first step to update to version 6.6 is to install the Deep Freeze Configuration Administrator; this creates the file directories where all related programs are subsequently saved to as a default. The version 6.6 of the Configuration Administrator installs in a different directory than version 5.x. If Update Mode is being used as outlined in this document, care must be taken to manually copy any existing Workstation Install Programs, Workstation Seeds, and Enterprise Consoles into the directory where the version 6.6 Configuration Administrator will be installed. By default, version 5.x files are in: <DRIVE>:\Program Files\Faronics\Deep Freeze Enterprise\DF5 Install Programs Version 6.x files are in: (for 6.5 and higher) <DRIVE>:\Program Files\Faronics\Deep Freeze 65 Enterprise\Install Programs (for 6.4 and lower) <DRIVE>:\Program Files\Faronics\Deep Freeze 6 Enterprise\Install Programs Change Port Number The default port number for Deep Freeze has changed from port 1971 to port 7725 from version 6.0. If the change in the port number is not accounted for, version 5.x workstations will not be visible in the updated version 6.x Enterprise Console. If the former default port number of 1971 is preferred, ensure that the Workstation Installation Files are all created with port number 1971 (entered in the Advanced Options tab of the Configuration Administrator). The Enterprise Console must be configured to listen on port the same port number via Tools > Network Configuration. Upgrading from Deep Freeze 5.x to 6.6x will not change the port number unless the port number was changed manually. The change in Port Number between version 5.x and 6.x can be handled in two ways: 1. Continue to use the former default port number (1971) to administer your Deep Freeze workstations. Ensure that the Enterprise Console listens on Port number 1971 via Tools > Network Configuration. Note that other applications may use this port and continuing to use port 1971 may cause issues in the future. Change all workstations to the new port number (7725). Configure the port number in the Configuration Administrator (in the Advanced Options tab) and the Enterprise console via Tools > Network Configuration.

To update workstations running Deep Freeze 5.x, 6.0, 6.1, and 6.2 an update process through the Enterprise Console can be performed on the workstations by rebooting the workstations Thawed, uninstalling Deep Freeze, leaving the Workstation Seed, and the performing a Target Install of a new workstation installation file on the selected workstations. The new Workstation Installation Program must have all the required Deep Freeze settings configured before the update procedure.
Updating Deep Freeze Locally on a Workstation Complete the following steps to update Deep Freeze Locally on a workstation: 1. 2. 3. 4. Open the Configuration Administrator. Configure the settings as required. Click Create > Create Workstation Install Program. Save the Workstation Install Program to a shared folder on the network that can be accessed from the workstation to be updated. Alternatively, save it to a removable storage device that can be moved to a workstation

5. 6. 7.

Reboot the workstation Thawed. Deep Freeze can only be uninstalled locally by running the DFWKS.exe. Double-click the DFWKS.exe and follow the steps presented on the screen to uninstall it on the workstation. The workstation will reboot after Deep Freeze is uninstalled. Double-click the Workstation Install File again and follow the steps presented on the screen to install it on the workstation. The workstation will reboot after it is installed.
In order to maintain communication with the workstations when updating a component to a new version, it is essential that the Network settings of the new Workstation Install Program or Workstation Seed matches those of the old one.
Updating Deep Freeze Server Enterprise (Server Edition)
If you are using an older version of Deep Freeze Server Enterprise (for example, 6.3), you must uninstall the older version before installing the newer version. Uninstall the older version from Start > Control Panel > Add or Remove Programs and install the new version using DFEntServ.exe if you do not want to preserve the settings (Ports, Scheduled Tasks and Groups). Use the Update Script provided by Faronics to retain the settings (Ports, Scheduled Tasks and Groups) and install the new version manually. Installing Deep Freeze Server Enterprise 6.62 on a computer that has Deep Freeze Server Enterprise 6.3 does not update the computer with the new version. Installing Deep Freeze Server Enterprise 6.62 over Deep Freeze Server Enterprise 6.3 will result in two versions on the same computer. To update Deep Freeze Server Enterprise, uninstall Deep Freeze Server Enterprise 6.3 and install Deep Freeze Server Enterprise 6.62. Alternatively, you can run the script provided by Faronics and install Deep Freeze Sever Enterprise 6.62 to preserve settings for Ports, Scheduled Tasks and Groups. Deep Freeze Server Enterprise Console and Deep Freeze Server Configuration Administrator can be upgraded to a newer version by running the installer for the newer version. However, this feature is applicable only if you are currently using Deep Freeze Server Enterprise 6.62 or higher. Once Deep Freeze Server Enterprise has been updated on the console computer, you can update the workstations in one of the following ways: 1. 2. From the Deep Freeze Server Enterprise Console. For more information, refer to Remotely Updating Installed Workstations. Manually on the workstation by creating a Workstation Install Program and installing on each workstation. For more information, refer to Updating Deep Freeze Locally on a Workstation.

Update Script for Deep Freeze Server Enterprise Console Download DSE_UpdateScript.vbs file from http://www.faronics.com/Faronics/Documents/DSE_ UpdateScript.zip. Steps to run the update script is explained in the next section. Download the update script directly from the link provided above. The contents of the update script displayed below is just for information. Do not use the contents of the script show below for updating Deep Freeze Server Enterprise.
-SCRIPT START Set Shell= CreateObject(WScript.Shell) Set FSO = CreateObject(scripting.FileSystemObject) Freeze TmpFolder= Shell.ExpandEnvironmentStrings(%temp%) key32bit = HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deep Server Enterprise\UninstallString
key64bit = HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ Deep Freeze Server Enterprise\UninstallString WinTitle = Deep Freeze Server 6.3 Console uninstall script if CStr(CheckRegKey(key32bit)) then InstallPath = Shell.RegRead (key32bit) RemoteAdminKey=HKEY_LOCAL_MACHINE\SOFTWARE\Faronics\ DeepFreezeRemoteAdministrator else if CStr(CheckRegKey(key64bit)) then InstallPath = Shell.RegRead (key64bit) RemoteAdminKey=HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Faronics\ DeepFreezeRemoteAdministrator else BtnCode = Shell.Popup(Deep Freeze Server 6.3 Console is not installed on this machine., 0, WinTitle, 16) wscript.quit end if end if InstallPathAdmin=Replace(InstallPath, /uninstall,) InstallPathServ = Replace(InstallPath,Deep Freeze Server Enterprise\dfadmin6.exe / uninstall, Deep Freeze Enterprise Server) InstallPath = Replace(InstallPath,\Deep Freeze Server Enterprise\dfadmin6.exe / uninstall, ) if FSO.FolderExists(InstallPathServ) then FSO.CopyFolder InstallPathServ, TmpFolder & \Deep Freeze Enterprise Server Shell.Run Regedit /e & TmpFolder & \_$dfreg.reg & RemoteAdminKey, 2, true else BtnCode = Shell.Popup(Unable to locate Deep Freeze Enterprise Server folder, 0, WinTitle, 16) wscript.quit end if
Shell.Run & InstallPathAdmin & & /uninstall, 2, true if FSO.FolderExists(InstallPath) AND FSO.FolderExists(TmpFolder & \Deep Freeze Enterprise Server) then if NOT FSO.FolderExists(InstallPathServ) then FSO.CreateFolder(InstallPathServ) FSO.CopyFile TmpFolder & \Deep Freeze Enterprise Server\*.DF5, InstallPathServ & \, True FSO.CopyFile TmpFolder & \Deep Freeze Enterprise Server\*.xml, InstallPathServ & \, True Shell.Run Regedit /c /s & TmpFolder & \_$dfreg.reg, 2, true if NOT FSO.FileExists(InstallPath & \Deep Freeze Server Enterprise\DFInit6.exe) then BtnCode = Shell.Popup(Deep Freeze Console configuration has been successfuly restored., 0, WinTitle, 64) end if if FSO.FolderExists(TmpFolder & \Deep Freeze Enterprise DeleteFolder(TmpFolder & \Deep Freeze Enterprise Server) if FSO.FileExists(TmpFolder \_$dfreg.reg) Function CheckRegKey(sKey) On Error Resume next Shell.RegRead sKey CheckRegKey = (Err.Number = 0) On Error Goto 0 End function -SCRIPT END& \_$dfreg.reg) then Server) then FSO. &

FSO.DeleteFile(TmpFolder

Running the Update Script for Deep Freeze Server Enterprise Console 1. Launch the Command Prompt. For Windows Vista or Windows 7, use the Run as Administrator option. 2. Run DSE_UpdateScript.vbs file created in the previous section from the Command Prompt. The script uninstalls the older version of Deep Freeze Server Enterprise Console and Deep Freeze Server Configuration Administrator. The update script also copies the settings from the older version of Deep Freeze Server Enterprise Console. 3. Run DFEntServ.exe to install the new version of Deep Freeze Server Enterprise. The newer version of Deep Freeze Server Enterprise Console will now display the settings from the older version.