Introduction

Faronics Deep Freeze helps eliminate computer damage and downtime by making computer configurations indestructible. Once Deep Freeze is installed on a computer, any changes made to the computerregardless of whether they are accidental or maliciousare never permanent. Deep Freeze provides immediate immunity from many of the problems that plague computers today inevitable configuration drift, accidental system misconfiguration, malicious software activity, and incidental system degradation.
Deep Freeze protects the computers that are set to boot from the hard drive. Configure the CMOS to boot from the hard drive only. The CMOS must be password protected to prevent unauthorized changes.
Deep Freeze Overview System Requirements

Deep Freeze Overview

System Requirements
Deep Freeze is supported on: Windows 2000, XP, Vista and Windows 7 Deep Freeze requires 10% of the hard drive to be left as free space Both 32 and 64 bit versions of Windows are supported Windows XP x64 must have Service Pack 2 or later installed Faronics recommends a minimum of 256 MB of system memory in the protected systems The Deep Freeze Configuration Administrator and Enterprise Console are supported on: Windows 2000, XP, Vista, Windows 7, Server 2000, 2003 and and 64 bit versions are supported
Deep Freeze Enterprise Files
Deep Freeze uses different colored icons to represent its components. Files identified by a red icon should generally only be installed on an administrative computer. Icon Definition Deep Freeze Enterprise Configuration Administrator and Enterprise Console installation file.
The Configuration Administrator application is used to create customized, pre-configured, computer installation program files and Workstation Seeds.
The Enterprise Console application is used to centrally deploy, monitor, manage, and maintain Deep Freeze installations.
A customized Deep Freeze workstation installation file is created in the Configuration Administrator and deployed to workstations within the enterprise. This file includes the Workstation Seed. If the Deep Freeze workstation installation file is installed, the Workstation Seed is not required to be installed separately.
A Workstation Seed enables seamless communication between the Enterprise Console and computers on a network. When the Workstation Seed is installed on a computer, the computer becomes visible on the Enterprise Console. Once a computer is visible on the Enterprise Console, various actions such as Restart, Shutdown and Wake-on-LAN can be performed on the computer remotely. Deep Freeze can also be installed remotely on visible computer thereby allowing Deep Freeze related actions on remote computers.

Installing Deep Freeze

This chapter describes the installation process of Deep Freeze.
Installation Overview Customization Code One Time Passwords

Installation Overview

Installing Deep Freeze Configuration Administrator and Enterprise Console
The Configuration Administrator is intended to be installed only on the computer used to administrate Deep Freeze. The Configuration Administrator is used to create customized Deep Freeze installation files and Workstation Seeds. The Deep Freeze Enterprise Console installs automatically with the Deep Freeze Configuration Administrator. Complete the following steps to install the Configuration Administrator: 1. Insert the CD-ROM from the media package into the CD-ROM drive. 2. Select Install Deep Freeze Enterprise Administrator in the window that appears on the desktop. 3. If Deep Freeze has been downloaded via the Internet, double-click the file DFEnt.exe to begin the installation process. The following screen appears:

4. Click Next.

5. Read and accept the license agreement. Click Next.
6. Enter the License Key in the License Key field or select the Use Evaluation check box to install in Evaluation mode. Click Next.
The Evaluation version of Deep Freeze is valid for 30 days. After 30 days, all Deep Freeze functionality will be disabled on the Enterprise Console. All other features will continue to work even after the 30 day period.
7. Once the installation process is completed, the Customization Code screen appears.
8. Specify the Customization Code and click Next. The Customization Code must be a minimum of eight characters. The installation is completed.

Customization Code

The Customization Code is a unique identifier that encrypts the Configuration Administrator, the Enterprise Console, the computer installation files, the One Time Password Generation System, and Deep Freeze Command Line Control. This code is not a password that can be used to access Deep Freeze. The Customization Code ensures that unauthorized administrators are prevented from accessing or controlling a computer. Multiple Deep Freeze administrators controlling the same group of computers must use a matching Customization Code. The Customization Code must be recorded and guarded with care. Faronics is unable to recover a lost or forgotten Customization Code.

Example In the above screen, drives E: and F: are selected in the Frozen Drives pane. Let us assume that E: corresponds to a USB hard drive and F: corresponds to an IEEE 1394 (FireWire) hard drive. The USB and IEEE 1394 (FireWire) check boxes are selected in the Always Thaw External Hard Drives pane, the external hard drives would be Thawed. The USB check box is selected. The IEEE 1394 (FireWire) check box is cleared. In this example, the USB drive (E:) would be Thawed and the IEEE 1394 (FireWire) drive (F:) would be Frozen.

Embedded Events Tab

The Embedded Events Tab allows you to schedule various events at pre-defined intervals.
When events are created through the Embedded Events tab, they are saved in the Workstation Install file. As the events created by the Embedded Events tab exist on the target computer, if communication between the Enterprise Console and the target computer fails, or does not exist, the events are still executed since they exist on the target computer. Events scheduled through the Scheduled Tasks Wizard in the Enterprise Console exist on the Enterprise Console and not on the target computers. Therefore, a continuous connectivity between the Enterprise Console and the target computer is required for the events to be executed. For more information, refer to the Scheduling Deep Freeze Tasks section. Overlapping events cannot be created in the Embedded Events tab. If a newly created event overlaps with an existing event, a message is displayed.
A message can be displayed to the user for a maximum of 5 minutes. There must be a gap of a minimum of 5 minutes between any two events.
Restart on Logoff - Select this check box to Restart the computer automatically when it is logged off. If this option is selected, the computer is restarted when a user logs off. The following events can be scheduled in the Embedded Events Tab:

Restart

The Restart event can be scheduled by completing the following steps:
Select Restart from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Day - Select the day, or specify if the event will occur on Weekdays or Weekends. Start Time - Select the Start Time. Allow User to Cancel Event - Select the check box if the user is allowed to cancel the event. Show message - Select the check box to display a message on the computer before the event occurs. Specify the time interval in minutes and enter a brief message to be displayed before the event occurs.
The message This computer will reboot in %d seconds is displayed in the Message to be displayed before the Event field. This message can be edited. Add the word minutes in the message after %d to include the word minutes as part of the message.

Example In the above screen, an Embedded Event has been created to restart the computer daily at 12:00 AM. The Embedded Event is configured to display a message to the user 1 minute before the Restart event.

Shutdown

The Shutdown event can be scheduled by completing the following steps:
Select Shutdown from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Day - Select the day, or specify if the event will occur on Weekdays or Weekends. Start Time - Select the Start Time. Allow User to Cancel Event - Select the check box if the user is allowed to cancel the event. Show message - Select the check box to display a message on the computer before the event occurs. Specify the time interval in minutes and enter a brief message to be displayed before the event occurs.
Example In the above screen, an Embedded Event has been created to shutdown the computer daily at 12:00 AM. The Embedded Event is configured to display a message to the user 1 minute before the Shutdown event.

Maintenance

Maintenance Events are scheduled for ensuring successful software updates or other permanent changes on the computer. A Maintenance Event has a Start Time and an End Time. During this period, the software updates and other permanent changes take place. The Maintenance Event can be scheduled by completing the following steps:
Select Maintenance from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Day - Select the day, or specify if the event will occur on Weekdays or Weekends. Start Time - Select the Start Time. End Time - Select the End Time. The minimum interval is 15 minutes. Run - Select Batch File to run a batch file. Select Windows Updates to enable Windows Updates. Deep Freeze requires Windows Update Agent (version 7.2.6001.788 or higher) to ensure that Windows Update can execute properly.
Allow User to Cancel Event - Select the check box if the user is allowed to cancel the event. Shutdown after Maintenance - Select the check box to shutdown the computer after Maintenance. Disable Keyboard and Mouse - Select the check box to disable keyboard and mouse during Maintenance. Show message - Select the check box to display a message on the computer Before and During the event. Specify the time interval in minutes and enter a brief message to be displayed before the event starts.
Deep Freeze will automatically update the computer with Critical Updates, Security Updates, and Service Packs during Windows Update.

Advanced Options

Disable Command Line options - This option is selected by default. Clearing this check box allows for further customization of the Deep Freeze installation program when using the Silent Install System. Selecting this option prevents the pre-existing configuration choices from being changed during installation. Enable Deep Freeze local policies - For enhanced security, Deep Freeze removes the following local privileges: debugging programs, modifying firmware, and changing the system time; clear this option to use existing privileges. Allow user to change the clock - Select this option to allow Frozen users to adjust the system clock. Manage Secure Channel Password Secure Channel Password is a feature of all Windows operating systems and only applicable if the system is running in Windows Server Domain Environment. Secure Channel Password is used for secure communication between the server and workstations. The Secure Channel Password is automatically changed based on the operating system settings. While using Deep Freeze, the newly changed Secure Channel Password is lost on reboot. The Manage Secure Channel Password option avoids this situation. The Manage Secure Channel Password feature of Deep Freeze changes the value of the Group Policy Maximum machine account password age based on the Deep Freeze state (Frozen or Thawed). Select the Manage Secure Channel Password option if you want Deep Freeze to manage Secure Channel Password. When the workstation is Frozen: The workstation will not change the Secure Channel Password. This ensures that the secure communication between the server and the workstation is always maintained. When the workstation is Thawed: The workstation will change the Secure Channel Password and sync the password with the server. Do not select the Manage Secure Channel Password option if you do not want Deep Freeze to manage the Secure Channel Password. When the workstation is Frozen: When the Secure Channel Password is changed and synced with the server, it resets to the old password on reboot. When the workstation is Thawed: If the workstation is Thawed on the day the Secure Channel Password is changed, the new password takes affect and the workstation is synced with the server.
The Manage Secure Channel Password feature of Deep Freeze always overrides the Group Policy Maximum machine account password age. Set the following in the Group Policy for the Manage Secure Channel Password feature to work: Domain Controller: Refuse machine account password changes to Not Defined Domain Member: Disable machine account password changes to Disabled Example On a Windows Domain Environment using Windows Server 2003 that manages multiple workstations, Secure Channel Password is used for secure communication between the server and workstations. In Deep Freeze Configuration Administrator, go to the Advanced Options tab and select Manage Secure Channel Password. Create the Workstation Install file and deploy it to the workstation. Set the following in the Group Policy for the Manage Secure Channel Password feature to work: Domain Controller: Refuse machine account password changes to Not Defined Domain Member: Disable machine account password changes to Disabled When the workstation is Frozen, the Secure Channel Password does not change. When the workstation is Thawed, the Secure Channel Password is changed at the workstation and synced with the server.

If the connection to a Remote Console has been severed, it can be reconnected by clicking the Reconnect to Remote Console icon in the sidebar or by right-clicking on an entry in the Network and Groups pane.
Managing Deep Freeze with the Console
The Enterprise Console contains a toolbar at the top of the screen that allows quick access to the functions of the Console.
These commands can also be accessed using the contextual menu, as shown below, that appears by right-clicking on one or more computers. When a particular action is chosen, the selected computer performs the action and the status icons update accordingly.
Specific icons are disabled if the selected computer does not support that action. For example, a computer that has a Target icon, will not show the option to be Thawed or Frozen, because the program has not been installed yet.
Updating Deep Freeze Software
To update Deep Freeze computers (where Deep Freeze 6.3 or higher is installed) with a new version of Deep Freeze, complete the following steps: 1. In the Configuration Administrator of the new version of Deep Freeze, create a blank workstation installation file.
2. In the Enterprise Console, select the computers to be updated. These computers can be in either a Frozen or Thawed state. 3. Right-click, and select Update Deep Freeze from the contextual menu. 4. A standard Open file window appears. Select the blank computer file and click Open. 5. The selected computers update to the new version of Deep Freeze software, but retain all settings from the current version. This feature works only on computers with Deep Freeze 6.3 and higher currently installed.
Sending Messages to Computers
To send a message to one or more computers, complete the following steps: 1. Select the computer(s) to send a message. 2. Right-click and select Send Message from the contextual menu. 3. Type the message in the dialog that appears and click Send. A dialog appears asking for confirmation to send the message to the selected computers. 4. Click OK to send or Cancel to close the dialog without sending the message.
Target Installing Deep Freeze
Complete the following steps to remotely install a Full Workstation Installation on any computer that has the Workstation Seed installed. 1. Right-click on one or multiple computers and select Install. A dialog is displayed, asking if the installation should proceed. Click OK. 2. A dialog box appears to select the file to be installed on the remote computer. 3. Select the installation file to use and click Open. 4. The computer installs Deep Freeze and restarts. 5. Once the installation is complete, the Enterprise Console reflects the change in the computers status, and displays it as Frozen.

Executing a Task Immediately
To execute a task immediately, right-click the task and select Execute Task.

Deleting a Task

To delete a task, click on the task and press Delete.
Scheduled Task Properties
To see the properties of a task, right-click the task name and select View Properties. The following screen displays:
The properties of a task cannot be changed after it has been created. Only the computers that will execute the task can be changed by adding or deleting computers.
Scheduled tasks will still execute even if the Enterprise Console is closed provided the local service is enabled and the network connections are not shutdown upon exiting the Enterprise Console.
Managing Network and Groups
The Enterprise Console automatically arranges computers by their workgroup or domain. Click the appropriate workgroup or domain to view the computers in that workgroup or domain. The Enterprise Console can be used to define specific groups in order to arrange computers.

Adding a New Group

To add a new group, complete the following steps: 1. In the Network and Groups pane, right-click on User Defined Groups and choose Add Group. 2. The Add Group dialog appears:
3. Enter the name of the group to be added and click Add. The group appears under User Defined Groups in the Network and Groups pane.
Building a User Defined Group Structure
After a group has been added, one or more sub-groups can be added below it, and further sub-groups can be added indefinitely as a way to differentiate between environments, as in the example shown below:
Importing Groups from Active Directory
If the group structure has already been designed within Active Directory, that structure can be imported directly into the Enterprise Console. Complete the following steps to import from the Active Directory: 1. Select Tools> Import Groups from Active Directory, or click the LDAP icon located in the sidebar. 2. The following dialog appears. Select either the Microsoft tab or the Novell tab.
3. Enter the LDAP server information of the import location. The option to login anonymously is also available. If this check box is not selected, a user name and password is required. 4. Click Connect. The Active Directory hierarchy appears. Select the required entries and click Import.

History

The Enterprise Console stores the history of the target computers. To view history, click History in the Networks and Groups pane. To delete computer(s) from History, select the computer(s), right-click and select Remove from History in the context menu.
Adding computers to a Group
Computers can be added to a group by dragging them from the Workstations pane to the preferred group, or by using an automatic filter set during the creation of the groups. Automatic group filtering allows computers to be added to user-defined groups automatically. The computers are added based on their computer name. Wildcards (*, ?) can be used to add computers based on a specific segment of the name. Example: Lab1-* adds all computers with names starting with Lab1-. Sorting Groups Alphabetically To sort the Groups alphabetically, right-click User Defined Groups and select Sort Groups Alphabetically. Removing Workstations from User Defined Group To remove a computer from a Group, right-click on the computer in User Defined Groups and select Remove from Group. Importing or Exporting Groups to File To import groups from a file or export groups to a file, choose the preferred option from the Tools menu. Viewing the Console Log File The Enterprise Console keeps a log of the status and activity history of all connected computers. The log stores information for the previous 48 hours. Information older than 48 hours is automatically deleted from the log. To view the log file for one or many computers, right-click on the computer(s) and select Show Log. To sort the log file, click on a preferred heading. To export the log file as a.csv file, right-click and select Export to file, as displayed:

4. Enter the User Name, Password, File Name and Drive Letter. 5. Click OK.
Deleting, Importing and Exporting Custom Actions
Deleting Custom Actions To delete Custom Actions, complete the following steps: 1. Go to Action Menu > Custom Actions. 2. Select the Custom Action to be deleted. 3. Click Delete. Importing Custom Actions To import Custom Actions, complete the following steps: 1. Go to Action Menu > Custom Actions. 2. Click Import. 3. Browse to select the.xml file to be imported. 4. Click Open to import the file.
Exporting Custom Actions To export Custom Actions, complete the following steps: 1. Go to Action Menu > Custom Actions. 2. Select the Custom Action to be exported. 3. Click Export. 4. The Export Custom Action to File dialog is displayed. 5. Specify a File name and click Save.

Console Customizer

The Console Customizer lets you specify which features and commands you want to be available in the Console, and save the result as a new Console that can be distributed in your organization. The available settings are grouped into categories (Console functions, Workstation commands, Deep Freeze commands, Workstation install/uninstall commands, and Scheduler commands). Click on the plus (+) icon to the far left of each category to disclose the full list of settings available in that category. Select or clear the individual check boxes as required. Alternatively, select or clear the entire categories at once. Settings that are cleared will not be available in the new Enterprise Console you create. For an example on how to use the Console Customizer in a practical scenario, refer to Appendix D. Complete the following steps to create Consoles with limited functionality: 1. Select Tools>Console Customizer. 2. The Console Customizer is displayed.
3. Select the features to be displayed in the new Console. 4. Click Save As to save the Console. Specify a name for the file. 5. When you double-click the newly created.exe file, the Console with the limited functionality is launched.
Deep Freeze Enterprise Console Shutdown
To shutdown the Deep Freeze Console select File > Exit or click the close window button. Upon exit, you can choose to: Minimize the Console to the system tray. This does not stop the Console and keeps the connections active. The Deep Freeze Console icon appears in the system tray. Scheduled tasks will still execute. To reopen the Deep Freeze Enterprise Console, right-click its icon located in the taskbar and select Restore DF6 Console. Close Deep Freeze Console and leave the network connections running This closes the Console but keeps the connections to the computers active. Scheduled tasks will still execute. Close Deep Freeze Console and shutdown network connections. This stops Console processes, closes the connections (including local service), and scheduled tasks will not start to execute. However, scheduled tasks that have started executing will continue.

Example Command Line

DFWks.exe /Install /Freeze=C /PW=password In the above example, the Deep Freeze installation program file is named DFWks.exe. Only the C: drive will be Frozen. Any other drives on the computer will be Thawed. If the computer only has a C: drive, the [/Freeze] switch can be omitted. A password (password) will be created. After executing the command, Deep Freeze will install and the computer will restart Frozen and ready to use. The Silent Install System does not work without the [/Install] or [/Uninstall] switch. Deep Freeze must be in a Thawed state before [/Uninstall] can be used. To run the configuration command line options, Disable Command Line options on the Advanced Options tab must be cleared.
* These options are disabled by default.
Silent Install or Uninstall Using a Shortcut
Deep Freeze can be installed directly on a computer without having to use the installation dialog box by completing the following steps. 1. Locate the Deep Freeze installation program file (DFWks.exe) on the target computer. 2. Right-click on the icon and choose Create Shortcut. 3. Right-click on the shortcut and choose Properties. 4. Edit the path of the Target field by typing /install or /uninstall at the end of the path. Example Shortcut Target: C:\Documents and Settings\DFWks.exe /install Double-clicking on the new shortcut results in the immediate installation or uninstallation of Deep Freeze, followed by a restart of the computer. Deep Freeze must be in a Thawed state before /uninstall can be used. If the hard drive is too fragmented, it is not possible to create ThawSpace(s). The installation is aborted.
Network Install on Multiple computers
The Silent Install System can also be used to install Deep Freeze on multiple computers over a network. If the workstations on the network use logon scripts, the scripts can be used to install Deep Freeze on all networked workstations automatically. All workstations will restart Frozen and ready for use after installation has completed. Use the following command line syntaxes to create an install error report log file: \\Server Name\Share Name\DFWks.exe /Install >> my.log
Installing Over Existing Deep Freeze Versions
Unless the Update Deep Freeze Software feature is used (for Deep Freeze 6.3 and higher), all existing Deep Freeze versions must be uninstalled prior to performing any new Deep Freeze installation.

Installing Using Imaging

Deep Freeze has been designed to work with all major imaging and desktop management software. Use either an Attended Install or the Silent Install System to install Deep Freeze on a master image. Deep Freeze must be prepared for deployment before finalizing a master image. To prepare the master image for deployment, restart the computer into a Thawed state and log on to Deep Freeze using the keyboard shortcut CTRL+SHIFT+ALT+F6. Select the Clone tab, and click Set Flag. Create an image of your computer immediately as per your process.

After imaging, the computers require an additional restart for Deep Freeze to correctly detect the changes in disk configuration. If the computers are imaged in an unattended mode, steps should be taken to ensure the computers are restarted to allow the configuration to update. To return to the Frozen state after imaging is complete, set Deep Freeze to Boot Thawed on next n number of restarts (in the master image) so that after n number of restarts, the computer is automatically Frozen. Alternatively, use Deep Freeze Command Line Control to Freeze selected computers.

Target Install

Deep Freeze can also be deployed using a Target Install from the Enterprise Console.

Check for Updates

Deep Freeze allows you to check if there are newer versions available. Go to Help > Check for updates. This checks if there are newer versions of Deep Freeze available.
Managing Deep Freeze Computers
This chapter describes managing computers where Deep Freeze is installed.
Login Screen Status Tab Password Tab Network Tab ThawSpace Tab Permanent Software Installations, Changes, or Removals

Login Screen

Use one of the following ways to access Deep Freeze on a computer. 1. If the Deep Freeze icon is shown in the System Tray, hold down the SHIFT key and double-click the Deep Freeze icon. If the Deep Freeze is running in Stealth Mode and if the Deep Freeze icon is not displayed, the keyboard shortcut CTRL+ALT+SHIFT+F6 must be used to access the logon dialog.
2. Enter the administrator password and click OK to log on to Deep Freeze. As an additional security feature, Deep Freeze prevents Brute Force attacks by automatically restarting the computer after 10 unsuccessful login attempts.

Status Tab

The Status tab displays the following options:

Status on Next Boot

The Status tab is used to set the mode Deep Freeze will be in after the next restart.
Choose one of the following options: Boot Frozen to ensure that the computer is Frozen the next time it is restarted Boot Thawed on next to ensure that the computer is Thawed each time it is restarted for the next specified number of restarts. When that number of restarts is exceeded, the computer will boot Frozen. Boot Thawed to ensure that the computer is Thawed each time it is restarted Select the radio button next to the desired choice and click OK to save any changes. Clicking Apply and Reboot will save any changes and reboot the computer immediately.
The Clone pane is used to prepare master images for the deployment process. For more information, refer to the Installing Using Imaging section.
Enter the License Key in the License Key field. If no License Key is entered, Deep Freeze expires in 30 days after installation.

Password Tab

The Password tab allows you to change the password.
1. Specify a new password in the Enter new password field. 2. Confirm the new password by re-entering the same password in the Confirm password field. 3. Click OK. 4. The password is changed and a confirmation dialog is displayed.

Network Tab

The Network tab can be used to configure the network options on a computer.
To choose either the LAN or the WAN method of communication, click the preferred option. The default port number can be changed by clearing the Use Default Port check box and entering the required port number. For more information on network configuration, refer to Appendix B.

ThawSpace Tab

ThawSpace is a virtual partition on a computer that can be used to store programs, save files, or make permanent changes. All files stored in the ThawSpace are saved after a restart, even if the computer is Frozen. ThawSpace is only available if it was set to be created in the Deep Freeze Configuration Administrator.
After uninstalling Deep Freeze, all the ThawSpaces become visible. When Deep Freeze is reinstalled, the ThawSpaces are Visible or Hidden as per the original settings in the ThawSpace tab. Any existing ThawSpace is deleted during an uninstall if any of the following apply: the option to retain existing ThawSpace was not selected in the Configuration Administrator the ThawSpace was not created with Deep Freeze Version 5 or higher
Permanent Software Installations, Changes, or Removals
Computers must be Thawed for any permanent changes to take effect. Installation of software often requires one or more restarts to complete the installation. Deep Freeze helps administrators overcome challenges with maintaining the configuration of their computers in a production environment. Deep Freeze protects computers from unauthorized changes, viruses and malware, that can leave computers in a non-functional state. Deep Freeze also provides features to retain user data while protecting the computer. For more information on how to implement Deep Freeze and ensure that the user data is retained, refer to Deep Freeze - Retaining User Data available at http://www.faronics.com/library
Deep Freeze Command Line Control
This chapter describes using the Deep Freeze Commands.
Deep Freeze Command Line Control (DFC.EXE) DFC Command Line Syntax

DFC password /BOOTFROZEN DFC password /FREEZENEXTBOOT DFC get /ISFROZEN DFC password /CFG=[path] depfrz.rdx
DFC get /version DFC password /UPDATE=[path to installer file] DFC password /LOCK

DFC password /UNLOCK

DFC password /THAWLOCKNEXTBOOT DFC password /BOOTTHAWEDNOINPUT
Syntax DFC get /LICENSESTATUS
Description Displays the status of the license and the expiry date of the license (if any). The different possible types of license and the associated return codes are: 111: Unlicensed Deep Freeze is not licensed and will operate in Evaluation mode for 30 days since installation. 112: Evaluation licensed for evaluation with a fixed expiry date. 113: Licensed licensed with no expiry date. 114: Expired The Evaluation period has expired.

DFC get /LICENSETYPE

Displays the status of the license and the expiry date of the license (if any). The different possible types of license and the associated return codes are: 111: None (Unlicensed) Deep Freeze is not licensed and will operate in Evaluation mode for 30 days since installation. 112: Evaluation licensed for evaluation with a fixed expiry date. 113: Standard (Licensed) licensed with no expiry date. 114: Not for Resale Licensed with no expiry date.
DFC password /LICENSE=licensekey
Changes the License Key. password is the Deep Freeze Administrator password. licensekey is the License Key for Deep Freeze. If there is an error, the following error codes are displayed: 101: The License Key is not valid 102: The License Key provided has already expired.

Appendix A

Ports and Protocols
The key to setting up the Deep Freeze architecture is knowing which ports to use. The important factor is knowing which ports are in use on the network and using ports that will not conflict with those. The default port, 7725 has been officially registered to Deep Freeze. The following three components make up the Deep Freeze architecture: Client (with seed installed) Remote Console (local service enabled) Console (connects to the Remote Console)
As long as the clients and Remote Console connection use the same port there should not be any port conflicts between the different components:
Ports can also be used to divide the clients. If the local service is setup to run three ports (7725, 7724 and 7723), Enterprise Consoles can connect to the three different ports to see a different set of clients under each port. In the diagram above, the client(s) use both the TCP and UDP protocols to communicate with the Remote Console. The Console(s) that connects to the Remote Console uses only the TCP protocol to communicate with the Remote Console. It is important to remember the ports and protocols being used in order to prevent firewalls, switches or routers from blocking them.
Appendix A Ports and Protocols

Appendix B

Network Examples
The following examples show different scenarios involving local service or Remote Console. Example 1 - Single Subnet Example 2 - Multiple Subnets One local service Example 3 - Multiple Ports, Console Accessed Remotely Example 4 - Multiple Subnets Multiple local services
Each example explains how different Deep Freeze components interact in different networking environments.
In the following examples, the client machines have either the Deep Freeze workstation installation or Workstation Seed installed. Both installs contain the communications component which talks to the Console/Remote Console. The difference between the workstation install and Workstation Seed is that the workstation install actually installs Deep Freeze while the Seed has only the communication component.
Appendix B Network Examples
Example 1 - Single Subnet
In this environment, all client machines are contained in the same subnet as the Console machine. This environment does not require a remote controlled Console, although one could be used. In this example, the Remote Console is not used. This is the simplest networking environment. It is also the easiest to configure. The following diagram shows the network topology:
The client machines, represented by the computer icons, are located on the same subnet as the Deep Freeze Enterprise Console machine represented by the Deep Freeze Console icon. In this scenario, clients are using port A while the Console has set up a local service connection for the same port. This port is configured in the Advanced Options tab, before creating the Workstation Install file or Workstation Seed.
Example 2 - Multiple Subnets One local service
In this environment, the clients are located across more than one subnet. There is still only one Console being used. This environment does not require a Remote Console, although one could be used. The following diagram shows the network topology:
In this scenario (similar to Example 1 - Single Subnet) both the clients and the connection hosted by the Console are using the same port. This port is configured in the Deep Freeze Configuration Administrator in the Advanced Options tab, before creating the Workstation Install file or Workstation Seed. In order for the clients to be seen, they need to be configured to use a LAN/WAN connection. When the LAN/WAN option is selected, a Console IP field appears. Specify the IP of the machine that will run the Enterprise Console. An example of these settings are shown in the Advanced Options tab below: