This page intentionally left blank
Deep Freeze Mac Security Notice Apple provides an application called Open Firmware Password that can be used to ensure that all keys that affect the normal start up of the computer are disabled. This prevents users from pressing the keys necessary to boot into single-user mode or boot from an alternative volume at start up. To download the Open Firmware Password application, refer to Apples instructions at: http://www.apple.com/support/downloads/openfirmwarepassword.html For Mac OS X 10.4 or later, the updated version of this application can be copied from the software installation disc, located at Applications/Utilities on the disc. Intel-based Macintosh computers can be protected by firmware passwords as well. The firmware in an Intel-based computer uses Extended Firmware Interface (EFI) technology - Open Firmware is used in computers that use PowerPC processors. Technical Support Every effort has been made to design this software for ease of use and to be problem free. If problems are encountered, contact Technical Support: Email: Hours: support@faronics.com 7:00 am to 5:00pm (Pacific Time) Phone: 800-943-6422 or 604-637-3333
Contact Information Web: www.faronics.com Email: Phone: Fax: Hours: Address: sales@faronics.com 800-943-6422 or 604-637-3333 800-943-6488 or 604-637-8188 7:00 am to 5:00pm (Pacific Time) USA 2411 Old Crow Canyon Road, Suite 170 San Ramon, CA 94583 USA Canada 609 Granville Street, Suite 620 Vancouver, BC V7Y 1G5 Canada Europe Siena Court, The Broadway Maidenhead, Berkshire SL6 1NJ UK Email: eurosales@faronics.com Phone: +44-1628-509008 Fax: +44-1628-509118
Last modified: January, 2010
2010 Faronics Corporation. All rights reserved. Deep Freeze, Faronics, Faronics Anti-Executable, Faronics Power Save, Faronics System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.

Contents

Deep Freeze Mac Overview.....7 About Deep Freeze......7 About Apple Remote Desktop (ARD)....7 Command Line Control Capability....7 System Requirements.....7 Important Terminology.....7 About Faronics......7 Installing Deep Freeze.....8 Installing Using a Customized Deep Freeze Installer....8 Installing Using the Basic Deep Freeze Installer....8 Installing via Apple Remote Desktop....8 Installing Over Previous Versions....8 Using Xgrid with Deep Freeze Mac....8 Using the Deep Freeze Controller.....9 Opening the Deep Freeze Controller....9 Creating the First User.....9 Updating the License Key after Installation....10 Boot Control Tab.....11 Drives Tab......12 ThawSpace Tab......13 Adding a Global ThawSpace.....13 Adding a User ThawSpace.....14 Removing a User or Global ThawSpace....14 Resizing a ThawSpace.....15 Limitations of Resizing a ThawSpace....16 Maintenance Tab.....16. Mapping Tab.....18. DF Users Tab.....19 Adding, Deleting, and Editing DF Users....19 Uninstall Tab.....20 Exporting and Importing Configurations....20 Using Deep Freeze....21. Deep Freeze Icons......21 Saving Documents.....21 Software Installation and Permanent Changes....21 Checking for Deep Freeze Updates.....21 Appendix I: Deep Freeze Assistant and Customizing the Installer...22 Appendix II: Apple Remote Desktop v.3.0 Integration...29 Adding Targeted Computers to the Task List...32 Using and Editing Tasks.....32 Sample Command Line Scripts.....33 Deep Freeze Legacy Commands....34

Deep Freeze Mac Overview

About Deep Freeze Deep Freeze Mac provides a completely non-restrictive working environment where there is no need to be concerned about system damage or corruption; a simple restart eradicates all changes and ensures that the standard system configuration is available at all times. All changes to a computer are temporary for that working session, including installation or removal of software and application preference configuration. The need for IT professionals to perform rebuilds, re-image, or troubleshoot computers is eliminated, resulting in a reduction in IT expenditures and an increase in computer uptime. About Apple Remote Desktop (ARD) Apple Remote Desktop is Apple Computers complete desktop management solution for Mac OS X. Faronics does not provide sales or technical support information for Apple Remote Desktop. More information regarding ARD can be found at http://www.apple.com/remotedesktop. Command Line Control Capability Tasks referred to in Appendix II for use with ARD can also be used in other third-party command line control programs. System Requirements Deep Freeze Mac requires Mac OS X Tiger v10.4.11, Leopard v10.5.1 and up, or Snow Leopard v10.6.0 and up. Deep Freeze Mac is a Universal application (Intel and PPC compatible). ARD integration requires Apple Remote Desktop version 2.2 or later. A minimum of 256 MB RAM is recommended. Important Terminology A Frozen volume or partition is completely restored to its exact original configuration and contents upon each restart of the computer. A Thawed volume partition functions normally, as it would if Deep Freeze was not installed. About Faronics Faronics develops and markets intelligent solutions for absolute control of multi-user computing environments. Faronics market-leading solutions have dramatically impacted the day-to-day lives of thousands of information technology professionals and computing lab managers by ensuring 100% availability of systems. Our user-driven, powerful technology innovations benefit educational institutions, healthcare facilities, libraries, government organizations and corporations. Incorporated in 1996, Faronics has two offices situated in the USA and Canada. An ambitious growth strategy and global outlook has Faronics striving to reach new markets. Future diversification of Faronics utilities will provide innovative and unique solutions that will continue to enhance user productivity.

Installing Deep Freeze

Installation and configuration of Deep Freeze Mac requires administrative access. Deep Freeze Mac is downloadable via the Internet. Installing Using a Customized Deep Freeze Installer A customized Deep Freeze Installer pre-configured with up to four usernames/passwords and environment-specific application settings can be created using the Deep Freeze Assistant. Refer to Appendix I for more information. Installing Using the Basic Deep Freeze Installer To install Deep Freeze on a single computer, complete the following steps: 1. Double-click the file DFX Version.pkg to begin the installation process. (Depending on the configuration, the file extension may not be visible). The installer is displayed. Click Continue. 2. Read the Security Notice and click Continue. 3. Enter the License Key. If no License Key is specified, Deep Freeze will expire in 30 days. 4. Click Install and Deep Freeze is installed on the computer. 5. Click Restart to restart the computer. Upon completion of a successful installation and after the computer has been restarted, Deep Freeze is automatically configured to put all drives and partitions into a Frozen state (unless otherwise configured through the Deep Freeze Assistant). Drives and volumes that are to be put in a Thawed state can be specified using the Deep Freeze Controller after the install and restart following the install. Installing via Apple Remote Desktop Deep Freeze is distributed as a standard installation package file and can therefore be installed over a network using Apple Remote Desktops Install Packages command. Refer to the Apple Remote Desktop user guide for more information. Refer to Appendix II for more information about controlling Deep Freeze over a network using Apple Remote Desktop. Installing Over Previous Versions It is recommended that all previous versions of Deep Freeze Mac be uninstalled before installing a newer version. Deep Freeze Mac should not be booted in Target Disk Mode when Frozen. The cache files will be invalidated and the program will become corrupt. If booting in Target Disk Mode, ensure the computer is in a Thawed state. Using Xgrid with Deep Freeze Mac In order for Xgrid to work properly on a Frozen Macintosh, the Xgrid folder must be symlinked to a Thawed partition. When the computer is Thawed the /private/var/xgrid folder must be mapped to a Thawed location (either the Global ThawSpace or a Thawed partition) and then symlinked to its original location. Use terminal to do the following:
sudo cp -R /private/var/xgrid some Thawed location (another partition OR the Global ThawSpace) sudo rm -R /private/var/xgrid sudo ln -s some Thawed location/xgrid /private/var/xgrid

Using the Deep Freeze Controller
If all drives and partitions are Frozen on a computer, a user can create, save, change, and delete files. However, all changes are temporary, unless a ThawSpace or Thawed partition is being utilized. The complete contents of a Frozen drive or volume are restored at restart. All changes made in the Deep Freeze Controller only take effect after a restart. Opening the Deep Freeze Controller Use one of the following three options to open the Deep Freeze Controller:
Browse to Applications > Faronics > DFXControl.app and double-click. Press Ctrl + Opt + Shift + F6. Click the Deep Freeze icon in the menu bar and select Login.
Creating the First User 1. Unless a Deep Freeze user (DF User) was created using the Deep Freeze Assistant, the first time Deep Freeze Controller is opened, there are no DF Users present. A prompt appears to create a user, as shown:
Click Create DF User. The following dialog appears:
Enter a user name and password, and verify the password. NOTE: If Apple Remote Desktop (ARD) is going to be used to manage Deep Freeze Mac deployments, ensure that only alpha-numeric characters are used in the password, or the remote tasks will fail. Click OK to finish creating the first user. The Deep Freeze Controller screen appears, with seven tabs: Boot Control, Drives, ThawSpace, Maintenance, Mapping, DF Users, and Uninstall. When opening the Deep Freeze Controller again, the login window appears as shown:
Enter a valid DF User Name and password and click OK. The Deep Freeze Controller screen appears with the Boot Control tab active. Updating the License Key after Installation To update the License Key after installation, complete the following steps: 1. Open DFX Control menu. 2. Select Enter License Key. The License Key dialog is displayed. 3. Enter the License Key and click OK.
Boot Control Tab The Boot Control tab is used to change the status of Deep Freeze on a computer.
Use the three radio buttons provided to change the state of Deep Freeze: To set the computer to a Frozen state, choose Boot Frozen. To set the computer to a Thawed state for a specified number of restarts, choose Boot Thawed on Next and specify the number of restarts (the number entered must be between 1-99). To set the computer to a Thawed state, choose Boot Thawed. To restart the computer after making changes, click Restart. The following configuration options are available: To hide the Frozen icon, select the Hide Frozen Icon in menu bar checkbox. To hide the Thawed icon, select the Hide Thawed Icon in menu bar checkbox. To display Frozen partitions without a Deep Freeze icon, select the Dont badge Frozen partitions checkbox. To set the workstations to restart when a user logs out, select the Restart instead of Log Out checkbox. To display the workstation status (Frozen or Thawed) remotely in Apple Remote Desktop, select the Show Status in Apple Remote Desktop checkbox and select the desired Information Field. The workstation will now write Frozen or Thawed to the selected Information Field during boot time. To view this status information in Apple Remote Desktop, select Edit > View Options and select the matching Computer Info Field (14). Workstations will now show their current status, and groups of workstations can be sorted by this status column. To save any changes made, click Apply; changes take effect after a restart.

Adding a User ThawSpace To create a ThawSpace for a particular user on the drive, complete the following steps: 1. Click Add. 2. In the dialog that appears, select the user that the ThawSpace will be created for. 3. In the Size field, enter the size of the ThawSpace and use the drop-down menu to choose if it is sized in MB or GB. The default size of the User ThawSpace is 10 MB. 4. Click Add, or click Cancel to return to the tab without adding the ThawSpace. 5. In the ThawSpace tab, click Apply to create the new ThawSpace. A dialog prompts for the administrative username and password. A Global ThawSpace is accessible to all users. However, the user ThawSpace is accessible only to the particular user. On Mac OS X 10.4, other users ThawSpaces will not be displayed on the Desktop. On Mac OS X 10.5 and 10.6, when a user logs in, other users ThawSpaces will be displayed on the Desktop as a folder with restricted access. It is not possible to remove an existing ThawSpace and retain its contents. Removing a ThawSpace that has a user mapped to it will prevent the user from logging on to the computer. It is recommended that the user be mapped to an alternate location before the ThawSpace is removed. Removing a User or Global ThawSpace To remove a User or Global ThawSpace, complete the following steps: 1. Select the ThawSpace to be deleted and click Delete. A dialog appears, asking for confirmation of the deletion. 2. Click Delete to permanently delete the ThawSpace or Cancel to return to the tab with the ThawSpace retained. 3. Click Apply. A dialog prompts for the administrative username and password. The change will take effect on the next restart. Alternatively, Deep Freeze Mac can be uninstalled in order to remove any ThawSpaces. If you unmount the ThawSpace virtual drive, it is restored upon log out/log in or restart. On a Frozen workstation, if a ThawSpace is physically deleted, the ThawSpace is restored upon restart but the contents are deleted. Before removing a ThawSpace, remove its profile or folder mapping.
Resizing a ThawSpace Once a ThawSpace is created, it can be resized by either increasing or decreasing the size of the ThawSpace. Complete the following steps to resize one or more ThawSpaces. 1. Click ThawSpace. Select one or more ThawSpaces and click Resize.

The following dialog is displayed:

3. 4. 5.

In the New Size field, enter the size of the ThawSpace and use the drop-down menu to choose if it is sized in MB or GB. The default size of a ThawSpace (User ThawSpace and Global ThawSpace) is 10 MB. Click OK to resize the ThawSpace(s), or Cancel to return to the tab without resizing the ThawSpace(s). In the ThawSpace tab, click Apply to resize the ThawSpace(s). A dialog prompts for the administrative username and password. The change will not take effect without a restart. Resizing a ThawSpace is supported only on Mac OS X 10.6 or higher. Once a ThawSpace is resized, the changes will take effect only after a restart.
Limitations of Resizing a ThawSpace The minimum ThawSpace size is the actual data space being used or 1 MB (whichever is higher) and the maximum ThawSpace size is the actual partition size or 120 GB (whichever is lower). Increasing the size of a ThawSpace does not have any limitations. However, reducing the size of a ThawSpace may not be possible in some circumstances. For example, a 10 MB ThawSpace is successfully resized when increased to 20 MB even if data is stored on the entire ThawSpace. However, if a 10 MB ThawSpace is reduced to anything less than 10 MB, it may not be possible to resize a ThawSpace depending on where the data is written. If the data is distributed over the 10 MB space, the ThawSpace cannot be resized. However, if the data is written only at the start of the ThawSpace, it can be resized to the limit where there is continuous free space till the end of the ThawSpace. Maintenance Tab The Maintenance tab is used to schedule a Maintenance Period when the computer will be automatically Thawed to allow Apple Software Updates to be permanently applied. The computer must be Frozen for the Maintenance schedule to start.
Creating and Naming Multiple Maintenance Schedules To create multiple individually named Maintenance Schedules, complete the following steps:
On the Maintenance Tab, click Add. The default Schedule 1 tag appears in the list on the left side of the tab. Each additional schedule added will have that default tag, but can be renamed. To rename a schedule, double-click the tag to be renamed. The field becomes editable. Enter the new schedule name. Up to 10 individually named Maintenance Schedules can be created.
Configuring and Editing Maintenance Schedules To configure a schedule, click the name of the schedule to be configured. Then choose from the following options to configure the Maintenance Schedule: To turn the Maintenance Period on, click the Activate Maintenance Schedule option. From the Day drop-down menu, select a day of the week when the schedule will occur. Use the From and To fields to enter the period of time that the Maintenance will occur. Select the Once Only checkbox to create a one-time only schedule; if this checkbox is not selected, the schedule recurs on a weekly basis. Select Install Apple Software Updates to install any available Apple Software Updates. Select Lock Out User to prevent a user from accessing the computer during the Maintenance Period. Select Warn User At to provide a message to users warning them that the computer will be taken over at a specified time, and enter the warning time in the field provided. Use the Message for User text box to enter a custom message for the user, explaining that the Maintenance Schedule will take place at a specified time; by inserting %d as a variable into the message, Deep Freeze will automatically display the number of minutes until the Maintenance Period begins. (Again, %d is a variable corresponding to the number of minutes between the current time and the time that scheduled Maintenance will begin.) Select Shutdown After Maintenance to shut the computer down after the Maintenance Period is complete. The minimum time allowed for a Maintenance Period is 10 minutes. To save any changes made, click Apply; the changes take effect after a restart.

Mapping Tab The Mapping tab is used to map the users home folder to a specific ThawSpace or partition, or to map elements of a users home folder to a specific ThawSpace or partition. This feature is only available at the administrator level. The current logged in user can not be mapped.
To map a users home folder to a target destination, select the users account and under User Location select one of the options available: Boot Volume, User ThawSpace, Partition, or Custom. Boot Volume User ThawSpace Partition Custom This option maps the user account to the volume the operating system is booted from. This option maps the user account to the corresponding User ThawSpace created for this user. It is not recommended that User ThawSpaces be renamed because a renamed ThawSpace will prevent access from the original user account. The user account can be mapped to a specific partition listed in the Drives tab. This option lets certain elements (pictures, movies and, music, etc.) of a user account be mapped to the User ThawSpace/Partitions. To do this, click on the element and select the ThawSpace/Partition that it will be mapped to. Custom mapped users must be located on the boot volume. Users can not be mapped entirely to their User ThawSpace/any other volume and then partially custom mapped to another location. For bookmarks, the location must exist to be mapped; e.g. if a user has never run Safari, it can not be mapped. Deep Freeze does not create the folders and bookmarks for a user. If an attempt to map to a location with insufficient space is made, the mapping action will not take place. The Short Name must match the Home Directory name in System Preferences > Accounts > Account_Name > Advanced Options for mapping to work.
DF Users Tab The DF Users tab allows administrators to manage the Deep Freeze users present on a computer. There are a maximum of four users permitted on each computer, but only the first user (the admin user) can create, edit, and delete other DF Users.
Adding, Deleting, and Editing DF Users To add a new user, complete the following steps: 1. Click Add. A properties dialog appears, as shown.
Enter the DF User Name and Password and verify the password. NOTE: If Apple Remote Desktop (ARD) is going to be used to manage Deep Freeze Mac deployments, ensure that only alpha-numeric characters are used in the password or the remote tasks will fail. Click OK to save the changes to the user profile, or click Cancel to exit with no changes saved.
To delete a DF User, click Delete. A dialog appears asking for confirmation of the deletion. Click Cancel to exit the dialog, or click Delete to delete the DF User permanently. There must always be at least one DF User present; the first DF User created can not be deleted. To edit the properties of a DF User, click Edit. Edit the User Name and Password in the properties dialog as needed.

Uninstall Tab A computer must be in a Thawed state for the Uninstall option to be available. If the computer is in a Frozen state, the Uninstall option is not available. If there are existing ThawSpaces on a computer, choose either to retain or delete them by selecting the preferred button. If the option to retain ThawSpaces is chosen, all existing ThawSpaces are moved to the boot volume (/ Volumes/username.dmg). To access the boot volume, launch the Terminal and change the directory to the boot volume /Volumes/username.dmg. ThawSpaces must be mounted manually by double-clicking the icon. To uninstall Deep Freeze, click Uninstall.
The computer restarts and Deep Freeze is uninstalled. All program components are permanently deleted when Deep Freeze is uninstalled. Before removing a ThawSpace, remove its profile or folder mapping.
Exporting and Importing Configurations A file containing the configuration information set in the Deep Freeze Controller can be exported as a property list file. The property list can be imported into another Deep Freeze Controller and deployed to targeted computers. To export the configurations set in the Deep Freeze Controller, click Export and save the file to a preferred location. To import a configuration file, click Import and browse to the location of the saved file. The computer must be restarted for any changes to take effect from the imported file. Drives, ThawSpace, and mapping pages are not exported or imported since they are not relevant to other computers.

Using Deep Freeze

After Deep Freeze has been installed and a configuration has been assigned to a partition, the computer can be operated as usual. The only visual evidence that Deep Freeze is installed on a computer are the presence of a Deep Freeze icon in the menu bar (if configured), the Deep Freeze icon badge on each Frozen volume (if configured), or any configured Global or User ThawSpaces. Users can make changes to the computer, including renaming or deleting files and folders, downloading files from the Internet, changing the desktop, and more. However, the Frozen volumes are completely restored to their original configurations and contents at restart. Deep Freeze Icons When Deep Freeze is installed, the polar bear icon appears in the menu bar, if the icon has been configured to appear: The Frozen polar bear icon The Thawed polar bear icon indicates that the computer is currently Frozen. indicates that the computer is currently Thawed.

The User Mapping tab is used to map types of a users home folder to a specific ThawSpace. Use the drop-down menus to map Standard, Admin, or Mobile users home folder to either a partition or a User ThawSpace.
Mapping is done on a per user basis. It is possible to have some users mapped while others fail. Failure can occur as a result of one or more of the following:
The destination already exists. The destination does not have sufficient space. Attempts to map using the ARD may also fail due to the destination existing but not being mounted at that time. A destination that has room for one user may not have room for all users, and in this case, some of the users may be copied to the destination while others are not. Click Continue. The Maintenance screen appears:
10. To create multiple individually named Maintenance Schedules, click Add. The default Schedule 1 tag appears in the list on the left side of the tab. Each additional Schedule added has that default tag, but can be renamed. To rename a Schedule, double-click the tag to be renamed and edit the field. NOTE: up to 10 individually named Maintenance schedules can be created. To configure a schedule, click the name of the Schedule to be configured. Choose from the following options to configure the Maintenance Schedule: To turn the Maintenance Schedule on, click Activate Maintenance Schedule. From the Day drop-down menu, select a day of the week that the Schedule will occur. Use the From and To fields to enter the period of time that Schedule will occur. Select the Once Only checkbox to create a one-time only Schedule; if this box is not selected, the schedule will recur on a weekly basis. Select Install Apple Software Updates to automatically perform Apple Software Updates during the Maintenance Schedule. Select Lock Out User to prevent user access during the scheduled updates. Select Warn User At to provide a message to users warning them that the computer will be taken over at a specified time, and enter the specified time in the field provided. Use the Message for User field to enter a custom message for the user, explaining that the Maintenance Schedule will take place at a specified time; by inserting %d as a variable into your message, Deep Freeze will automatically display the number of minutes until the Maintenance Period begins. (%d is a variable corresponding to the number of minutes between the current time and the time that scheduled Maintenance will begin.) Click Shutdown After Maintenance to shut the computer down after the Maintenance Period is complete. NOTE: The minimum time allowed for a Maintenance Period is 10 minutes. Click Continue. The Choose Deep Freeze Installer screen appears:

11. Click Choose and browse to the location of the Deep Freeze installer package (.pkg extension) that exists in the Deep Freeze folder. Alternatively, drag and drop the package file into the Choose dialog screen. Click Continue. The Where to Save screen appears.
Click Choose. A standard Save dialog appears. Browse to a location to save the custom client installer and select it. Alternatively, drag and drop the preferred save location into the Choose dialog screen. Click Continue. The final screen appears, stating that the custom client installer was successfully created and that the Deep Freeze tasks were installed into ARD.
Click Quit to close the Deep Freeze Assistant.
Appendix II: Apple Remote Desktop v.3.0 Integration
Deep Freeze Assistant can install tasks for use with Apple Remote Desktop. These tasks can be used as supplied or as a starting point for controlling Deep Freeze with ARD. In ARD 2.2, the Deep Freezespecific tasks are saved in the Saved Tasks folder, not in a named folder.
The functions of each task are identical to the functions described below. Each task can be configured in the Deep Freeze Controller, except for requestStatus. The following new commands and arguments are available in this release:

Task (Command)

activateSchedule

Argument

Schedule name

Function

addUser addSchedule
New user name schedule_name [-a on|off] [-d monda y|tuesday|wednesday| thursday|friday|saturd ay|sunday] [-b 24-hrtime] [-e minutes] [-o on|off] [-i on|off] [-l on|off] [-w off|5|10|15] [-m message string] [-s on|off]
Activates the scheduled updates on target computer(s); name of the schedule must be included in the command as a parameter. Adds user to list. Adds a schedule.
24-hr-time is in the form of HH:MM.

badgeFrozenPartitions

on|off
Shows/Hides Deep Freeze icon on Frozen partitions. Sets target computer(s) to restart in a Frozen state. Sets target computer(s) to restart in a Thawed state.

bootFrozen

bootThawed

bootThawedFor

checkForUpdates

createThawSpace

deactivateSchedule

deleteUser

User name
Sets target computer(s) to restart in a Thawed state for the next x restarts; this number can be customized in the Times argument. Checks whether the present version of Deep Freeze on the target computer(s) is the most current. Creates virtual partition on a Frozen volume where data can be saved persistently across restarts*. Deactivates the scheduled updates on target computer(s); name of the schedule must be included in the command as an argument. Deletes user from list. Edits a schedule.

editSchedule

schedule_name [--newname new_schedule_name] [--activate on|off] [-day monday|tuesday|wedn esday|thursday|friday| saturday|sunday] [--begin 24-hr-time] [--end minutes] [--onceonly on|off] [--installappleupdate on|off] [--lockuser on|off] [--warnuser off|24-hr-time] [--message message string] [--shutdownafter on|off] User name

editUser

freezePartition

Partition name

getARDInfoField
getLicenseInfo mapAllUsers (Argument 1) admin|standard|mobile (Argument 2) Partition name| userthawspace help
removeSchedule removeAllSchedules resizeThawSpace

schedule_name

global name nnnn

userthawspace_

Allows administrators to edit the name and password of a user Designates a partition on target computer(s) to be Frozen. Specifies which Apple Remote Desktops information field is used to display the workstation status. Displays the License information. Maps all users to a specified ThawSpace: name of user type and location of ThawSpace must be included as a parameter; e.g. admin Panther maps all admin users to the partition named Panther.** This will print all the options and parameters available in the deepfreeze command line tool. Removes a schedule. Removes all schedules. Resizes a ThawSpace.
global is entered as it representing global ThawSpace.
nnnn is the new size in MB.

rebootInsteadOfLogoff

removeThawSpace removeAllThawSpace setARDInfoField

ThawSpace name|global

ARD Info Field
setLicenseKey showFrozenIcon

license_key on|off

showThawedIcon

status

tagUserThawSpaces

thawPartition

uninstall

[keepThawSpace]

version
Restarts target computer(s) instead of logging off when the on argument is used. This feature is turned off when the off argument is used. Removes a single ThawSpace*** Removes all ThawSpaces present This parameter is used to specify which Remote Desktops Information Field is used to display the workstation status. The parameter value is 0 to 4, 0 is to unset the Information Field. Sets the License Key. Configures target computer(s) to show/hide the Deep Freeze Frozen icon in the menu bar. Configures target computer(s) to show/hide the Deep Freeze Thawed icon in the menu bar. Requests target computer(s) to display the status of various Deep Freeze settings. x specifies that the result is in XML format. Tags User ThawSpaces (if configured) with user icons/removes Tags from User ThawSpaces. This option must be used before the ThawSpace is created; user icon tags can not be added after creation. Designates a partition on target computer(s) to be Thawed. Uninstalls Deep Freeze from target computer(s). The target computer(s) must be restarted in the Boot Thawed state before the uninstall task can be run. Uninstalls Deep Freeze from target computer(s) but retains ThawSpaces Displays Deep Freeze version number. x specifies that the result is in XML format.

* = This only occurs during the first DeepFreeze installation using the settings provided by the custom installer created by Deep Freeze Assistant. **= The mapAllUsers command also includes the parameters: admin, standard, mobile, userthawspace and, partition name such as Macintosh HD or Panther. ***= The single ThawSpace name must be specified as well as global for a Global ThawSpace.
Adding Targeted Computers to the Task List In order to run a task, there must be computers targeted to run the task. To add one or more computers to be targeted to run the task, complete the following steps: 1. In the left column, double-click the task to be targeted to the specified computers. The Task Edit window appears. At the bottom of the window is a dialog listing the designated computers assigned to the task. Before a computer is added to the list, it reads No Computers. Drag and drop the preferred workstations or group of workstations into the dialog from the computers in the All Computers list. The number of computers assigned to a specific task appears at the bottom of the window. Click Save.
Using and Editing Tasks To use the tasks, they must be edited to add site-specific information, e.g. usernames and passwords. The following conditions and settings must apply for ARD to perform the tasks:
The target computer(s) for the task must be specified. The target computer(s) must have Deep Freeze installed. A user on the target computer must be specified to run the command. The following figure shows the sample output from the Status function. NOTE: The Display all output checkbox must be selected in the Apple Remote Desktop Edit Task window in order to show the targets status. The following figure shows the activateSchedule task set to run as the current console user on the target computer:
Each task must be edited to use a Deep Freeze user name and password for the target computer(s). In the above example, admin is the Deep Freeze user name and admin is the Deep Freeze password. The name and password may already be present in the task, depending on the settings that were specified in Deep Freeze Assistant. The following tasks must run as root on the target computer. Otherwise, insufficient permissions will cause the task to fail.

createThawSpace mapAllUsers removeThawSpace removeAllThawSpace resizeThawSpace status uninstall keepThawSpace uninstall
Sample Command Line Scripts The Deep Freeze Mac tasks give network administrators increased flexibility when managing Deep Freeze Mac workstations. These tasks can be run with several different third-party enterprise management tools and/or central management solutions; this includes executing commands in
Terminal while connected to a remote workstation via SSH. A sample script using the bootFrozen command is shown below:
DFXPSWD=password /Library/Application\ Support/Faronics/Deep\ Freeze/ deepfreeze -u admin -p bootFrozen
In this example, administrator is the name of a valid Deep Freeze Mac user and password is that users password. The sample script can be modified to run any task listed in the Task table. Deep Freeze Legacy Commands In the current version of Deep Freeze Mac, the CLI has been changed to provide new commands and arguments. Tasks from previous versions of Deep Freeze Mac appear under the Deep Freeze Legacy folder in ARD. The commands in the Deep Freeze Legacy folder have been retained for backward compatibility. However, these commands will be removed entirely in a future version. The following commands are deprecated in the current release:
addUser badgeFrozenPartitions bootFrozen bootThawed bootThawedFor 5
deleteUser dontBadgeFrozenPartitions dontRebootInsteadOfLogoff dontTagUserThawSpaces
editUser freezePartition hideFrozenIcon

hideThawedIcon

Activates the scheduled updates on target computer(s); name of the schedule must be included in the command as a parameter Adds user to list Badges Frozen partitions with Deep Freeze icon Sets target computer(s) to restart in a Frozen state Sets target computer(s) to restart in a Thawed state Sets target computer(s) to restart in a Thawed state for the next 5 restarts; this number can be customized in the Task Edit window Checks whether the present version of Deep Freeze on the target computer(s) is the most current Creates virtual partition on a Frozen volume where data can be saved persistently across restarts* Deactivates the scheduled updates on target computer(s); name of the schedule must be included in the command as a parameter Deletes user from list Hides Deep Freeze icon on Frozen partitions (if configured) Restarts target computer(s) Prevents user icons from appearing as tags on User ThawSpaces (if configured); this option must be used before the ThawSpace is created; user icon tags can not be removed after creation Allows administrators to edit the name and password of a user Designates a partition on target computer(s) to be Frozen Configures target computer(s) to hide the Deep Freeze Frozen icon in the menu bar Configures target computer(s) to hide the Deep Freeze Thawed icon in the menu bar

Introduction

This document was created to give administrators a set of guidelines to follow to ensure Deep Freeze Mac is set up and deployed in the most ideal way.

Implementation

This section explains the recommended methods to initially configure your Deep Freeze Mac environment and deploy it to your clients. This section also explains additional configuration settings recommended by Faronics to secure the machines. System Requirements Deep Freeze Mac requires Mac OS X Panther v10.3, Tiger v10.4., or Leopard v10.5. Deep Freeze Mac is a Universal application (Intel and PPC compatible). Apple Remote Desktop integration requires ARD version 2.2 or later. A minimum of 256 MB RAM is recommended. Installation Configuration The Deep Freeze Assistant allows for the creation of pre-configured installer packages that contain settings that are applied when deployed. These include, but are not limited to: usernames/passwords, Maintenance Schedule settings, and ThawSpaces. These packages can then be deployed manually or via ARD (or any other software deployment tool) so that different Deep Freeze settings can easily be deployed based on the requirements of the labs or environment. The Deep Freeze Assistant is included on the Deep Freeze Mac disk image. One important item to remember is to set your installation boot state to Boot Thawed (at least for one restart) if you are preconfiguring ThawSpaces for your installer package. Deep Freeze Mac needs to be in a Thawed state to create the ThawSpaces after installation. Deep Freeze Assistant can also directly install Deep Freeze specific Saved Tasks into the ARD console on a chosen Mac. ARD tasks are not part of the customized Deep Freeze installation package. ARD must not be running in order for the task installation to be successful. Installation Deployment Before Installation: It is highly recommended that a Verify Disk (via Disk Utility or similar utility) be run on the drive on which Deep Freeze Mac is to be installed. This will test the disk to see if any further repairs are necessary. A faulty or fragmented drive may cause Deep Freeze to install improperly, which may compromise the system, so a defrag is recommended. Running a Repair Disk Permissions is also recommended. The cleaner the system the better! Installing Remotely To install Deep Freeze Mac via Apple Remote Desktop, select Manage > Install Packages. from the Install Packages window. You can choose the desired Deep Freeze installer package and the computers (or groups of computers) to which you want Deep Freeze Mac deployed. This deployment can be scheduled through ARD for automated execution. Installing Manually To install Deep Freeze on a single computer, double-click the DFX Version.pkg file and follow the steps presented. Click Install and Deep Freeze is installed on the computer. A restart is required to complete the installation. Upon completion of a successful installation and after a restart, Deep Freeze is automatically configured to put all drives and partitions on the into a Frozen state. The drives and volumes that are to be put in a Thawed state must be specified using the Deep Freeze Controller or via Apple Remote Desktop.
NOTE: It is recommended that all previous versions of Deep Freeze Mac OS X be uninstalled before installing a newer version. Installation Order With Other Products In order to properly install environments that contain both Deep Freeze Mac and any other product, either of the following two methods can be used: Install the other program(s) first and then install Deep Freeze Mac. This ensures that the additional programs are part of the Frozen system. Install Deep Freeze Mac first in a Thawed state, then install the other program(s). This ensures that the additional programs are not deleted when the computer(s) is rebooted. The computer then needs to be set back into a Frozen state.

Securing Your System

Apple provides an application called Open Firmware Password that prevents users from pressing the keys necessary to boot into single-user mode or boot from an alternative volume at start up. To download the Open Firmware Password application, refer to Apples instructions at: http://www.apple.com/support/downloads/openfirmwarepassword.html For Mac OS X 10.4 or later, the updated version of this application can be copied from the software installation disc, located at Applications > Utilities on the disk. Please note that Intel-based Macintosh computers can be protected by firmware passwords as well by using Extended Firmware Interface (EFI) technology.

Retaining User Data

In an environment where the user data needs to be stored on the local machine, it is possible to set up an area where the user data can be stored. This involves redirecting data to a Thawed location, either a Global or Individual ThawSpace or a Thawed partition. This re-directing, or Mapping, can be done directly in the Deep Freeze Mac user interface on the Mapping tab. Refer to the Deep Freeze Mac documentation for more information.
Managing Deep Freeze Mac Workstations
Now that Deep Freeze Mac has been deployed, the following information provides recommendations for managing a Deep Freeze Mac deployment. Apple Remote Desktop Integration As mentioned above, the Deep Freeze Assistant can install tasks for use with Apple Remote Desktop. They appear in their own Deep Freeze folder on the ARD sidebar. These tasks can be used as supplied or as a starting point for controlling Deep Freeze with ARD. Each task mirrors a Deep Freeze Controller command, although you can also remotely request the Deep Freeze status from any Mac via ARD. To use the tasks, they must be edited to add site-specific information, eg. usernames and passwords. For ARD to perform the tasks, the target computer(s) for the task must be specified, the target computer(s) must have Deep Freeze installed and a user on the target computer must be specified to run the command. To target computers with a particular ARD task, select the desired task and drag the preferred workstations or group of workstations into the lower portion of the task window. The number of computers assigned to a specific task appears at the bottom of the window As with deploying the Deep Freeze Mac installer package, any Deep Freeze task can be scheduled through ARD for automated execution.

LANDesk Integration

Deep Freeze Mac also integrates (via the Deep Freeze Mac plug-in for LANDesk) with the LANDesk Management Suite Console, where Deep Freeze tasks can be created, scheduled, and deployed. The plug-in supports LDMS v8.6.1 and v8.7, Deep Freeze Enterprise v6.0 and higher, and Deep Freeze Mac v3.1 and higher. This plug-in version will not work with the LANDesk Management Web Console. For full instructions on managing Deep Freeze Mac through the LANDesk console, refer to the Deep Freeze Mac Plug-in to LANDesk documentation.

Command Line Control Integration
The Deep Freeze Mac-specific ARD tasks can be run (even if ARD is not employed) with several different third-party enterprise management tools and/or central management solutions; this includes executing commands in Terminal while connected to a remote workstation via SSH.

Apple Software Updates

To automatically download and install Apple Software Updates, use the Schedule tab in the Deep Freeze Controller to set up an automatic Thawed period during which time the updates can be performed on the workstations. During the scheduled maintenance, the Lock Out User option can be set so that the keyboard and mouse are disabled at the workstation, allowing for updates to only take place via the network without user interference.

ThawSpaces

The ThawSpace tab in the Deep Freeze Controller is used to create virtual Thawed partitions where documents and changes can be saved persistently on Frozen computers. Administrators can create a personal ThawSpace for each local user, or a global ThawSpace that all local users can share. ThawSpaces can be added or deleted from within the tab using the Add and Delete buttons. A computer must be in a Thawed state to create or modify a ThawSpace, and a restart is required to enable any additions, modifications, or deletions made to ThawSpaces. ThawSpaces appear as removable media on the Desktop so files can be easily dragged to them for saving.

Stealth Mode

By using the Boot Control tab in the Deep Freeze Controller, an administrator has the option to show or hide the Deep Freeze menu bar icons (blue for Frozen, red for Thawed), as well as whether to show a badge of the Deep Freeze icon on any Frozen drives or volumes on the Mac. By choosing to hide these options, the administrator can effectively run in stealth mode so that users will be visually unaware the Deep Freeze is installed on the computer.

Upgrading

To check if the installed version of Deep Freeze Mac is the most current one, select Help > Check For Updates. A dialog appears, stating if your version is up to date or if there is a more current one available for download. It is recommended that all previous versions of Deep Freeze Mac OS X be uninstalled before installing a newer version.

Uninstalling

A machine must be in a Thawed state for the Uninstall option to be available via the Uninstall tab. If the machine is in a Frozen state, the Uninstall option is not available. If there are existing ThawSpaces on a machine, choose either to retain or delete them by selecting the preferred radio button. The computer requires a restart and all Deep Freeze program components are permanently deleted during the uninstall process.