The Configuration Administrator application is used to create customized, pre-configured, computer installation program files and Workstation Seeds.
The Enterprise Console application is used to centrally deploy, monitor, manage, and maintain Deep Freeze installations.
A customized Deep Freeze workstation installation file is created in the Configuration Administrator and deployed to workstations within the enterprise. This file includes the Workstation Seed. If the Deep Freeze workstation installation file is installed, the Workstation Seed is not required to be installed separately.
A Workstation Seed enables seamless communication between the Enterprise Console and computers on a network. When the Workstation Seed is installed on a computer, the computer becomes visible on the Enterprise Console. Once a computer is visible on the Enterprise Console, various actions such as Restart, Shutdown and Wake-on-LAN can be performed on the computer remotely. Deep Freeze can also be installed remotely on visible computer thereby allowing Deep Freeze related actions on remote computers.

Installing Deep Freeze

This chapter describes the installation process of Deep Freeze.
Installation Overview Customization Code One Time Passwords

Installation Overview

Installing Deep Freeze Server Configuration Administrator and Enterprise Console
The Configuration Administrator is intended to be installed only on the computer used to administrate Deep Freeze. The Configuration Administrator is used to create customized Deep Freeze installation files and Workstation Seeds. The Deep Freeze Server Enterprise Console installs automatically with the Deep Freeze Configuration Administrator. Complete the following steps to install the Configuration Administrator: 1. If Deep Freeze has been downloaded via the Internet, double-click the file DFEntServ.exe to begin the installation process. The following screen appears:
2. Click Next. 3. Read and accept the license agreement. Click Next.
4. Enter the License Key in the License Key field or select the Use Evaluation check box to install in Evaluation mode. Click Install.

The Evaluation version of Deep Freeze is valid for 30 days. After 30 days, all Deep Freeze functionality will be disabled on the Enterprise Console. All other features will continue to work even after the 30 day period.
5. Once the installation process is completed, the Customization Code screen appears.
6. Specify the Customization Code and click Next. The Customization Code must be a minimum of eight characters. The installation is completed.

Customization Code

The Customization Code is a unique identifier that encrypts the Configuration Administrator, the Enterprise Console, the computer installation files, the One Time Password Generation System, and Deep Freeze Command Line Control. This code is not a password that can be used to access Deep Freeze. The Customization Code ensures that unauthorized administrators are prevented from accessing or controlling a computer. Multiple Deep Freeze administrators controlling the same group of computers must use a matching Customization Code. The Customization Code must be recorded and guarded with care. Faronics is unable to recover a lost or forgotten Customization Code.
Re-Initializing the Customization Code
If another administrator wants to create installation files with the same Configuration Administrator using a different Customization Code, complete the following steps: 1. Run DFInit.exe. 2. This resets the existing Customization Code for the Configuration Administrator. 3. Enter a new Customization Code. 4. Click OK for the new Customization Code to become active.

Update Mode

Update Mode can be used to automatically create updated versions of existing files of Deep Freeze Server Enterprise by executing a special Update command. The Update Mode is not applicable for updating from Deep Freeze Server Enterprise 6.3 to Deep Freeze Server Enterprise 6.62 (or higher). Installing Deep Freeze Server Enterprise 6.62 (or higher) on a computer that has Deep Freeze Server Enterprise 6.3 does not update the computer with the new version. Installing Deep Freeze Server Enterprise 6.62 (or higher) over Deep Freeze Server Enterprise 6.3 will result in two versions on the same computer. To update Deep Freeze Server Enterprise, uninstall Deep Freeze Server Enterprise 6.3 and install Deep Freeze Server Enterprise 6.62 (or higher). The Update Mode is only applicable when updating from Deep Freeze Server Enterprise 6.62 to higher versions.

3. Select the ThawSpace storage unit in MB or GB. 4. Select the Host Drive. The Host Drive is the drive where the ThawSpace is created. The storage required for the ThawSpace is used from the total storage available on the Host Drive. 5. Select Visible or Hidden from the Visibility drop-down. If you select Visible, the drive will be visible in Windows Explorer. If you select Hidden, the drive will not be visible in Windows Explorer. However, the hidden drive can be accessed by typing the drive letter in Start>Run. 6. Click Add to add the ThawSpace. Removing a ThawSpace To remove a ThawSpace, select the ThawSpace and click Remove. The ThawSpace is removed and the drive letter is now added back to the Drive Letter drop-down. Click Remove All to remove all the ThawSpaces. Example In the above screen, a ThawSpace of 16 MB is created on the Host Drive C: and the ThawSpace is designated with the drive letter T:. The ThawSpace T: is set to Visible and can be accessed via the Windows Explorer. It is recommended to assign Drive Letters towards the end of the alphabet (X, Y, Z) in order to avoid automatic reassignment when a removable drive is unplugged.

Existing ThawSpace

The Retain existing Thawspace check box is selected by default to prevent ThawSpaces created during previous installations from being deleted. A dialog is always displayed asking if the ThawSpace should be retained or deleted during an Attended Uninstall, regardless of whether Retain existing ThawSpace has been selected. This option is not displayed if the uninstall is performed through the Enterprise Console.
Always Thaw External Hard Drives
The Always Thaw External Hard Drives pane has two check boxes, USB and IEEE 1934 (FireWire) and both check boxes are selected by default. This ensures that the USB or IEEE 1934 (FireWire) hard drives are always Thawed. If the USB and/or IEEE 1394 (FireWire) external hard drives check boxes are cleared, the drive is Frozen or Thawed according to the letter each drive mounts to in the Frozen Drives section. Network drives and removable media drives (floppy, memory keys, CD-RW, etc.) are not affected by Deep Freeze and therefore cannot be Frozen.
Example In the above screen, drives E: and F: are selected in the Frozen Drives pane. Let us assume that E: corresponds to a USB hard drive and F: corresponds to an IEEE 1394 (FireWire) hard drive. The USB and IEEE 1394 (FireWire) check boxes are selected in the Always Thaw External Hard Drives pane, the external hard drives would be Thawed. The USB check box is selected. The IEEE 1934 (FireWire) check box is cleared. In this example, the USB drive (E:) would be Thawed and the IEEE 1394 (FireWire) drive (F:) would be Frozen.

Embedded Events Tab

The Embedded Events Tab allows you to schedule various events at pre-defined intervals.
When events are created through the Embedded Events tab, they are saved in the Workstation Install file. As the events created by the Embedded Events tab exist on the target computer, if communication between the Enterprise Console and the target computer fails, or does not exist, the events are still executed since they exist on the target computer. Events scheduled through the Scheduled Tasks Wizard in the Enterprise Console exist on the Enterprise Console and not on the target computers. Therefore, a continuous connectivity between the Enterprise Console and the target computer is required for the events to be executed. For more information, refer to the Scheduling Deep Freeze Tasks section. Overlapping events cannot be created in the Embedded Events tab. If a newly created event overlaps with an existing event, a message is displayed.
A message can be displayed to the user for a maximum of 5 minutes. There must be a gap of a minimum of 5 minutes between any two events.
Restart on Logoff - Select this check box to Restart the computer automatically when it is logged off. If this option is selected, the computer is restarted when a user logs off. The following events can be scheduled in the Embedded Events Tab:

Restart

The Restart event can be scheduled by completing the following steps:
Select Restart from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Day - Select the day, or specify if the event will occur on Weekdays or Weekends. Start Time - Select the Start Time. Allow User to Cancel Event - Select the check box if the user is allowed to cancel the event. Show message - Select the check box to display a message on the computer before the event occurs. Specify the time interval in minutes and enter a brief message to be displayed before the event occurs.
The message This computer will reboot in %d seconds is displayed in the Message to be displayed before the Event field. This message can be edited. Add the word minutes in the message after %d to include the word minutes as part of the message.

Example Anti-Virus programs require regular virus definition updates to protect the system. Virus definitions can be updated during a Maintenance Event. In the above screen, a Maintenance Event has been created to schedule a maintenance period at the computer daily between 12:00 AM and 1:00 AM. No Batch Files or Windows Updates are to be run during the maintenance period. The user is not allowed to cancel the event. The computer will not shut down after the maintenance period. The keyboard and mouse are disabled during the maintenance period. The Maintenance Event is configured to display a message to the user 3 minutes before the event starts. The following message will be displayed on the computer at 12:00 AM The computer will reboot in 3 minutes for maintenance. During the maintenance period, the following message is displayed on the computer This computer is in Maintenance Mode. To ensure that the virus definitions are applied permanently, schedule the virus definition update for your Anti-Virus program so that it starts after Deep Freeze successfully starts the Maintenance Event and ends before Deep Freeze ends the Maintenance Event. During the Maintenance Event, the computers managed by Deep Freeze reboot Thawed. This ensures that the virus definitions downloaded and updated by the Anti-Virus program stay permanently on the system. Hence the system is fully protected by Anti-Virus and Deep Freeze. Faronics Anti-Virus: Faronics Anti-Virus works with Deep Freeze and does not require a Maintenance Event for updating virus definitions. Faronics Anti-Virus can update virus definitions even when the computers managed by Deep Freeze are in a Frozen state. Other Anti-Virus Programs: All other Anti-Virus programs require scheduling a Maintenance Event to update virus definitions. Alternatively, virus definitions can be applied when the computers managed by Deep Freeze are in a Thawed state.

Idle Time

The Idle Time event can be scheduled by completing the following steps:
Select Idle Time from the Event Type drop-down in the Event Management pane and click Add. The following options are displayed in the Event Properties pane: Event Name - Specify a name for the event. Restart or Shutdown - Select Restart or Shutdown and specify the time interval in minutes. Show message - Select the check box to display a message. Specify the time interval in minutes and enter a brief message. After the computer is started, the Idle Time counter becomes active only after the first keyboard or mouse activity has been initiated.

Example In the above screen, the Idle Time Event is set to Restart when the computer is idle for 20 minutes. A message is displayed to the user for 1 minute after the idle time has elapsed. The computer will restart unless the user cancels the event in the message dialog displayed.

Maintenance Tab

The Maintenance tab is used to specify an SUS (Microsoft Software Update Services) or WSUS (Windows Software Update Services) Server and batch file options for a Scheduled Maintenance period.

Run batch file with:

Select Microsoft Network and select if the account to be used is a System account or a Specified user account. If you select Specified user account, specify the Login ID, Password, and Domain. For Novell Network, select Novell, specify the Login ID, Password, Tree, Context, and Server.

Windows Update

To use an SUS (Microsoft Software Update Services) Server or a WSUS (Windows Software Update Services) Server for Windows critical updates, select the option Use SUS/WSUS Server and enter the IP address or Hostname. If Use SUS/WSUS Server is not selected, Windows critical updates are downloaded via the Internet for each computer individually. Select the Windows Update Logfile path. Browse to select the log file path and click OK. If the path is empty, Deep Freeze will create a default log file DFWuLogfile.log under the Faronics folder. Microsoft SUS client and SUS/WSUS server can be downloaded at: http://www.microsoft.com.

Batch File

Enter a custom batch file to run during the Maintenance Period. The same batch file applies to all Maintenance Periods for which a batch file will be run. The following options are available when running custom batch files: To clear the current batch file, click New To load an existing file, click Open and browse to the location of the file To save the contents of the field, click Save and browse to the preferred save location
The batch file can be any command or series of commands that the command processor can run. Users can run custom scripts that require the use of a third-party scripting engine by calling the script from the batch file as if it was being run from the command line.

Advanced Options

Disable Command Line options - This option is selected by default. Clearing this check box allows for further customization of the Deep Freeze installation program when using the Silent Install System. Selecting this option prevents the pre-existing configuration choices from being changed during installation. Enable Deep Freeze local policies - For enhanced security, Deep Freeze removes the following local privileges: debugging programs, modifying firmware, and changing the system time; clear this option to use existing privileges. Allow user to change the clock - Select this option to allow Frozen users to adjust the system clock. Manage Secure Channel Password Secure Channel Password is a feature of all Windows operating systems and only applicable if the system is running in Windows Server Domain Environment. Secure Channel Password is used for secure communication between the server and workstations. The Secure Channel Password is automatically changed based on the operating system settings. While using Deep Freeze, the newly changed Secure Channel Password is lost on reboot. The Manage Secure Channel Password option avoids this situation. The Manage Secure Channel Password feature of Deep Freeze changes the value of the Group Policy Maximum machine account password age based on the Deep Freeze state (Frozen or Thawed). Select the Manage Secure Channel Password option if you want Deep Freeze to manage Secure Channel Password. When the workstation is Frozen: The workstation will not change the Secure Channel Password. This ensures that the secure communication between the server and the workstation is always maintained. When the workstation is Thawed: The workstation will change the Secure Channel Password and sync the password with the server. Do not select the Manage Secure Channel Password option if you do not want Deep Freeze to manage the Secure Channel Password. When the workstation is Frozen: When the Secure Channel Password is changed and synced with the server, it resets to the old password on reboot. When the workstation is Thawed: If the workstation is Thawed on the day the Secure Channel Password is changed, the new password takes affect and the workstation is synced with the server.
The Manage Secure Channel Password feature of Deep Freeze always overrides the Group Policy Maximum machine account password age. Set the following in the Group Policy for the Manage Secure Channel Password feature to work: Domain Controller: Refuse machine account password changes to Not Defined Domain Member: Disable machine account password changes to Disabled Example On a Windows Domain Environment using Windows Server 2003 that manages multiple workstations, Secure Channel Password is used for secure communication between the server and workstations. In Deep Freeze Configuration Administrator, go to the Advanced Options tab and select Manage Secure Channel Password. Create the Workstation Install file and deploy it to the workstation. Set the following in the Group Policy for the Manage Secure Channel Password feature to work: Domain Controller: Refuse machine account password changes to Not Defined Domain Member: Disable machine account password changes to Disabled When the workstation is Frozen, the Secure Channel Password does not change. When the workstation is Thawed, the Secure Channel Password is changed at the workstation and synced with the server.

Using Deep Freeze Server Enterprise Console
This chapter describes using the Deep Freeze Server Enterprise Console.
Deep Freeze Server Enterprise Console Managing Communication Between the Console and Workstations Remote Consoles Connecting to a Remote Console Managing Deep Freeze with the Console Licensing Scheduling Deep Freeze Tasks Assigning Computers to Scheduled Tasks Managing Network and Groups History Adding computers to a Group Configure Custom Actions Console Customizer Deep Freeze Server Enterprise Console Shutdown Installing Deep Freeze on the Workstation Uninstalling Deep Freeze on the Workstation via the Console Silent Install or Uninstall Check for Updates
Deep Freeze Server Enterprise Console
The Deep Freeze Server Enterprise Console displays the status of all Frozen, Thawed, and Target computers on the network and allows the administrator to perform specific tasks on those computers. Detailed status information is available with selective or group reporting. The Enterprise Console allows administrators to remotely perform the following tasks: Immediately Target Install computers Selectively Freeze, Thaw, or Thaw Lock one or more computers Lock or Unlock selected computers Dynamically update Embedded Events and Maintenance settings Restart or shutdown computers Stop scheduled maintenance Power on computers equipped with a Wake-on-LAN network card Update Deep Freeze software Schedule tasks directly from the Console Send messages to computers Import groups and containers from Active Directory Generate One Time Passwords Schedule Actions Customize the Enterprise Console Update the License Key
The Enterprise Console can only wake a computer from a powered-down state if the computer is properly configured to power on when a Wake-on-LAN packet is received.
Launching the Enterprise Console
The Enterprise Console is installed with the Deep Freeze Configuration Administrator. Open the Console by selecting the following path from the Start menu: Start > All Programs > Faronics > Deep Freeze Server 7 Enterprise > Deep Freeze Console
Activating the Enterprise Console
As a security feature of Deep Freeze Server Enterprise the OTP feature prevents unauthorized Deep Freeze Server Enterprise Console use. When the DFConsole.exe file is copied to a new computer, the Console must be activated. When it is run for the first time on the new computer, a dialog displays with an OTP Token. The network administrator enters this token in the Configuration Administrators OTP Generation System. An OTP is generated. Enter it in the dialog and the Console will run.

The Enterprise Console runs on Windows 2000/XP/Vista, and 2000, 2003 and 2008 Server. The computer on which the Enterprise Console is installed must not have an installation of the Workstation Seed (using the same port) or a full Deep Freeze installation.

Status Icons

The Enterprise Console displays the status of the computers on the local area network with the following icons beside or above the computer name, depending on the view selected: Icon Definition Target: Computers that have the Deep Freeze Workstation Seed installed but do not have Deep Freeze installed; Deep Freeze can only be remotely installed on computers with this icon
Computers with Deep Freeze installed in a Frozen state
Computers with Deep Freeze installed in a Thawed state
Computers with Deep Freeze installed in a Thawed Locked state
Computers that are currently powered down
Computers that are currently in Maintenance Mode
Computers whose communication with the Console has been interrupted
Computers that are Locked
Managing Communication Between the Console and Workstations
There are two types of connections from Console to workstation and Console to Console: 1. Local connections connections that can only be accessed by the Enterprise Console that hosts those connections. 2. Remote control enabled connections connections that can be accessed by the Console that hosts as well as other Consoles connected remotely. The Server Service for Deep Freeze 6.5 will not automatically update the Server Service for Deep Freeze 6.4 or lower. Both services can be installed on the same computer, but only one service can run at a time. A computer can lose communication with the Console for any of the following reasons: The computer is powered off manually or is shut down without warning The network is experiencing heavy traffic or outages The computers network settings are changed to point to a new Console
In most cases, communication with the computer is re-established when the computer is powered on or when the conditions causing the communications breakdown are rectified. It may take several minutes for the computer to report back to the Console and re-establish communication. If communication cannot be re-established, contact Technical Support for troubleshooting steps.
Configuring the local service
The local service is a service that sets up and maintains connections to computers. Enabling the local service By default the local service will be installed and enabled when the Console is first run. To enable the local service again if it has been disabled (and/or uninistalled) 1. Select Tools > Network Configuration. 2. Select the Enable local service check box to enable it.

Console Customizer

The Console Customizer lets you specify which features and commands you want to be available in the Console, and save the result as a new Console that can be distributed in your organization. The available settings are grouped into categories (Console functions, Workstation commands, Deep Freeze commands, Workstation install/uninstall commands, and Scheduler commands). Click on the plus (+) icon to the far left of each category to disclose the full list of settings available in that category. Select or clear the individual check boxes as required. Alternatively, select or clear the entire categories at once. Settings that are cleared will not be available in the new Enterprise Console you create. For an example on how to use the Console Customizer in a practical scenario, refer to Appendix D. Complete the following steps to create Consoles with limited functionality: 1. Select Tools>Console Customizer. 2. The Console Customizer is displayed.
3. Select the features to be displayed in the new Console. 4. Click Save As to save the Console. Specify a name for the file. 5. When you double-click the newly created.exe file, the Console with the limited functionality is launched.
Deep Freeze Server Enterprise Console Shutdown
To shutdown the Deep Freeze Console select File > Exit or click the close window button. Upon exit, you can choose to: Minimize the Console to the system tray. This does not stop the Console and keeps the connections active. The Deep Freeze Console icon appears in the system tray. Scheduled tasks will still execute. To reopen the Deep Freeze Server Enterprise Console, right-click its icon located in the taskbar and select Restore DF6 Console. Close Deep Freeze Console and leave the network connections running This closes the Console but keeps the connections to the computers active. Scheduled tasks will still execute. Close Deep Freeze Console and shutdown network connections. This stops Console processes, closes the connections (including local service), and scheduled tasks will not start to execute. However, scheduled tasks that have started executing will continue.
The dialog will not appear on future exits once the Set Default option has been selected. To edit these settings select Tools >Exit Options.
Installing Deep Freeze on the Workstation
After a customized installation program file has been created using the Configuration Administrator, Deep Freeze can be deployed to computers using an Attended Install, a Target Install, the Silent Install System, or as part of an imaging process. All background utilities and antivirus software should be disabled and all applications should be closed prior to installation. These programs may interfere with the installation, which could result in Deep Freeze not functioning correctly. The computer restarts after any type of installation is completed. Deep Freeze must be in a Thawed state for any type of uninstall to succeed. Any existing ThawSpace will be deleted during an uninstall if: the option to retain existing ThawSpace was not checked in the Configuration Administrator the ThawSpace was not created with Deep Freeze Server Enterprise Version 5 or later

ThawSpace Tab

ThawSpace is a virtual partition on a computer that can be used to store programs, save files, or make permanent changes. All files stored in the ThawSpace are saved after a restart, even if the computer is Frozen. ThawSpace is only available if it was set to be created in the Deep Freeze Configuration Administrator.
After uninstalling Deep Freeze, all the ThawSpaces become visible. When Deep Freeze is reinstalled, the ThawSpaces are Visible or Hidden as per the original settings in the ThawSpace tab. Any existing ThawSpace is deleted during an uninstall if any of the following apply: the option to retain existing ThawSpace was not selected in the Configuration Administrator the ThawSpace was not created with Deep Freeze Version 5 or higher
Permanent Software Installations, Changes, or Removals
Computers must be Thawed for any permanent changes to take effect. Installation of software often requires one or more restarts to complete the installation. Deep Freeze helps administrators overcome challenges with maintaining the configuration of their computers in a production environment. Deep Freeze protects computers from unauthorized changes, viruses and malware, that can leave computers in a non-functional state. Deep Freeze also provides features to retain user data while protecting the computer. For more information on how to implement Deep Freeze and ensure that the user data is retained, refer to Deep Freeze - Retaining User Data available at http://www.faronics.com/library
Deep Freeze Command Line Control
This chapter describes using the Deep Freeze Commands.
Deep Freeze Command Line Control (DFC.EXE) DFC Command Line Syntax
Deep Freeze Command Line Control (DFC.EXE)
Deep Freeze Command Line Control (DFC) offers network administrators increased flexibility in managing Deep Freeze computers. DFC works in combination with third-party enterprise management tools and/or central management solutions. This combination allows administrators to update computers on the fly and on demand. It is important to note that DFC is not a stand-alone application. DFC integrates seamlessly with any solution that can run script files, including standard run-once login scripts. DFC commands require a password with command line rights. OTPs cannot be used. List all commands by calling DFC without parameters. The files are copied to (32-bit) <WINDOWS>\system32\DFC.exe The files are copied to (64-bit) <WINDOWS>\syswow64\DFC.exe

DFC Return Values

On completion of any DFC command, the DFC returns the following values: Syntax 2 ERROR 3 ERROR 4 ERROR 5 - * ERROR Description SUCCESS or Boolean FALSE, for commands returning a Boolean result Boolean TRUE User does not have administrator rights DFC command not valid on this installation Invalid command Internal error executing command

The client machines, represented by the computer icons, are located on the same subnet as the Deep Freeze Server Enterprise Console machine represented by the Deep Freeze Console icon. In this scenario, clients are using port A while the Console has set up a local service connection for the same port. This port is configured in the Advanced Options tab, before creating the Workstation Install file or Workstation Seed.
Example 2 - Multiple Subnets One local service
In this environment, the clients are located across more than one subnet. There is still only one Console being used. This environment does not require a Remote Console, although one could be used. The following diagram shows the network topology:
In this scenario (similar to Example 1 - Single Subnet) both the clients and the connection hosted by the Console are using the same port. This port is configured in the Deep Freeze Configuration Administrator in the Advanced Options tab, before creating the Workstation Install file or Workstation Seed. In order for the clients to be seen, they need to be configured to use a LAN/WAN connection. When the LAN/WAN option is selected, a Console IP field appears. Specify the IP of the machine that will run the Enterprise Console. An example of these settings are shown in the Advanced Options tab below:
Example 3 - Multiple Ports, Console Accessed Remotely
In this environment the clients are again located across multiple ports. In this case, more than one Console is being used. Multiple Consoles are accessed using a local service whose administrator (host) has released the connection information. The following diagram shows the network topology:
In this scenario, the host has set up a connection using the local service. Looking at the above diagram, three other Consoles connect to the host in order to see the clients according to their ports. The Consoles do not have to be a part of individual subnets as long as they can see the host. More specifically, The Console connected through port A/B can see the host Console as well as each individual computer assigned to ports A and B. The other Consoles connected through port B can see the host and only the computers assigned to port B.
Example 4 - Multiple Subnets Multiple local services
In this example, there are two separate locations. The following is a list of assumptions that are made regarding this particular example: the locations are spread apart and have only a minimal connection to each other there is a network administrator at each location who is responsible for looking after Deep Freeze at that location both locations need to be administered from a third location Location 1 (a computer lab on campus) uses port A to communicate with the clients and the connections hosted by the Console. The school librarys computers use port B. The Console in the technical support department uses the connections hosted by both lab and library Consoles. Any console not directly communicating with a computer should have the local service turned off.

104 Appendix E Deep Freeze Action Files - RDC Example
For more information on using the above samples, refer to the Configure Custom Actions section. You can edit the The DFEntConsoleCustomActions.xml file as per your needs.
Deep Freeze Action File Structure
The following XML schema outlines the custom defined actions available to the user. Multiple XML files can be saved based on the number of commands required. Each file must be saved to the Console folder and the read only attribute must not be selected. Any changes made must be accompanied by a restart of the Deep Freeze Console in order to take effect. Parameter <?xml version=1.0 encoding=UTF-8?> <CUSTOMDEFINEDACTIONS> <CAPTION> <ENGLISH>Caption</ENGLISH> <GERMAN>Caption</GERMAN> <JAPANESE>Caption</JAPANESE> <SPANISH>Caption</SPANISH> <FRENCH>Caption</FRENCH> <FILEMENU>y</FILEMENU> <POPUPMENU>y</POPUPMENU> <SILENT>y</SILENT> <SUBITEMS> </SUBITEMS> <SYNC>y</SYNC> <PARAMS> <PASSWORD> <VAR>%PARAM1%</VAR> <ENGLISH>USERNAME Param (ENGLISH)</ENGLISH> Text that appears in file menu or submenu Text in various languages Text in various languages Text in various languages Text in various languages Text in various languages Defines if this action will be in file menu Defines if this action will be in right-click popup menu Defines if user will be asked a confirmation message In sub-items, the item that is a child to this item can be defined If the sub-items are defined then action for this items will be ignored Specifies if command will be executed synchronously or asynchronously Choosing this action prompts user to enter custom parameters Name on parameter Name of variable which will be used in EXECUTE Text in various languages Usage
Parameter <GERMAN>USERNAME Param (GERMAN)</GERMAN> <JAPANESE>USERNAME Param (JAPANESE)</JAPANESE> <SPANISH>USERNAME Param (SPANISH)</SPANISH> <FRENCH>USERNAME Param (FRENCH)</FRENCH> </CAPTION> </USERNAME> </PARAMS> <LOG> <APPEND>y</APPEND> <FILENAME>c:\a1com mand.log</FILENAME> <EXECUTE>c:\windows\vpn.exe %%IP%% %USERNAME% %PASSWORD% %%WKSNAME%%</EXECUTE> <WORKDIR>c:\windows</WORKDIR>
Usage Text in various languages Text in various languages Text in various languages Text in various languages
Defines behavior of the log file Defines if log file will be appended or created new Defines filename Defines command which will be executed. Here, parameters and/or console items can be used Defines working directory
106 Appendix E Deep Freeze Action Files - RDC Example

Deep Freeze Server Enterprise

FEATURE HISTORY

Last modified: January 11, 2011
Faronics Toll Free Tel: 800-943-6422 Toll Free Fax: 800-943-6488 International Tel: +1 604-637-3333 International Fax: +1 604-637-8188

www.faronics.com

1999 - 2011 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Faronics Core, Faronics Anti-Executable, Faronics Anti-Virus, Faronics Device Filter, Faronics Power Save, Faronics Insight, Faronics System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.

ENTERPRISE

Deep Freeze Server Enterprise Feature History

Version 7.2

Management of Secure Channel Passwords: Deep Freeze changes the value of the Group Policy Maximum machine account password age based on the Deep Freeze state (Frozen or Thawed). Lock Keyboard and Mouse in Deep Freeze Loadin: Lock keyboard and mouse and Boot Thawed and Locked are now available in Deep Freeze Loadin. License Management in Deep Freeze Loadin: Deep Freeze Enterprise and Deep Freeze Server Enterprise Licensing can now be managed via Deep Freeze Loadin.

Version 7.0

Compatible with the Deep Freeze Loadin for Faronics Core. Compatible with Faronics Anti-Virus. Enhanced security.

Version 6.62

New Features Compatible with the forthcoming Deep Freeze Loadin for Faronics Core. Contact betaprogram@faronics.com for more information. Officially supported on Windows Server 2008 R2. Maintenance Mode is now compatible with the Enable Deep Freeze Maintenance Mode Compatibility feature of Faronics Anti-Executable v3.4 (or later). Licensing: Deep Freeze now employs the same licensing scheme as other Faronics products. Therefore, a valid License Key must be entered into the product in order to prevent it from expiring after a 30-day evaluation period. Wake-on-LAN (WOL) across subnets: WOL can now be used across subnets on non-class C networks. New Embedded Events Scheduler: The Embedded Events Scheduler now combines all possible Embedded Events onto a single configuration tab and allows for multiple events to be scheduled on a single day. Customizable warning messages: Customizable warning messages can now be displayed at the workstation prior to Maintenance, Restart, Shutdown, or Idle Time events and a separate customized message can be displayed during a Maintenance event. Event override option: Users can optionally be allowed to cancel any Embedded Event (Maintenance, Restart, Shutdown, or Idle Time) prior to execution from the workstation.
Windows Updates that are applied via Deep Freeze are now logged to a log file. Multiple ThawSpaces (up to eight) can be created. ThawSpace(s) can individually be specified as Visible or Hidden. Integrated Console Customizer: Customized copies of the Enterprise Console with limited features can be created for distribution in your organization. Connect via Remote Desktop Connection (RDC): Administrators can take control of a remote computer through the Deep Freeze Enterprise Console via Microsofts Remote Desktop Protocol. RDC enables easy access, configuration, and control abilities on any networked computer. Remote Execute: Remotely execute an executable file on a computer. Administrators do not have to visit each workstation to install a program, and reliance on third party management solutions is reduced. Push and Install MSI: Push and install a.msi file on a computer. This allows administrators to use the Enterprise Console to install applications rather than scripting, GPOs, or using third party tools. Integrated Action Files: Action Files call an external program or script through the Enterprise Console to reduce the need for third party tools. Administrators can use any scripting language that can be called through command line. Visual indication of selected Remote Console. Simplified Chinese localization added.

Improved / Changed Features Rewritten and expanded user guide. Embedded Maintenance events now take priority over embedded restart/shutdown events if both have been scheduled as overlapping events. The Deep Freeze Windows Updates setting no longer modifies pre-existing registry keys. The ThawSpace file format can no longer be specifiedNTFS format is used in all cases. Rewritten password security functionality to resolve a reported potential security vulnerability in which a malicious user may be able to bypass the Deep Freeze password dialog when running as a Windows administrator user.

Version 6.30

New Features Windows Server 2008 support Deep Freeze Console Customizer compatibility; Enterprise Consoles can now be customized with limited features using the separate Console Customizer utility User Defined Groups can now be imported from a Novell LDAP server Workstations can now be dragged from User Defined Groups, network list, or history to schedule a task directly in the network and groups panel

Deep Freeze Action Files capability; XML Action Files can be used to extend the Consoles functionality without upgrading the Console Ability to execute a scheduled task immediately Ability to schedule a Send Message task Flexible scheduling options (same as Windows scheduler) Ability to run schedules when the Console is closed Restart on Logoff option Enhanced Novell compatibility; Run batch file with feature compatible with Novell environments Console provides the user with the ability to select the order in which columns will be displayed Console shows the name of the Deep Freeze configuration file used to install Deep Freeze on each client in a column Console provides an option to clear all history Console contents can be exported to CSV Console shows clients available for WOL SSM integrated into Console. Allows multiple ports and ability for Console to run as a service when it is closed. OTP Token Generator is accessible from within the Console Improved Active Directory import; individual groups can now be imported Ability to lock keyboard and mouse on demand Ability to override ongoing maintenance periods DFC included in workstation/Seed installs DFC commands are now verbose DFC.EXE syntax returned when DFC.EXE is called without parameters /Version command added to DFC /Lock and /Unlock commands added to DFC; disables or enables keyboard/mouse on machine The Boot Control window provides the ability to Reboot Now System tray icon no longer flashes when machine is Thawed Allow User to Change Clock can be selected even if a Maintenance Schedule is set

Version 6.01

New Features Windows Server bit support Localization to English, French, German, Spanish, and Japanese languages Deep Freeze Enterprise Console compatibility with Deep Freeze Server Enterprise

Improved Features

Improved Enterprise Console performance and scalability Improved ThawSpace resiliency