Lenovo Secure Managed Client Manual do Utilizador Página 1

Secure Managed Client Version 2. 0Deployment GuideDate:February26,2010

2 Secure Managed Client Version 2.0 Deployment Guide

Chapter 2. General setupThe following are check lists to help you quickly set up your Secure ManagedClient environment. This is the suggested order in

Table 1 provides a description of the different image types:Table 1. Image typesImage Type Features Additional informationStandard imagev One image pe

Chapter 3. Networking considerationsThis chapter discusses requirements and other considerations when setting upSecure Managed Client.Included in this

Diskless client architectureThe following is an overview of the Secure Managed Client boot sequence:v The physical hardware is connected to the storag

For more information on Active Directory, go to the following Web address:http://www.microsoft.com/windowsserver2003/technologies/directory/activedire

If you notice MAC flapping or duplicate packet error message in your switch log,you can set up an Etherchannel across the 6 switch ports that you assi

Chapter 4. Secure Managed Client specific installationThis chapter includes prerequisites and procedures for installing the SecureManaged Client solut

Table 2. Storage array hard disk drive size (continued)Storage Array: Effective Secure Managed Client User HDD SizeNumber of UserImages 6 TB Storage A

13. Press P to set the boot as primary.If the root path has been configured on the DHCP server, proceed to step 23.14. Press Enter to access the iSCSI

v Default Gatewayv Primary DNSv Secondary DNSv DNS suffix11. Press Enter. This operation will take a couple of minutes while the IPinformation is bein

Chapter 5. LANDesk InformationLANDesk Management Suite provides a full range of system management toolsthat let you view, configure, manage, and prote

1. Start the IIS manager by selecting Start −> Programs −> Administrator Tools−> Internet Information Services (IIS) Manager.2. In the left p

7. Once the system reboots, double-click on Autorun.exe from the SMC 2.0installation directory again. The prerequisite checker should now pass.8. Clic

Provisioning the storage arrayProvisioning is the process where you configure the storage array to work with theSecure Managed Client console.To provi

5. Click OK in the floating Directory Manager window.6. Make sure there is an entry in the left pane of the Directory Manager windowin the form of “LD

e. Click Apply. The Update storage array license window opens. Follow thedirections in the window to finish updating.Off-core connection managerIn ord

Creating a single image base image1. Right-click on the existing active base image.2. Select Create base single image.3. Enter the appropriate volume

5. Fill out the appropriate user image information .6. Click Create.7. Click OK on the prompt to complete the local cache user creation.Deploying loca

Pristine imageA pristine image is an image in which the settings always reset to the default duringa reboot. For example, let’s say that you created a

Secure Managed Client Version 2. 0Deployment GuideDate:February26,2010

22 Secure Managed Client Version 2.0 Deployment Guide

Chapter 6. Secure Managed Client image creation and tuningThis chapter discusses ways to enhance the performance of Secure Managed Client.Because Secu

9. Run the Sysprep.exe file. Check enable mini-setup in the dialog box andreseal it.10. The system will shut down once the Sysprep process completes.1

1. Configure your master system so it is ready to be cloned.2. Restart the machine to a second Windows operating system and capture theimage using an

Preparing a Windows Vista preload on a Lenovo M57 withservice partition but no separate active system partition forSecure Managed Client1. Install the

12. Using ImageX, capture the image of the System Drive and assume the driveletter is C. Save it to your .wim file.Imagex /capture C: D:\myimg\Vista32

Imagex /mountrw C:\wim_mount\tvtos\winpe.wim 1 C:\mype_mountv Assume your VNIF drivers are located in the E:\vnifdrivers directory.Peimg.exe /inf=E:\v

3. Delete any extra user accounts you created during the Windows Vistainstallation. You should only see the Administrator and Guest (which is off)acco

v Locate your Secure Managed Client VNIF driver files and modify theprovided OfflineUnattend.xml file accordingly.v Mount the wim file you created in

6. Copy the provided UNATTENDOEM.XML file to current the directory andrename it to UNATTEND.XML or use your own UNATTEND.XML file.Note: Lenovo provide

First Edition (February 2010)© Copyright Lenovo 2009, 20010.LENOVO products, data, computer software, and services have been developed exclusively at

Note: You do not need to inject the VNIF driver files if you plan to runSMCSetup.exe since this will install the VNIF drivers on Windows Vista foryou.

18. Connect to the storage array and mount the destination LUN. Since this willcompletely wipe out all contents, make sure you back up any important d

Cloning an existing Windows Vista imageYou have a version of Windows Vista that has been running for awhile that has allof your applications and perso

Indexing and search utilitiesFor increased performance, uninstall any disk indexing utilities or services such asWindows Search, Windows Desktop Searc

the base image on the hard drive and requires that they be read from the user’scopy on the storage array, thus reducing the benefits of local cache.Ru

Descriptions of user-supplied variables in this command are as follows:v ??? - boot, hibernate, standby, shutdownv X - number of runs to be completedv

RecommendationsEvaluate what services are essential to the operation of the environment. Disablethe following services and utilize LANDesk for adminis

The sample entry for the .xml file is shown below:<settings pass="generalize"><component name="Microsoft-Windows-PnpSysprep&qu

v How to create a roaming user profilev How to configure a user account to create a roaming user profilev Creating a share folder to store a roaming u

Chapter 7. Populating a base imageAll new user images must be created from a base image. If the base image containsa valid Sysprep image, deploying a

PrefaceThis guide is intended for IT administrators, or those who are responsible fordeploying the Secure Managed Client®(SMC) program on computers in

7. Deploy the base image. If you are using the SMCWinPE CD, use the GUI tocopy the contents to the physical drive to the storage array, or open acomma

c. select disk 1 – (where 1 (or appropriate) is the appropriate disk you areconnected to based on steps above. The xize of the disk is a goodparameter

9. Type diskpart. This will start the diskpart command line application10. Type list volumes. This will list all the volumes that diskpart sees.You sh

6. Click Boot.7. After several seconds, the client will restart and boot from the CD. WindowsPE will load and a wizard will start. This allows the cli

7. Log on to the iSCSI target. The initiator should create a new disk on yoursystem.8. Follow the steps to deploy the base image to a disk.9. Log off

v A log file that logs the results of the SMCWinPE.iso installation is stored on thedestination location in smccopy.log.v The SMCWinPE.iso CD is not m

48 Secure Managed Client Version 2.0 Deployment Guide

Chapter 8. Setting up network sharesThe storage array can be configured as a Network Attached Storage (NAS) device. Toconfigure, do the following:1. C

50 Secure Managed Client Version 2.0 Deployment Guide

Chapter 9. Configuring synchronous and asynchronousreplicationThis chapter shows you how to create synchronous and asynchronous replicationand promote

iv Secure Managed Client Version 2.0 Deployment Guide

Creating asynchronous replicationTo create asynchronous replication do the following:1. Right-click on the primary storage array and click Configure r

Chapter 10. TroubleshootingThis chapter contains information on troubleshooting, network failure points, andlimitations you may encounter when configu

4. When the authentication is verified, browse to tcm\dist\\SMCBoot-<version>.img and select Update.It will take a few minutes to load, but all

Table 5. Network failure points (continued)Symptom Possible reason ImpactClients report data loss Windows corruptionSwitch failureStorage array failur

Note: Some users may need to press the Alt key to display this menu.7. In the Connections box, move the Local Area Connection entry that has an IPaddr

These two NICs can cause problems with Remote Assistance and the IP addresslisted in the invitation. Disable the second LAN while creating the RemoteA

58 Secure Managed Client Version 2.0 Deployment Guide

Appendix. NoticesLenovo may not offer the products, services, or features discussed in thisdocument in all countries. Consult your local Lenovo repres

Any performance data contained herein was determined in a controlledenvironment. Therefore, the result in other operating environments may varysignifi

GlossaryAdvanced Host Controller Interface (AHCI). Anapplication programming interface defined by Intelwhich defines the operation of Serial ATA host

ContentsPreface ...iiiChapter 1. Overview ...1Chapter 2. General setup ...3Networking...3Installing and configuring

62 Secure Managed Client Version 2.0 Deployment Guide

Printed in USA

vi Secure Managed Client Version 2.0 Deployment Guide

Chapter 1. OverviewThe Lenovo Secure Managed Client solution is a storage-based alternative clientcomputing solution, designed to help businesses redu