ENTERPRISE
8
Logon Patch Maintenance
This option allows the administrator to install updates to the client computer when a certain user logs
on. In an Active Directory environment, a logon script can be executed to update the client computer.
Using Deep Freeze command line control (DFC), Deep Freeze can be disabled before the updates are
run and re-enabled afterwards.
Logon patch maintenance is appropriate in mobile environments where users are working with laptops
and are often off the local network. When they get back to the office or school and login, a script is
executed to determine if the users require any updates. If they do, the users are prompted as to whether
they would like to run the updates. If they agree, Deep Freeze is disabled, the updates are run, and
Deep Freeze is re-enabled.
The example below assumes that the person implementing the script is familiar with Group Policy,
Active Directory, and Visual Basic Scripting.
Logon Patch Maintenance Theory
This concept deals with updating a Frozen machine when the user logs on. With some slight
modifications, the same theory can be applied to an environment where patches are scheduled or
performed in real time. The following flowchart outlines the required steps, depending on the state of
the update process:
Start
Update running
Run Patch
Update
Complete?
Prompt User
Update?
End
Insert Marker
Frozen?
Run Patch
Boot into Thawed
State
Remove Marker
Boot into Frozen
State
Remove Marker
Boot into Frozen
state
End
Yes
Yes
Yes
Yes
No
No
No
No