background image

����������

 

11

6) Mounted Hard Disks

This method does not involve setting the workstations into a Thawed state before making the updates 

but  rather  mounting 

Thawed

  partitions  so  the  virus  definitions  updates  can  take  place  while  the 

workstations are in the 

Frozen

 state.

Windows 2000 introduced the ability to mount a hard disk drive or partition to an empty folder on 

an existing hard disk drive instead of assigning a drive letter to that partition. This allows a drive to be 

accessed using a standard Windows path, as opposed to the traditional drive letter. This allows users to 

expand the storage available in a specific directory simply by adding another hard disk, without having 

to change the directory structure of the hard disk or the location of saved data.
For example, if a user’s workstation contains a large number of documents in the user profiles and 

the hard disk drive is filled, an administrator can add a second hard disk and move the user’s data to 

that drive. The drive can be mounted with the user’s data in the same location after the data has been 

moved, making the process transparent to the user.

Steps to Ensure a Successful Deployment

Ensure that the Windows 2000/XP system drive is using the NTFS file system. The ability to mount 

partitions as paths is not available with the FAT32 file system. 
Ensure that adequate free space is available on the workstation’s hard disk drive to accommodate the  

newly  created  partitions.  The  complete  workstation  image  should  be  evaluated  to  determine  what 

folders  need  to  be  recreated  as  drives  on  the  workstation  to  allow  the  applications  to  function  as 

required. Any application that is mounted as a drive can be damaged, uninstalled, or changed because 

the files located on the secondary partition are not protected by Deep Freeze. 
Only directories that require being 

Thawed

 should be opened and only enough space for the applications 

to run properly should be freed. Leaving a large amount of free data space open could allow users to 

load files into the workstation or install applications that are unauthorized or unwanted. Steps can be 

taken to ensure that only administrators or authorized personnel can have access to modify the files  

contained in these partitions.
A combination of proper application of the Windows security policy and the use of NTFS file access 

rights can effectively protect the Thawed directory. For more information on Windows 2000/XP system 

and security policies, refer to the link below: 

How to maintain Windows security: 

http://www.microsoft.com/windows/security/

Refer  to  your  imaging  solution  documentation  for  information  regarding  imaging 

with mounted drives. Workstations should be imaged either in RAW format or in a 

sector by sector mode. (For example: using the -ID switch in Symantec Ghost).

After all concerns have been addressed, the folders that need replacement are documented, and the 

size requirements of the partitions have been determined, a new master image can be created or an 

existing image can be modified.

Summary of Contents for DEEP FREEZE ENTERPRISE - TREND MICRO OFFICESCAN...

Page 1: ......

Page 2: ...y become active on restart With Deep Freeze installed and activated these viruses will be deleted upon restart and therefore never become active Ensure the BIOS is set to boot directly to the C drive...

Page 3: ...ess to the functions of the Console To boot a workstation into the Thawed state select the workstation and click the Thaw Workstation icon on the toolbar Alternatively you can right click and select t...

Page 4: ...ntenance Period using the Enterprise Console Assuming Deep Freeze is already deployed throughout your network the following instructions elaborate on how to create update the Maintenance Period with t...

Page 5: ...ontrol DFC The Deep Freeze Command Line Control DFC o ers network administrators increased exibility in managing Deep Freeze workstations DFC works in combination with third party enterprise managemen...

Page 6: ...dating through a command line ECHO OFF SERVER SHARE FOLDER DFC EXE get isfrozen IF ERRORLEVEL 1 GOTO FROZEN IF ERRORLEVEL 0 GOTO THAWED ECHO Errors where encountered running the command line control o...

Page 7: ...es the only down side of this method is that with time the patterns will keep growing bigger Therefore it is recommended to schedule a Thawed Maintenance Period at least twice a year to make the updat...

Page 8: ...Deployment Under the Deployment Schedule section check Enable scheduled deployment 4 In our example we set Deep Freeze Enterprise to have a maintenance window Monday through Friday from 18 00 to 20 00...

Page 9: ...heduled Maintenance Period 2 Check the Run Bat radio button to allow the workstations to run a batch le automatically during the Maintenance period 3 Click the Advanced Maintenance tab and enter the f...

Page 10: ...EL 1 GOTO FROZEN IF ERRORLEVEL 0 GOTO THAWED ECHO Errors where encountered running the command line control on this workstation FROZEN SERVER SHARE FOLDER DFC EXE password bootthawed GOTO END THAWED R...

Page 11: ...e to accommodate the newly created partitions The complete workstation image should be evaluated to determine what folders need to be recreated as drives on the workstation to allow the applications t...

Page 12: ...virus software on the workstations in a manner that allows automatic updates to proceed correctly Below are before and after screen shots of the installation of Trend Micro O ceScan using the default...

Page 13: ...C drive The rst step in creating the additional partitions required is to create an extended partition that stores the additional partitions using the Disk Management feature of the Computer Manageme...

Page 14: ...o not want to limit the number of partitions that can be created Click Next The next screen prompts for the size of partition to be created It is recommended that you con gure all the disk space remai...

Page 15: ...This can be done by right clicking on the free space now present on the drive as shown below and selecting Create Logical Drive A wizard appears to set the size and folder name of the new partition T...

Page 16: ...ath of the new partition The option Mount this volume at an empty folder that supports drive paths should be selected The path the drive will be mounted to should be entered in the text eld In this ca...

Page 17: ...resenting the folder as a hard disk drive In the example below the Trend Micro folder is displayed as a small hard disk drive Now you are ready to deploy the O ceScan clients as per the manufacturer s...

Reviews: