Lenovo Secure Managed Client (English) Secure Managed Client Deployment Guide - Page 32

9.

Run the Sysprep.exe file. Check

enable mini±setup

in the dialog box and

reseal it.

10.

The system will shut down once the Sysprep process completes.

11.

Start the system again back to Windows PE.

12.

Plug in a USB hard disk drive or map a drive to the server to which you will

save your image. Assume it is drive D.

13.

Now capture the image of the computer using ImageX and save it to your

drive D:

Imagex /capture C: D:\myimg\Vista32.wim “SMC Vista32”

Depending on your system and network speed, it usually takes between 20 to

50 minutes to capture the image.

You now have a Secure Managed Client XP .wim file with Secure Managed

Client VNIF drivers to deploy.

Cloning an existing Windows XP image

You have a version of Windows XP that has been running for awhile that has all of

your applications and personal data on it. If you want to run it under Secure

Managed Client, you can try to clone your existing system to Secure Managed

Client. It is not necessary for this image to be sysprepped.

Note:

Since Secure Managed Client Version 2.0 only supports BIOS native mode,

some of the existing windows installations may not be able to be migrated into the

Secure Managed Client environment. To verify whether your system can be

migrated do the following procedure:

v

Backup the client system

v

Make the three registry changes as shown below

v

Reboot and enter BIOS setup

v

Click on Network and set Boot Agent to

SMC

v

Reboot the client system.

If the client system boots, the system can be migrated.

If you are using a Lenovo Secure Managed Client PE CD to clone your existing

image to Secure Managed Client, simply follow the CD instructions.

To avoid any problems if you are using your own tool to clone the system, and

you are running SP3, run regedit while logged in as an Administrator. Click on

HKLM\System\CurrentControlSet\Services\PciIde

and modify the Start value

to 0 to enable PciIde, click on

HKLM\System\CurrentControlSet\Services\

IntelIde

and modify the start value to 0 to enable IntelIde, and click on

HKLM\System\CurrentControlSet\Services\atapi

and modify the Start value to

0 to enable atapi.

Note:

This assumes that the client machine already has the IDE device driver

installed but disabled by Windows optimization. If the client machine does not

have the driver installed, you need to install the necessary driver to support IDE

boot before you start migration.

Preparing a Windows Vista image

Preparing a Windows Vista image for Secure Managed Client is similar to

deploying a Windows Vista image to a regular system. To deploy a Windows Vista

image to a regular system, do the following:

24

Secure Managed Client Version 2.0 Deployment Guide

Section	Page
Preface	5
Contents	7
Chapter 1. Overview	9
Chapter 2. General setup	11
Networking	11
Installing and configuring LANDesk	11
Provisioning the storage array	11
Building a base image	11
Creating user images	11
Selecting the type of image you wish to use	11
Chapter 3. Networking considerations	13
Infrastructure requirements	13
Diskless client architecture	14
Active Directory considerations	14
iSCSI boot	15
Capacity	15
Link aggregation (Bonding)	15
Packet loss	16
Network topology	16
Chapter 4. Secure Managed Client specific installation	17
Prerequisites	17
Secure Managed Client manual setup	18
Secure Managed Client switches	19
Secure Managed Client - Storage Array setup	19
Secure Managed Client management core installation	20
Secure Managed Client Storage Array provisioning	20
Chapter 5. LANDesk Information	21
Secure Managed Client / LANDesk setup	21
Retrieving the Secure Managed Client Console	21
Prerequisites	21
Internet packages	21
Internet Information Services (IIS) configuration	21
Secure Managed Client server	22
Installing LANDesk	22
Upgrading from Secure Managed Client version 1.2 to 2.0	22
Installing the LANDesk Service Pack and the SMC 2.0 Management Console	22
Updating the boot image on the Storage Array	23
Configuring the LANDesk Secure Managed Client console	23
Starting LANDesk Management Suite	23
Provisioning the storage array	24
Creating a standard base image	24
Populating a base image	24
Creating a standard image or single image user image	24
License upgrades	25
Off-core connection manager	26
Image types	26
Standard image	26
Single image	26
Creating a single image base image	27
Creating a single image user image	27
Local cache image	27
Creating a local cache base image	27
Enabling SMC clients for local cache	27
Creating local cache user images	27
Deploying local cache on SMC clients	28
Assigned seating	28
Pristine image	29
Chapter 6. Secure Managed Client image creation and tuning	31
Creating Sysprep images	31
Preparing a Windows XP image	31
Cloning an existing Windows XP image	32
Preparing a Windows Vista image	32
Preparing a new Windows Vista image for Secure Managed Client	33
Preparing a Windows Vista preload on a Lenovo M57 with service partition but no separate active system partition for Secure M	34
Preparing regular Windows Vista for Secure Managed Client	36
Redeploying the Lenovo M58p Vista preload image to the Secure Managed Client environment	38
Cloning an existing Windows Vista image	42
Image optimization	42
Scheduled tasks	42
Antivirus	42
Indexing and search utilities	43
Bridge Connections	43
Defragmentation	43
Updates	44
Image protection	44
Application compatibility testing	44
Collecting Windows performance traces (WPT)	44
Identifying slow services and processes	45
Identifying erratic behavior	45
Operating system services	45
Automatic	45
Automatic (delayed)	45
Manual / Disabled	45
Recommendations	46
Windows XP services	46
Windows Vista services	46
ThinkVantage® Technologies	46
Optimize the Sysprep image for best performance	46
Improving Vista performance	47
Roaming user profiles and folder redirection	47
Chapter 7. Populating a base image	49
Using bootable CD/DVD media	49
SMCWinPE.iso	50
Connecting to a target image LUN on an SMC Storage Array using the iSCSI Initiator	50
Copying a multiple partition image to the storage array, version 1.x	51
Copying a multiple partition image to the storage array, Version 2.0	52
Deploying the image directly to the storage array	53
Boot acceleration	54
Hints and tips	54
If not using a Lenovo CD	55
Chapter 8. Setting up network shares	57
Chapter 9. Configuring synchronous and asynchronous replication	59
Prerequisites	59
Creating synchronous replication	59
Creating asynchronous replication	60
Manual failover	60
Chapter 10. Troubleshooting	61
Problems	61
Storage array diagnostics	61
Secure Managed Client will not boot	61
Clients will not boot after moving the Management Console	61
Management Core Server IP address has changed	62
Provisioning fails	62
No user image	62
LANDesk logs	62
Unique network failure points	62
Binding order in the Secure Managed Client environment	63
Changing the binding order for Windows XP	63
Changing the binding order for Windows Vista	63
Limitations	64
Appendix. Notices	67
Trademarks	68

Lenovo Secure Managed Client (English) Secure Managed Client Deployment Guide - Page 32

Cloning an existing Windows XP image, Preparing a Windows Vista image

Page 32 highlights