Lenovo Secure Managed Client (English) Secure Managed Client Deployment Guide - Page 64

Note:

Some users may need to press the

Alt

key to display this menu.

7.

In the Connections box, move the Local Area Connection entry that has an IP

address of 172.30.0.2 to the bottom of the list, if it is not on the bottom of the

Connections list already.

8.

Shut down and restart your system.

Limitations

v

Hibernation over LAN is not supported.

v

After updating the BIOS to the latest version on an ThinkCentre M57p eco client,

the

SMCBoot

option is not available in

Network Devices

. In this case, the

ThinkCentre M57p eco client was probably purchased before Secure Managed

Client development began. The NIC firmware in this system needs to be

updated to support the iSCSI boot that Secure Managed Client requires. Please

refer to the Secure Managed Client support Web site for more information about

downloading this utility.

v

The SMCWinPE CD is only meant to copy service partition data to the normal

bootable drive.

v

Using the SMC WinPE CD, the Lenovo Service Partition is not copied to the

user’s image on the storage array. The Secure Managed Client WinPE CD was

only designed to copy a single user partition, not an entire hard drive. To copy

the service partition, do the following:

1.

Clean the image on the storage array.

2.

Create the service partition on LUN [ diskpart -> create partition primary

size=6131 ].

3.

Create the system partition on LUN [ diskpart -> create partition primary ].

4.

Set system partition as active.

5.

Copy the service partition from the local HDD to the LUN.

6.

Copy the system partition from the local HDD to the LUN.

7.

Remove the local hard disk drive.

8.

Set the service partition label to SERVICEV002.

9.

Hide the service partition [ set id=27 ].

10.

Set the system partition label to SW_Preload.

11.

Boot to the desktop and uninstall Rescue and Recovery.

12.

Reinstall Rescue and Recovery.

v

Recovery CDs booted on a client with a physical hard disk drive will restore to

the physical hard disk drive instead of the image on the storage array. Recovery

CDs always restore to Disk 0. With a physical hard disk drive in the system, that

drive is Disk 0 and the storage array drive is Disk 1. Remove the local physical

hard disk drive before using a set of preload recovery CDs.

v

Secure Managed Client does not fix any problems cloning Microsoft images. Any

issues or problems cloning Windows images will still be present when cloning

with Secure Managed Client.

v

The Windows system clock will delay about 3 seconds within 24 hours over a

normal workload. The Secure Managed Client boot manager uses system clock

cycles and may delay the Windows system clock with higher workloads. Use the

automatic feature of Windows to sync the clock to an internet time server.

v

Remote Assistance may not be able to connect to the desired system. The client

uses two NICs in Windows. One is for communication on the regular network

and one is for communication to the Secure Managed Client boot manager.

56

Secure Managed Client Version 2.0 Deployment Guide

Section	Page
Preface	5
Contents	7
Chapter 1. Overview	9
Chapter 2. General setup	11
Networking	11
Installing and configuring LANDesk	11
Provisioning the storage array	11
Building a base image	11
Creating user images	11
Selecting the type of image you wish to use	11
Chapter 3. Networking considerations	13
Infrastructure requirements	13
Diskless client architecture	14
Active Directory considerations	14
iSCSI boot	15
Capacity	15
Link aggregation (Bonding)	15
Packet loss	16
Network topology	16
Chapter 4. Secure Managed Client specific installation	17
Prerequisites	17
Secure Managed Client manual setup	18
Secure Managed Client switches	19
Secure Managed Client - Storage Array setup	19
Secure Managed Client management core installation	20
Secure Managed Client Storage Array provisioning	20
Chapter 5. LANDesk Information	21
Secure Managed Client / LANDesk setup	21
Retrieving the Secure Managed Client Console	21
Prerequisites	21
Internet packages	21
Internet Information Services (IIS) configuration	21
Secure Managed Client server	22
Installing LANDesk	22
Upgrading from Secure Managed Client version 1.2 to 2.0	22
Installing the LANDesk Service Pack and the SMC 2.0 Management Console	22
Updating the boot image on the Storage Array	23
Configuring the LANDesk Secure Managed Client console	23
Starting LANDesk Management Suite	23
Provisioning the storage array	24
Creating a standard base image	24
Populating a base image	24
Creating a standard image or single image user image	24
License upgrades	25
Off-core connection manager	26
Image types	26
Standard image	26
Single image	26
Creating a single image base image	27
Creating a single image user image	27
Local cache image	27
Creating a local cache base image	27
Enabling SMC clients for local cache	27
Creating local cache user images	27
Deploying local cache on SMC clients	28
Assigned seating	28
Pristine image	29
Chapter 6. Secure Managed Client image creation and tuning	31
Creating Sysprep images	31
Preparing a Windows XP image	31
Cloning an existing Windows XP image	32
Preparing a Windows Vista image	32
Preparing a new Windows Vista image for Secure Managed Client	33
Preparing a Windows Vista preload on a Lenovo M57 with service partition but no separate active system partition for Secure M	34
Preparing regular Windows Vista for Secure Managed Client	36
Redeploying the Lenovo M58p Vista preload image to the Secure Managed Client environment	38
Cloning an existing Windows Vista image	42
Image optimization	42
Scheduled tasks	42
Antivirus	42
Indexing and search utilities	43
Bridge Connections	43
Defragmentation	43
Updates	44
Image protection	44
Application compatibility testing	44
Collecting Windows performance traces (WPT)	44
Identifying slow services and processes	45
Identifying erratic behavior	45
Operating system services	45
Automatic	45
Automatic (delayed)	45
Manual / Disabled	45
Recommendations	46
Windows XP services	46
Windows Vista services	46
ThinkVantage® Technologies	46
Optimize the Sysprep image for best performance	46
Improving Vista performance	47
Roaming user profiles and folder redirection	47
Chapter 7. Populating a base image	49
Using bootable CD/DVD media	49
SMCWinPE.iso	50
Connecting to a target image LUN on an SMC Storage Array using the iSCSI Initiator	50
Copying a multiple partition image to the storage array, version 1.x	51
Copying a multiple partition image to the storage array, Version 2.0	52
Deploying the image directly to the storage array	53
Boot acceleration	54
Hints and tips	54
If not using a Lenovo CD	55
Chapter 8. Setting up network shares	57
Chapter 9. Configuring synchronous and asynchronous replication	59
Prerequisites	59
Creating synchronous replication	59
Creating asynchronous replication	60
Manual failover	60
Chapter 10. Troubleshooting	61
Problems	61
Storage array diagnostics	61
Secure Managed Client will not boot	61
Clients will not boot after moving the Management Console	61
Management Core Server IP address has changed	62
Provisioning fails	62
No user image	62
LANDesk logs	62
Unique network failure points	62
Binding order in the Secure Managed Client environment	63
Changing the binding order for Windows XP	63
Changing the binding order for Windows Vista	63
Limitations	64
Appendix. Notices	67
Trademarks	68

Lenovo Secure Managed Client (English) Secure Managed Client Deployment Guide - Page 64

Limitations, SMCBoot, Network Devices

Page 64 highlights