|

1

Deep Freeze Enterprise User Guide

2|

Last modified: January, 2024
© 1999 – 2024 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Deep Freeze Cloud,Faronics Core Console, Faronics Anti-Executable, Faronics Anti-Virus, Faronics Device Filter, Faronics Data
Igloo, Faronics Power Save, Faronics Insight, Faronics System Profiler, and WINSelect are trademarks
and/or registered trademarks of Faronics Corporation. All other company and product names aretrademarks of their respective owners.
Protected by patents: US 7,539,828 | US 7,917,717 | US 9,152,824 | US 9,785,370
Deep Freeze Enterprise User Guide|Contents

Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Important Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
About Faronics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Product Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Contact Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Deep Freeze Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Deep Freeze Enterprise Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Installing Deep Freeze . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Installing Deep Freeze Enterprise Configuration Administrator and Enterprise Console . . . . . . . . 18
Customization Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Re-Initializing the Customization Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Update Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
One Time Passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Using Deep Freeze Enterprise Configuration Administrator . . . . . . . . . . . . . . . . . . . . . 25
Accessing the Configuration Administrator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Toolbar and Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Passwords Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Drives Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Frozen Drives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
ThawSpace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Existing ThawSpace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Always Thaw External Hard Drives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Workstation Tasks Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Windows Update . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Idle Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Batch File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Thawed Period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Windows Update Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Batch File Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Advanced Options Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Deep Freeze Enterprise User Guide

3

4

|

Contents

Advanced Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Stealth Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Creating Workstation Install Program and Workstation Seed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Using Deep Freeze Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Deep Freeze Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Applying Deep Freeze Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Editing Deep Freeze Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Deleting Deep Freeze Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Exporting Deep Freeze Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Configuration Generator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Using Configuration Generator from Command Line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Configuration File Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Deep Freeze Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Launching the Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Activating the Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Status Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
View Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Status Based Selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Managing Communication Between the Console and Workstations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Configuring the Local Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Editing or Removing a Local Service Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Configuring Proxy Server Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Remote Consoles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Setting up Remote Control Enabled Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Connecting to a Remote Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Managing Deep Freeze with the Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Reboot Thawed/Reboot Thawed Locked for an Assigned Number of Times . . . . . . . . . . . . . . . . . . 81
Login User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Sending Messages to Computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Updating a Deep Freeze Configuration File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Run Windows Update . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Remote Launch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Push and Launch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Format ThawSpace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Delete ThawSpace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Viewing the Console Log File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Target Installing Deep Freeze . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Updating Deep Freeze Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Thawed Alerts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Manual Activation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
License Icon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Scheduling Deep Freeze Tasks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Deep Freeze Enterprise User Guide

Contents|

5

Editing Scheduled Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Assigning Computers to Scheduled Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Adding a Task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Editing a Task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Pausing a Task. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Resuming a Task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Deleting a Task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Executing a Task Immediately . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Scheduled Task Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Managing Network and Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Adding a Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Building a User-Defined Group Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Importing Groups from Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Adding Computers to a Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
Configure Custom Actions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Control with RDC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Remote Execute with PsExec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Push and Install MSI file with PsExec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Push and Launch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Remote Launch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Deleting, Importing and Exporting Custom Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Console Customizer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Deep Freeze Enterprise Console Shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Installing Deep Freeze on the Workstation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Attended Install or Uninstall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Uninstalling Deep Freeze on the Workstation via the Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Silent Install or Uninstall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Example Command Line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Silent Install or Uninstall Using a Shortcut . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Network Install on Multiple computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Installing Over Existing Deep Freeze Versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Installing Using Imaging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Target Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Check for Updates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Managing Deep Freeze Computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Login Screen. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Launching Deep Freeze on Touchscreen Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Status Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Status on Next Boot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Password Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Network Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
ThawSpace Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

Deep Freeze Enterprise User Guide

6|

Contents

Permanent Software Installations, Changes, or Removals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

Managing Anti-Virus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Anti-Virus Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
Migrating to the New Anti-Virus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Enable Anti-Virus on Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Install Anti-Virus Client on the workstation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Anti-Virus Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Creating Anti-Virus Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Applying Anti-Virus Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Editing Anti-Virus Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Deleting Anti-Virus Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Using Faronics Anti-Virus from the Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
Anti-Virus Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
Scheduling Anti-Virus Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
Using Anti-Virus on the Workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Launching Anti-Virus on the Workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Scanning the Workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162
Scanning a File or a Folder via Right-Click . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
View Scanning History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
View and Take Action on Quarantined Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Updating Anti-Virus Definitions on the Workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
Managing Anti-Virus on the Workstation via the System Tray . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
Check for Anti-Virus Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168
Update Faronics Anti-Virus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
Updating Anti-Virus Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
Uninstall Anti-Virus Client from the Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Disable Faronics Anti-Virus from the Enterprise Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

Deep Freeze Command Line Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
Deep Freeze Command Line Control (DFC.EXE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
DFC Return Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
Deep Freeze Command Line Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
Faronics Anti-Virus Command Line Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178

Appendix A Ports and Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Appendix B Network Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
Example 1 – Single Subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
Example 2 – Multiple Subnets, One Local Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Example 3 – Multiple Ports, Console Accessed Remotely . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
Example 4 – Multiple Subnets, Multiple Local Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

Appendix C Troubleshooting a Remote Console Connection . . . . . . . . . . . . . . . . . . 187
No Clients In the Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

Deep Freeze Enterprise User Guide

Contents|

7

Port is in Use Error When Starting the Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

Appendix D Creating a Customized Deep Freeze Enterprise Console . . . . . . . . . . . 189
Appendix E Deep Freeze Action Files – RDC Example . . . . . . . . . . . . . . . . . . . . . . . . 191
Deep Freeze Action Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
Action File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
Deep Freeze Action File Structure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192
Console Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194

Deep Freeze Enterprise User Guide

8|

Contents

Deep Freeze Enterprise User Guide|

9PrefaceThis user guide explains how to install, configure and use Deep Freeze Enterprise.

TopicsImportant Information
Technical Support

Deep Freeze Enterprise User Guide

10|

Preface

Important Information
This section contains important information about your Faronics Product.

About Faronics
Faronics delivers market-leading solutions that help manage, simplify, and securecomplex IT environments. Our products ensure 100% machine availability, and havedramatically impacted the day-to-day lives of thousands of information technology
professionals. Fueled by a market-centric focus, Faronics’ technology innovations benefit
educational institutions, health care facilities, libraries, government organizations, andcorporations.

Product Documentation
The following documents form the Deep Freeze Enterprise documentation set:

Deep Freeze Enterprise User Guide•

Deep Freeze Enterprise User Guide – This is the document you are reading. This
document guides you how to use the product.

•

Deep Freeze Enterprise Release Notes – This document lists the new features andknown issues and closed issues.

Technical Support|

Technical Support
Every effort has been made to design this software for ease of use and to be problem
free. If problems are encountered, contact Technical Support.
Email: support@faronics.com
Phone: 800-943-6422 or +1-604-637-3333
Hours: 7:00am to 5:00pm (Pacific Time)

Contact Information•

Web: www.faronics.com•

Email: sales@faronics.com•

Phone: 800-943-6422 or +1-604-637-3333•

Fax: 800-943-6488 or +1-604-637-8188•

Hours: 7:00am to 5:00pm (Pacific Time)•

Address:
Faronics Technologies USA Inc.
5506 Sunol Blvd, Suite 202
Pleasanton, CA, 94566 USA
Faronics Corporation (Headquarters)
609 Granville Street, Suite 1400
Vancouver, BC V7Y 1G5
CanadaFaronics EMEA
8, The Courtyard, Eastern Road
Bracknell, Berkshire
RG12 2XB, United Kingdom
Faronics Pte Ltd
160 Robinson Road
#05-05 SBF Center
Singapore 068914

Deep Freeze Enterprise User Guide

11

12

|

Preface

Deep Freeze Enterprise User Guide

Introduction|

Introduction

Deep Freeze protects the computers that are set to boot from the hard drive.
Configure the CMOS to boot from the hard drive only. The CMOS must be
password protected to prevent unauthorized changes. Deep Freeze protects
the Master Boot Record (MBR) when the computer is Frozen.

TopicsDeep Freeze Overview
System Requirements
Deep Freeze Enterprise Files

Deep Freeze Enterprise User Guide

13

14

|

Introduction

Deep Freeze Overview
Faronics Deep Freeze helps eliminate computer damage and downtime by making
computer configurations indestructible. Once Deep Freeze is installed on a computer,any changes made to the computer—regardless of whether they are accidental or
malicious—are never permanent. Deep Freeze provides immediate immunity from manyof the problems that plague computers today—inevitable configuration drift, accidental
system misconfiguration, malicious software activity, and incidental system degradation.
Faronics Anti-Virus can now be managed using Deep Freeze Enterprise (a separate
license is required for Faronics Anti-Virus). Faronics Anti-Virus provides protection fromsecurity threats without slowing down computers due to slow scan times and large
footprints. Built with next-generation technology, Faronics Anti-Virus gives you powerfulanti-virus, anti-rootkit and anti-spyware software in-one. This protects you against
today’s highly complex malware threats while providing seamless integration with Deep
Freeze.
Deep Freeze integration with Faronics Anti-Virus ensures your protection is up-to-date in
the simplest way possible, providing deployment and management capabilities throughDeep Freeze Enterprise Console. Designed to work together seamlessly, Faronics
Anti-Virus is updated even while workstations are Frozen, offering the mostcomprehensive protection system.

Deep Freeze Enterprise User Guide

System Requirements|

System Requirements

Desktop edition
Deep Freeze client and Faronics Anti-Virus client:•

Windows 7 and 8.1 (32 and 64-bit)•

Windows 10 up to version 22H2 (32 and 64-bit)•

Windows 11 up to version 23H2 (64-bit)•

Windows Embedded 7 and 8

Deep Freeze Enterprise Configuration Administrator and Enterprise Console:•

Windows 7 and 8.1 (32 and 64-bit)•

Windows 10 up to version 22H2 (32 and 64-bit)•

Windows 11 up to version 23H2 (64-bit)•

Windows Server 2008 R2 (32 and 64-bit)•

Windows Server 2012, 2016, 2019, 2022 (64-bit)

Server edition
Deep Freeze client:•

Windows Server 2008 R2 (32 and 64-bit)•

Windows Server 2012, 2016, 2019, 2022 (64-bit)

Deep Freeze Enterprise Configuration Administrator and Enterprise Console:•

Windows 7 and 8.1 (32 and 64-bit)•

Windows 10 up to version 22H2 (32 and 64-bit)•

Windows 11 up to version 23H2 (64-bit)•

Windows Server 2008 R2 (32 and 64-bit)•

Windows Server 2012, 2016, 2019, 2022 (64-bit)

Deep Freeze requires 10% of the hard drive to be left as free space.

Deep Freeze is compatible with the Core Isolation feature of Windows.
For more information, contact Technical Support at support@faronics.com.

Deep Freeze Enterprise User Guide

15

16

|

Introduction

Deep Freeze Enterprise Files
Deep Freeze uses different colored icons to represent its components. Files identified bya red icon should generally only be installed on an administrative computer.
Icon

Definition
Deep Freeze Enterprise Configuration Administrator and Enterprise
Console installation file.

The Configuration Administrator application is used to createcustomized, pre-configured, computer installation program files andWorkstation Seeds.

The Enterprise Console application is used to centrally deploy,monitor, manage, and maintain Deep Freeze installations.
A customized Deep Freeze workstation installation file is created in
the Configuration Administrator and deployed to workstations within
the enterprise. This file includes the Workstation Seed. If the Deep
Freeze workstation installation file is installed, the Workstation Seedis not required to be installed separately.
A Workstation Seed enables seamless communication between theEnterprise Console and computers on a network. When theWorkstation Seed is installed on a computer, the computer becomesvisible on the Enterprise Console. Once a computer is visible on theEnterprise Console, various actions such as Restart, Shutdown andWake-on-LAN can be performed on the computer remotely. Deep
Freeze can also be installed remotely on visible computer thereby
allowing Deep Freeze related actions on remote computers.

Deep Freeze Enterprise User Guide

Installing Deep Freeze|

Installing Deep FreezeThis chapter describes the installation process of Deep Freeze.

TopicsInstallation Overview
Customization CodeOne Time Passwords

Deep Freeze Enterprise User Guide

17

18

|

Installing Deep Freeze

Installation Overview

Installing Deep Freeze Enterprise Configuration Administrator and Enterprise
ConsoleThe Configuration Administrator is intended to be installed only on the computer used
to administrate Deep Freeze. The Configuration Administrator is used to createcustomized Deep Freeze installation files and Workstation Seeds. The Deep FreezeEnterprise Console installs automatically with the Deep Freeze Enterprise Configuration
Administrator.
If you are using Deep Freeze 6.5 (or higher), you have the option toautomatically upgrade the Enterprise Console, Configuration Administrator,and Deep Freeze install/configuration files (under the Install Programs
folder) during installation while installing Deep Freeze 8.1 (or higher). The
Customization Code is not required while upgrading Deep Freeze.
Complete the following steps to install the Configuration Administrator:
1. Double-click the file DFEnt.exe to begin the installation process. The following screen
appears:

Deep Freeze Enterprise User Guide

Installation Overview|

2. Click Next. Read and accept the license agreement. Click Next.

3. Enter the License Key in the License Key field or select the Use Evaluation checkbox toinstall in Evaluation mode. Click Next. (Deep Freeze will automatically activate theworkstation licenses. Deep Freeze must be activated within 30 days to avoid expiry.)

Deep Freeze Enterprise User Guide

19

20

|

Installing Deep Freeze

4. Enter the License Key in the License Key field or select the Use Evaluation checkbox toinstall in Evaluation mode. Click Install.

5. The Customization Code screen appears.

6. Specify the Customization Code and click Next. The Customization Code must be aminimum of eight characters.

Deep Freeze Enterprise User Guide

Customization Code|

Customization Code
The Customization Code is a unique identifier that encrypts the Configuration
Administrator, the Enterprise Console, the computer installation files, the One Time
Password Generation System, and Deep Freeze Command Line Control. This code is not a
password that can be used to access Deep Freeze.
The Customization Code ensures that unauthorized administrators are prevented fromaccessing or controlling a computer. Multiple Deep Freeze administrators controlling thesame group of computers must use a matching Customization Code.
The Customization Code must be recorded and guarded with care. Faronics
is unable to recover a lost or forgotten Customization Code.

Re-Initializing the Customization CodeIf another administrator wants to create installation files with the same Configuration
Administrator using a different Customization Code, complete the following steps:
1. Run DFInit.exe.
2. This resets the existing Customization Code for the Configuration Administrator andEnterprise Console.
3. Enter a new Customization Code.
4. Click OK for the new Customization Code to become active.

Update Mode
Update Mode can be used to automatically create updated versions of existing files of
Deep Freeze Enterprise by executing a special Update command. This commandcompletes two tasks:•

Updates previous versions of the Deep Freeze Enterprise Console and the Deep FreezeEnterprise Configuration Administrator. (Found in Faronics > Deep Freeze Enterprise.)•Updates any user created files stored in the Faronics > Deep Freeze Enterprise > Install
Programs folder.

The benefit of these updates is that a number of files can be updated to the latest version
while retaining their configuration data (created with an older version of Deep FreezeEnterprise).
The command automatically updates files created by an administrator (.exe, .rdx) that arepresent in the Faronics > Deep Freeze Enterprise > Install Programs directory, including thefollowing sub-directories:•

Workstation install files•

Workstation Seed files

Deep Freeze Enterprise User Guide

21

22

|

Installing Deep Freeze

In the example below, the district office has received a new version of Deep FreezeEnterprise Configuration Administrator and can automatically update any existing Deep
Freeze Workstation Install files and Workstation Seeds at a remote location.

The update command does not require a password, but does require a Customization
Code. Use the following command syntax:\PathToFile\DFEnt.exe /update=”Customization Code” c:\dfupdate.log•

PathToFile must be replaced with the actual path to the installation file (DFEnt.exe)•

DFEnt.exe must be the actual name of the installation file (it may differ if it was
downloaded)•

Customization Code must be in quotes if there is a space in it•

Customization Code must match the old installation files’ Customization CodeThe log file provides full details of exactly which files were updated.
The update process may take a few minutes to complete.
Update Mode does not update the existing version of Deep Freeze on computers.
Computers must be updated using the Enterprise Console.

Deep Freeze Enterprise User Guide

One Time Passwords|

One Time Passwords
The One Time Passwords Generation System is used to generate temporary passwords for
Deep Freeze that expire at midnight on the day they were generated.
One Time Passwords dialog can be accessed from•

Tools > One Time Passwords in the Enterprise Console. For more information refer toUsing Deep Freeze Enterprise Console.

•

File > One Time Passwords in the Configuration Administrator. For more informationrefer to Using Deep Freeze Enterprise Configuration Administrator.

A One Time Password (OTP) can be useful if, for example, a Deep Freeze password isforgotten or if a configuration file was created without any passwords defined. An OTP
can also be used to provide access to a computer for an individual performing
maintenance duties without requiring that individual to know the permanent Deep Freeze
password.
To create an OTP, complete the following steps:
1. Select either Password valid for one use only or Password valid for multiple uses. All
OTPs expire at midnight on the day they were created, regardless of type.
2. Enter the OTP Token from the computer that requires the OTP into the Token field. The
OTP Token for the computer is located in the logon dialog, as shown below.

3. Click Generate.
The Deep Freeze Command Line interface does not support the use of One
Time Passwords.

Deep Freeze Enterprise User Guide

23

24

|

Installing Deep Freeze

Deep Freeze Enterprise User Guide

Using Deep Freeze Enterprise Configuration Administrator|

Using Deep Freeze Enterprise Configuration
Administrator

TopicsAccessing the Configuration Administrator
Passwords Tab
Drives Tab
Workstation Tasks Tab
Windows Update Tab
Batch File Tab
Advanced Options Tab
Creating Workstation Install Program and Workstation Seed

Deep Freeze Enterprise User Guide

25

26

|

Using Deep Freeze Enterprise Configuration Administrator

Accessing the Configuration Administrator
Open the Configuration Administrator by selecting the following path from the Start
menu:
Start > All Programs > Faronics > Deep Freeze Enterprise > Deep Freeze Administrator
The Configuration Administrator provides various tabs to configure passwords, Frozen
drives, Workstation Tasks, Windows Updates, Batch Files, and Advanced Options. Oncethe settings have been configured, a Workstation Install file can be created. The
Workstation Install file can be installed on the computers that need to be protected by
Deep Freeze. Deep Freeze Enterprise Configuration Administrator can also be accessedfrom within the Deep Freeze Enterprise Console.

Toolbar and Menus
Toolbar
The Toolbar is available at the top of every tab in the Configuration Administrator.

Icon

FunctionNew

Blanks out all existing configuration settings. Opens with default
configuration settings.

Open

Open any saved .rdx, Workstation Installation file or Workstation Seed
file.

Save

Save a .rdx, Workstation Installation file or Workstation Seed file. Filename and path is listed at the bottom of the Configuration
Administrator in the status section.

Save As

Save the configuration settings as a .rdx file.

Help

Access the Deep Freeze Help file.
Create Workstation Installation File creates a customized installer for
installing on workstations. The workstations can then be managed fromthe Deep Freeze Enterprise Console.

CreateDeep Freeze Enterprise User Guide

Create Workstation Seed File creates a seed that allows Deep Freeze
Console to communicate with workstations across the network. Oncethe seed is installed on workstations, Deep Freeze Workstation
Installation File can then be deployed remotely.

Accessing the Configuration Administrator|

File Menu
The File menu contains the same options as those available on the Toolbar, with theadditions of the option to choose from the available languages and Password Protection.

Password Protection
Password Protection offers an additional layer of security for the administrator.
To password protect access to the Configuration Administrator, complete the following
steps:
1. Open the File menu and select Password Protection.
2. Select the Protect with password checkbox.
3. Enter and confirm the password.
4. Click OK to set the password or Cancel to exit the dialog without setting a password.

Store the password in a safe location. If the password is lost, you cannot
recover it. You will have to reinstall Deep Freeze.

Deep Freeze Enterprise User Guide

27

28

|

Using Deep Freeze Enterprise Configuration Administrator

Passwords Tab
Deep Freeze Enterprise allows the administrator to choose up to 15 fixed passwords.

To create a password, complete the following steps:
1. Select Enable on the appropriate row.
2. From the Type drop-down list, choose the preferred kind of password. The following
options are available:> Workstation – Designated for use at the workstation when the Login Screen islaunched.
> Command Line – For use with Command Line Controls. The Command Line Control
tool (DFC.exe) does not function unless at least one Command Line password isdefined.
3. Optional – For passwords, select the User Change checkbox to allow a user to change
the password at the computer.
4. Enter the password.
The password entered in the Password field is not hidden.
Do not use the same password for Command Line and the GUI.
5. To set a password to become active and expire on specified dates, select the Timeout
checkbox and use the drop-down calendars to specify an Activation date andExpiration date.

Deep Freeze Enterprise User Guide

Drives Tab|

Drives Tab
The Drives tab is used to select which drives are to be Frozen (protected by Deep Freeze)or Thawed (unprotected). You can also create a ThawSpace — a virtual partition hosted
on a local Frozen or Thawed drive where data can be saved permanently without being
deleted by Deep Freeze during a reboot.

Frozen Drives
By default, all drives are Frozen. To put a drive in a Thawed state, clear the checkbox of thepreferred drive.
While only local drives (partitions or physical drives) can be Frozen, all drive letters areshown because the pre-configured installation file may be installed on many computerswith various hardware and software setups.
ExampleIn the above screen, the D: is not selected from the Frozen Drives list. Therefore, all drives
except D: are Frozen.

Deep Freeze Enterprise User Guide

29

30

|

Using Deep Freeze Enterprise Configuration Administrator

ThawSpace
ThawSpace is a virtual partition that can be used to store programs, save files, or makepermanent changes. All files stored in the ThawSpace are retained after a restart, even if
the computer is Frozen. A ThawSpace can be created on a drive that is configured to be
Frozen or Thawed.
A ThawSpace can be set to automatically expand through the Automatically Grow option
to prevent running out of space. The ThawSpace will automatically expand by 25% of its
current size after reaching 25% free space or less. It will expand up to the maximum size
defined in ThawSpace configuration.
The ThawSpace will expand only in Thawed state.
Once the ThawSpace is expanded it will not be shrunk even when there ismore than 25% of free space or when updating workstation configuration
with smaller size for the given ThawSpace drive letter.

To create a single ThawSpace or multiple ThawSpaces using the Configuration
Administrator, complete the following steps:
1. Select the Drive Letter. The default letter is T:. However, it can be changed to any
available letter. The next available letter is automatically used if the selected drive
letter already exists on a computer when Deep Freeze is installed.

Deep Freeze Enterprise User Guide

Drives Tab|> When a Drive Letter is selected from the drop-down and used to create a
ThawSpace, it is removed from the drop-down.
> When a ThawSpace is removed, the corresponding Drive Letter is added back to thedrop-down.
> The Drive Letter cannot be same as the Host Drive.
2. Click Add. The Add ThawSpace dialog is shown:

3. Enter the Size. This is the size of the ThawSpace. The maximum size is 1024 GB and theminimum size is 16 MB.
> If the computer does not have enough free space to accommodate the selected
ThawSpace size, the size of the ThawSpace is adjusted downward to ensure proper
operation of the computer.
> If you select the Size less than 16 MB, the ThawSpace is set to 16 MB.
> If you select the Size more than 1024 GB (1 TB), the ThawSpace is set to 1024 GB(1 TB).
4. Select the ThawSpace storage unit in MB or GB.
5. Select the Host Drive.
> The Host Drive is the drive where the ThawSpace is created.
> The storage required for the ThawSpace is used from the total storage available on
the Host Drive.
6. Select Visible or Hidden from the Visibility drop-down.
> If you select Visible, the drive will be visible in Windows Explorer.
> If you select Hidden, the drive will not be visible in Windows Explorer.
> However, the hidden drive can be accessed by typing the drive letter in Start > Run.
7. Check the Automatically grow ThawSpace to a maximum checkbox and configure themaximum size of the ThawSpace.
8. Click Add to add the ThawSpace.
Removing a ThawSpaceTo remove a ThawSpace, select the ThawSpace and click Remove. The ThawSpace isremoved and the drive letter is now added back to the Drive Letter drop-down. Click
Remove All to remove all the ThawSpaces.

Deep Freeze Enterprise User Guide

31

32

|

Using Deep Freeze Enterprise Configuration Administrator

When a ThawSpace is removed in the Configuration Administrator, it will nottake effect until the configuration is applied on the workstation.
Before removing a ThawSpace, remove any profile redirections or Symbolic
Links.
Removing a ThawSpace will also remove the data stored in it.
A ThawSpace is not protected by Deep Freeze. Deploy standard dataprotection options such as, Anti-Virus and backup procedures.
ExampleIn the above screen, a ThawSpace of 16 MB is created on the Host Drive C: and theThawSpace is designated with the drive letter T:. The ThawSpace T: is set to Visible andcan be accessed via the Windows Explorer.
It is recommended to assign Drive Letters towards the end of the alphabet(X, Y, Z) in order to avoid automatic reassignment when a removable drive is
unplugged.

Existing ThawSpaceThe Retain during install/uninstall checkbox is selected by default to prevent ThawSpaces
created during previous installations from being deleted. A dialog is always displayed
asking if the ThawSpace should be retained or deleted during an Attended Uninstall,
regardless of whether Retain during install/uninstall has been selected. This option is not
displayed if the uninstall is performed through the Enterprise Console.
Select Delete during configuration update to delete all the existing ThawSpaces on theworkstation and re-create while applying the configuration. The existing ThawSpaces andthe data in the ThawSpaces will be deleted and the new ThawSpaces as per the settings
will be created when the configuration is applied.
The Honor Group Policy settings for Hidden Drives ensures that the Group Policy settings
for hidden drives do not conflict with the Deep Freeze settings for hidden drives.
Hidden drive settings for Group Policies are user-specific. Hidden drive settings for Deep
Freeze are global if the Honor Group Policy settings for Hidden Drives option is disabled.
If there are no Group Policies for hidden drives, it is recommended to disable
this option.

Deep Freeze Enterprise User Guide

Drives Tab|

Always Thaw External Hard Drives
The Always Thaw External Hard Drives pane has two checkboxes, USB and IEEE 1394
(FireWire) and both checkboxes are selected by default. This ensures that the USB or IEEE
1394 (FireWire) hard drives are always Thawed.
If the USB and/or IEEE 1394 (FireWire) external hard drives checkboxes are cleared, thedrive is Frozen or Thawed according to the letter each drive mounts to in the Frozen
Drives section.
Network drives and removable media drives (floppy, memory keys, CD-RW, etc.) are notaffected by Deep Freeze and therefore cannot be Frozen.

ExampleIn the above screen, drives E: and F: are selected in the Frozen Drives pane.
Let us assume that E: corresponds to a USB hard drive and F: corresponds to an IEEE 1394
(FireWire) hard drive.
The USB and IEEE 1394 (FireWire) checkboxes are selected in the Always Thaw External
Hard Drives pane, the external hard drives would be Thawed.
The USB checkbox is selected. The IEEE 1394 (FireWire) checkbox is cleared. In thisexample, the USB drive (D:) would be Thawed and the IEEE 1394 (FireWire) drive (F:) would
be Frozen.

Deep Freeze Enterprise User Guide

33

34

|

Using Deep Freeze Enterprise Configuration Administrator

Workstation Tasks Tab
The Workstation Tasks tab allows you to schedule various tasks that run at theworkstation. The Workstation Tasks reside at the workstation and will run even if theworkstations lose their network connectivity or if they are unable to communicate with
the Deep Freeze Console. The Workstation Tasks are part of the Workstation Install File or
Deep Freeze Configuration (.rdx) file. The following Workstation Tasks are available:•

Windows Update – Schedule Windows updates. You can configure additional settings
in the Windows Update tab.

•Restart – Periodically restart workstations to bring them to the original configuration
or erase unwanted data.

•

Shutdown – Shut down the workstations at a specified time every day to save power.

•

Idle Time – Shut down or restart the workstations if they are idle for a specified
period of time.

•

Batch File – Run a batch file on the target workstation. You can configure additionalsettings in the Batch File tab.

•Thawed Period – Reboot Thawed for a specified period to perform manual software
installs, automated software installs via third-party tools or other permanent
configuration changes.

Each task is covered in detail in the following sections.

Deep Freeze Enterprise User Guide

Workstation Tasks Tab|

Workstation Tasks vs. Scheduled Tasks: If communication between theEnterprise Console and the target computer fails, the Workstation Tasks arestill executed since they exist on the target computer.
Tasks scheduled through the Scheduled Tasks Wizard in the Deep FreezeEnterprise Console exist on the Console and not on the target computers.
Therefore, a continuous connectivity between the Console and the target
computer is required for the Scheduled Tasks to be executed. For more
information, refer to the Scheduling Deep Freeze Tasks section.
Overlapping tasks cannot be created in the Workstation Tasks tab. If a newly
created task overlaps with an existing task, a message is displayed.

A message can be displayed to the user for a maximum of 5 minutes. There
must be a gap of a minimum of 5 minutes between any two tasks.

A Workstation Task is triggered only when Deep Freeze is in a Frozen state.

Windows Update
Windows Update tasks are scheduled for downloading Windows Updates on theworkstation. Windows Updates can be downloaded even when the workstation is in a
Frozen state. A Windows Update task has a Start Time and an End Time. After
downloading Windows Updates, the workstation reboots in a Thawed state to apply.
Windows Updates can also be applied manually on the workstation by
selecting the workstation and via the command Run Windows Update fromthe context-menu in the Deep Freeze Console. For more information, refer toManaging Deep Freeze with the Console.

Deep Freeze Enterprise User Guide

35

36

|

Using Deep Freeze Enterprise Configuration Administrator

The Windows Update task can be scheduled by completing the following steps:
1. Select Windows Update from the Task Type drop-down and click Add.
2. The following options are displayed:

Deep Freeze Enterprise User Guide

Workstation Tasks Tab|> Name – Specify a name for the task.
> Day – Select the day, or specify if the task will occur on Weekdays or Weekends.
> Start – Select the Start Time.
> End – Select the End Time. The minimum interval is 15 minutes. Alternatively, you
can select When Windows Update completes. If the Windows Update Task is notcompleted in 6 hours, Deep Freeze will end the task gracefully.
If a Windows Update task is set to end When Windows Update Completes,
and the computer is turned off at the scheduled start time of the task, theWindows Update task will be triggered for the computer if the computer ispowered on within 15 minutes after the scheduled start time.
For example, a computer is turned off when the Windows Update task is set
to start at 11:40 pm. If the computer is powered on between 11:40 pm to11:55 pm, the Windows Update task will automatically execute on thecomputer.
> Allow user to cancel task – Select the checkbox if the user is allowed to cancel thetask before it starts.
> Attempt to wake up locally – Select this checkbox to wake up the workstation locallywithout requiring any communication from the Enterprise Console.
Waking up the workstation locally depends on the hardware specifications ofyour workstation. This option will work only if it is supported by yourhardware.
> Shutdown after task – Select the checkbox to shutdown the computer after the task.
> Disable Keyboard and Mouse – Select the checkbox to disable keyboard and mouseduring the task.
> Show message – Select the checkbox to display a message on the computer Before
and During the task. Specify the time interval in minutes and enter a brief message
to be displayed before the task starts.
3. Click OK. You will be taken to the Windows Update Tab to configure additionalsettings if it has not been configured earlier.
The message This computer will reboot in %d for Windows Update isdisplayed in the Message to be displayed before the task field. This message
can be edited. Add the word minutes in the message after %d to include theword minutes as part of the message.
When scheduling the Windows Update task select the When Windows
Update completes option or ensure that you allow a sufficient time frame topermit all required update activities. Review of Microsoft Security Bulletinsfrom the Technet web site(http://technet.microsoft.com/en-us/security/bulletin) to consider theappropriate time frame based upon the Critical and Security updates being
released.

Deep Freeze Enterprise User Guide

37

38

|

Using Deep Freeze Enterprise Configuration Administrator

If you are not using WSUS, Deep Freeze Windows Update process will only
apply non-user-intervention Critical and Security updates, as well as Feature
updates for Windows 10 and above. If you are using WSUS, all WSUS
approved updates will be applied.
If you are not using WSUS, Windows Update task will always try to install
Feature updates whenever available starting from Windows 10. You can defer
installing Feature updates by selecting Choose when updates are installingunder Advanced Options of Windows Updates system settings, or enabling
local computer policy Select when Preview Builds and Feature Updates arereceived located in Computer Configuration > Administrative Templates >Windows Components > Windows Update > Windows Update for Business.
Alternatively, to apply other available updates, visit the Microsoft Update
Catalog site (http://catalog.update.microsoft.com) to obtain KB downloads
which can then be applied using a Deep Freeze Batch File Workstation Task.
Batch File tasks can also be used to apply other third-party software updates.
The Deep Freeze Windows Update tab settings override the Windows
Update settings on the workstation.
ExampleIn the above screen, a Windows Update task has been created to perform Windows
Updates at the computer daily at 12:00 AM and end when Windows Update completes.
The task is configured to display a message to the user before Windows Update. The
keyboard and mouse are disabled.

Deep Freeze Enterprise User Guide

Workstation Tasks Tab|

RestartThe Restart task can be scheduled by completing the following steps:

1. Select Restart from the Task Type drop-down and click Add.
2. The following options are displayed:> Name – Specify a name for the task.
> Day – Select the day, or specify if the task will occur on Weekdays or Weekends.
> Start – Select the Start Time.
> Allow user to cancel the task – Select the checkbox if the user is allowed to cancel
the task before it starts.
> Show message – Select the checkbox to display a message on the computer before
the task starts. Specify the time interval in minutes and enter a brief message to be
displayed before the task starts.

Deep Freeze Enterprise User Guide

39

40

|

Using Deep Freeze Enterprise Configuration Administrator

3. Click OK.
The message This computer will reboot in %d seconds is displayed in the
Message to be displayed before the task field. This message can be edited.
Add the word minutes in the message after %d to include the word minutes
as part of the message.
ExampleIn the above screen, a Workstation Task has been created to restart the computer daily at
12:00 AM. The task is configured to display a message to the user 1 minute before theRestart.

Shutdown
The Shutdown task can be scheduled by completing the following steps:

1. Select Shutdown from the Task Type drop-down and click Add.

Deep Freeze Enterprise User Guide

Workstation Tasks Tab|

2. The following options are displayed:> Name – Specify a name for the task.
> Day – Select the day, or specify if the task will occur on Weekdays or Weekends.
> Start – Select the Start Time.
> Allow user to cancel the task – Select the checkbox if the user is allowed to cancel
the task before it starts.
> Show message – Select the checkbox to display a message on the computer before
the task starts. Specify the time interval in minutes and enter a brief message to be
displayed before the task occurs.
3. Click OK.
The message This computer will shutdown in %d seconds is displayed in the
Message to be displayed before the task field. This message can be edited.
Add the word minutes in the message after %d to include the word minutes
as part of the message.
ExampleIn the above screen, a Shutdown task has been created to shutdown the computer daily at
12:00 AM. The task is configured to display a message to the user 1 minute before the
Shutdown task.

Deep Freeze Enterprise User Guide

41

42

|

Using Deep Freeze Enterprise Configuration Administrator

Idle TimeThe Idle Time task can be scheduled by completing the following steps:

1. Select Idle Time from the Task Type drop-down and click Add.
2. The following options are displayed:> Name – Specify a name for the task.
> Restart or Shutdown – Select Restart or Shutdown and specify the idle time inminutes after which the task must take place.
> Start idle time countdown only after the first keyboard/mouse activity – This option
is only for the Shutdown task. Select this checkbox for the timer to start counting
only after the first keyboard or mouse activity. For example, if the idle time isspecified as 20 minutes, and this option is selected, the workstation task will
shutdown the computer 20 minutes after the first keyboard and mouse activity.

Deep Freeze Enterprise User Guide

Workstation Tasks Tab|> Show message – Select the checkbox to display a message. Specify the time intervalin minutes and enter a brief message.
After the computer is started, the Idle Time counter becomes active only
after the first keyboard or mouse activity has been initiated. During a Remote
Desktop session, the Idle Time of the controlling computer is used to activate
the task.
3. Click OK.
ExampleIn the above screen, the Idle Time task is set to Restart when the computer is idle for 1
minute. A message is displayed to the user for 1 minute after the idle time has elapsed.
The computer will restart unless the user cancels the task in the message dialog
displayed.

Batch File
Batch File tasks are scheduled for executing batch files on the workstation. A Batch Filetask has a Start Time and an End Time. During this period, the batch file is executed on
the workstation. You must configure additional settings in the Batch File tab for the Batch
File Task to work. You can configure to shutdown the workstation after the Batch File Task
is completed. Workstations will reboot Frozen after the batch file has been executed.

Deep Freeze Enterprise User Guide

43

44

|

Using Deep Freeze Enterprise Configuration Administrator

The Batch File task can be scheduled by completing the following steps:
1. Select Batch File from the Task Type drop-down and click Add.
2. The following options are displayed:> Name – Specify a name for the task.
> Day – Select the day, or specify if the task will occur on Weekdays or Weekends.
> Start – Select the Start Time.
> End – Select the End Time. The minimum interval is 15 minutes.
> Allow user to cancel the task – Select the checkbox if the user is allowed to cancel
the task before it starts.
> Attempt to wake up locally – Select this checkbox to wake up the workstation
locally without requiring any communication from the Enterprise Console.
Waking up the workstation locally depends on the hardware specifications ofyour workstation. This option will work only if it is supported by yourhardware.
> Shutdown after task – Select the checkbox to shutdown the computer after the task.
> Disable Keyboard and Mouse – Select the checkbox to disable keyboard and mouseduring the task.
> Show message – Select the checkbox to display a message on the computer Before
and During the task. Specify the time interval in minutes and enter a brief message
to be displayed before the task starts.
3. Click OK.

Deep Freeze Enterprise User Guide

Workstation Tasks Tab|

4. Go to Batch File Tab to configure additional settings.
The message This computer will reboot in %d for Batch File is displayed in the
Message to be displayed before the task field. This message can be edited.
Add the word minutes in the message after %d to include the word minutes
as part of the message.
ExampleIn the above screen, a Batch File task has been created to execute a Batch File at thecomputer daily at 12:00 AM and end at 12.15 AM. The task is configured to display amessage to the user before the Batch File is executed. The keyboard and mouse aredisabled.

Thawed Period
Thawed Period tasks are scheduled to reboot the workstation is in a Thawed state. A
Thawed Period is useful for some applications that update automatically at regularintervals. A Thawed Period is also useful for administrators to schedule maintenance andmake permanent changes to the computers. This may include installing new software,
updating software, configuration changes, and other maintenance functions. A Thawed
Period has a Start Time and an End Time.

Deep Freeze Enterprise User Guide

45

46

|

Using Deep Freeze Enterprise Configuration Administrator

The Thawed Period can be scheduled by completing the following steps:
1. Select Thawed Period from the Task Type drop-down and click Add.
2. The following options are displayed:> Name – Specify a name for the task.
> Day – Select the day, or specify if the task will occur on Weekdays or Weekends.
> Start – Select the Start Time.
> End – Select the End Time. The minimum interval is 15 minutes.
> Allow user to cancel task – Select the checkbox if the user is allowed to cancel thetask before it starts.
> Attempt to wake up locally – Select this checkbox to wake up the workstation
locally without requiring any communication from the Enterprise Console.
Waking up the workstation locally depends on the hardware specifications ofyour workstation. This option will work only if it is supported by yourhardware.
> Shutdown after task – Select the checkbox to shutdown the computer after the task.
> Disable Keyboard and Mouse – Select the checkbox to disable keyboard and mouseduring the task.
> Show message – Select the checkbox to display a message on the computer Before
and During the task. Specify the time interval in minutes and enter a brief message
to be displayed before the task starts.
3. Click OK.
The message This computer will reboot in %d for Maintenance is displayed in
the Message to be displayed before the task field. This message can be edited.
Add the word minutes in the message after %d to include the word minutes
as part of the message.

Deep Freeze Enterprise User Guide

Workstation Tasks Tab|

ExampleAnti-Virus programs require regular virus definition updates to protect the system. Virusdefinitions can be updated during a Thawed Period.
In the above screen, a Thawed Period task has been created daily between 12:00 AM and12:15 AM. The user is not allowed to cancel the task before it starts. The computer will
shut down after the maintenance period. The keyboard and mouse are disabled during
the maintenance period. The task is configured to display a message to the user 5
minutes before the task starts. The following message will be displayed on the computerat 11:55 AM The computer will reboot in 5 minutes to enter into a Thawed Period.
To ensure that the virus definitions are applied permanently, schedule the virus definition
update for your Anti-Virus program so that it starts after Deep Freeze successfully starts
the Thawed Period task and ends before Deep Freeze ends the Thawed Period task. This
ensures that the virus definitions downloaded and updated by the Anti-Virus program
stay permanently on the system. Hence the system is fully protected by Anti-Virus andDeep Freeze.
Faronics Anti-Virus: Faronics Anti-Virus works with Deep Freeze and does
not require a Thawed Period task for updating virus definitions. Faronics
Anti-Virus can update virus definitions even when the computers managed
by Deep Freeze are in a Frozen state.
Other Anti-Virus Programs: All other Anti-Virus programs require
scheduling a Thawed Period task to update virus definitions. Refer to yourAnti-Virus program user guide for information on how the virus definitions
are downloaded. Alternatively, virus definitions can be applied manuallywhen the computers managed by Deep Freeze are in a Thawed state. You canalso schedule a no user intervention install of your virus definitions through a
Batch File Task.

Deep Freeze Enterprise User Guide

47

48

|

Using Deep Freeze Enterprise Configuration Administrator

Windows Update Tab
The Windows Update tab allows you to customize settings for Windows Update. Whenyou first create a Windows Update Task, you will be given an option to modify thedefault settings in the Windows Update tab. Modifying the default settings is notmandatory. Windows Update will be performed even with the default settings. The
settings in the Windows Update tab will apply to all Windows Update tasks.
The Deep Freeze Windows Update tab settings override the Windows
Update settings on the workstation.

The settings in the Windows Update tab can be customized as follows:
Allow Deep Freeze to choose how Windows updates are downloaded: – Select thischeckbox to allow Deep Freeze to choose how Windows updates are downloaded. The
following options are available:•

Deep Freeze Enterprise User Guide

Select the Windows Updates download options:Windows Update Tab|> Do not cache Windows updates – Select this option to download Windows updates
only during the Windows Update task.
> Cache Windows updates – Select this option to download when the workstation isin a Frozen or Thawed state and install during the Windows Update Task. This option
creates a 10 GB ThawSpace and the Windows Updates are stored in the ThawSpace
to ensure that Windows Update files are persistent across multiple reboots.
For Windows 10 and above – When Cache Windows updates is selected, the drive
letter drop-down list is enabled. Select a drive letter from the drop-down list to
assign as the hidden drive letter for storing Windows Updates cache. The assigned
hidden Windows Updates cache drive letter will not be visible in Windows Explorer.

The hidden drive letter is not visible on the workstations and is only available
for Windows 10 and above.
•

Always retrieve updates from:> Microsoft Windows Update website – Select this option to download updates
directly from the Microsoft Windows Update website.
You can opt to download Security and Critical Updates, Security, Critical, andFeatures Updates or All Updates.
~ Security and Critical updates – Select this option to download Critical andSecurity updates.
~ Security, Critical, and Features updates – Select this option to download Critical,
Security as well as Features updates.
~ All updates – Select this option to download all updates.
> Windows Server Update Services (WSUS) – Select this option to download from
WSUS server. Specify the SUS/WSUS Server. Optionally, select Use WSUS Target andspecify the target. Microsoft SUS client and SUS/WSUS server can be downloaded
at: http://www.microsoft.com/wsus.

Deep Freeze Enterprise User Guide

49

50

|

Using Deep Freeze Enterprise Configuration Administrator

A log file is created for each individual workstation and is stored locally on
the workstation.
The default name for the Deep Freeze Windows Update Log file is
DFWuLogfile.log and can be found at:
C:\Program Files\Faronics\Deep Freeze\Install C-[X]\DFWuLogfile.log (32-bit
systems) and C:\Program Files (x86)\Faronics\Deep Freeze\Install
C-[X]\DFWuLogfile.log (64-bit systems).
•

You cannot change the name or location of the log file.

•

The Deep Freeze Log file and the Windows Update log file (atc:\windows\windowsupdate.log) are very useful for troubleshooting your
Windows updates.

•

X is an incremental value depending on how many times you haveinstalled Deep Freeze on the workstation.

Contact Faronics Support for help troubleshooting the DFWuLogfile.log (athttp://support.faronics.com).
Contact Microsoft Support for troubleshooting Windows Update Errors. (See
http://support.microsoft.com/kb/906602)
Also see Microsoft KB 902093 How to read the Windows Update log file found
at: http://support.microsoft.com/kb/902093/ or visit
http://support.microsoft.com.

Deep Freeze Enterprise User Guide

Batch File Tab|

Batch File Tab
The Batch File tab allows you to customize settings for the Batch File task. When you
schedule a Batch File task from the Workstation Tasks tab, you must configure thesettings in the Batch File tab.

Configure the following options:•

Batch File Authentication
Select Microsoft Network and select if the account to be used is a System account or aSpecified user account. If you select Specified user account, specify the Login ID,
Password, and Domain. For Novell Network, select Novell, specify the Login ID,
Password, Tree, Context, and Server.
The default configuration using the Microsoft Network/System Accountauthentication must be tested prior to using alternative credentials. Using
this machine level account often is sufficient to complete the task. Use of a
specified user account may be required if the batch file requires network
access to secure resources.

Deep Freeze Enterprise User Guide

51

52

|

Using Deep Freeze Enterprise Configuration Administrator•

Batch File Contents
Enter a custom batch file to run during the Batch File task. The same batch file applies
to all Batch File tasks. The following options are available when running custom batch
files:> To clear the current batch file, click Clear.
> To load an existing file, click Import and browse to the location of the file.
> To save the contents of the field, click Export and browse to the preferred savelocation.
The batch file can be any command or series of commands that the commandprocessor can run. You can run custom scripts that require the use of a third-party
scripting engine by calling the script from the batch file as if it was being run from thecommand line.
Batch Files allow you to use VB Scripts, PowerShell scripts, Ninite and otherthird-party solutions. Contact your software vendor or refer to yourthird-party solution user guide to know more about scripting solutions that
include no user intervention options.

Deep Freeze Enterprise User Guide

Advanced Options Tab|

Advanced Options Tab
The Advanced Options tab is used to configure the network settings used by thecomputers to communicate with the Console, configure various security options, andadminister License Keys.

NetworkCommunication between the Deep Freeze Enterprise Console and computers with Deep
Freeze installed can use two different modes: LAN Mode or LAN/WAN Mode.
•

LAN – Select LAN to configure Deep Freeze to communicate within a Local Area
Network (LAN). LAN mode is a self-configuring mode that requires only a port
number. The default port is 7725. The port number can be changed if it is in conflictwith other programs on the LAN. In LAN mode, the Deep Freeze target computer andthe Enterprise Console find each other through UDP broadcasts. These broadcasts
only occur when computer or the Enterprise Console is started, ensuring that there islittle network traffic associated with target computer and Console communication.

•

LAN/WAN – Select LAN/WAN to configure Deep Freeze to communicate in both a
LAN and a WAN (wide area network). LAN/WAN can be used in either a LAN or WAN
environment and over the Internet. This mode uses an IP address or the computer
name, along with a port number, to allow communication between the Enterprise
Console and the managed computers.

Deep Freeze Enterprise User Guide

53

54

|

Using Deep Freeze Enterprise Configuration Administrator

The following two methods are available to identify the Console:•

Specify the Console IP, which must be static•

Specify the Console Name, in which case the IP can be dynamic (if valid DNS nameresolution is available as part of the domain infrastructure).

When the Enterprise Console is behind a firewall or a NAT (network address translation)router, the firewall or router must be configured to allow traffic to pass through to theEnterprise Console. Depending on the firewall or router, computers may need to be
configured with the IP address of the firewall so that traffic can be forwarded.
Deep Freeze automatically configures the required exceptions in the
Windows Firewall. It is not required to configure the Windows Firewall
manually.
For more information on configuring and using Deep Freeze in a specific network
environment, refer to Appendix B or contact Technical Support.
If a port number other than the default of 7725 (registered to Deep Freeze) is used, careshould be taken to ensure that there are no conflicts with applications already running on
the network. Well-known ports (0–1023) should be avoided and any Registered Ports(1024–49151) should be checked for conflicts before deployment.
It is recommended to use ports in the unallocated range above 49152. Using
Port Segmentation, you can isolate a lab or building by port number byconfiguring the Port Number on the workstations and in the Deep FreezeEnterprise Console. Using this method, you can provide management
functions for a specific set of workstations and not your entire organization.
UDP and TCP port exceptions for these ports will be required. For more
information, refer to Example 3 – Multiple Ports, Console Accessed Remotely.
A complete listing of the ports assigned to various applications can be found on theInternet Assigned Numbers Authority web site at
http://www.iana.org/assignments/port-numbers.

Advanced Options

Deep Freeze Enterprise User Guide•

Disable Command Line options – This option is selected by default. Clearing thischeckbox allows for further customization of the Deep Freeze installation program
when using the Silent Install System. Selecting this option prevents the pre-existing
configuration choices from being changed during installation.

•

Enable Deep Freeze local policies – For enhanced security, Deep Freeze removes thefollowing local privileges: debugging programs, modifying firmware, and changing
the system time; clear this option to use existing privileges.

Advanced Options Tab•

Allow user to change the clock – Select this option to allow Frozen users to adjust thesystem clock. Enable this feature during Daylight Savings to allow Windows to update
the time automatically each season.

•

Manage Secure Channel Password – Secure Channel Password is a feature of all
Windows operating systems and only applicable if the system is running in Windows
Server Domain Environment. Secure Channel Password is used for securecommunication between the server and workstations. The Secure Channel Password isautomatically changed based on the operating system settings. While using Deep
Freeze, the newly changed Secure Channel Password is lost on reboot. The Manage
Secure Channel Password option avoids this situation. The Manage Secure Channel
Password feature of Deep Freeze changes the value of the Group Policy Maximum
machine account password age based on the Deep Freeze state (Frozen or Thawed).

|> Select the Manage Secure Channel Password option if you want Deep Freeze tomanage Secure Channel Password.
When the workstation is Frozen – The workstation will not change the Secure
Channel Password. This ensures that the secure communication between the server
and the workstation is always maintained.
When the workstation is Thawed – The workstation will change the Secure Channel
Password and sync the password with the server.
> Do not select the Manage Secure Channel Password option if you do not want Deep
Freeze to manage the Secure Channel Password.
When the workstation is Frozen – When the Secure Channel Password is changed
and synced with the server, it resets to the old password on reboot.
When the workstation is Thawed – If the workstation is Thawed on the day the
Secure Channel Password is changed, the new password takes affect and theworkstation is synced with the server.
The Manage Secure Channel Password feature of Deep Freeze always
overrides the Group Policy Maximum machine account password age andDisable machine account password changes.
Set the following in the Group Policy for the Manage Secure Channel
Password feature to work:
Domain Controller: Refuse machine account password changes to Not Defined•

Restart on Logoff – Select this checkbox to Restart the computer automatically when it
is logged off. If this option is selected, the computer is restarted when a user logs off
in a Frozen state.

•

Protect MBR/GPT – Select this checkbox if you want Deep Freeze to protect the Master
Boot Record or the GUID Partition Table. If this option is selected, changes to the
Master Boot Record are reversed on reboot when the computer is in a Frozen state.

•Show One Time Password Token – When this option is selected, the OTP Token will be
displayed on the password entry dialog on the Deep Freeze workstation.
If OTP feature is not used, it is recommended to keep this option disabled.

Deep Freeze Enterprise User Guide

55

56

|

Using Deep Freeze Enterprise Configuration Administrator•

Retain Windows Event Logs – Select this checkbox to retain Windows Event Logs.
Deep Freeze creates a 100 MB ThawSpace and stores all Windows Event Logs so they
are not erased upon reboot even when the computer is in a Frozen state. The log fileis recycled once it reaches 100 MB. The log files contain events related to Application,
Hardware, System and Security.

•

Manage Virtual Memory – Enable this for rare cases where hardware with limited
RAM may experience performance issues. Selecting this option allows Deep Freeze tomanage the page file size.
This option is disabled by default. The page file size will be adjusted to matchthe RAM size if this option is enabled, which will allocate more hard drive
space on the workstation.

•

Manage Local Administrator Password Solution – Local Administrator Password
Solution (LAPS) is a Windows feature that automatically manages and backs up the
password of a local administrator account on Active Directory-joined or Windows
Server Active Directory-joined machines.
When this option is enabled on systems where LAPS setup is detected, Deep Freeze
will disable the ability of LAPS to change the configured local admin password in
Frozen state and allow to do so in Thawed state. This feature ensures that the current
admin password can be rotated only in Thawed state and remain synchronized with
Active Directory.

•

Delay Frozen reboot to complete Windows updates – Select this option to delay reboot
into a Frozen state if configuration or installation for Windows updates are pending. If
you select this option and perform Windows updates (through means other than Deep
Freeze), rebooting into a Frozen State will ensure that all Windows updates installationand configuration are completed before rebooting into a Frozen state.
If you select Delay Frozen reboot to complete Windows updates and install
Deep Freeze, the installer checks if all Windows updates are completed. If theWindows updates are not completed, Deep Freeze installation will notproceed. Complete Windows updates and try installing Deep Freeze again.
If you disable Delay Frozen reboot to complete Windows updates and install
Deep Freeze, ensure that all Windows updates are completed manually.
Disabling this option may result in the computer being stuck in a reboot
cycle due to incomplete Windows updates.

ExampleOn a Windows Domain Environment using Windows Server 2008 R2 that manages
multiple workstations, Secure Channel Password is used for secure communication
between the server and workstations.
In Deep Freeze Enterprise Configuration Administrator, go to the Advanced Options tab
and select Manage Secure Channel Password. Create the Workstation Install file anddeploy it to the workstation.
Set the following in the Group Policy for the Manage Secure Channel Password feature to
work:

Deep Freeze Enterprise User Guide

Advanced Options Tab|

Domain Controller: Refuse machine account password changes to Not Defined
Domain Member: Disable machine account password changes to Disabled
When the workstation is Frozen, the Secure Channel Password does not change. When
the workstation is Thawed, the Secure Channel Password is changed at the workstationand synced with the server.

Stealth Mode•Show Frozen icon in system tray – Select this option to display the icon to indicate that
Deep Freeze is installed and the computer is Frozen.

•

Show Thawed icon in system tray – Select this option to display the icon to indicatethat Deep Freeze is installed but the computer is Thawed.

If the options to show a Deep Freeze icon in the System Tray are unchecked, the keyboard
shortcut CTRL+ALT+SHIFT+F6 must be used to access the logon dialog.

License•License Key – Click Edit and enter the License Key. Click Update License.

•

License Key Type – The License Key type is displayed. This field displays if this is an
Evaluation version or a full version.

•

Expiry Date – The Expiry Date for Deep Freeze is displayed.

The License Key can be updated in the following ways:•

Through the Workstation Install file – The License Key is updated in the Configuration
Administrator and a Workstation Install file is created. The License Key is now part of
the Workstation Install file.

•

Through the Enterprise Console – The License Key can be updated directly on theEnterprise Console. When the License Key is updated in the Enterprise Console, it isautomatically updated on all connected computers. For more information on updating
directly through the Enterprise Console, refer to the Licensing section.

•

Manually on each computer – The License Key can be updated manually on eachcomputer. For more information, refer to the Status Tab section.

Deep Freeze Enterprise User Guide

57

58

|

Using Deep Freeze Enterprise Configuration Administrator

Creating Workstation Install Program and Workstation Seed

To create customized Deep Freeze installation program files with all of the options thatwere configured in the previous sections, click the Create button in the Configuration
Administrator toolbar and select Create Workstation Install Program.
The default file name for this program is DFWks.exe. We recommend thatyou keep the default name, but in larger deployments you may want to suffix
it with information related to its configuration such as:
DFwks_10gbThawSpace.exe or DFWks_NoMaintenance.exe or
DFwks_Wed-5pmUpdates.exe to assist in organization and identification of
the installer functions. The same recommendation applies for Deep Freeze
Configuration files (.rdx) as well.

Deep Freeze Enterprise User Guide

Creating Workstation Install Program and Workstation Seed|

This file can then be used to install Deep Freeze on computers using:•

Attended Install (install based on user input)•

Silent Install system – Install that does not inform user of progress or provide
messages during installation). For more information on the Silent Install command,refer to Silent Install or Uninstall.

•Target Install – Through the Deep Freeze Enterprise Console for workstations that
already contain a Seed or previous version of Deep Freeze that has been created withthe same Customization Code.

To create a Workstation Seed, click the Create button in the Configuration Administrator
toolbar and select Create Workstation Seed. The Workstation Seed is a lightweightprogram that allows administrators to remotely install and control computers from theEnterprise Console. The Workstation Seed can be installed as part of a master image andthen deployed via imaging software. All computers on the LAN with the Workstation Seedinstalled are displayed in the Enterprise Console. The default file name for this program is
DFWksSeed.exe.
All files are saved to Deep Freeze Enterprise > Install Programs folder by default. A
different location can be chosen and the file name can be changed if required. To set up
another location as the default location, select the preferred location for saving the
installation programs and Workstation Seeds and click Save. Check the Set this folder as
the default location save location checkbox when prompted. Click OK.
It is recommended that a naming convention is used if you are creating multiple
customized installation files.
DFwks.exe, DFwksseed.exe, and depfrz.rdx files can be created and deployedinterchangeably to any Deep Freeze computer that uses the same
Customization Code. The Deep Freeze Seed can be used as a template/place
holder to ensure your basic elements such as passwords, Network
Configuration or standardized workstation tasks are all consistent. The seed
will not utilize any of the configuration settings but will hold them in the file.
To use the file as a template simply open the DFwksseed.exe file using theConfiguration Adminstrator and make any required changes. Then, to create
workstation installation click Create > Create Workstation Installation File.
It is recommended to restrict the use of the Configuration Administrator inlarger environments for security reasons. This can be done by password
protecting the Deep Freeze Administrator or alternatively, making it
unavailable by removing the DFadmin.exe file from the c:\program
files\faronics\Deep Freeze Enterprise folder. This file can be moved to theDomain Administrator’s workstation and deleted from the Common Deep
Freeze Enterprise Console. It can be restored by copying it from anotherinstallation of the same version and authorizing using the OTP password or
by reinstallation or upgrade of Deep Freeze Enterprise using the same
Customization Code.

Deep Freeze Enterprise User Guide

59

60

|

Using Deep Freeze Enterprise Configuration Administrator

Deep Freeze Enterprise User Guide

Using Deep Freeze Enterprise Console|

Using Deep Freeze Enterprise Console

This chapter describes using the Deep Freeze Enterprise Console.

TopicsDeep Freeze Configuration
Configuration Generator
Deep Freeze Enterprise Console
View Columns
Status Based Selection
Managing Communication Between the Console and Workstations
Remote Consoles
Connecting to a Remote ConsoleManaging Deep Freeze with the Console
Licensing
Scheduling Deep Freeze Tasks
Assigning Computers to Scheduled Tasks
Managing Network and Groups
History
Adding Computers to a Group
Configure Custom Actions
Console Customizer
Deep Freeze Enterprise Console Shutdown
Installing Deep Freeze on the Workstation
Uninstalling Deep Freeze on the Workstation via the Console
Silent Install or Uninstall
Check for Updates

Deep Freeze Enterprise User Guide

61

62

|

Using Deep Freeze Enterprise Console

Deep Freeze Configuration
Deep Freeze Configuration is a group of settings that defines the behavior of Deep
Freeze on the workstation. Deep Freeze Configurations can be created and applied
through the Deep Freeze Console.
Complete the following steps to create a Deep Freeze configuration:
1. Launch Deep Freeze Console.
2. Go to Network and Groups > Available Configurations > Deep Freeze.
3. Right-click and select Create New Configuration.

4. Select or specify the settings for each tab as described in Using Deep FreezeEnterprise Configuration Administrator.
5. Specify the name of the configuration and click OK.
6. Optionally, select Export As > Workstation Seed or Export As > Workstation Installerfrom the drop-down to export the configuration.
7. Click OK.

Applying Deep Freeze Configuration
Once a configuration is created, it can be applied to multiple workstations.
Complete the following steps to apply the Deep Freeze configuration:
1. Go to Workstations pane.
2. Select one or more workstations.
3. Right-click and select Update Configuration > Deep Freeze > [Configuration Name].
The configuration is applied on the selected workstation(s).

Deep Freeze Enterprise User Guide

Deep Freeze Configuration|

If you change the Deep Freeze Configuration for Passwords, Workstation
Tasks, or Restart on Log off, and apply the configuration, the settings areapplied on the fly.
If the Delete during configuration update option was selected when creating
the install file, existing ThawSpaces and the data in the ThawSpaces will bedeleted and the new ThawSpaces as per the settings will be created when theconfiguration is applied.
All other settings require a reboot for the settings to take effect. Disable
Command Line changes cannot be modified by applying configuration
changes.

Editing Deep Freeze Configuration
Complete the following steps to edit the Deep Freeze configuration:
1. Go to Networks and Groups Pane in Enterprise Console.
2. Select Available Configurations > Deep Freeze > [Configuration Name].
3. Right-click on the selected configuration and select Edit Selected Configuration.
4. Edit the settings as required.
5. Click OK.

Deleting Deep Freeze Configuration
Complete the following steps to delete the Deep Freeze configuration:
1. Go to Networks and Groups Pane in Enterprise Console.
2. Select Available Configurations > Deep Freeze > [Configuration Name].
3. Right-click on the selected configuration and select Delete Selected Configuration.
4. Click Ok.

Exporting Deep Freeze Configuration
Complete the following steps to export the Deep Freeze configuration:
1. Go to Networks and Groups Pane in Enterprise Console.
2. Select Available Configurations > Deep Freeze > [Configuration Name].
3. Right-click on the selected configuration and select Export As. There are three options:> Select Workstation Installer. Specify a name and click Save.
> Select Workstation Seed. Specify a name and click Save.
> Select Configuration File. Specify a name and click Save.

Deep Freeze Enterprise User Guide

63

64

|

Using Deep Freeze Enterprise Console

Configuration Generator
Deep Freeze Console provides a tool called the Configuration Generator to automaticallycreate Deep Freeze Installation or Deep Freeze Configuration files based on theparameters specified in a CSV file. A Sample CSV file is provided which can be edited toinclude unlimited entries. The parameters for the settings in CSV file are identical to thesettings in the Deep Freeze Enterprise Configuration Administrator. The column title in
the CSV file represents the particular setting and the row represents an entry for a single
Deep Freeze Configuration or Deep Freeze Installation file.
Complete the following steps to generate multiple Deep Freeze Installation files using
the Configuration Generator:
1. Launch Deep Freeze Console. Go to Tools > Configuration Generator. Alternatively, you
can also launch it from the Deep Freeze Enterprise Configuration Administrator from
File > Configuration Generator.

2. Click Browse in the Configuration Generator.
3. Select the configuration file (.csv) file.
4. Click Generate.
Deep Freeze Installation file or Deep Freeze Configuration files are created.
If you are using the Configuration Generator for the first time, click Sample
CSV to download a template of the file. You can update the Sample CSV filewith the values required for generating the Deep Freeze Installation or Deep
Freeze Configuration files. It is recommended to save the file with a more
descriptive name.

Deep Freeze Enterprise User GuideConfiguration Generator|

Using Configuration Generator from Command LineYou can also generate the Deep Freeze Installation or Deep Freeze Configuration files
from the command line. Launch the command line from the Deep Freeze Installation
location, provide the following parameters and press enter:
32-bit systems:[System Drive]:\Program Files\Faronics\Deep FreezeEnterprise\DFAdmin.exe import [PATH\ConfigurationFile.csv]

64-bit systems:[System Drive]:\Program Files (x86)\Faronics\Deep FreezeEnterprise\DFAdmin.exe import [PATH\ConfigurationFile.csv]

The Deep Freeze Installation or Deep Freeze Configuration files are generated and savedin the location specified in the CSV file.
If you are running the command in synchronous mode, specify the command as follows:
start /wait [System Drive]:\Program Files\Faronics\Deep FreezeEnterprise\DFAdmin.exe import [PATH\ConfigurationFile.csv]

Configuration File Parameters
The following table explains the parameters in the Configuration File:•

Do not modify the column headings. Modifying the headings will lead to Deep Freeze
ignoring the particular cell values. The default values in the Deep Freeze Enterprise
Configuration Administrator will be used.

•

For parameters with multiple entries, add multiple columns. For example, Passwords,
ThawSpaces etc., can have multiple columns like Password1Enable, Password2Enable,
ThawSpace1Drive, ThawSpace2Drive.

•

Leaving the entry blank or deleting an entire column will use the default value in the
Deep Freeze Enterprise Configuration Administrator. If the mandatory fields have novalues, or if the columns representing the mandatory fields are deleted, the Deep
Freeze Installation or Deep Freeze Configuration files will not be generated. An error
message will be generated and stored in the log file. Click the Review log file for failed
configurations link in the Configuration Generator to view the error log.

•

Do not use a comma (,) for the name of the parameter or value.

•

Parameter names and values are not case sensitive.

•

Fields that require date will use the format yyyy/mm/dd.

•

Fields that require time will use the format hh:mm:ss (24-hour clock).

Deep Freeze Enterprise User Guide

65

66

|

Using Deep Freeze Enterprise Console

Column/Parameter

Description

FileName

Specify the file name and path where the files will be saved.

rdx

Specify 1 for generating the Deep Freeze Configuration file. Specify 0 to
not generate the Deep Freeze Configuration file.

exeSpecify 1 for generating the Deep Freeze Installation file. Specify 0 to
not generate the Deep Freeze Installation file.

Password1Enable

Specify 1 for enabling the password 1. Specify 0 to disable the password
1.

Password1Type

Specify Workstation or Command Line.

Password1UserChange

Specify 1 if user is allowed to change. Specify 0 if the user is not allowed
to change.

Password1

Specify the password.

Password1TimeOut

Specify 1 if password will timeout. Specify 0 if password will nottimeout.

Password1Activation

Specify the password activation date.

Password1Expiration

Specify the password expiration date.

FrozenDrives

Specify the Frozen drive letters in a single line (for example CDEF).

ThawSpace1Drive

Specify the ThawSpace drive letter.

ThawSpace1Size

Specify the ThawSpace size.

ThawSpace1SizeUnit

Specify the unit whether MB or GB.

ThawSpace1HostDrive

Specify the ThawSpace host drive letter.

ThawSpace1Visibility

Specify Visible if the ThawSpace is visible. Specify Hidden if theThawSpace is invisible.

RetainExistingThawSpaceSpecify 1 for retaining the ThawSpace. Specify 0 for deleting theThawSpace.

HonorGPSettingsSpecify 1 to enable Honor Group Policy Settings. Specify 0 to disable
Honor Group Policy Settings.

USB

Specify 1 to keep USB external drives Thawed. Specify 0 to keep USB
external drives Frozen.

FireWire

Specify 1 to keep FireWire external drives Thawed. Specify 0 to keep
FireWire external drives Frozen.

Deep Freeze Enterprise User GuideConfiguration Generator

Column/Parameter

Description

LAN_WANSpecify 1 if the communication between workstation and Deep Freeze
Console is LAN/WAN mode. Specify 0 if the communication between
workstation and Deep Freeze Console is not LAN/WAN mode.

UseDefaultPort

Specify 1 to use the default port 7725. Specify 0 if the default port is not
to be used.

Port

Specify the port.

ConsoleIP_NAME

Specify the Console IP, which must be static or the name.

DisableCMD

Specify 1 to disable the command line. Specify 0 to enable commandline.

EnableLocalPolicies

Specify 1 to enable Deep Freeze Local policies. For enhanced security,
Deep Freeze removes the following local privileges: debugging
programs, modifying firmware, and changing the system time. Specify 0
to disable Deep Freeze Local policies.

AllowChangeClockSpecify 1 to allow Frozen users to adjust the system clock. Specify 0 if
Frozen users are not allowed to adjust the system clock.

ManageSCP

Specify 1 to manage Secure Channel Password. Specify 0 to disable
Secure Channel Password.

RestartOnLogoff

Specify 1 to Restart the workstation on logoff. Specify o to disable theRestart the workstation on logoff.

ProtectMBR

Specify 1 to protect the Master Boot Record. Specify 0 if you do notwant Deep Freeze to protect the Master Boot Record.

ShowFrozenIcon

Specify 1 to show Frozen icon in the system tray. Specify 0 to hide
Frozen icon in the system tray.

ShowThawedIcon

Specify 1 to show Thawed icon in the system tray. Specify 0 to hide
Thawed icon in the system tray.

DelayFrozenReboot

Specify 1 to Delay Frozen Reboot to complete Windows Updates.
Specify 0 to disable the Delay Frozen Reboot to complete Windows
Updates option.

BatchAuthentication

Specify 1 for Batch Authentication. Specify 0 for no Batch
Authentication.

UserAccountSpecify 1 to use a user account. Specify 0 to use a system account.

LoginID

Specify the login ID.

Password

Specify the password.

DomainSpecify the domain.

Tree

Specify the Tree.

|

Deep Freeze Enterprise User Guide

67

68

|

Using Deep Freeze Enterprise Console

Column/Parameter

Description

Context

Specify the Context.

ServerSpecify the Server name.

BatchFile

Specify the contents of the batch file. Only 1 line is supported.

AllowWUDownload

Specify 1 to allow Deep Freeze to choose how Windows Updates aredownloaded. Specify 0 if Deep Freeze will not choose how Windows
Updates are downloaded.

CacheWU

Specify 1 to Cache Windows Updates. Specify 0 if Windows Updates are
not to be cached.

WSUS

Specify 1 to use WSUS for Windows Updates. Specify 0 if WSUS will not
be used for Windows Updates

UseWSUSTarget

Specify 1 to use a WSUS Target. Specify 0 if a WSUS Target will not be
used.

WSUSServer

Specify the URL for WSUS.

WSUSTarget

Specify the WSUS Target.

Task1Enabled

Specify 1 to enable a Workstation Task. Specify 0 to disable aWorkstation Task.

Task1TypeSpecify the type of task – Restart, Shutdown, Batch File, Windows
Update or Idle Time task. The Start Time for the Idle Time task must be
0:00:00.

Task1Name

Specify the name of the task.

Task1Day

Specify the day.

Task1Start

Specify the start time.

Task1End

Specify the end time.

Task1AllowCancel

Specify 1 to allow user to cancel the task. Specify 0 if a user is notallowed to cancel the task.

Task1ShutdownAfterTask

Specify 1 to shut down the workstation after the task. Specify 0 to if
Deep Freeze will not shut down the workstation after the task.

Task1DisableInput

Specify 1 to disable keyboard and mouse. Specify 0 if keyboard andmouse are not to be disabled.

Task1ShowMessageFor

Specify the number of minutes to show message.

Task1StartMessage

Specify the message when the task starts. Only 1 line is supported.

Task1DuringMessage

Specify the message during the message. Only 1 line is supported.

Deep Freeze Enterprise User Guide

Deep Freeze Enterprise Console|

Deep Freeze Enterprise Console
The Deep Freeze Enterprise Console displays the status of all Frozen, Thawed, and Target
computers on the network and allows the administrator to perform specific tasks on
those computers. Detailed status information is available with selective or groupreporting.
To search for a computer, click into the search bar shown on the upper right of theconsole and enter your search string. You can use wildcards when performing a search.
This feature searches throughout all columns.
The Enterprise Console allows administrators to remotely perform the following tasks:•

Immediately Target Install computers•

Selectively Freeze, Thaw, or Thaw Lock one or more computers•

Lock or Unlock selected computers•

Restart or shutdown computers•

Stop scheduled maintenance•Power on computers equipped with a Wake-on-LAN network card•

Update Deep Freeze software•

Schedule tasks directly from the Console•

Send messages to computers•

Import groups and containers from Active Directory•

Generate One Time Passwords•

Schedule Actions•

Customize the Enterprise Console•

Update the License Key•

Log in a user

The Enterprise Console can only wake a computer from a powered-down state if thecomputer is properly configured to power on when a Wake-on-LAN packet is received.

Launching the Enterprise Console
The Enterprise Console is installed with the Deep Freeze Enterprise Configuration
Administrator. Open the Console by selecting the following path from the Start menu:
Start > All Programs > Faronics > Deep Freeze Enterprise > Deep Freeze Console

Activating the Enterprise Console
As a security feature of Deep Freeze Enterprise the OTP feature prevents unauthorized
Deep Freeze Enterprise Console use. When the DFConsole.exe file is copied to a newcomputer, the Console must be activated. When it is run for the first time on the newcomputer, a dialog displays with an OTP Token.

Deep Freeze Enterprise User Guide

69

70

|

Using Deep Freeze Enterprise Console

The network administrator enters this token in the Configuration Administrator’s OTP
Generation System. An OTP is generated. Enter it in the dialog and the Console will run.
The computer on which the Enterprise Console is installed must not have an installationof the Workstation Seed (using the same port) or a full Deep Freeze installation.

Status Icons
The Enterprise Console displays the status of the computers on the local area networkwith the following icons beside or above the computer name, depending on the view
selected:
Classic Look

Modern Look

Definition
Target: Computers that have the Deep Freeze Workstation Seedinstalled but do not have Deep Freeze installed; Deep Freeze can only
be remotely installed on computers with this icon

Computers with Deep Freeze installed in a Frozen state

Computers with Deep Freeze installed in a Thawed state

Computers with Deep Freeze installed in a Thawed Locked state

Computers that are currently powered down

Computers that are currently in Maintenance Mode

Computers whose communication with the Console has beeninterrupted

Computers that are Locked

Deep Freeze Enterprise User Guide

Deep Freeze Enterprise Console

Classic Look

Modern Look|

Definition
Computers that are Thawed for the period longer than defined in theThawed Alert settings

Computers that are Thawed Locked for the period longer than definedin the Thawed Alert settings

Deep Freeze Enterprise User Guide

71

72

|

Using Deep Freeze Enterprise Console

View Columns
Deep Freeze Enterprise Console provides the ability to specify the columns that are
displayed in the Workstations pane. Complete the following steps to display the desired
columns:
1. Go to View > Columns.
2. Select the following columns to display:> Configuration> Configuration Date
> Expiry Date
> Installation File
> IP Address> License Status> Login Name
> MAC Address> Operating System> Port> Status> Thawed For> ThawSpace Free
> Version> Workgroup> Anti-Virus

Deep Freeze Enterprise User Guide

Status Based Selection|

Status Based Selection
You can select the workstations based on the Deep Freeze status on the managed
workstations. The status based selection can be done through the Select menu in the
Deep Freeze Enterprise Console. The Select menu has the following options:•

Select All Frozen – Selects the workstations in Frozen state. Workstations that are
Frozen and Locked are also selected.

•

Select All Thawed – Selects the workstations in Thawed state. Workstations that are
Thawed and Locked are also selected.

•

Select All Target – Selects all the target computers where Deep Freeze can be installed.

•

Select All – Selects all workstations.

The following selection options are available from the Status pane as well:•

Frozen – Selects the workstations in Frozen state. Workstations that are Frozen andLocked are also selected.

•

Thawed – Selects the workstations in Thawed state. Workstations that are Thawed andLocked are also selected.

•

Target – Selects all the target computers where Deep Freeze can be installed.

•

History – Displays the history.

•

Total – Selects all workstations.

The status pane on Deep Freeze Enterprise Console can also be used to select and display
the workstation count for a particular state.

Deep Freeze Enterprise User Guide

73

74

|

Using Deep Freeze Enterprise ConsoleManaging Communication Between the Console and Workstations
There are two types of connections from Console to workstation and Console to Console:
1. Local connections – Connections that can only be accessed by the Enterprise Consolethat hosts those connections.
2. Remote control enabled connections – Connections that can be accessed by theConsole that hosts as well as other Consoles connected remotely.
The Server Service for Deep Freeze 6.5 will not automatically update theServer Service for Deep Freeze 6.4 or lower. Both services can be installed on
the same computer, but only one service can run at a time.
A computer can lose communication with the Console for any of the following reasons:•

The computer is powered off manually or is shut down without warning•

The network is experiencing heavy traffic or outages•

The computer’s network settings are changed to point to a new Console

In most cases, communication with the computer is re-established when the computer ispowered on or when the conditions causing the communications breakdown are
rectified. It may take several minutes for the computer to report back to the Console andre-establish communication. If communication cannot be re-established, contact
Technical Support for troubleshooting steps.

Configuring the Local Service
The local service is a service that sets up and maintains connections to computers.
Enabling the Local Service
By default the local service will be installed and enabled when the Console is first run.
To enable the local service again if it has been disabled (and/or uninstalled)
1. Select Tools > Network Configuration.

Deep Freeze Enterprise User Guide

Managing Communication Between the Console and Workstations|

2. Select the Enable local service checkbox to enable it.

Disabling the Local Service
Clearing the Enable local service checkbox and clicking OK displays the option to either
disable the local service or uninstall the local service.

Adding a Local Service Connection
1. To add local service connection, select Tools >Network Configuration.
2. To add a connection select Add and specify the port number (7725 in this case).
3. To enable the Console to be controlled remotely, select Allow Remote Control
checkbox and specify a password.
After selecting Add, a connection that serves port 7725 will be created in the connections
list of the local service as well as the in the network pane of the Console.

Deep Freeze Enterprise User Guide

75

76

|

Using Deep Freeze Enterprise Console

Editing or Removing a Local Service Connection
Once a Local Service connection has been added to it can be edited or removed throughthe Tools > Network Configuration.
To edit a local service connection perform the following steps:
1. Ensure the Enable Local Service option is selected.
2. Select a port from the Local Service connections list and click Edit.
3. The edit dialog appears that allows for the port to be controlled remotely andpassword protected.
4. To remove a port from the Local Service, highlight the port and click Remove. This
does not delete the entry from the Network and Groups pane in the Enterprise
Console. It simply removes it from the Local Service connections list.
5. To remove the entry form the network pane in the Console, select it and click theRemove icon located in the sidebar.

Configuring Proxy Server Connection
If you are using a proxy server to connect to the Internet, you must specify the proxy
server settings for the following features to work correctly:•

Check for updates•

Announcements•

License Activation

Complete the following steps to specify the proxy server settings:
1. Select Tools > Network Configuration.
2. Go to the Proxy Server tab.

Deep Freeze Enterprise User Guide

Managing Communication Between the Console and Workstations|

3. Select the Enable Proxy Server checkbox to enable it.

4. Specify the following proxy server settings:> Address – Specify the IP address of the proxy server.
> Port – Specify the port number for the proxy server.
5. This step is optional. Follow this step only if your proxy server requires authentication.
Select My proxy server requires authorization (logon credentials) checkbox and specify
the values for the following fields:> Authentication Type – Select the authentication type.
> Username – Specify the username.
> Password – Specify the password.
> Domain – Specify the domain.
6. Click OK.

Deep Freeze Enterprise User Guide

77

78

|

Using Deep Freeze Enterprise Console

Remote Consoles
A Remote Console is a Console that hosts one or more connections that allow other
Consoles to connect through. Existing connections must be edited to allow them to beaccessed remotely.

Setting up Remote Control Enabled Connections
To allow a connection to be accessed remotely perform the following steps:
1. Open Tools > Network Configurations.
2. Select the Enable local service checkbox.
3. Select a port from the list and click Edit.
4. Ensure Allow Remote Control is selected.
5. Specify a password.
6. Click OK.

Deep Freeze Enterprise User GuideConnecting to a Remote Console|

Connecting to a Remote Console
Once a Remote Console has been established by the hosting Console it can be accessedby other Consoles from a different machine.
1. Select the Connect to Remote Console icon in the side bar or by right-clicking on the
network item. Upon selection the Connect to Remote Console dialog appears:

2. In the Connect to Remote Console dialog, specify the connection details such as
Remote Console Name, Remote Console IP, Port number, and Password. This
information is provided by the administrator of the host Console. Once entered, thisinformation can be retrieved by right-clicking a port in the Network and Groups Paneand selecting Properties.
If the connection to a Remote Console has been severed, it can bereconnected by clicking the Reconnect to Remote Console icon in the sidebar
or by right-clicking on an entry in the Network and Groups pane.

Deep Freeze Enterprise User Guide

79

80

|

Using Deep Freeze Enterprise ConsoleManaging Deep Freeze with the Console
The Enterprise Console contains a toolbar at the top of the screen that allows quick
access to the functions of the Console.
Go to View > Classic Look to view the icons in Classic Windows format.

Go to View > Modern Look to view the icons in Modern Windows format.

These commands can also be accessed using the contextual menu, as shown below, thatappears by right-clicking on one or more computers. When a particular action is chosen,
the selected computer performs the action and the status icons update accordingly. If
multiple computers are selected, the action is applied only to the applicable computers.
For example, if you select computers that are Thawed and Frozen and apply the Reboot
Thawed action, only the Frozen computers will be Thawed. The action will not be appliedon the computers that are already Thawed.

Deep Freeze Enterprise User Guide

Managing Deep Freeze with the Console|

Specific icons are disabled if the selected computer does not support that action. For
example, a computer that has a Target icon, will not show the option to be Thawed or
Frozen, because the program has not been installed yet.

Reboot Thawed/Reboot Thawed Locked for an Assigned Number of Times
You can select to reboot a workstation in Thawed or Thawed Locked state for an assigned
number of times. When selected, this option will keep the workstation in a Thawed state
whenever it reboots for the next assigned restarts.
Complete the following steps:
1. Select one or multiple workstations.
2. Right-click and select Reboot Thawed or Reboot Thawed Locked.
3. Select the Thaw Computer(s) for next X restarts and assign the number of restarts.
Selecting this option will reboot the workstation in Thawed or Thawed Locked state
for the assigned restarts.
For example, when you assign ’3’ as the number of restarts, the workstation will remain
in a Thawed or Thawed Locked state after rebooting the next 3 times.
The maximum number of times you can select to reboot the workstation in Thawed orThawed Locked state is 99.

Login User
Administrators will be able to log in a user on selected computer(s) without having towalk up to each computer.
For this feature to work, the computers must be configured to hide the user account fromthe Windows logon screen and display the User Name and Password fields during logon.
This policy is mandatory for the Login User feature to be enabled in Deep
Freeze.
To hide the last logged user name on a Windows welcome screen, go to Local Security
Policy > Security Settings > Local Policies > Security Options > Interactive Logon: Don't

Deep Freeze Enterprise User Guide

81

82

|

Using Deep Freeze Enterprise Console

Display Last Signed In (Username at Sign-in) > select Enabled. Note that this policy isdisabled by default.
If CTRL+ALT+DEL is required before a user can log on to Windows, you will need toadditionally configure the following policies:•

Go to Local Security Policy > Security Settings > Local Policies > Security Options >Interactive Logon: Do not Require CTRL+ALT+DELETE > select Enabled.

•

Go to Local Computer Policy > Administrative Templates > Windows Components >Windows Logon Options > Disable/enable Software Secure Attention Sequence (orSAS).
This feature will not work if the Deep Freeze license is expired.
The last 10 user logins will be remembered, and the password needs to beentered every time a user is selected.
This feature is not available on computers that have only the Workstation
Seed installed.

Sending Messages to Computers
To send a message to one or more computers, complete the following steps:
1. Select the computer(s) to send a message.
2. Right-click and select Send Message from the contextual menu.
3. Type the message in the dialog that appears and click Send. Alternatively, you can also
send a previously sent message from the history drop-down. A dialog appears asking
for confirmation to send the message to the selected computers.
4. Click OK to send or Cancel to close the dialog without sending the message.

Updating a Deep Freeze Configuration File
Complete the following steps to update the configuration on one or many computer(s)with the settings of an existing .rdx file. (An .rdx file is a file containing the conditions
specified in the Deep Freeze Enterprise Configuration Administrator).
1. Right-click on the computer(s) and select Update with RDX file.
2. A message appears asking for an existing .rdx file to be located.
3. Click OK. A standard Open File dialog appears to select an .rdx file.

Deep Freeze Enterprise User Guide

Managing Deep Freeze with the Console|

4. Locate a file and click Open to update the configuration on the selected computer(s)with the settings in the .rdx file. Click Cancel to cancel the configuration update.

Run Windows Update
Windows Updates can be applied on demand from the right-click context menu.
Complete the following steps to run Windows Updates on the workstation.
1. Right-click on the computer(s) and select Run Windows Update.
2. Click OK.
Windows Updates are applied on the selected workstation(s). The settings configured in
the Windows Update Tab tab are used.
Apart from applying Windows Updates on demand from the right-click context menu,
you can also schedule the Windows Updates task. For more information, refer to
Scheduling Deep Freeze Tasks on how to schedule a Windows Updates task.
If the Network options in the new configuration have changed, thecomputer(s) may lose communication with the existing Enterprise Console. If
communication with the computers is lost, check the Network settings on
the updated computers to ensure that the port numbers and/or IP address of
the Console have not been changed.
Changes to passwords take effect immediately. All other changes take effectafter each computer is restarted. ThawSpace and/or Frozen Drives cannot bechanged through updating the configuration file.

Remote LaunchThis feature allows IT administrators to remotely launch executable files on managed
workstations. File types supported are .exe (executables), .msi (MSI installers), .bat/.cmd(batch script), .vbs (VB script), and .ps1 (PowerShell). When an MSI installer is selected,
Deep Freeze runs it using MSIEXEC.
You can also specify a web URL or FTP location for downloading and installing executable
files. The file will be automatically downloaded from the specified location and launchedon the workstation.
To remotely launch executables on workstations, complete the following steps:
1. An executable can be launched on workstations in one of the following ways:> Right-click on one or more workstations and select Remote Launch from the context
menu.
> Scheduled through Deep Freeze tasks.

Deep Freeze Enterprise User Guide

83

84

|

Using Deep Freeze Enterprise Console

2. Specify the values for the following fields or alternatively, select a previously specified
value from the history drop-down:> Filename and Path – Specify the filename and path where the file is available on thetarget computer. Alternatively, you can browse to select the executable. Or specify
a URL or FTP location. File types supported are .exe, .msi, .bat/.cmd, .vbs, and .ps1.
MSI installers are run in install mode by default. For example, if the executable
MyApplication.exe is available at C:/AppFolder, specify
C:/AppFolder/MyApplication.
3. Specify the Command Line Parameters with environment variables (optional):> Arguments – Specify the arguments that you want to apply with this executable. For
example, if the executable is run from the command prompt with the command
C:\AppFolder\MyApplication -o logFile.log, specify -o logFile.log for arguments. For.msi files, specify the arguments that you would normally specify when launching a.msi file with MSIEXEC. If you do not specify any argument for a .msi file, Deep
Freeze will automatically append "/i" (install). Deep Freeze also replaces any display
options with /qn, (quiet, no UI).
4. Click OK.
The file is remotely launched on the selected workstations.

Push and LaunchThis feature allows IT administrators to push and launch executable files on managed
workstations.
You can also specify a web URL or FTP location for downloading and installing executable
files. The file will be automatically downloaded from the specified location and launchedon the workstation.
Complete the following files to push and launch files on managed workstations:
1. An executable can be launched on workstations in one of the following ways:> Right-click on one or more workstations and select Push and Launch from thecontext menu.
> Scheduled through Deep Freeze tasks.

Deep Freeze Enterprise User Guide

Managing Deep Freeze with the Console|

2. Browse to select the file path or specify the file path (or alternatively, select apreviously specified value from the history drop-down):> Filename and Path – Specify the filename and path where the file is available on the
console computer. Alternatively, you can browse to select the executable. Or specify
a URL or FTP location. File types supported are .exe, .msi, .bat/.cmd, .vbs, and .ps1.
MSI files are run in install mode by default. For example, if the executable
MyApplication.exe is available at C:/AppFolder, specify C:/AppFolder/MyApplication.
3. Specify the Command Line Parameters with environment variables (optional):> Arguments – Specify the arguments that you want to apply with this executable. For
example, if the executable is run from the command prompt with the command
C:\AppFolder\MyApplication -o logFile.log, specify -o logFile.log for arguments. For.msi files, specify the arguments that you would normally specify when launching a.msi file with MSIEXEC. If you do not specify any argument for a .msi file, Deep
Freeze will automatically append "/i" (install). Deep Freeze also replaces any display
options with /qn, (quiet, no UI).
4. Click OK.
The file is pushed to the selected workstation and remotely launched on the selected
workstations.

Format ThawSpace
Deep Freeze Enterprise Console provides the ability to format a specific ThawSpace or all
ThawSpaces on managed workstations.
Complete the following steps to format ThawSpaces:
1. Select one or multiple workstations.
2. Right-click and select ThawSpaces > Format ThawSpace. Alternatively, you can click theFormat ThawSpace icon in the toolbar.

Deep Freeze Enterprise User Guide

85

86

|

Using Deep Freeze Enterprise Console

3. The Format ThawSpace dialog is shown. Select All or select the specific drive toformat.

4. Select I understand there is no going back and everything within the ThawSpace(s) will
be permanently deleted.
5. Click OK.
The Format ThawSpace command deletes all data on ThawSpaces. The datacannot be recovered once it is deleted. Backup important files before
formatting the ThawSpace.

Delete ThawSpace
Deep Freeze Enterprise Console provides the ability to delete a specific ThawSpace ordelete all the ThawSpaces on managed workstations.
Complete the following steps to delete ThawSpaces:
1. Select one or multiple workstations.
2. Right-click and select ThawSpaces > Delete ThawSpace. Alternatively, you can click the
Delete ThawSpace icon in the toolbar.
3. The Delete ThawSpace dialog is shown. Select All or select the specific drive to delete.

4. Select I understand there is no going back and the ThawSpace(s) will be permanently
deleted.
5. Click OK.

Deep Freeze Enterprise User Guide

Managing Deep Freeze with the Console|

Viewing the Console Log FileThe Enterprise Console keeps a log of the status and activity history of all connectedcomputers. The log stores information for the previous 7 days. Information older than 7days is automatically deleted from the log.

•

To view the log file for one or many computers, right-click on the computer(s) andselect Show Log.

•

To sort the log file, click on a preferred heading. The following columns are available:> Workstation> Domain> Time> Status
The Status column displays the current status of the computer and how thecomputer was rebooted.
For example, if the computer was rebooted to a Thawed state through the console,
the status will display as Thawed (Console).
> IP Address> MAC Address> Applied Command (Frozen, Thawed, Restart, Shutdown)> Installation File•To export the log file click Export As and select Text or CSV. Specify the name of the fileand click OK.

Deep Freeze Enterprise User Guide

87

88

|

Using Deep Freeze Enterprise Console

Target Installing Deep Freeze
Complete the following steps to remotely install a Full Workstation Installation on any
computer that has the Workstation Seed installed.
1. Right-click on one or multiple computers and select Install. A dialog is displayed,
asking if the installation should proceed. Click OK.
2. A dialog box appears to select the file to be installed on the remote computer.
3. Select the installation file to use and click Open.
4. The computer installs Deep Freeze and restarts.
5. Once the installation is complete, the Enterprise Console reflects the change in thecomputer’s status, and displays it as Frozen.

Updating Deep Freeze Software
To update Deep Freeze computers (where Deep Freeze 7.7 or higher is installed) with a
new version of Deep Freeze, complete the following steps:
1. In the Enterprise Console, select the computers to be updated. The computers can bein either a Frozen or Thawed state.
2. Right-click, and select Update Deep Freeze from the contextual menu.
3. The selected computers update to the new version of Deep Freeze software, but
retain all settings from the current version. The computers reboot twice to complete
the update.

Thawed Alerts
Thawed Alerts notify the administrator if a computer has been left in a Thawed state for a
specified period of time. Deep Freeze Enterprise Console will display the workstation icon
in red and the Thawed For column will display the number of hours the workstation has
been in a Thawed state.
Complete the following steps to set a Thawed alert:
1. Go to Tools > Thawed Alerts.
2. The Thawed Alerts dialog is displayed. Select Enable Thawed Alerts if the workstation isThawed for more than x hours. Select the value for x.

3. Select Do not alert if workstation is in maintenance mode if you do not want to bealerted about workstations undergoing maintenance.
4. Click OK.

Deep Freeze Enterprise User Guide

Licensing|

Licensing
The License Key can be updated via the Deep Freeze Enterprise Console and theworkstation licenses can be activated either automatically or manually.
To activate the Deep Freeze workstation licenses automatically, complete the following
steps:
1. Launch the Deep Freeze Enterprise Console.
2. Go to Tools > Licensing.
3. The Licensing dialog is displayed.

4. Click Edit and enter the License Key in the License Key field.
5. Click Update License. This converts Deep Freeze from the Evaluation version to a
Licensed version. The License Key Type field displays the License Key. The Expiry Datedisplays the date and time when the license expires.
Deep Freeze automatically activates each workstation license via the Enterprise Console
or by connecting directly to the Faronics License Activation Server.
Activation of your product license is necessary to authenticate your copy andavoid product expiry. Deep Freeze workstations not activated within 30 dayscannot be Frozen.
The workstation will connect either via the local console or directly to theFaronics Activation server and transmit to our secure servers certain
information relating to your computer (including product version, license
key, machine ID, OS version, MAC address, CPU ID, and console machine ID)
as and when an Internet connection is available.

Deep Freeze Enterprise User Guide

89

90

|

Using Deep Freeze Enterprise Console

Manual Activation
To activate the Deep Freeze workstation licenses manually, first complete the steps 1-5
above. Thereafter, complete the following steps:
1. Click Activate Now. Two options are available:> Select Activate Online to activate Deep Freeze workstation license over the Internet.
The license on the workstation is activated on clicking Next. The computer must beconnected to the Internet to Activate Online.
> Select Activate Offline to activate the Deep Freeze workstation license with Faronics
by email or by phone. Click Next. The Activate Offline screen is displayed:

Deep Freeze Enterprise User Guide

Licensing|

2. Click Create Offline Activation Request File and click Save. Send the file toactivation@faronics.com to receive an Activation Response File. Browse to select the
Activation Response File received from Faronics. Click Apply Offline Activation Request
File.

The License Key is automatically updated on all computers communicating with theEnterprise Console. If a computer is offline (shut down or disconnected from the network),
the License Key is updated when the computer communicates with the Enterprise
Console.

License Icon
If you have workstations whose Deep Freeze licenses are not activated by Faronics License
Activation Server, an activation icon appears in the toolbar. You can activate theworkstations with pending activations either online or offline.
Complete the following steps to activate the workstations using the activation icon:
1. Click the drop-down on the activation icon.

2. Select Activate All Workstations Online. Deep Freeze Console contacts the Faronics
Licensing Server and activates the licenses. An Internet connection is required toactivate online.
3. Alternatively, select Activate All Workstations Offline. For more information about
offline activation, go to Manual Activation.

Deep Freeze Enterprise User Guide

91

92

|

Using Deep Freeze Enterprise Console

Scheduling Deep Freeze Tasks
Deep Freeze Enterprise offers two types of Deep Freeze Tasks:•

Single Task – Contains only one Deep Freeze task•

Combination Task – Can contain up to 5 Deep Freeze tasks for a maximum of 20
hours. A Combination Task cannot be run immediately and it can only be scheduled.

To schedule a Deep Freeze task in the Enterprise Console using the Scheduled Task
Wizard, complete the following steps:
1. Open the Scheduled Task Wizard in one of the following ways:> Click Scheduler in the Network and Groups pane and click the Add Task icon
> Right-click on Scheduler in the Network and Groups pane, and choose Add Task
The following screen is displayed:

2. Double-click the preferred task or select the task and click Next. The following tasks
are available for Deep Freeze:> Combination Tasks> Restart> Shutdown> Wake-on-LAN> Reboot Frozen> Reboot Thawed> Reboot Thawed Locked> Send Message> Login User
> Run Windows Updates> Remote Launch> Push and Launch

Deep Freeze Enterprise User GuideScheduling Deep Freeze Tasks|> Update> Format ThawSpace
3. In the following screen, enter a name for the task and choose the preferred task
execution schedule: Daily, Weekly, Monthly, or One time only. Task names must be
unique. No two tasks can have the same name. Click Next.

4. Depending on the choice of task execution, the time and date configuration options
that follow will vary. Click Next.

Deep Freeze Enterprise User Guide

93

94

|

Using Deep Freeze Enterprise Console

5. Click Finish once the configuration is completed.

The default start time for a task is five minutes from the current time.

To schedule a Combination Task in the Enterprise Console using the Scheduled Task
Wizard, complete the following steps:
1. Open the Scheduled Task Wizard in one of the following ways:> Click Scheduler in the Network and Groups pane and click the Add Task icon
> Right-click on Scheduler in the Network and Groups pane, and choose Add Task
The following screen is displayed:

Deep Freeze Enterprise User GuideScheduling Deep Freeze Tasks|

2. Select Combination Task and click Next.
3. In the following screen, enter a name for the task and choose the preferred task
execution schedule: Daily, Weekly, Monthly, or One time only. Task names must be
unique. No two tasks can have the same name. Click Next.

4. Depending on the choice of task execution, the time and date configuration options
that follow will vary. Click Next.

Deep Freeze Enterprise User Guide

95

96

|

Using Deep Freeze Enterprise Console

5. Select the task from the drop-down and specify the time. Click the + sign to add
another task. Repeat the process to add up to 5 tasks for a maximum of 20 hours.
Click Next.

6. Review the list of tasks and click Finish.

Editing Scheduled Tasks
To edit Scheduled Tasks, right-click the task and select Edit Task. Follow steps 1-5 insection Scheduling Deep Freeze Tasks.

Deep Freeze Enterprise User Guide

Assigning Computers to Scheduled Tasks|

Assigning Computers to Scheduled Tasks
After a task has been scheduled, it appears under the Scheduler in the Network andGroups pane of the Console.

To assign computers to a task, select the preferred computers from the Workstations panein the Console and drag them onto the preferred task. Or, drag a group onto the task.
To see which computers are assigned to a specific task, click on the task. The assigned
computers appear in the Workstations pane.
To delete a computer from a task, right-click on the computer and select Remove from
Task.

Adding a Task
To add a task, right-click on Scheduler and select Add Task.

Editing a Task
To edit a task, right-click on the task and select Edit Task.

Pausing a Task
To pause a task, right-click on the task and select Pause Task.

Resuming a Task
To resume a task, right click on the task and select Resume Task.

Deep Freeze Enterprise User Guide

97

98

|

Using Deep Freeze Enterprise Console

Deleting a Task
To delete a task, right-click on the task and select Delete Task.

Executing a Task Immediately
To execute a task immediately, right-click on the task and select Execute Task.

Scheduled Task Properties
To see the properties of a task, right-click on the task name and select View Properties.
The following screen displays:

Scheduled tasks will still execute even if the Enterprise Console is closed
provided the local service is enabled and the network connections are not
shutdown upon exiting the Enterprise Console.

Deep Freeze Enterprise User Guide

Managing Network and Groups|

Managing Network and Groups
The Enterprise Console automatically arranges computers by their workgroup or domain.
Click the appropriate workgroup or domain to view the computers in that workgroup or
domain.
The Enterprise Console can be used to define specific groups in order to arrange
computers.

Adding a GroupThe Add Group dialog allows you to configure multiple filters to sort the workstations
into different groups. This filter automatically updates the list of workstations based on
the changes in the selected parameters.
Complete the following steps to add a group with a Filter:
1. Right-click User Defined Groups in Network and Groups pane.
2. Select Add Group. The Add Group dialog is displayed:

3. Specify the Group Name.
4. Select Column.
5. Select Comparison.
6. Select Option And/Or if you are adding another filter.
7. Specify Value or Regular Expression.
8. Click Add.

Deep Freeze Enterprise User Guide

99

100

|

Using Deep Freeze Enterprise Console

The following table shows the Column, Comparison, Option, and Values.
Select Column

Select Comparison
EqualsWorkstations

Not Equal To
Regular Expression
EqualsWorkgroup

Not Equal To
Regular Expression

Select Option

Specify Value or Regular Expression

And

Specify the Value or Regular
Expression.

Or
And
Or

Specify the Value or Regular
Expression.

EqualsGreater Than
IP Address

Greater Than or Equal To

AndLess Than

Or

Specify the Value or Regular
Expression.

Less Than or Equal To
Regular Expression
FrozenFrozen and Locked
ThawedThawed and Locked
EqualsStatusNot Equal To
Regular Expression

And
Or

Applying Windows Update
Applying Batch File
Thawed Period
Maintenance Mode
License Expired
Workstation Seed
Unknown

EqualsConfiguration

Not Equal To
Regular Expression

Deep Freeze Enterprise User Guide

And
Or

Specify the Value or Regular
Expression.

Managing Network and Groups

Select Column

Select Comparison

Select Option|

Specify Value or Regular Expression

EqualsGreater Than
Configuration Date

Greater Than or Equal To

AndLess Than

Or

Specify the Date.

Less Than or Equal To
Regular Expression
EqualsInstallation File

Not Equal To
Regular Expression

And
Or

Specify the Value or Regular
Expression.

EqualsGreater Than
VersionGreater Than or Equal To

AndLess Than

Or

Specify the Value or Regular
Expression.

Less Than or Equal To
Regular Expression
EqualsOperating System

Not Equal To
Regular Expression
Equals

MAC Address

Not Equal To
Regular Expression
EqualsLogin Name

Not Equal To
Regular Expression

And
Or
And
Or
And
Or

Specify the Value or Regular
Expression.

Specify the Value or Regular
Expression.

Specify the Value or Regular
Expression.

EqualsGreater Than
Thawed For

Greater Than or Equal To
Less ThanAnd
Or

Specify the Value.

Less Than or Equal To

Deep Freeze Enterprise User Guide

101

102

|

Using Deep Freeze Enterprise Console

Building a User-Defined Group Structure
After a group has been added, one or more sub-groups can be added below it, andfurther sub-groups can be added indefinitely as a way to differentiate between
environments, as in the example shown below.

Importing Groups from Active Directory
If the group structure has already been designed within Active Directory, that structure
can be imported directly into the Enterprise Console. Complete the following steps toimport from the Active Directory:
1. Select Tools > Import Groups from Active Directory, or click the LDAP icon located in
the sidebar.
2. The following dialog appears. Select either the Microsoft tab or the Novell tab.

3. Enter the LDAP server information of the import location. The option to login
anonymously is also available. If this checkbox is not selected, a user name andpassword is required.
4. Select Secure LDAP if your network uses Secure LDAP. (For more information on
Secure LDAP go to https://support.microsoft.com/en-ca/kb/321051)
5. Click Connect. The Active Directory hierarchy appears. Select the required entries andclick Import.

Deep Freeze Enterprise User GuideHistory|

History
The Enterprise Console stores the history of the target computers.
If a computer is disconnected from a network, shutdown or is restarting, an exclamation
sign (!) appears in the Enterprise Console for the particular computer. If the computercomes back online, the exclamation sign disappears.
If the computer goes offline permanently (for example, if the computer was permanently
unplugged from the network), or if the computer is shutdown, the exclamation sign stayson.
In the Enterprise Console, go to File > Exit. Select the option Close and shutdown network
connections option and click OK. Once you reopen the Enterprise Console, the computerswith the exclamation sign (!) will appear in History. If the computer is shutdown and isequipped with Wake-On-LAN hardware, right-click on the computer in History and selectWake-On-LAN to wake the computer.
Options in History:•

To view history, click History in the Networks and Groups pane.

•

To delete computer(s) from History, select the computer(s), right-click and selectRemove from History in the context menu.

•

To wake the computer using Wake-ON-LAN, select the computer(s), right-click andselect Wake-ON-LAN in the context menu.

Deep Freeze Enterprise User Guide

103

104

|

Using Deep Freeze Enterprise Console

Adding Computers to a Group
Computers can be added to a group by dragging them from the Workstations pane tothe preferred group, or by using an automatic filter set during the creation of the groups.
Automatic group filtering allows computers to be added to user-defined groups
automatically. The computers are added based on their computer name.
Wildcards (*, ?) can be used to add computers based on a specific segment of the name.
Example: Lab1-* adds all computers with names starting with Lab1- .
Sorting Groups Alphabetically
To sort the Groups alphabetically, right-click User Defined Groups and select Sort Groups
Alphabetically.
Removing Workstations from User Defined GroupTo remove a computer from a Group, right-click on the computer in User Defined Groups
and select Remove from Group.
Importing or Exporting Groups to File
To import groups from a file or export groups to a file, choose the preferred option fromthe Tools menu.

Deep Freeze Enterprise User GuideConfigure Custom Actions|

Configure Custom Actions
Deep Freeze provides the following custom actions that can be accessed via the Actions
menu. Additional actions can be created to suit specific needs. Deep Freeze provides
three default actions. Additional Custom Actions can be configured by importing theappropriate .xml file in the Deep Freeze Console. For more information on Custom
Actions, the structure of the custom action file and details about various parameters, refer
to Appendix E.

Control with RDC
This allows connecting to the computer through Microsoft Remote Desktop Protocol.
Remote Desktop Connection must already be enabled on the target machines.

1. Go to Action > Custom Actions.
2. Select Control with RDC.
3. Enter the Executable Path or browse to select the location.
4. Enter the Working Directory.
5. Click Apply.

Deep Freeze Enterprise User Guide

105

106

|

Using Deep Freeze Enterprise Console

Remote Execute with PsExec
Remote Execute allows you to remotely execute an executable file on a computer. PsExec
is a tool that can be used to remotely execute an executable file on a computer. PsExec
must be downloaded and installed on the computer. For more information on PsExec,visit http://www.faronics.com/pstools.

Configure
1. Go to Action > Custom Actions.
2. Select Remote Execute.
3. Enter the PSExec Location or browse to select the location.
4. The Executable path and the Working Directory are added automatically. The
Executable path and Working Directory can be modified later.
5. Click Close.
Execute1. Select the computers from the Workstations pane.
2. Select Action > Remote Execute.
3. The Remote Execute dialog is displayed.
4. Enter the User Name, Password and Command.
5. Click OK.

Deep Freeze Enterprise User GuideConfigure Custom Actions|

Push and Install MSI file with PsExec
The Push and Install MSI file option allows you to push and install a .msi file on acomputer through the Enterprise Console.

Configure
1. Go to Action > Custom Actions.
2. Select Push and Install MSI file.
3. Enter the PSExec Location or browse to select the location.
4. The Executable path and the Working Directory are added automatically. The
Executable path and Working Directory can be modified later.
5. Click Close.
Execute1. Select the computers from the Workstations pane.
2. Select Action > Push and Install MSI file.
3. The Push and Install MSI file dialog is displayed.
4. Enter the User Name, Password, File Name and Drive Letter.
5. Click OK.

Deep Freeze Enterprise User Guide

107

108

|

Using Deep Freeze Enterprise Console

Push and Launch
You can push and launch files on managed workstations.
Complete the following files to push and launch files on managed workstations:
1. Select one or more workstations from the Workstation pane.
2. Right-click and select Actions > Push and Launch. The Push and Launch dialog isdisplayed:

3. Browse to select the file path or specify the file path.
> Filename and Path – Specify the filename and path where the file is available on the
console computer. Alternatively, you can browse to select the executable. File types
supported are .exe (executables) and .msi (MSI installers). MSI files are run in installmode by default. For example, if the executable MyApplication.exe is available at
C:/AppFolder, specify C:/AppFolder/MyApplication.
4. Specify the Command Line Parameters with environment variables (optional):> Arguments – Specify the arguments that you want to apply with this executable. For
example, if the executable is run from the command prompt with the command
C:\AppFolder\MyApplication -o logFile.log, specify -o logFile.log for arguments. For.msi files, specify the arguments that you would normally specify when launching a.msi file with MSIEXEC. If you do not specify any argument for a .msi file, Deep
Freeze will automatically append "/i" (install). Deep Freeze also replaces any display
options with /qn, (quiet, no UI).
5. Click OK.
The file is pushed to the selected workstation and remotely launched on the selected
workstations.

Deep Freeze Enterprise User GuideConfigure Custom Actions|

Remote Launch
You can remotely launch executable files on managed workstations.
Complete the following files to remotely launch files on managed workstations:
1. Select one or more workstations from the Workstation pane.
2. Right-click and select Actions > Remote Launch. The Remote Launch dialog isdisplayed:

3. Browse to select the file path or specify the file path.
> Filename and Path – Specify the filename and path where the file is available on thetarget computer. Alternatively, you can browse to select the executable. File types
supported are .exe (executables) and .msi (MSI installers). MSI installers are run ininstall mode by default. For example, if the executable MyApplication.exe isavailable at C:/AppFolder, specify C:/AppFolder/MyApplication.
4. Specify the Command Line Parameters with environment variables (optional):> Arguments – Specify the arguments that you want to apply with this executable. For
example, if the executable is run from the command prompt with the command
C:\AppFolder\MyApplication -o logFile.log, specify -o logFile.log for arguments. For.msi files, specify the arguments that you would normally specify when launching a.msi file with MSIEXEC. If you do not specify any argument for a .msi file, Deep
Freeze will automatically append "/i" (install). Deep Freeze also replaces any display
options with /qn, (quiet, no UI).
5. Click OK.
The file is remotely launched on the selected workstations.

Deep Freeze Enterprise User Guide

109

110

|

Using Deep Freeze Enterprise Console

Deleting, Importing and Exporting Custom Actions
Deleting Custom Actions
To delete Custom Actions, complete the following steps:
1. Go to Action > Custom Actions.
2. Select the Custom Action to be deleted.
3. Click Delete.
Importing Custom Actions
To import Custom Actions, complete the following steps:
1. Go to Action > Custom Actions.
2. Click Import.
3. Browse to select the .xml file to be imported.
4. Click Open to import the file.
Exporting Custom Actions
To export Custom Actions, complete the following steps:
1. Go to Action > Custom Actions.
2. Select the Custom Action to be exported.
3. Click Export.
4. The Export Custom Action to File dialog is displayed.
5. Specify a File name and click Save.

Deep Freeze Enterprise User Guide

Console Customizer|

Console Customizer
The Console Customizer lets you specify which features and commands you want to beavailable in the Console, and save the result as a new Console that can be distributed inyour organization.
The available settings are grouped into categories (Console functions, Workstationcommands, Deep Freeze commands, Workstation install/uninstall commands, andScheduler commands). Click on the plus (+) icon to the far left of each category todisclose the full list of settings available in that category.
Select or clear the individual checkboxes as required. Alternatively, select or clear theentire categories at once. Settings that are cleared will not be available in the newEnterprise Console you create. For an example on how to use the Console Customizer in apractical scenario, refer to Appendix D.
Complete the following steps to create Consoles with limited functionality:
1. Select Tools > Console Customizer.
2. The Console Customizer is displayed.

3. Select the features to be displayed in the new Console.
4. Click Save As to save the Console. Specify a name for the file.
5. When you double-click the newly created .exe file, the Console with the limited
functionality is launched.

Deep Freeze Enterprise User Guide

111

112

|

Using Deep Freeze Enterprise Console

Deep Freeze Enterprise Console Shutdown
To shut down the Deep Freeze Console select File > Exit or click the close window button.
Upon exit, you can choose to:•

Minimize the Console to the system tray.
This does not stop the Console and keeps the connections active. The Deep Freeze
Console icon appears in the system tray. Scheduled tasks will still execute. To reopen
the Deep Freeze Enterprise Console, right-click its icon located in the taskbar andselect Restore Deep Freeze Console.

•

Close Deep Freeze Console and leave the network connections runningThis closes the Console but keeps the connections to the computers active.
Scheduled tasks will still execute.

•

Close Deep Freeze Console and shut down network connections.
This stops Console processes, closes the connections (including local service), andscheduled tasks will not start to execute. However, scheduled tasks that have started
executing will continue.

The dialog will not appear on future exits once the Set Default option has been selected.
To edit these settings select Tools >Exit Options.

Deep Freeze Enterprise User Guide

Installing Deep Freeze on the Workstation|

Installing Deep Freeze on the Workstation
After a customized installation program file has been created using the Configuration
Administrator, Deep Freeze can be deployed to computers using an Attended Install, aTarget Install, the Silent Install System, or as part of an imaging process.
All background utilities and anti-virus software should be disabled and allapplications should be closed prior to installation. These programs may
interfere with the installation, which could result in Deep Freeze notfunctioning correctly.
The computer restarts after any type of installation is completed. Deep Freeze must be ina Thawed state for any type of uninstall to succeed.
Any existing ThawSpace will be deleted during an uninstall if:•

The option to retain existing ThawSpace was not checked in the Configuration
Administrator.

•

The ThawSpace was not created with Deep Freeze Enterprise Version 5 or later.

Attended Install or Uninstall
To install or uninstall Deep Freeze, complete the following steps:
1. Run the installation program file (DFWks.exe) on the computer. The following screen
appears:
2. Click Install to begin the installation. Follow the steps presented, then read and accept
the license agreement. Deep Freeze installs and the computer restarts.
Click Uninstall to uninstall Deep Freeze. Uninstall can only be clicked if Deep
Freeze has previously been installed and the computer is currently Thawed. If
there is an existing ThawSpace, Deep Freeze displays a dialog asking if itshould be retained or deleted.
If the hard drive is too fragmented, it is not possible to create ThawSpace(s).
A message is displayed prompting you to abort installation, or install Deep
Freeze without ThawSpace(s).

Deep Freeze Enterprise User Guide

113

114

|

Using Deep Freeze Enterprise Console

If you select Delay Frozen reboot to complete Windows updates (Advanced
Options Tab in the Configuration Administrator) and install Deep Freeze, theinstaller checks if all Windows updates are completed. If the Windows
updates are not completed, Deep Freeze installation will not proceed.
Complete Windows updates and try installing Deep Freeze again.
If you disable Delay Frozen reboot to complete Windows updates and install
Deep Freeze, ensure that all Windows updates are completed without using
Deep Freeze. Disabling this option may result in the computer being stuck ina reboot cycle due to incomplete Windows updates.

Deep Freeze Enterprise User Guide

Uninstalling Deep Freeze on the Workstation via the Console|

Uninstalling Deep Freeze on the Workstation via the Console
The Enterprise Console can be used to uninstall Deep Freeze completely or to uninstall
Deep Freeze but leave the Workstation Seed. A computer must be in a Thawed state inorder to uninstall the program.

To uninstall Deep Freeze on a computer and leave the Workstation Seed, right-click on
the Thawed workstation(s) and select Uninstall (Leave Seed), as shown above. Or click theicon on the toolbar.
To completely uninstall Deep Freeze and the Workstation Seed, select the computer(s) to
be uninstalled and click the Uninstall icon on the toolbar.
The computer must be Thawed before Deep Freeze can be uninstalled. The
Enterprise Console prompts for confirmation. Once the uninstall isconfirmed, Deep Freeze uninstalls and the computer restarts.

Deep Freeze Enterprise User Guide

115

116

|

Using Deep Freeze Enterprise Console

Silent Install or Uninstall
Deep Freeze can be rapidly installed to many computers over a network using the Silent
Install System. Any deployment utility that allows execution of a command line on aremote computer can implement the Silent Install System. After the Silent Install iscomplete, the computer immediately restarts. The command line has the following
options:
SyntaxDescription[/Install]

Install Deep Freeze using installation file[/Install /Seed]

Install only the specified Workstation Seed file[/Install /Thawed]

Install Deep Freeze using installation file and boot into
Thawed state.

[/Uninstall]

Uninstall Deep Freeze[/Uninstall /Seed]

Uninstall Deep Freeze and leave the Workstation Seedinstalled[/PW=password]

Set a password during installation*[/AllowTimeChange]

Allow system clock to be changed*[/Freeze=C,D,...]

Freeze only drives listed (Thaw all others)*[/Thaw=C,D,...]

Thaw only drives listed (Freeze all others)*[/USB]

Exempt external USB hard disks from protection[/FireWire]

Exempt external FireWire hard disks from protection

Example Command Line
DFWks.exe /Install /Freeze=C /PW=password

In the above example, the Deep Freeze installation program file is named DFWks.exe.
Only the C: drive will be Frozen. Any other drives on the computer will be Thawed. If thecomputer only has a C: drive, the [/Freeze] switch can be omitted. A password (password)
will be created. After executing the command, Deep Freeze will install and the computer
will restart Frozen and ready to use.
The Silent Install System does not work without the [/Install] or [/Uninstall]
switch. Deep Freeze must be in a Thawed state before [/Uninstall] can be used.

Deep Freeze Enterprise User Guide

Silent Install or Uninstall|

To run the configuration command line options, Disable Command Line
options on the Advanced Options tab must be cleared.

* These options are disabled by default.

Silent Install or Uninstall Using a Shortcut
Deep Freeze can be installed directly on a computer without having to use the installation
dialog box by completing the following steps.
1. Locate the Deep Freeze installation program file (DFWks.exe) on the target computer.
2. Right-click on the icon and choose Create Shortcut.
3. Right-click on the shortcut and choose Properties.
4. Edit the path of the Target field by typing /install or /uninstall at the end of
the path.
Example Shortcut Target:
C:\Documents and Settings\DFWks.exe /install

Double-clicking on the new shortcut results in the immediate installation or uninstallationof Deep Freeze, followed by a restart of the computer.
Deep Freeze must be in a Thawed state before /uninstall can be used.
If the hard drive is too fragmented, it is not possible to create ThawSpace(s).
The installation is aborted.

Network Install on Multiple computers
The Silent Install System can also be used to install Deep Freeze on multiple computersover a network. If the workstations on the network use logon scripts, the scripts can beused to install Deep Freeze on all networked workstations automatically. All workstations
will restart Frozen and ready for use after installation has completed.
Use the following command line syntaxes to create an install error report log file:\\Server Name\Share Name\DFWks.exe /Install >> my.log

Deep Freeze Enterprise User Guide

117

118

|

Using Deep Freeze Enterprise Console

Installing Over Existing Deep Freeze Versions
Unless the Update Deep Freeze Software feature is used (for Deep Freeze 6.5 and higher),
all existing Deep Freeze versions must be uninstalled prior to performing any new Deep
Freeze installation.

Installing Using Imaging
Deep Freeze has been designed to work with all major imaging and desktop
management software. Use either an Attended Install or the Silent Install to install Deep
Freeze on a master image.
Deep Freeze must be prepared for deployment before finalizing a master image. To
prepare the master image for deployment complete the following steps:
1. Restart the computer into a Thawed state.
2. Launch Deep Freeze using the keyboard shortcut CTRL+SHIFT+ALT+F6. Alternatively,
press SHIFT and double-click the Deep Freeze icon in the System Tray.
3. Enter the password and click OK.
4. Click Set Clone Flag in the Boot Control tab.
5. The message The flag has been set successfully. Do you want to reboot your computernow? is displayed. Click Yes to reboot the computer immediately. Click No to reboot
the computer later.

Deep Freeze Enterprise User Guide

Silent Install or Uninstall|

The Set Clone Flag command is important during imaging since it boots thecomputers into a Thawed state if Deep Freeze is unable to read its
configuration file after the image is successfully installed.
If the Clone Flag is not set, and if Deep Freeze is unable to read its
configuration file, all drives are Frozen after the image is successfully
installed.
If you are using Sysprep, make sure you set the Clone Flag after preparing thesystem for imaging and just before starting Sysprep.
After imaging, the computers require an additional restart for Deep Freeze to correctly
detect the changes in disk configuration. If the computers are imaged in an unattendedmode, steps should be taken to ensure the computers are restarted to allow theconfiguration to update.
To return to the Frozen state after imaging is complete, set Deep Freeze to Boot Thawedon next n number of restarts (in the master image) so that after n number of restarts, thecomputer is automatically Frozen. Alternatively, use Deep Freeze Command Line Control
to Freeze selected computers.

Target Install
Deep Freeze can also be deployed using a Target Install from the Enterprise Console.

Deep Freeze Enterprise User Guide

119

120

|

Using Deep Freeze Enterprise Console

Check for Updates
Deep Freeze allows you to check if there are newer versions available.
Go to Help > Check for updates. This checks if there are newer versions of Deep Freezeavailable.

If a new version is available, click Download the latest version to update Deep Freeze.

Deep Freeze Enterprise User Guide

Managing Deep Freeze Computers|

Managing Deep Freeze Computers

This chapter describes managing computers where Deep Freeze is installed.

TopicsLogin Screen
Status Tab
Password Tab
Network Tab
ThawSpace Tab
Permanent Software Installations, Changes, or Removals

Deep Freeze Enterprise User Guide

121

122

|

Managing Deep Freeze Computers

Login Screen
Use one of the following ways to access Deep Freeze on a computer.
1. If the Deep Freeze icon is shown in the System Tray, hold down the SHIFT key anddouble-click the Deep Freeze icon. If the Deep Freeze is running in Stealth Mode andif the Deep Freeze icon is not displayed, the keyboard shortcut CTRL+ALT+SHIFT+F6
must be used to access the logon dialog.

2. Enter the administrator password and click OK to log on to Deep Freeze.
As an additional security feature, Deep Freeze prevents Brute Force attacks byautomatically restarting the computer after 10 unsuccessful login attempts.

Launching Deep Freeze on Touchscreen Devices
You can use CTRL+ALT+SHIFT+6 or CTRL+ALT+SHIFT+F6 to launch Deep Freeze on
touchscreen devices. However, you must enable the full keyboard before using theshortcut. You can also touch and hold on the system tray to launch the Deep Freeze
context-menu.

Deep Freeze Enterprise User Guide

Status Tab|

Status Tab
The Status tab displays the following options:

Status on Next Boot
The Status tab is used to set the mode Deep Freeze will be in after the next restart.

Choose one of the following options:•

Boot Frozen
To ensure that the computer is Frozen the next time it is restarted•

Boot Thawed on next
To ensure that the computer is Thawed each time it is restarted for the next specified
number of restarts. When that number of restarts is exceeded, the computer will bootFrozen.

•Boot Thawed
To ensure that the computer is Thawed each time it is restarted

Select the radio button next to the desired choice and click OK to save any changes.
Clicking Apply and Reboot will save any changes and reboot the computer immediately.

Clone
The Clone pane is used to prepare master images for the deployment process. For more
information, refer to the Installing Using Imaging section.

Deep Freeze Enterprise User Guide

123

124

|

Managing Deep Freeze Computers

License
1. To update the License Key, click Edit and enter the License Key in the License Key field.
2. Click Update License. This converts Deep Freeze from the Evaluation version to a
Licensed version. The License Key Type field displays the License Key. The Expiry Datedisplays the date and time when the license expires.
3. Click Activate Now. Two options are available:> Select Activate Online to activate Deep Freeze License online. This option is sameas step 1. Click Next after selecting this option. Deep Freeze is activated online on
clicking Next.
> Select Activate Offline. This option allows you to activate by phone or email. Click
Next after activating. The Activate Offline screen is displayed:

Deep Freeze Enterprise User Guide

Status Tab|

4. Click Create Offline Activation Request File and click Save. Send the file toactivation@faronics.com to receive an Activation Response File. Browse to select the
Activation Response File received from Faronics. Click Apply Offline Activation Request
File.

The License Key is automatically updated on all computers communicating with theEnterprise Console. If a computer is offline (shut down or disconnected from the network),
the License Key is updated when the computer communicates with the Enterprise
Console.

Deep Freeze Enterprise User Guide

125

126

|

Managing Deep Freeze Computers

Password Tab
The Password tab allows you to change the password.

1. Specify a new password in the Enter new password field.
2. Confirm the new password by re-entering the same password in the Confirm
password field.
3. Click OK.
4. The password is changed and a confirmation dialog is displayed.

Deep Freeze Enterprise User Guide

Network Tab|

Network Tab
The Network tab can be used to configure the network options on a computer.

To choose either the LAN or the WAN method of communication, click the preferred
option.
The default port number can be changed by clearing the Use Default Port checkbox andentering the required port number.
For more information on network configuration, refer to Appendix B.

Deep Freeze Enterprise User Guide

127

128

|

Managing Deep Freeze Computers

ThawSpace Tab
ThawSpace is a virtual partition on a computer that can be used to store programs, savefiles, or make permanent changes. All files stored in the ThawSpace are saved after arestart, even if the computer is Frozen.
ThawSpace is only available if it was set to be created in the Deep Freeze Enterprise
Configuration Administrator.

After uninstalling Deep Freeze, all the ThawSpaces become visible. When Deep Freeze isreinstalled, the ThawSpaces are Visible or Hidden as per the original settings in the
ThawSpace tab.
Any existing ThawSpace is deleted during an uninstall if any of the following apply:

Deep Freeze Enterprise User Guide•

The option to retain existing ThawSpace was not selected in the Configuration
Administrator•

The ThawSpace was not created with Deep Freeze Version 5 or higher

Permanent Software Installations, Changes, or Removals|

Permanent Software Installations, Changes, or Removals
Computers must be Thawed for any permanent changes to take effect. Installation ofsoftware often requires one or more restarts to complete the installation.
Deep Freeze helps administrators overcome challenges with maintaining theconfiguration of their computers in a production environment. Deep Freeze protects
computers from unauthorized changes, viruses and malware, that can leave computers ina non-functional state. Deep Freeze also provides features to retain user data while
protecting the computer.
For more information on how to implement Deep Freeze and ensure that the user data isretained, refer to Deep Freeze – Retaining User Data available at
http://www.faronics.com/library.

Deep Freeze Enterprise User Guide

129

130

|

Managing Deep Freeze Computers

Deep Freeze Enterprise User Guide

Managing Anti-Virus|

Managing Anti-Virus

This chapter describes installing and using Anti-Virus with Enterprise Console.

TopicsAnti-Virus Overview
Migrating to the New Anti-Virus
Enable Anti-Virus on Enterprise Console
Install Anti-Virus Client on the workstation
Anti-Virus Configuration
Using Faronics Anti-Virus from the Enterprise Console
Scheduling Anti-Virus Tasks
Using Anti-Virus on the Workstation
Check for Anti-Virus Updates
Update Faronics Anti-Virus
Updating Anti-Virus Definitions
Uninstall Anti-Virus Client from the Enterprise Console
Disable Faronics Anti-Virus from the Enterprise Console

Deep Freeze Enterprise User Guide

131

132

|

Managing Anti-Virus

Anti-Virus Overview
Anti-Virus can be installed and used via the Enterprise Console. Using Anti-Virus isoptional. Deep Freeze Enterprise can also be used independently without using
Anti-Virus.
The following sections are explained:

Deep Freeze Enterprise User Guide•

Enable Anti-Virus on Enterprise Console•

Install Anti-Virus Client on the workstation•

Anti-Virus Configuration•

Using Anti-Virus from the Enterprise Console•

Scheduling Anti-Virus Tasks•

Using Anti-Virus Client on the workstation•

Check for Updates•

Update Faronics Anti-Virus•

Uninstall Anti-Virus Client from the workstation•

Disable Anti-Virus on the Enterprise ConsoleMigrating to the New Anti-Virus|

Migrating to the New Anti-Virus
Complete the following steps to migrate to the new Anti-Virus:
1. Uninstall Legacy Anti-Virus.
2. Configure the new Anti-Virus policy.
3. Install new Anti-Virus.

Deep Freeze Enterprise User Guide

133

134

|

Managing Anti-Virus

Enable Anti-Virus on Enterprise Console
Anti-Virus is now part of the Enterprise Console and can be enabled from within. You
need to purchase a separate license for Anti-Virus.
Complete the following steps to enable Faronics Anti-Virus:
1. Launch the Deep Freeze Enterprise Console.
2. Go to Tools > Licensing > Faronics Anti-Virus License.

3. Select I would like to use Deep Freeze Console to manage Faronics Anti-Virus.
4. Click Edit.
5. Enter the License Key and click Update License.
6. Click Close. The Anti-Virus installer files are downloaded. The Anti-Virus columns are
displayed in the Workstation pane. The Anti-Virus sub-node is added under Available
Configuration in the Network and Groups pane.

Deep Freeze Enterprise User Guide

Install Anti-Virus Client on the workstation|

Install Anti-Virus Client on the workstation
Before installing Anti-Virus on the workstation, ensure that Deep Freeze Workstation
Install File or Deep Freeze Seed has been deployed to the workstation and theworkstation is in a Thawed state.
Complete the following steps to install Anti-Virus onto the workstation:
1. Select a workstation (or multiple workstations) from the Workstations pane >Anti-Virus tab.
2. Click the Anti-Virus icon in the menu bar and select Install Faronics Anti-Virus.
3. Select the Remove any incompatible antivirus products before installing Faronics
Anti-Virus checkbox to remove existing anti-virus programs.
4. Click OK to confirm the action.
The workstation reboots and Anti-Virus client is installed on the workstations.
The Anti-Virus options are enabled in the Anti-Virus tab.

Deep Freeze Enterprise User Guide

135

136

|

Managing Anti-Virus

Anti-Virus Configuration
An Anti-Virus configuration contains all the settings on how Anti-Virus runs on theworkstation(s). A configuration contains the action taken by the program, schedule,
proxy servers, error reporting and the functionality allowed to the user on theworkstation(s). The following sections explain how an Anti-Virus configuration is created
and applied.
Anti-Virus contains a Default configuration. The Default configuration
contains the most optimum configuration settings for managing Anti-Virus.

Creating Anti-Virus Configuration
Complete the following steps create a new Anti-Virus configuration:
1. Launch the Enterprise Console.
2. In the Network and Groups Pane, go to Available Configurations > AntiVirus.
3. Right-click and select Create new configuration.

4. Specify settings in the Workstation Settings node:

Deep Freeze Enterprise User Guide

Anti-Virus Configuration•|

User Actions pane

> Show taskbar icon – Select the checkbox to display Faronics Anti-Virus icon on thetaskbar at the workstation(s). If this checkbox is not selected, Faronics Anti-Virus will
be hidden to the user.
~ Allow manual scanning – Select the checkbox to allow users to manually initiate
Faronics Anti-Virus scanning at the workstation(s).
~ Allow user to take action on scan results – Select the checkbox to allow the
workstation user to take action on the scan results.
~ Allow user to abort a scan initiated locally – Select the checkbox to allow users
to abort the scan initiated locally at the workstation.

Deep Freeze Enterprise User Guide

137

138

|

Managing Anti-Virus•

Log Actions pane

> Logging Level – Select the logging level. Select None for no logging. Select Error tolog the error message. Select Trace for trace. Select Verbose for detailed logging.
> Number of logging files – Specify the number of logging files. The logging
information is stored in the files serially. For example, if there are 3 files A, B and C,
Faronics Anti-Virus first writes the error logs to file A. Once file A is full, it starts
writing to file B and finally file C. Once file C is full, the data in file A is erased andnew logging data is written to it.
> File size – Select the size of each file in MB.

Deep Freeze Enterprise User Guide

Anti-Virus Configuration•|

Windows Security Center pane

> Integrate into Windows Security Center – Select the checkbox to integrate Faronics
Anti-Virus into the Windows Security Center. Windows Security Center will notify
you via the System Tray if Faronics Anti-Virus is active or inactive.

Deep Freeze Enterprise User Guide

139

140

|

Managing Anti-Virus•

Updates pane

> Connect to Updates Web Server if there is no communication with Faronics Core
Server in the last x hours – Select the checkbox to connect to the Updates Web
Server and download Virus Definitions if the workstation loses contact with
Faronics Core Server. If you do not select this checkbox, the Virus Definitions will
not be updated if the workstation loses the connection with the Faronics Core
Server.

Deep Freeze Enterprise User Guide

Anti-Virus Configuration•|

Proxy pane

> Enable Proxy – Select the checkbox if the workstation(s) require a proxy to reachFaronics Core Server or Updates Web Server.
> Proxy Server Information – Specify the Address and Port.
> User Authentication
My proxy server requires authorization (logon credentials) – If the server requires
authentication, specify values for the following fields:~ Authentication Type – Select the authentication type.
~ Username – Specify the username.
~ Password – Specify the password.
~ Domain – Specify the domain.

Deep Freeze Enterprise User Guide

141

142

|

Managing Anti-Virus

5. Specify settings in the Scanning Settings node:•

Scanning Types pane

Faronics Anti-Virus provides three types of scans:> Quick Scan – Scans the commonly affected areas of your computer. This is shorterin duration than the Deep System Scan. Quick Scan also uses less memory than the
Deep System Scan.
> Deep System Scan – Performs a through scan of all areas of the computer. The time
taken for the scan depends on the size of your hard drive.
> Custom Scan – Performs a scan based on the selections made in the Policy Details
dialog.
For each type of scan, select the following options (some options may be grayed out
depending on the type of scan):> Enable rootkit detection – Detects if the computer is infected with a rootkit.
> Scan inside of archives – Scans the contents of a zip file. Select for the scan toinclude archive files, such as .RAR and .ZIP files. When a .RAR file is found to containan infected file, the .RAR file will be quarantined. If a .ZIP file is found to contain an
infected file, the infected file is quarantined and replaced by a .TXT file with text
indicating that it was infected and that it has been quarantined. Specify the File Size
Limit.
> Exclude removable drives (e.g USB) – Excludes the removable drives from the scan
process. Any external hard disks, USB drives etc will not be scanned.
> Scan the registry – Scans the registry.
> Scan running process – Scans all running processes.

Deep Freeze Enterprise User Guide

Anti-Virus Configuration•|

USB Devices pane

Select the checkbox to scan USB drives upon insertion and select one of the following
options:> Do not perform USB scan if another scan is already in progress – Select this option
to ensure that an active scan is not interrupted when a USB drive is inserted. The
USB drive must be manually scanned once the active scan is complete.
> Interrupt active scan for USB scan – Select this option to interrupt an active scan toscan the USB drive when it is inserted. Once the active scan is interrupted, it will notresume automatically and must be restarted manually.
> Suppress USB scan in progress dialogue – Select this option to hide indications that
Anti-Virus is scanning USB drives when they are inserted; no Anti-Virus interface will
open, and the system tray icon will not display tooltips indicating a scan in progress.
Users will be notified at the end of a scan if a virus was found, but if no viruses weredetected there will be no notification that the scan occurred.
Note that if the Scan USB drives upon insertion option is not selected, this option is
ignored.
If the Allow Manual Scanning checkbox is selected in the Workstation Settings
tab > User Actions pane, the USB device is scanned automatically. If the Allow
Manual Scanning checkbox is not selected, the USB device is not scanned
automatically.

Deep Freeze Enterprise User Guide

143

144

|

Managing Anti-Virus•

Schedule pane

Quick Scan:> Enable Quick Scan – Select the checkbox to enable Quick Scan.
> Start – Specify the start time.
> Stop – Specify the end time. The maximum duration between the Start time andStop time is 23.59 hours. The scan ends if all the files are scanned before the Stop
time. If the scan is not complete before the Stop time, it is aborted at the Stop time.
Alternatively, select When scan is complete to ensure that scan is completed.
> Days – Select the days when the scheduled Quick Scan will take place.
Deep Scan:> Enable Deep scan – Select the checkbox to enable Deep Scan.
> Start – Specify the start time.
> Stop – Specify the end time. The maximum duration between the Start time andStop time is 23.59 hours. The scan ends if all the files are scanned before the Stop
time. If the scan is not complete before the Stop time, it is aborted at the Stop time.
Alternatively, select When scan is complete to ensure that scan is completed.
> Days – Select the days when the scheduled Deep Scan will take place.

Deep Freeze Enterprise User Guide

Anti-Virus Configuration|

Options:> Randomize scheduled scan start times by x minutes – Specify the number ofminutes. The scheduled scan start time is randomized to reduce the impact on
network traffic. Faronics Anti-Virus reports to Faronics Core when the scanning
starts. This might impact the network traffic if the scan for multiple systems start at
the same time.
Missed scan options at start-up – Select one of the following options on how a scan
will be performed if the workstation was not ON during a scheduled scan:> Do not perform quick scan – Select this option if you do not want to perform quick
scan on startup.
> Perform quick scan approximately x minutes after start-up – Specify the number ofminutes after start-up when Faronics Anti-Virus must perform a quick scan.
> Prompt user to perform Quick Scan – Select this option to prompt the user toperform a quick scan.
•

Scan Exceptions pane
Folders or files that are known to the safe and free of infections can be added to the
Scan Exceptions tab. Files added to the Scan Exceptions tab will always be scanned by
Faronics Anti-Virus. However, Faronics Anti-Virus will never report the files as
malicious or infected. This feature is useful since files and folders that are known to besafe by the Administrator will not be reported as malicious.
A. Click Add.

Deep Freeze Enterprise User Guide

145

146

|

Managing Anti-Virus

B. In the Add dialog, select File by full path or Entire folder. Click Browse to select thefile or folder and click OK.

C. The File by full path is added to the Scan Exceptions pane.

Deep Freeze Enterprise User Guide

Anti-Virus Configuration•|

Cleanup Action pane

> Clean/Quarantine – When a threat is detected, attempt to disinfect the file andquarantine if unsuccessful. If the file could not be disinfected, it will be quarantined
and will not be deleted.
> Clean/Delete – When a threat is detected, attempt to disinfect the file and delete if
unsuccessful. If the file could not be disinfected, it will be deleted from thecomputer.
> Delete items from quarantine that are older than – Specify the number of days toretain items in quarantine. The default is 3 days.

Deep Freeze Enterprise User Guide

147

148

|

Managing Anti-Virus

6. Specify settings in the Active Protection pane:•

Enable Active Protection – Select this option to enable real-time protection. Active
Protection is the real-time scanning by Faronics Anti-Virus in the background without
any impact on system performance. If there is a risk of real-time virus infection fromthe Internet, select this option.
> Allow users to switch off Active Protection – Select this option to allow users toswitch off Active Protection. If users install or use software that might be mistakenfrom a virus (for example, running advanced Macros in Microsoft Office or complex
batch files), select this option.
> Show Active Protection alert – Select this option to display an alert if a threat is
detected during Active Protection. Do not select this checkbox if you do not wantan alert to be displayed.

Deep Freeze Enterprise User Guide

Anti-Virus Configuration|

7. Specify settings in the Firewall Protection node:
The Firewall Protection node provides bi-directional protection, protecting you fromboth incoming and outgoing traffic. You can create customized rules to protect yournetwork. You can either Allow or Block the communication.
•

Settings pane

Firewall Protection Settings> Enable Firewall Protection – Select the checkbox to enable Firewall Protection.
Firewall Protection prevents hackers or malicious software from gaining access toyour computer through the Internet or the network.
~ Allow users to disable firewall – Select this option to allow users to disable thefirewall at the computer.
Firewall Logging> Enable Firewall Logging – Select this option to log all actions related to the Firewall.

Deep Freeze Enterprise User Guide

149

150

|

Managing Anti-Virus•

Program Rules pane
Program Rules define the action taken by the firewall on the network activity to andfrom an application. Program Rules have priority over the default rules. Default rules
can be edited but cannot be deleted.

Click Add to add a new Program Rule. Specify or select the options and click OK. The
following parameters are displayed:

Deep Freeze Enterprise User Guide

Anti-Virus Configuration|> Name – Name of the rule.
> Program – Name of the program, including full path and extension.
> Trusted Zone Inbound – The action to be taken for inbound communication to theprogram in a Trusted Zone (Allow or Block).
> Trusted Zone Outbound – The action to be taken for outbound communicationfrom the program in a Trusted Zone (Allow or Block).
> Untrusted Zone Inbound – The action to be taken for inbound communication to
the program in an Untrusted Zone (Allow or Block).
> Untrusted Zone Outbound – The action to be taken for inbound communicationfrom the program in an Untrusted Zone (Allow or Block).
•

Network Rule pane
Network Rules define the action taken by the firewall on the network activity. Network
Rules can be edited but cannot be deleted.

Deep Freeze Enterprise User Guide

151

152

|

Managing Anti-Virus

Select the Network Rules for the following:

Deep Freeze Enterprise User Guide

Name

Description

Trusted
Zone
Inbound

TrustedZone
Outbound

Untrusted
Zone
Inbound

Untrusted
Zone
Inbound

IGMP

Internet GroupManagement
ProtocolSelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

Ping

Ping andTracertSelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow orBlock

OtherIcmp

Other ICMP
packets

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

DHCP

Dynamic Host
Configuration
ProtocolSelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

DNS

Domain Name
SystemSelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

VPN

Virtual Private
Network

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

BCAST

Broadcast

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

LDAP

Lightweight
Directory
Access Protocol

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

Kerberos

KerberosProtocols

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow orBlock

NETBIOS

Microsoft Fileand Printer
Sharing

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

SelectAllow or
Block

Anti-Virus Configuration•|

Advanced Rules pane
Advanced Rules define the action taken by the firewall for the specified application,
port or protocol. This may include a single or a combination of protocol, local or
remote ports, and direction of traffic. You can add, edit or delete an advanced rule.

Click Add to add a new Advanced Rule. Specify or select the options and click OK. The
following parameters are displayed in the Advanced Rules pane:

Deep Freeze Enterprise User Guide

153

154

|

Managing Anti-Virus> Name – Name of the rule.
> Program – Name of the program and path.
> Action – The action taken by the Firewall for communication from the specified
application, port or protocol (Allow or Block).
> Direction – The direction of communication (Both, In or Out).
> Protocol – The name of the protocol.
> Local Port – Details of the local port.
> Remote Port – Details of the remote port.
•

Trusted Zones pane
Trusted Zones specify computers, networks and IP addresses that are trusted. Trusted
Zones and Internet (Non-Trusted) Zones can be treated differently by Program andNetwork Rules.

Click Add to add a new Trusted Zone. Specify or select the options and click OK. The
following parameters are displayed:

Deep Freeze Enterprise User Guide

Anti-Virus Configuration|> Name – Name of the Trusted Zone.
> Description – Description of the Trusted Zone.
> Type – Type of the Trusted Zone (IP Address or Network).
8. Click OK. The new policy, New Policy 1 is displayed below the Anti-Virus node.

Applying Anti-Virus Configuration
Complete the following steps to apply the Anti-Virus configuration:
1. Go to Workstations pane.
2. Select one or more workstations.
3. Right-click on one or more workstations and select Update Configuration > Anti-Virus> [Configuration Name].
The configuration is applied on the selected workstation(s).
Configuration changes will be automatically applied to the online
workstations. If the workstations are offline, the configuration changes will
be applied when the workstations come back online.

Editing Anti-Virus Configuration
Complete the following steps to edit the Anti-Virus configuration:
1. Go to Networks and Groups Pane in Enterprise Console.
2. Select Available Configurations > Anti-Virus > [Configuration Name].
3. Right-click on the selected configuration and select Edit Selected Configuration.
4. Edit the settings as required.
5. Click OK.

Deleting Anti-Virus Configuration
Complete the following steps to delete the Anti-Virus configuration:
1. Go to Networks and Groups Pane in Enterprise Console.
2. Select Available Configurations > Anti-Virus > [Configuration Name].
3. Right-click on the selected configuration and select Delete Selected Configuration.
4. Click Ok.

Deep Freeze Enterprise User Guide

155

156

|

Managing Anti-Virus

Using Faronics Anti-Virus from the Enterprise Console
Once Faronics Anti-Virus Client is installed on the workstation, various actions can be
performed on the workstation via Deep Freeze Console.

Anti-Virus Commands
There are two ways the same commands via Deep Freeze Console:•Anti-Virus menu (in the menu bar)•Anti-Virus context menu (right-click context menu)

The menu commands are explained further in this section.
The following commands are available in the Anti-Virus menu:

The same commands are available from the Workstations pane > Anti-Virus tab >Right-click context menu:

Deep Freeze Enterprise User Guide

Using Faronics Anti-Virus from the Enterprise Console|

Quick Scan
Quick Scan checks the commonly affected areas of your computer. This is shorter induration than the Deep System Scan. Quick Scan also uses less memory than the Deep
System Scan.
•

To start a Quick Scan
Select one or more workstations. Right-click and select Start Quick Scan.

•

To stop a Quick Scan
Select one or more workstations. Right-click and select Stop Scan.

•

To pause a Quick Scan
Select one or more workstations. Right-click and select Pause Scan.

•

To resume a Quick Scan
Select one or more workstations. Right-click and select Resume Scan.

Deep Scan
Deep Scan performs a through scan of all areas of the computer. The time taken for thescan depends on the size of your hard drive•

To start a Deep Scan
Select one or more workstations. Right-click and select Start Deep Scan.

•

To stop a Deep Scan
Select one or more workstations. Right-click and select Stop Deep Scan.

•

To pause a Deep Scan
Select one or more workstations. Right-click and select Pause Scan.

•

To resume a Deep Scan
Select one or more workstations. Right-click and select Resume Scan.

Fix Now
The Fix Now option downloads the latest virus definitions and performs a quick scan on
the workstation.
•

To Fix Now
Select one or more workstations. Right-click and select Fix Now.

Deep Freeze Enterprise User Guide

157

158

|

Managing Anti-Virus

Active Protection
Active Protection (AP) is a real-time method for detecting malware. AP sits quietly in the
background as you work or browse the Internet, constantly monitoring files that are
executed (run) without causing noticeable strain to your system.
•

To Enable Active Protection
Select one or more workstations. Right-click and select Enable Active Protection.

•

To Disable Active Protection
Select one or more workstations. Right-click and select Disable Active Protection.

FirewallA Firewall provides bi-directional protection, protecting you from both incoming andoutgoing traffic. A Firewall protects your network from unauthorized intrusion.
•

To Enable Firewall
Select one or more workstations. Right-click and select Enable Firewall.

•

To Disable Firewall
Select one or more workstations. Right-click and select Disable Firewall.

Send Message
The Send Message option is used to send message to online workstations.
•

To send a message
Select one or more workstations. Right-click and select Send Message.

View Quarantine Info
The Quarantine is a safe place on your computer that Faronics Anti-Virus uses to store
malware or infected files that could not be disinfected. If your computer or files on yourcomputer are not acting normal after an item has been placed here, you have theopportunity to review the details of a risk and research it further and remove it from
Quarantine, restoring it back to your computer in its original location. You can also
permanently remove the risks from Quarantine.

Deep Freeze Enterprise User Guide

Using Faronics Anti-Virus from the Enterprise Console•|

To View Quarantine
Select one or more workstations. Right-click and select Faronics Anti-Virus > Get
Quarantine Info.

View Scan History
Faronics Anti-Virus scan history displays all tasks performed by Faronics Anti-Virus on theworkstation.
Select a single workstation, right-click and select View Scan History to view the log
information.

Deep Freeze Enterprise User Guide

159

160

|

Managing Anti-Virus

Scheduling Anti-Virus Tasks
The following Anti-Virus tasks can be run from the Deep Freeze Console based on apre-defined schedule.
•

Disable Active Protection•

Enable Active Protection•

Start Quick Scan•

Start Deep Scan

The procedure to schedule tasks is explained in detail in the section Scheduling Deep
Freeze Tasks.

Deep Freeze Enterprise User Guide

Using Anti-Virus on the Workstation|

Using Anti-Virus on the Workstation
The features available in Anti-Virus on the workstation fully depends on the settings
selected in the Anti-Virus Configuration. For more information about Anti-Virus
Configuration, refer to Anti-Virus Configuration.

Launching Anti-Virus on the Workstation
Go to Start > Programs > Faronics > Anti-Virus Enterprise > Faronics Anti-Virus Enterprise.
Alternatively, you can double-click on the Faronics Anti-Virus icon in the System Tray.

The following panes display important information to the user:•

Protected or Not Protected is displayed notifying if the computer is protected or not. If
Not Protected is displayed, click the Fix Now button below the Not Protected sign.

•

Scan Status displays when the last scan was performed. To scan now, click the Scan
Now link.

•

Update Status displays when the last update was performed. To update virus
definitions, click the Update Now link.

•

Active Protection displays if real-time protection is enabled.

•

Firewall Protection displays if the workstation is protected by the Firewall.

•

Risk Detection Statistics displays the statistics for the actions taken by Faronics
Anti-Virus. Click Reset counts to reset the counts to zero.

Deep Freeze Enterprise User Guide

161

162

|

Managing Anti-Virus

Scanning the Workstation
Complete the following steps to scan a workstation:
1. Go to Start > Programs > Faronics > Anti-Virus Enterprise > Faronics Anti-VirusEnterprise. Alternatively, you can double click on the Faronics Anti-Virus icon in the
System Tray.

2. In the Scan Status pane, click Scan Now. The Scan tab is displayed. Alternatively, you
may also click the Scan tab.

Deep Freeze Enterprise User Guide

Using Anti-Virus on the Workstation|

3. Select one of the following options:> Quick Scan – Scans only known threats.
> Deep System Scan – A detailed scan of all files on the workstation.
> Custom Scan (select one of the following):~ Scan Running Processes – Scans the process running on the workstation.
~ Scan Registry – Scans the registry.
~ Specify drives and folders to scan – Click Browse and select the folders.
4. Click Scan Now. The spinning icon indicates that a scan is in progress. The scan results
are displayed after the scan is completed.
5. Select the file and the following options are available:> Select Change Clean Action > Recommended Action to take the action asrecommended by Faronics Anti-Virus.
> Select Change Clean Action > Quarantine/Disinfect to quarantine or disinfect the
file.
> Select Change Clean Action > Delete to delete the file.
> Select Change Clean Action > Allow to allow the file.
> Click Select All to select all the files displayed in the Scan Result.
> Click Details to display details of the risk.
> Click Cancel to close the dialog without taking action.
> Click Clean to remove the file and close the dialog.

Scanning a File or a Folder via Right-Click
Files or folders (single or multiple) can be easily scanned for a virus. When Faronics
Anti-Virus is installed on a workstation, the Scan for Virus option is added in theright-click menu.
Complete the following steps to scan a file or a folder on the computer:
1. Right-click on the file or folder.
2. Select Scan for viruses.
The scan is performed and the results are displayed.

View Scanning History
Complete the following steps to view the scanning history:
1. Go to Start > Programs > Faronics > Anti-Virus Enterprise > Faronics Anti-VirusEnterprise. Alternatively, you can double click on the Faronics Anti-Virus icon in the
System Tray.

Deep Freeze Enterprise User Guide

163

164

|

Managing Anti-Virus

2. Click the History tab.

3. Select the following actions:> Show only scans with found risks – Select this option to view only the scans whererisks were found.
> Details – Select an entry and click details to view the details of the scan.

View and Take Action on Quarantined Files
Complete the following steps to view Quarantine:
1. Go to Start > Programs > Faronics > Anti-Virus Enterprise > Faronics Anti-VirusEnterprise. Alternatively, you can double click on the Faronics Anti-Virus icon in the
System Tray.

Deep Freeze Enterprise User Guide

Using Anti-Virus on the Workstation|

2. Click the Quarantine tab.

3. Click Risk Details. The following information about each infected file is displayed:> Name> Date Added> Age (Days)
4. Select the following actions:> Details – Select a file and click Details to view details of the infected file. This also
displays the recommended action.

Updating Anti-Virus Definitions on the Workstation
Complete the following steps to update Anti-Virus definitions on a workstation:
1. Go to Start > Programs > Faronics > Anti-Virus Enterprise > Faronics Anti-VirusEnterprise. Alternatively, you can double-click on the Faronics Anti-Virus icon in the
System Tray.

Deep Freeze Enterprise User Guide

165

166

|

Managing Anti-Virus

2. In the Update Status pane, click Update Now. The Update Now dialog is displayed.

3. Click Install Updates. The virus definitions are updated on the workstation.

Managing Anti-Virus on the Workstation via the System Tray
Faronics Anti-Virus can be managed on the workstation via a menu available from the
System Tray.
Right-click on the Faronics Anti-Virus icon in the System Tray. The following options areavailable:•

Open Faronics Anti-Virus – Launches Faronics Anti-Virus on the workstation.

•

Active Protection> Active Protection > Enable Active Protection – Enables Active Protection.

Deep Freeze Enterprise User Guide

Using Anti-Virus on the Workstation|> Active Protection > Disable Active Protection > [Select the option] – Select the
duration for which Active Protection is to be disabled. Select 5 minutes, 15 minutes,
30 minutes, 1 Hour, Until Computer Restart or Permanently. This option is displayed
only if it has been selected in the Anti-Virus policy.
•

Scan Now > [Select the option] – Select Cancel Scan, Quick Scan or Deep Scan. This
option is displayed only if it has been selected in the Anti-Virus policy.

•

Firewall Protection > Enable or Disable

Deep Freeze Enterprise User Guide

167

168

|

Managing Anti-Virus

Check for Anti-Virus Updates
Deep Freeze Console allows you to check if there are newer versions of Faronics
Anti-Virus available.
Go to Help > Check for updates. This checks if there is a new version of Faronics
Anti-Virus available.

If a new version is available, click Download the latest version to update Faronics
Anti-Virus.

Deep Freeze Enterprise User Guide

Update Faronics Anti-Virus|

Update Faronics Anti-Virus
If you have checked for updates and a new version of is available, complete the following
steps to update a new version on the workstation:
1. Go to Anti-Virus tab in the Workstations pane.
2. Select a workstation (or multiple workstations) from the
3. Right-click and select Update Faronics Anti-Virus.

4. Click OK to confirm the action.
The workstation reboots and Faronics Anti-Virus client is updated on the workstation(s).

Deep Freeze Enterprise User Guide

169

170

|

Managing Anti-Virus

Updating Anti-Virus Definitions
The Anti-Virus Definition Server is installed along with Faronics Anti-Virus on the same
computer where the Deep Freeze Console is installed. The Anti-Virus Definition Server
downloads the latest virus definitions and distributes to the workstations managed by
Deep Freeze.
Complete the following steps to update virus definitions:
1. Launch Deep Freeze Console.
2. Go to Tools > Anti-Virus Definition.
3. The following settings and action are available:> Anti-Virus Definition Version – The current Anti-Virus definition version isdisplayed.
> Update Settings – Select the Automatically update in checkbox and enter a value inhours.
> Check for Update Settings – The Last update check date/time and Next update
check date/time is displayed. Click Update Now to update the virus definitions
immediately. The Update Status is displayed.
> Cache Server Details – The Current Version and Last update check date/time isdisplayed. Select the Automatically update the Cache Server checkbox if you want
to automatically download and update the Cache Server with the latest definitions.
Click Update Now to update the cache server immediately.
4. Click OK.

Deep Freeze Enterprise User Guide

Uninstall Anti-Virus Client from the Enterprise Console|

Uninstall Anti-Virus Client from the Enterprise Console
Complete the following steps to uninstall Faronics Anti-Virus on the workstation from theEnterprise Console:
1. Go to Anti-Virus tab in the Workstations pane.
2. Select a workstation (or multiple workstations) from the
3. Right-click and select Uninstall Faronics Anti-Virus.

4. Click OK to confirm the action.
The workstation reboots and Faronics Anti-Virus client is uninstalled on theworkstation(s).
If Anti-Virus Client is uninstalled from the workstation, the Deep Freeze Seed
will be left behind.
The Deep Freeze Seed cannot be uninstalled when Anti-Virus Client isinstalled on the workstation.

Deep Freeze Enterprise User Guide

171

172

|

Managing Anti-Virus

Disable Faronics Anti-Virus from the Enterprise Console
Anti-Virus can be disabled on the Deep Freeze Console in case it is not required to be
used.
Complete the following steps to disable Faronics Anti-Virus from the Deep Freeze
Console:1. Go to Tools > Licensing > Faronics Anti-Virus License.
2. Clear the I would like to use Deep Freeze Console to manage Faronics Anti-Viruscheckbox.

3. Click Close.
4. Restart the Enterprise Console for the settings to take affect.

Deep Freeze Enterprise User Guide

Deep Freeze Command Line Control|

Deep Freeze Command Line Control

This chapter describes using the Deep Freeze Commands.

TopicsDeep Freeze Command Line Control (DFC.EXE)
Deep Freeze Command Line Syntax
Faronics Anti-Virus Command Line Syntax

Deep Freeze Enterprise User Guide

173

174

|

Deep Freeze Command Line Control

Deep Freeze Command Line Control (DFC.EXE)
Deep Freeze Command Line Control (DFC) offers network administrators increased
flexibility in managing Deep Freeze computers. DFC works in combination withthird-party enterprise management tools and/or central management solutions. This
combination allows administrators to update computers on the fly and on demand.
It is important to note that DFC is not a stand-alone application. DFC integrates
seamlessly with any solution that can run script files, including standard run-once login
scripts.
DFC commands require a password with command line rights. OTPs cannot be used.
List all commands by calling DFC without parameters.
The files are copied to (32-bit)<WINDOWS>\system32\DFC.exe

The files are copied to (64-bit)<WINDOWS>\syswow64\DFC.exe

DFC Return Values
On completion of any DFC command, the DFC returns the following values:

Deep Freeze Enterprise User Guide

SyntaxDescription

0

SUCCESS or Boolean FALSE, for commands returning a Boolean
result1

Boolean TRUE

2 ERROR

User does not have administrator rights

3 ERRORDFC command not valid on this installation

4 ERROR

Invalid command

5 - * ERRORInternal error executing commandDeep Freeze Command Line Syntax|

Deep Freeze Command Line Syntax

Deep Freeze has a maximum password limit of 63 characters. If a longer
password is entered, the command will not be successful.
SyntaxDescription

DFC password /BOOTTHAWEDRestarts computer in a Thawed state; only works on Frozen
computers.

DFC password /THAWNEXTBOOT

Sets computer to restart Thawed the next time it restarts; only works
on Frozen computers and does not force computer to restart.

DFC password /BOOTFROZEN

Restarts computer into a Frozen state; only works on Thawed
computers.

DFC password/FREEZENEXTBOOT

Sets up computer to restart Frozen the next time it restarts; only works
on Thawed computers and does not force computer to restart.

DFC get /ISFROZEN

Queries computer if it is Frozen. Returns error level 0 if Thawed.
Returns 1 if Frozen.

DFC get /CLONE

Sets the clone flag for the purpose of imaging.

DFC password /CFG=[path]
depfrz.rdx

Replaces Deep Freeze configuration information. Works on Thawed or
Frozen computers. Password changes are effective immediately. Otherchanges require restart.

DFC get /version

Displays Deep Freeze version number.

DFC password /UPDATE=[pathto installer file]

Sets up computer to restart in a Thawed state and install a Deep
Freeze update.

DFC password /LOCKDisables keyboard and mouse on computer. Works on Frozen or
Thawed computer and does not require a restart.

DFC password /UNLOCK

Enables keyboard and mouse on computer. Works on Frozen or
Thawed computer and does not require a restart.

DFC password/THAWLOCKNEXTBOOT

Sets up computer to restart in a Thawed state with keyboard andmouse disabled; only works on Frozen computers

Deep Freeze Enterprise User Guide

175

176

|

Deep Freeze Command Line Control

SyntaxDescription

DFC password/BOOTTHAWEDNOINPUT

Restarts computer in a Thawed state with keyboard and mousedisabled; only works on Frozen computers
Displays the status of the license and the expiry date of the license (ifany). The different possible types of license and the associated return
codes are:

DFC get /LICENSESTATUS

111: Unlicensed – Deep Freeze is not licensed and will operate in
Evaluation mode for 30 days since installation.
112: Evaluation – Licensed for evaluation with a fixed expiry date.
113: Licensed – Licensed with no expiry date.
114: Expired – The Evaluation period has expired.
Displays the status of the license and the expiry date of the license (ifany). The different possible types of license and the associated return
codes are:111: None (Unlicensed) – Deep Freeze is not licensed and will operate
in Evaluation mode for 30 days since installation.

DFC get /LICENSETYPE

112: Evaluation – Licensed for evaluation with a fixed expiry date.
113: Standard (Licensed) – Licensed with no expiry date.
114: Not for Resale – Licensed with no expiry date.
115: Subscription
116: Subscription – Evaluation
117: Subscription – Not For Resale
Changes the License Key.
password is the Deep Freeze Administrator password.

DFC password/LICENSE=licensekey

licensekey is the License Key for Deep Freeze.
If there is an error, the following error codes are displayed:
101: The License Key is not valid
102: The License Key provided has already expired.

DFC password /ACTIVATE

Deep Freeze Enterprise User Guide

Activates the workstation after checking with the Faronics License
Activation Server.

Deep Freeze Command Line Syntax

Syntax|Description
Displays the Deep Freeze license activation status.
Returns the following values:
0: Pending activation

DFC get /ACTIVATION

1: Active
2: Authorized
3: Deactivated
4: Rogue
Windows Updates will be downloaded and installed on theworkstation.

DFC password /WU [/UNLOCK][/NOMSG | /NOMESSAGE][/THAW][/UNLOCK] Optional parameter to enable the Keyboard and Mouse
during Windows Update.
[/NOMSG | /NOMESSAGE] Optional parameter to suppress all
informational/warning messages from Deep Freeze during Windows
Update.
[/THAW] Optional parameter to return the machine into Thawed Stateafter completion of Windows Update.

DFC password /ENDTASKDFC password /ENDTASK[/SHUTDOWN]

Ends the ongoing Workstation Task and reboots into Frozen state.
Batch File Task and Thawed Period Task end immediately. Windows
Update Task is completed.
Ends the ongoing Workstation Task and reboots into Frozen state.
Batch File Task and Thawed Period Task end immediately. Windows
Update Task is completed.
[/SHUTDOWN]Optional parameter to shut down the workstation.

DFC password/FORMATTHAWSPACEFormats all the ThawSpaces on the workstation. Data stored on the
ThawSpaces will be deleted permanently.

DFC password/DELETETHAWSPACE

Deletes all the ThawSpaces on the workstation. Data stored on the
ThawSpaces will be deleted permanently.

Deep Freeze Enterprise User Guide

177

178

|

Deep Freeze Command Line Control

Faronics Anti-Virus Command Line Syntax
Complete the following steps to run the commands for Faronics Anti-Virus:
1. On the workstation, go to <System Directory>:\Program Files\Faronics\Faronics
Anti-Virus Enterprise via command prompt.
2. Enter AVECLI/[Command]
The following commands are available:
SyntaxDescription

definitionversion

Displays Virus Definition version.

scanengineversion

Displays Scan Engine version.

updatedefs

Updates and apply Virus Definitions.

fixnow

Downloads the latest Virus Definition.
Enables Active Protection and EmailProtection. Performs the default Deep Scan.

scanquick

Starts a QUICK scan.

scandeepStarts a DEEP Scan.

enableap

Enables Active Protection.

applydefs [path to definitions]Applies definitions file from a saved location.

fixnow /quick

Performs a Quick Scan if applicable.

setlicense[key]Applies a given license key.

Syntax:AVECLI/definitionversion

Deep Freeze Enterprise User Guide

Ports and Protocols

Ports and Protocols

Appendix A|

The key to setting up the Deep Freeze architecture is knowing which ports to use. The
important factor is knowing which ports are in use on the network and using ports thatwill not conflict with those. The default port, 7725 has been officially registered to Deep
Freeze.
The following three components make up the Deep Freeze architecture:•

Client (with seed installed)•

Remote Console (local service enabled)•

Console (connects to the Remote Console)

As long as the clients and Remote Console connection use the same port there should
not be any port conflicts between the different components:

Ports can also be used to divide the clients. If the local service is setup to run three ports(7725, 7724 and 7723), Enterprise Consoles can connect to the three different ports to seea different set of clients under each port.
In the diagram above, the client(s) use both the TCP and UDP protocols to communicate
with the Remote Console. The Console(s) that connects to the Remote Console uses only
the TCP protocol to communicate with the Remote Console. It is important to remember
the ports and protocols being used in order to prevent firewalls, switches or routers fromblocking them.

Deep Freeze Enterprise User Guide

179

|

180 Appendix A Ports and Protocols

Deep Freeze Enterprise User Guide

Network Examples

Network Examples

Appendix B|

The following examples show different scenarios involving local service or Remote
Console.
•Example 1 – Single Subnet•

Example 2 – Multiple Subnets, One Local Service•

Example 3 – Multiple Ports, Console Accessed Remotely•

Example 4 – Multiple Subnets, Multiple Local Services

Each example explains how different Deep Freeze components interact in different
networking environments.
In the following examples, the client machines have either the Deep Freeze
workstation installation or Workstation Seed installed. Both installs containthe communications component which talks to the Console/Remote
Console. The difference between the workstation install and Workstation
Seed is that the workstation install actually installs Deep Freeze while theSeed has only the communication component.

Deep Freeze Enterprise User Guide

181

|

182 Appendix B Network Examples

Example 1 – Single Subnet
In this environment, all client machines are contained in the same subnet as the Console
machine. This environment does not require a remote controlled Console, although one
could be used. In this example, the Remote Console is not used. This is the simplest
networking environment. It is also the easiest to configure.
The following diagram shows the network topology:

The client machines, represented by the computer icons, are located on the same subnet
as the Deep Freeze Enterprise Console machine represented by the Deep Freeze Console
icon.
In this scenario, clients are using port A while the Console has set up a local service
connection for the same port. This port is configured in the Advanced Options tab, before
creating the Workstation Install file or Workstation Seed.

Deep Freeze Enterprise User GuideExample 2 – Multiple Subnets, One Local Service|

Example 2 – Multiple Subnets, One Local Service
In this environment, the clients are located across more than one subnet. There is still only
one Console being used. This environment does not require a Remote Console, although
one could be used. The following diagram shows the network topology:

In this scenario (similar to Example 1 – Single Subnet) both the clients and the connection
hosted by the Console are using the same port. This port is configured in the Deep FreezeEnterprise Configuration Administrator in the Advanced Options tab, before creating theWorkstation Install file or Workstation Seed.
In order for the clients to be seen, they need to be configured to use a LAN/WAN
connection. When the LAN/WAN option is selected, a Console IP field appears. Specify
the IP of the machine that will run the Enterprise Console. An example of these settings
are shown in the Advanced Options tab below:

Deep Freeze Enterprise User Guide

183

|

184 Appendix B Network Examples

Example 3 – Multiple Ports, Console Accessed Remotely
In this environment the clients are again located across multiple ports. In this case, morethan one Console is being used. Multiple Consoles are accessed using a local service
whose administrator (host) has released the connection information. The following
diagram shows the network topology:

In this scenario, the host has set up a connection using the local service. Looking at theabove diagram, three other Consoles connect to the host in order to see the clients
according to their ports. The Consoles do not have to be a part of individual subnets aslong as they can see the host.
More specifically, The Console connected through port A/B can see the host Console aswell as each individual computer assigned to ports A and B. The other Consoles
connected through port B can see the host and only the computers assigned to port B.

Deep Freeze Enterprise User GuideExample 4 – Multiple Subnets, Multiple Local Services|

Example 4 – Multiple Subnets, Multiple Local Services
In this example, there are two separate locations.
The following is a list of assumptions that are made regarding this particular example:•

The locations are spread apart and have only a minimal connection to each other•

There is a network administrator at each location who is responsible for looking after
Deep Freeze at that location•

Both locations need to be administered from a third location

In this example, the Remote Consoles are set up at each location and a local service isused:•Location 1 (a computer lab on campus) uses port A to communicate with the clientsand the connections hosted by the Console. The school library’s computers use port B.
The Console in the technical support department uses the connections hosted byboth lab and library Consoles.

•

Any console not directly communicating with a computer should have the local
service turned off.

The following diagram shows the network topology:

The benefit of this setup is that it allows all the packets sent from the clients in Location 1
to be contained at that location. The less distance a packet must travel, the less chance
there is of the packet failing.
The administrator in the lab can connect to the local service in the same location 1 but
cannot connect to the local service in the library. The reason for this is that the labadministrator does not know the password to access the local service for the library. The
same goes for the administrator in the library. If technical support knows the password toboth local services (lab and library) the local service at both locations can be connected
to, in order to administer all the clients.

Deep Freeze Enterprise User Guide

185

|

186 Appendix B Network Examples

Deep Freeze Enterprise User Guide

Troubleshooting a Remote Console Connection

Appendix C

Troubleshooting a Remote Console
Connection|

No Clients In the Console
The following are some common reasons why clients fail to appear in the Console.
1. The Console and clients do not contain the correct network settings.
If the Console is set up to run under one port and the clients are using another, they
will not be able to see each other. Also, if the computers are configured for LAN/WAN,
the IP must be equal to the IP of the machine where the Console is running.
The default LAN setup works as long as all the machines running the computer andConsole exist on the same subnet. However, if a VLAN is being run, or if there areseveral subnets where the clients exist, the computer install must be configured to run
under the LAN/WAN settings.
2. Something on the network is blocking the port used between the Console and theclients.
Check for a connection using a ping. The clients are unable to send packets to theConsole/Remote Console because there does not seem to be a route to the host.
Attempting to ping the IP of the Console/Remote Console does not seem to work. To
resolve this issue, make sure the two machines can connect to each other.
If a server, router, or switch on the network is not allowing the port to get through, theclients will not be seen. By default, 7725 is the port being used.
3. The workstations were created under a different Customization Code than theConsole.
When the Deep Freeze Enterprise Configuration Administrator is first run, a prompt
for a Customization Code appears. This code is very important as it encrypts thesoftware. This means that any workstations created are encrypted with thisCustomization Code. If a Console was created using another administrator that was
installed with a different Customization Code, it cannot see workstations createdunder the original code. The workstations and Console must be created under aConfiguration Administrator installed using the same exact Customization Code.

Deep Freeze Enterprise User Guide

187

|

188 Appendix C Troubleshooting a Remote Console Connection

Port is in Use Error When Starting the Console
When attempting to start the Console, the error message Unable to start Console: Port isin use appears. There are several reasons why this error message may be appearing:
1. There is a Deep Freeze Workstation Installation/Workstation Seed installed under thesame port as the Console or on the same computer.
It is possible that Deep Freeze was installed is in stealth mode (the icon does notappear in the system tray). The seed does not show an icon. The best test is to run aWorkstation Install file on the computer. If the uninstall option is displayed, theWorkstation Install file or Workstation Seed is installed and can be uninstalled. If theuninstall option does not appear, the Workstation Install file or Workstation Seed is
not installed.
The simplest solution would be to first turn off the local service and then connect to a
Console that can be accessed remotely.
2. Another program or service is using the port on this machine.
This may involve running a port sniffer on the machine in question to see what ports
are open. There are several tools available on the web to perform this action. The
netstat.exe application found in Windows also should show whether the port Deep
Freeze is using is already in use.
3. The network cable is unplugged.
This message can occur if there is no network connection on the machine.

Deep Freeze Enterprise User Guide

Creating a Customized Deep Freeze Enterprise Console

Appendix D

Creating a Customized Deep FreezeEnterprise Console|

The Deep Freeze Enterprise Console includes the ability to create a new Enterprise
Console with limited capabilities. A customized, limited console can be distributed in yourorganization to allow certain users to perform desired tasks, while ensuring they do nothave access to the full capabilities of the Enterprise Console.
In this example, we will create a limited Console suitable for distribution to a teacher orcomputer lab instructor. In this scenario, we want the teacher to be able to restartmachines, lock the keyboard and mouse on demand, and send messages to the students.
However, we do not want the teacher to be able to boot the machines into a Thawed
state, uninstall Deep Freeze, or perform other IT-exclusive tasks.
The Console Customizer can be launched from Tools > Console Customizer.

We will leave Console functions > Activation selected. This will ensure that if the newConsole is moved to a different computer, a One Time Password will need to be enteredon the computer the new Console is moved to. If this security precaution is not a concern
in your environment, do not select this option.
Console functions > One Time Password is not selected because we do not want a teacher
to be able to reboot the computer in Thawed mode under any circumstances. If a teacher
reboots the computer in Thawed mode, students might install unnecessary software on
the computer which will be retained even after a reboot.
We will leave all options under Workstation commands selected because we want ateacher to be able to send messages to students, and to shutdown, restart, and wakecomputers as required.

Deep Freeze Enterprise User Guide

189

|

190 Appendix D Creating a Customized Deep Freeze Enterprise Console

We will only leave three options under Deep Freeze commands selected: Unlock, Lock,and Reboot in Frozen state. This will allow a teacher to lock (and unlock) the keyboard andmouse on student computers as required, as well as to reboot computers Frozen (just incase a computer is ever accidentally left Thawed by IT staff). Leaving all other options
cleared will ensure a teacher is unable to permanently modify a computer.
Finally, we will clear all Workstation install/uninstall commands and all Scheduler
commands because we don’t want our teacher to use any of these options.

Once all options have been selected, click Save As to save a new Enterprise Console. A
standard Save As dialog is displayed:

Save the new limited Enterprise Console and distribute it to the required users.

Deep Freeze Enterprise User Guide

Deep Freeze Action Files – RDC Example

Appendix E

Deep Freeze Action Files – RDC Example|

Deep Freeze Action Files
A Deep Freeze Action File is an XML file that allows administrators to define additional
functionality into the Deep Freeze Enterprise Console. An Action File defines a method for
calling an external batch file and passing some information (for example, machine IP
addresses, computer names) to the batch file or script.
Action Files simply call an external program or script. Therefore, any scripting languagethat can be called from the command line can be used.

Action File Example
The structure of the Deep Freeze Action file that we will be using is shown below. The
DFEntConsoleCustomActions.xml is available at C:\Program Files\Faronics\Deep FreezeEnterprise. The file can be edited to add additional actions like the one explained below:<?xml version="1.0" encoding="UTF-8"?><!--Deep Freeze Default Custom Action file--><CUSTOMDEFINEDACTIONS><ACTION1><CAPTION><ENGLISH>Control with RDC</ENGLISH><GERMAN>Control with RDC German</GERMAN><JAPANESE>Control with RDC Japanese</JAPANESE><SPANISH>Control with RDC Spanish</SPANISH><FRENCH>Control with RDC French</FRENCH><CHINESE>Control with RDC Chinese</CHINESE></CAPTION><FILEMENU>Y</FILEMENU><POPUPMENU>Y</POPUPMENU><SILENT>Y</SILENT><SUBITEMS/><PARAMS/><SYNC/><LOG/><EXECUTE>C:\Windows\system32\mstsc.exe /v:%%WKSNAME%% /f</EXECUTE><WORKDIR>C:\Windows\system32\</WORKDIR>

Deep Freeze Enterprise User Guide

191

|

192 Appendix E Deep Freeze Action Files – RDC Example

In the above example, the custom action file contains the command for running Remote
Desktop on the Console computer and connect the remote computer specified in theparameter %%WKSNAME%%.
The DFEntConsoleCustomActions.xml file contains 3 samples:•

Control with RDC•

Remote Execution•

Push and Install MSI fileFor more information on using the above samples, refer to the Configure Custom Actions
section. You can edit the The DFEntConsoleCustomActions.xml file as per your needs.

Deep Freeze Action File Structure
The following XML schema outlines the custom defined actions available to the user.
Multiple XML files can be saved based on the number of commands required. Each file
must be saved to the Console folder and the read only attribute must not be selected.
Any changes made must be accompanied by a restart of the Deep Freeze Console inorder to take effect.
Parameter

Usage<?xml version=”1.0” encoding=”UTF-8”?><CUSTOMDEFINEDACTIONS><CAPTION>

Text that appears in file menu or submenu<ENGLISH>Caption</ENGLISH>

Text in various languages<GERMAN>Caption</GERMAN>

Text in various languages<JAPANESE>Caption</JAPANESE>

Text in various languages<SPANISH>Caption</SPANISH>

Text in various languages<FRENCH>Caption</FRENCH>

Text in various languages<CHINESE>Caption</CHINESE>

Text in various languages<FILEMENU>y</FILEMENU>

Defines if this action will be in file menu

<POPUPMENU>y</POPUPMENU>

Defines if this action will be in right-click popup
menu<SILENT>y</SILENT>

Defines if user will be asked a confirmation
message

Deep Freeze Enterprise User Guide

Deep Freeze Action Files – RDC Example

Parameter

Usage<SUBITEMS>

In sub-items, the item that is a child to this item canbe defined</SUBITEMS>

If the sub-items are defined then action for thisitems will be ignored<SYNC>y</SYNC>

Specifies if command will be executed
synchronously or asynchronously<PARAMS>

Choosing this action prompts user to enter custom
parameters<PASSWORD>

Name on parameter<VAR>%PARAM1%</VAR>

Name of variable which will be used in EXECUTE<ENGLISH>USERNAME Param(ENGLISH)</ENGLISH>

Text in various languages<GERMAN>USERNAME Param(GERMAN)</GERMAN>

Text in various languages<JAPANESE>USERNAME Param(JAPANESE)</JAPANESE>

Text in various languages<SPANISH>USERNAME Param(SPANISH)</SPANISH>

Text in various languages<FRENCH>USERNAME Param(FRENCH)</FRENCH>

Text in various languages<CHINESE>USERNAME Param(CHINESE)</CHINESE>

Text in various languages|</CAPTION></USERNAME></PARAMS>

Defines behavior of the log file

<LOG>
<APPEND>y</APPEND>

Defines if log file will be appended or created new<FILENAME>c:\a1com

Defines filename

mand.log</FILENAME><EXECUTE>c:\windows\vpn.exe%%IP%% %USERNAME% %PASSWORD%%%WKSNAME%%</EXECUTE><WORKDIR>c:\windows</WORKDIR>

Defines command which will be executed. Here,parameters and/or console items can be used
Defines working directory

Deep Freeze Enterprise User Guide

193

|

194 Appendix E Deep Freeze Action Files – RDC Example

Console Parameters
The following console parameters can be passed to the executed application or script
through the Enterprise Console:

Deep Freeze Enterprise User Guide

Parameter

Usage%%WKSNAME%%

Workstation name%%DOMAIN%%

Workstation domain%%IP%%

Workstation IP%%PORT%%

Workstation port%%STATUS%%

Workstation status%%CFGDATETIME%%

Workstation configuration date/time%%MAC%%

Workstation MAC address%%DFVERSION%%

Workstation Deep Freeze version%%CFGNAME%%

Workstation Configuration name%%LOGGEDONUSER%%

Workstation logged on user%%DFINSTALLATIONFILE%%

Workstation installation file%%LICENSESTATUS%%

Workstation license status%%LICENSEEXPIRYDATETIME%%

Workstation license expiry date and time%%AVSTATUS%%

Workstation Anti-Virus status%%OSVERSION%%

Workstation Operating System version