Introduction
Customers who use Deep Freeze need a way to unfreeze their systems in order to do patching and system maintenance and then refreeze the system to allow for normal day to day operation. This guide covers creating scripts for enabling and disabling Deep Freeze for both Windows and Mac systems via the KACE Systems Management Appliance.
After completing this document, you should be able to:
· Understand the process for creating scripts for freezing and unfreezing Windows computers
· Understand the process for creating scripts for freezing and unfreezing Macintosh computers
Deep Freeze for Windows
Thawing Your System
Before changes can be made to a computer secured by Deep Freeze, it must be put into a writeable state. This process is known as “Thawing” and can be accomplished with a simple KScript.
· In the Scripting module, click “Choose Action”, then click “New”
· Name your script “Deep Freeze – Boot Thawed” and select Online Kscript from the Type dropdown. You can also input a description of what the script does.
· Under the Deploy section, uncheck the Select Specific Operating Systems box and then click “Microsoft Windows”. You can also choose what systems to deploy the script to from this section.
· In the Tasks section, find the Verify option and click “Add”.
· Choose “Verify a directory exists” and input “%PROGRAMFILES(X86)%” in the text box (without quotes) and click “Save Changes”
· Go to the On Success section and click “Add”, then select “Launch a program” from the dropdown and enter the following information into the fields:
o Directory: $(KACE_SYS_DIR)\syswow64
o File: DFC.exe
o Check the “Wait for completion” box
o Parameters: dellkace /BOOTTHAWED
o Click “Save Changes”
· Go to the Remediation section and click “Add”, then select “Launch a program” from the dropdown and enter the following information into the fields:
o Directory: $(KACE_SYS_DIR)\system32
o File: DFC.exe
o Check the “Wait for completion” box
o Parameters: dellkace /BOOTTHAWED
o Click “Save Changes”
Note:
The dellkace entry in the Parameters field is the password for the thaw command. Replace that entry with the password for your DeepFreeze software. |
· Scroll to the bottom of the page and click “Save”
You may run this script on demand by choosing the “Run Now” option, or schedule it to run on whatever schedule you prefer.
Freezing Your System
Once changes have been made to the system, it will need to be placed back in a “Frozen” state. Use the following steps to create a script to freeze the target PC.
· In the Scripting module, click “Choose Action”, then click “New”
· Name your script “Deep Freeze – Boot Frozen” and select Online Kscript from the Type dropdown. You can also input a description of what the script does.
· Under the Deploy section, uncheck the Select Specific Operating Systems box and then click “Microsoft Windows”. You can also choose what systems to deploy the script to from this section.
· In the Tasks section, find the Verify option and click “Add”.
· Choose “Verify a directory exists” and input “%PROGRAMFILES(X86)%” in the text box (without quotes) and click “Save Changes”
· Go to the On Success section and click “Add”, then select “Launch a program” from the dropdown and enter the following information into the fields:
o Directory: $(KACE_SYS_DIR)\syswow64
o File: DFC.exe
o Check the “Wait for completion” box
o Parameters: dellkace /BOOTFROZEN
o Click “Save Changes”
· Go to the Remediation section and click “Add”, then select “Launch a program” from the dropdown and enter the following information into the fields:
o Directory: $(KACE_SYS_DIR)\system32
o File: DFC.exe
o Check the “Wait for completion” box
o Parameters: dellkace /BOOTFROZEN
o Click “Save Changes”
· Scroll to the bottom of the page and click “Save”
You
may run this script on demand by choosing the “Run Now” option, or schedule it
to run on whatever schedule you prefer.
Deep Freeze for Macintosh
Thawing Your System
· In the Scripting module, click “Choose Action”, then click “New”
· Name your script “Deep Freeze – Boot Thawed” and select Online Shell Script from the Type dropdown. You can also input a description of what the script does.
· Under the Deploy section, uncheck the Select Specific Operating Systems box and then click “Mac OS X”. You can also choose what systems to deploy the script to from this section.
· In the Script section, input the following commands:
#! /bin/sh
# Thaw Deep Freeze Mac Client
echo - Deep Freeze Mac Thaw Executing
DFXPSWD=dellkace /Library/Application\ Support/Faronics/Deep\ Freeze/deepfreeze -u dellkace -p bootThawed
echo - Rebooting system
shutdown -r now
· In the Script File Name box, name the script DPM_Thawed.sh
· Scroll to the bottom of the page and click “Save”
You may run this
script on demand by choosing the “Run Now” option, or schedule it to run on
whatever schedule you prefer.
Freezing Your System
· In the Scripting module, click “Choose Action”, then click “New”
· Name your script “Deep Freeze – Boot Frozen” and select Online Shell Script from the Type dropdown. You can also input a description of what the script does.
· Under the Deploy section, uncheck the Select Specific Operating Systems box and then click “Mac OS X”. You can also choose what systems to deploy the script to from this section.
· In the Script section, input the following commands:
#! /bin/sh
# Thaw Deep Freeze Mac Client
echo - Deep Freeze Mac Freeze Executing
DFXPSWD=dellkace /Library/Application\ Support/Faronics/Deep\ Freeze/deepfreeze -u dellkace -p bootFrozen
echo - Rebooting system
shutdown -r now
· In the Script File Name box, name the script DPM_Frozen.sh
· Scroll to the bottom of the page and click “Save”
You may run this script on demand by choosing the “Run Now” option, or schedule it to run on whatever schedule you prefer.
Conclusion
By following the steps in this guide, you should be able to create the scripts necessary for freezing and thawing your computers. This will allow you to manage your systems, update security patches and deploy software to the computers without sacrificing the security provided by the Deep Freeze application.
Thaw kscript: this is under on success, my verify area is blank
Launch “$(KACE_SYS_DIR)\cmd.exe” with params “/c dfc.exe password /BootThawed”.
Freeze kscript this is under on success, my verify area is blank
Launch “$(KACE_SYS_DIR)\cmd.exe” with params “/c dfc.exe password /BootFrozen”.
I have also incorporated into the k2000 imaging deepfreeze install, thaw and then install Faronics AV, scan and then refreeze when done. - SMal.tmcc 10 years ago