Top Banner
Secure Managed Client 2.0 ípΓU ΘG20102δ24Θ
68

Secure Managed Client 20 pU

Feb 03, 2022

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Secure Managed Client 20 pU

Secure Managed Client 2.0 �ípΓU

Θ�G2010�2δ24Θ

Page 2: Secure Managed Client 20 pU
Page 3: Secure Managed Client 20 pU

Secure Managed Client 2.0 �ípΓU

Θ�G2010�2δ24Θ

Page 4: Secure Managed Client 20 pU

�@�]2010 � 2 δ�

© Copyright Lenovo 2009, 20010.

Page 5: Secure Managed Client 20 pU

�ΓUA�∩H� IT �z�A�Otdb��qúWíp Secure Managed Client®

(SMC) {í�H�C�ΓU���AO� Secure Managed Client ú�w�B�πM�

�@k���ΩTC

Secure Managed Client Ow∩ IT M�H�H�L��J��M�D��}oCo�í

pΓUNw∩ Secure Managed Client ���Aú�ⁿ�M�MΦ�CpGz�⌠≤�

��NúA�P Lenovo® ��vNϕp�CpGn�d�ΓU�w�≤sA�yXUC

⌠�G

www.lenovo.com

© Copyright Lenovo 2009, 20010 iii

Page 6: Secure Managed Client 20 pU

iv Secure Managed Client 2.0 � ípΓU

Page 7: Secure Managed Client 20 pU

�²

eÑ . . . . . . . . . . . . . . . . iii

� 1 � º[ . . . . . . . . . . . . . 1

� 2 � @δ]w . . . . . . . . . . . 3⌠⌠su . . . . . . . . . . . . . . . . 3w�Mtm LANDesk . . . . . . . . . . . 3��xsΘ}C . . . . . . . . . . . . . 3�m≥�M�� . . . . . . . . . . . . . 3�����M�� . . . . . . . . . . . . . 3∩�zn���M���¼ . . . . . . . . . 3

� 3 � ⌠⌠�q . . . . . . . . . . . 5≥ª[c�D . . . . . . . . . . . . . . 5L��¼�ß�[c . . . . . . . . . . . . 6Active Directory �q . . . . . . . . . . . 6iSCSI }≈ . . . . . . . . . . . . . . . 7eq . . . . . . . . . . . . . . . . . 7��E�]�¿� . . . . . . . . . . . . . 8�]yó . . . . . . . . . . . . . . . . 8⌠⌠�� . . . . . . . . . . . . . . . . 8

� 4 � Secure Managed Client M��

w� . . . . . . . . . . . . . . . . 9�n°≤ . . . . . . . . . . . . . . . . 9Secure Managed Client Γ�]w . . . . . . . 10

Secure Managed Client μ½� . . . . . . . 11Secure Managed Client - xsΘ}C]w. . . . . 11w� Secure Managed Client �z��. . . . . . 12�� Secure Managed Client xsΘ}C . . . . . 12

� 5 � LANDesk ΩT . . . . . . . . 13Secure Managed Client / LANDesk ]w . . . . . 13�� Secure Managed Client D�x . . . . . 13�n°≤ . . . . . . . . . . . . . . 13w� LANDesk . . . . . . . . . . . . 14q Secure Managed Client 1.2 ���� 2.0 �. . 14tm LANDesk Secure Managed Client D�x . . 15

M���¼ . . . . . . . . . . . . . . 18��M�� . . . . . . . . . . . . . 18μ@M�� . . . . . . . . . . . . . 18����M�� . . . . . . . . . . . . 19ⁿúu� . . . . . . . . . . . . . . 20

�lM�� . . . . . . . . . . . . . . 21

� 6 � ��P�π Secure ManagedClient M�� . . . . . . . . . . . . 23�� Sysprep M�� . . . . . . . . . . . 23�� Windows XP M�� . . . . . . . . 23

�s{�� Windows XP M�� . . . . . . 24�� Windows Vista M�� . . . . . . . . 24

M���� . . . . . . . . . . . . . . 34�w�@� . . . . . . . . . . . . . 34��{í�e��� . . . . . . . . . . 36@�t�A� . . . . . . . . . . . . . 37���� . . . . . . . . . . . . . . 37

�C���]w�MΩ�¿½s�V . . . . . . 39

� 7 � �J≥�M�� . . . . . . . . 41��i}≈� CD/DVD CΘ . . . . . . . . . 41

SMCWinPE.iso . . . . . . . . . . . . 42�� iSCSI �l�s�� SMC xsΘ}CW���M�� LUN. . . . . . . . . . . . 42Nh���M���s�xsΘ}C 1.x � . . 43Nh���M���s�xsΘ}C 2.0 � . . 44

NM����íp�xsΘ}C . . . . . . . . 45}≈[t . . . . . . . . . . . . . . . 45ú� . . . . . . . . . . . . . . . . . 46pGúO�� Lenovo CD . . . . . . . . . . 46

� 8 � ]w⌠⌠@� . . . . . . . . 47

� 9 � tmPBMDPB�g . . . . . 49�n°≤ . . . . . . . . . . . . . . . 49��PB�g . . . . . . . . . . . . . . 49��DPB�g . . . . . . . . . . . . . 49Γ�ó��Γ . . . . . . . . . . . . . . 50

� 10 � �°�� . . . . . . . . . . 51�D . . . . . . . . . . . . . . . . . 51xsΘ}CE�{í . . . . . . . . . . 51Secure Managed Client ú�}≈ . . . . . . 51���zD�xºßA�ß�Lk}≈ . . . . 51�z��°A� IP �}wg�≤F . . . . . 52��ó� . . . . . . . . . . . . . . 52S����M�� . . . . . . . . . . . 52

LANDesk Θx . . . . . . . . . . . . . 52�@⌠⌠G�I . . . . . . . . . . . . . 52Secure Managed Client ⌠�ñ�s��� . . . . 53�≤ Windows XP �s��� . . . . . . . 53�≤ Windows Vista �s��� . . . . . . 53

¡ε . . . . . . . . . . . . . . . . . 54

�². �N��. . . . . . . . . . . . 57� . . . . . . . . . . . . . . . . . 58

Wⁿ�� . . . . . . . . . . . . . . 59

© Copyright Lenovo 2009, 20010 v

Page 8: Secure Managed Client 20 pU

vi Secure Managed Client 2.0 � ípΓU

Page 9: Secure Managed Client 20 pU

� 1 � º[

Lenovo Secure Managed Client �MΦ�O@�xsΘ¼��N�ß�pΓ�MΦ�A

M��≤U°�ε�Σ�¿�AH�ú¬Ω�w�AP�Sú������αW

¼qú�u�M�αCSecure Managed Client iN����qα�M��A��qxs

Θ}C�e� ThinkCentre M57p ecoBM58 � M58p �ß�CnΘMΩ�úOQ�

uSecure Managed Client �zD�xv�ñ�zCSecure Managed Client �MΦ�O

M��ε��≥W[�@¿�Ao�¿�°[U]�n�¿hC

Secure Managed Client �MΦ�O�T�Dn ≤��¿G

v Secure Managed ClientG�ß�]tF�� Intel vPro® �N� Lenovo L��

ThinkCentre M tCαW¼qúCo��ß�Otm���q Secure Managed Cli-

ent xsΘ}C}≈C

v xsΘ}CGSecure Managed Client xsΘ}CO Secure Managed Client ��ñí

Ω�xswCªO@��[�ⁿBíw�iF 12 í 3.5 T Serial ATA (SATA)

w����AαzL�� 6 x 1 GB �A�⌠⌠≡AH��Φíú� iSCSI Ω�

yqCxsΘt�OM���zhF 100 �@�ñ�ß�w�C

v nΘ∩�G Secure Managed Client nΘ∩�iN Secure Managed Client s��x

sΘ}CW����M��C Secure Managed Client �zD�xizL LANDesk

nΘú���NA�zxsΘ}C�C@��O�ß�C

© Copyright Lenovo 2009, 20010 1

Page 10: Secure Managed Client 20 pU

2 Secure Managed Client 2.0 � ípΓU

Page 11: Secure Managed Client 20 pU

� 2 � @δ]w

U�o��dMμi≤Uz�t]w Secure Managed Client ⌠�CoO]w⌠���

���C

⌠⌠su

__BJ 1. � 5��y≥ª[c�Dz

__BJ 2. � 6��yL��¼�ß�[cz

__BJ 3. � 6��yActive Directory �qz

__BJ 4. � 7��yiSCSI }≈z

__BJ 5. � 7��yeqz

__BJ 6. � 8��y⌠⌠��z

w�Mtm LANDesk__ 1. � 13��y�n°≤z

__ 2. � 14��yw� LANDeskz

__ 3. � 13��y�� Secure Managed Client D�xz

__ 4. � 15��y�� LANDesk Management Suitez

__ 5. � 16��y����≥�M��z

__ 6. � 41��� 7 �, y�J≥�M��z

__ 7. � 16��y����M���μ@M�����M��z

��xsΘ}C

__BJ 1. � 16��y��xsΘ}Cz

�m≥�M��

__ 1. tm����

__ 2. � 23��y�� Sysprep M��z

__ 3. ��/W�≥�M��� 16��y����≥�M��z

�����M��

∩�zn���M���¼

__ 1. ∩�zn���M���¼CU�O@≈M���¼�MμC

v Secure Managed Client ��M��

v μ@M��

v ����

© Copyright Lenovo 2009, 20010 3

Page 12: Secure Managed Client 20 pU

ϕ 1 ú�úPM���¼�í�G

ϕ 1. M���¼

M���¼ S� ΣLΩT

��M�� v C����@�M��AC

����ú�@�M�M�

v C����bxsΘ}C�

n≤hxsΘC

v Σ�ⁿúu�

v ��lM��

v � 23��� 6 �, y��P

�π Secure Managed Client

M��z

v � 20��yⁿúu�z

v � 21��y�lM��z

μ@M�� v Oq@δ≥�M����

v Σ�ⁿúu�

v ��H��lM��Fw

]�O�HC

v � 18��yμ@M��z

v � 20��yⁿúu�z

v � 21��y�lM��z

����M�� v Oq@δ≥�M����

v S�ⁿúu�

v NM��xsb����

≈C

v �t}≈A�αuq

v �����≤Ot�xsb

xsΘ}C

v ��lM��

v � 19 ��y����M�

�z

v � 21��y�lM��z

__ 2. �����

__ 3. ípM��� 45��yNM����íp�xsΘ}Cz

4 Secure Managed Client 2.0 � ípΓU

Page 13: Secure Managed Client 20 pU

� 3 � ⌠⌠�q

��NQ�]w Secure Managed Client ��DMΣL�qC

��]tUCDDG

v y≥ª[c�Dz

v � 6��yL��¼�ß�[cz

v � 6��yActive Directory �qz

v � 7��yiSCSI }≈z

v � 7��yeqz

v � 8��y��E�]�¿�z

v � 8��y�]yóz

v � 8��y⌠⌠��z

≥ª[c�D

U�Ou²���⌠⌠�DG

v h GB �≥F⌠⌠

v Secure Managed Client xsΘ}C�X 6 � 1 GB �≡

v μ½�uwmbxsΘ}CM�ß�ºí

U�O�N�⌠⌠�DG

v @�tv� 1 GB HW�≥F⌠⌠

v C 1 GB ���h 20 ���

v �π�@� 100 MB �μ½�

– ��π� 1 Gb]Q⌡� ��Wμ��

– π� 1 GB Wμ��� 100 MB μ½�AC@��hi� 20 ��ß�

v Σ�⌠�⌠⌠

– ��ún�≤ Secure Managed Client

– ���XWz⌠⌠�D

– u²�� 10 GB �⌠��

v Secure Managed Client �bC@��ß���Γ�CΘs��ε (MAC) lh

© Copyright Lenovo 2009, 20010 5

Page 14: Secure Managed Client 20 pU

v P⌠⌠s��ε (NAC) ú�e

– nzL iSCSI }≈A��π�⌠⌠s�v

– ⌠⌠��d (NIC) OPROM úΣ� NAC

L��¼�ß�[c

U�O Secure Managed Client �����º[G

v ΩΘwΘOs��xsΘ}CM LANDesk Management Suite (LDMS)CS����

�xsΘC}≈�z{íOQ���bΩΘ NIC ñ� iSCSI A�AzL iSCSI q

@δ}≈M��}≈C

v ���nJ}≈�z{íC�� LDMS °A��τ����AMßbxsΘ}CM

ΣM��C

v ���@�t����A���hN⌠≤��wΘú�� WindowsC�pA�hi

α�¡εz∩����≈� USB ≡�s�vC

Active Directory �q

Active Directory i²zⁿú�hA�NnΘM≤s��íp���ϕñ�O��ß�

WCpG Secure Managed Client ≥ª[c���s��{��⌠⌠��AzNiHQ

�ª�⌠�ñ{μ� Active Directory ]wC

ziH� Secure Managed Client M���≤ Active Directory ]wC�M��

íp��ß��ΦíwA��]wiα�∩�αú�vTCziH��@�j≈�

��≥ª[cAP�O�⌠≤�≡C��qUCU�G

v LANDesk Secure Managed Client D�xúαw�b�⌠�� Active Directory °A

�WC

� 1. Secure Managed Client ]p

6 Secure Managed Client 2.0 � ípΓU

Page 15: Secure Managed Client 20 pU

v LANDesk °A�H�nJ�°A�����Aú��[J�⌠�A�αq�⌠���

Secure Managed Client ���C

v u� LANDesk °A��⌠��≡tñ����A�αb LANDesk Secure Man-

aged Client D�xñ��C≡tO Active Directory ñC@�½≤BΣ���Wh�

�XC

p� Active Directory ��÷ΩTA�e�UC⌠}G

http://www.microsoft.com/windowsserver2003/technologies/directory/activedirectory/default.mspx

iSCSI }≈

Secure Managed Client �X iSCSI ��qT≤wC���Ω≡ 3260AHK]�ΩF

iSCSI Ω�yqCp��÷ΩTA� \

www.ietf.org

�l@�t�]}≈�z{í�OzL iSCSI }≈A� NIC ⁿJ��ß�Cz��t

mu�AD≈tmqT≤w (DHCP)v°A�A²ªiD NIC nⁿJ@� iSCSI �

�C DHCP °A��b DHCP tm�}≈∩�ñA�e IP �}B��W�Mu�Φ

�mX (LUN)v�XCM�ykMΦk]�yk�Φk�n��ß⌠����

DHCP °A��¼wA]�úb��Q�d≥�C

iSCSI ��Ob∩M�����m�A� iSCSI ��A�δ��@�rΩ���CH

Secure Managed Client ��AiSCSI A�ObxsΘ}Cñ⌡μAΣ��]����O

�xsΘ}CM LANDesk °A���X�ú�C��W��rO�xsΘ}Cú�A

]�O�ú�½�CW��ΣlíO� LANDesk ú�AqO smcbootC

pGnMΣ}≈�z{í��W�A�∩xsΘ}C IP �}⌡μ iSCSI �Co��

�� xsΘ}Cñ���MμCΣñ@�����O smcboot ��C DHCP °A�

��N iSCSI }≈tmñ���W�]�o�W�]]A�xsΘ}Cú���@r

�CpG IP �}OHRAΦíⁿúAh LUN qO 0C

eq

÷M Secure Managed Client �ú��@δí��ϕ�A²�O��w∩ypeq]

p⌠⌠C÷MúPt���bP@�íú�yps�qA²OnX�t�P����

ípoO���úC⌠⌠�����o��í]]NO}≈�����C

@° 100 MB �u⌠iHΣ�@����A²pGAW[X��ß�AN�WL 100

MB u⌠�eqA]�z�n@° 1 Gb �u⌠C 1 Gb �u⌠iHⁿ 20 � 25 �

�ß��ypΩ�yqC�ß�Yh≤o���AN�nh°u⌠FC

� 3 � ⌠⌠�q 7

Page 16: Secure Managed Client 20 pU

��E�]�¿�

pGWL 20 � 25 ��ß�b��Y�Sw��AhiHNh�ΩΘ���X�@�

�Φ��Aú�≤j�eqC÷M��E��X ISO 802.3ADA²]�]μ½�t

úPC

b Secure Managed Client �MΦ�ñAxsΘ}CMDnμ½�ºíO�� 6 ���

E�Co≥@AxsΘ}Cu��@� IP �}ANα�¼≈�⌠⌠eqe�hF

100 ���C

pGzN�μ½�Θxñ� MAC �t�½��]½����TºAiHbzⁿú�

xsΘ}C� 6 �μ½�≡ºí]w@�A�⌠qDC

�: pGz�n½s��xsΘ}CA��²�úo�A�⌠qDA�α�Q�½s��C� \� 16��y��xsΘ}Cz

�]yó

pG Secure Managed Client b�@�íp��αúⁿA���d⌠⌠O��]yó

�ípo�Cϕ�@�h�Ω��]LkzLqú⌠⌠�F��a�AN�yó�

]C�]iα�X�GHεzB⌠⌠�DB⌠⌠��Wⁿ��]�lCpG�]O

b��⌠⌠¼�NyóAiα�∩�αy¿½jvTCz��OϕA����]y

ó�DN�¼pC{N�≥ª[chbúα�ⁿ 1% ��]yóvCpGb Secure Man-

aged Client ⌠�yó�]Aiα�vT�ß��αA]��ß�OzL⌠⌠Ω�Cb

� Secure Managed Client ≥ª[c∩�wΘ�A����qo��DC

pG Secure Managed Client ⌠�t�ⁿ�z�]�z¼�μ½�A]\iH�qg�

�O≡o���]yóC]�o�Φk�bμ½h�ú�Ω�A�Hiu²��C²

pG�]Obμ½�yóANú@wα�����≤��]FCμ½��pΩ�ñ�

�≤��]AqO]�o�T����� ��Ñ�D�����≤�]Co�

�]P]�bh�ΩΘ��te�]�o����≤��]úPCt@��d�≤

�]�ΦkAO��⌠⌠�αuπAb⌠⌠Wjq�e�]AMß�dO�T�e

�]CΣñ@�d�NOoX Linux ping -f ⁿOC

t@��q�]yó�ΦkAObwΘºíwm@�IC�pAziHb@��ß

��Σ�O�μ½�ºíAwm@íí�Γi⌠⌠d� Windows � Linux ≈�C

⌠⌠��

Secure Managed Client �MΦ�ñ�@δ��qO�UC���¿G

v @�ñíμ½�A�t 6 � 1 GB ���AE�xsΘ}C

v 4 � 5 ��Pμ½�AC@�μ½�ú� 1 GB ���q�ñíμ½�

v C@�π� 1 GB � 100 Mb ����Pμ½�Aú� 0 � 25 ��ß�

8 Secure Managed Client 2.0 � ípΓU

Page 17: Secure Managed Client 20 pU

� 4 � Secure Managed Client M��w�

���e]tw� Secure Managed Client �MΦ���n°≤M{�C

��]tUCDDG

v y�n°≤z

v � 10��ySecure Managed Client �]wz

v � 11��ySecure Managed Client - xsΘ}C]wz

v � 12��yw� Secure Managed Client �z��z

v � 12��y�� Secure Managed Client xsΘ}Cz

�n°≤

UN��í�w� Secure Managed Client �MΦ���n°≤G

v Γ�w²tm�RA IP �}F@��≤uSecure Managed Client �z��vA@�

�≤uSecure Managed Client xsΘ}CvC

v @� DHCP ⌠�]∩� 17�AQ���xsΘ}Cºß���xsΘ}CXA

[H]wC

v A�≤uSecure Managed Client �z��°A�v� Microsoft® Windows 2003

Server®C

v ⌠≤iα�vTuSecure Managed Client �z��°A�vw�@���ßM�°A

�w�ΩTA�pwd�Mus��h½≤ (GPO)vC

v bGudñtm�íC

v ��tmG

– Windows® XP SP2]���� SP3�A�B�π� 1 GB �OΘ]��π�

2 GB�

– Windows Vista® SP1]�≤s����A�B�π� 2 GB �OΘ]��π

� 3 GB�

v A�≤ ThinkCentre® M57pBM58 � M58p ≈���ßα�M��C

�:

1. ��úΣ� Windows 7C

2. �JΩ� Secure Managed Client NIC X�{íC

3. ún�wΘ�qúRWA]�o�wΘúOΩ��mC

v ⌠≤iH@��⌠⌠w�hM⌠⌠tmC

v τ� Secure Managed Client ⌠��Σ��ñ@�C

v xsΘ}CG

ϕ 2. xsΘ}Cw�jp

xsΘ}CG��� Secure Managed Client ���w�jp

���M���� 6 TB xsΘ}C 9 TB xsΘ}C 12 TB xsΘ}C

150 C��� 35 GB C��� 50 GB C��� 70 GB

© Copyright Lenovo 2009, 20010 9

Page 18: Secure Managed Client 20 pU

ϕ 2. xsΘ}Cw�jp (�≥)

xsΘ}CG��� Secure Managed Client ���w�jp

���M���� 6 TB xsΘ}C 9 TB xsΘ}C 12 TB xsΘ}C

100 C��� 50 GB C��� 75 GB C��� 100 GB

50 C��� 100 GB C��� 150 GB C��� 200 GB

ziH��UC�íApΓxsΘ}C�α�ⁿ������G

����� = [(11* ��jp -15) / (≥�M��jp)] - 2.5 * ≥�M����

�:

1. ��jpúH GB �μ�C

2. 15 ϕ�� Secure Managed Client }≈M��M�zΩ�Od�íO 15 GBC

3. @�xsΘ}C�hα≈�ⁿ 250 ��@M��C

4. @�xsΘ}C�hα≈�ⁿ 150 �@�ñ���C

5. @�ñ�����qA�vT Secure Managed Client �MΦ���αC

Secure Managed Client Γ�]w

1. H�s� Secure Managed Client �{OΘ BIOS ≤s��A≤s≈�W�

BIOSC

2. pGt�t�w�A�²úw��YC

3. ½s}≈AMß÷ F1 ΣA��� BIOS ]we�C

4. b�⌠≤�≤ºeA²÷ F9 Setup DefaultsA]ww]�C

5.

v M57 ≈�Gb IDE Drives Setup ñAN Serial ATA ]� EnabledBN Native

Mode Operation ]� Serial ATABN SATA Raid Enable ]� DisabledAMßN SATA AHCI Enable ]� DisabledC

v M58 ≈�Gb ATA Drives Setup ñAN External SATA Port ]� EnabledBN Serial ATA ]� EnabledBN Native Mode Operation ]� EnabledBNSATA Raid Enable ]� DisabledAMßN SATA AHCI Enable ]� Dis-abledC

6.

v M57 ≈�GbuNetwork SetupvñAN LAN options ROM ]� SMC BootC

v M58 ≈�Gb Network Setup ñAN Boot Agent ]� SMCC

7. b����ñ�J PCI SCSIC

8. q�����ú IDE HDDC

9.

v M57 ≈�Gb Advanced ñAN Intel Virtualization Technology ]� EnabledC

v M58 ≈�Gb AdvancedBCPU Setup ñAN Intel Virtualization Technology ]

� EnabledC

10. ÷ F10 [HxsAMß½s��C

11. ÷¼≈�q�A⌡μjó÷≈C

10 Secure Managed Client 2.0 � ípΓU

Page 19: Secure Managed Client 20 pU

12. }�≈�q�Aϕz�� Intel iSCSI Boot e�]≥�b�@� Lenovo ��e

�ºßX{��A�÷ Ctrl M DC

13. ÷ PAN}≈]�DnC

pG⌠�wb DHCP °A�Wtm�ϕA��≥iμBJ 23C

14. ÷ Enter ΣAs� iSCSI Port Configuration \αϕC

15. ∩� iSCSI Boot ConfigurationC

16. ÷ Tab ΣΓ�� Use DHCP for iSCSI Target InformationAMßA÷�ΣA�°∩��∩�C

17. ÷ Tab ΣAMßb Target Name ñAw∩z��ß⌠�w�ΘJ��W�C

18. ÷ Tab ΣCMßb Target IP μ�ñΘJ°A�� IP �}C

19. U�Γ�μ�ú÷ Tab ΣAOdw]�C

20. ÷ Tab ΣA��z�� OK �εAMß÷ Enter ΣC

21. ÷U�ΣAxsz����≤AMß�⌠C

22. ÷@U Enter ΣA∩� Yes [HT{C

23. ÷@U Esc ΣFo�� Secure Managed Client t���N}l�}≈FC

Secure Managed Client �

SMCsetup.exe �Γ��@μ½�Cª�OG

v NOCRED

pG]� 1Ahú�w�{�ú�� SSOG

SMCSetup.exe /v NOCRED=1

v NODISKSTAT

pG]� 1Ahú�w����α °�G

SMCSetup.exe /v NODISKSTAT=1

Secure Managed Client - xsΘ}C]w

Secure Managed Client �ú� CD ��w²ⁿJCpGS�w²ⁿJA���g

L�π�q��C�y� (USB) CD-ROM w�ªCw��A�∩����w]�A

�⌡μΣL�nBJ]wxsΘ}CC��zNxsΘ}Cw�≤��íb Secure

Managed Client ��μ½��GudñAp�KαO���q⌠⌠�w�Ω�yqC

]wxsΘ}C�A�⌡μUC�@G

1. w�xsΘ}CC

2. s����°⌠⌠uC

3. NΣLM °�s��xsΘ}CC

4. ϕxsΘ}C���AΘJw]KX passwordC LANDesk �b��°A��A�

≤o�KXC

5. ∩� SysInfoA�BTO��≡Wú�@� IP �}C

6. ∩� IPConfAMß÷ Enter ΣC

7. ∩� NIC 1AMß÷�ΣC

� 4 � Secure Managed Client M��w� 11

Page 20: Secure Managed Client 20 pU

8. ÷U�Σ�tm NICAMß÷ Enter ΣC

9. ∩�RA IP �}C

10. ΘJw²]w�uRA IP �}vΩTG

v IP �}

v l⌠⌠Bn

v w]hD

v Dn DNS

v �n DNS

v DNS r�

11. ÷ Enter ΣCb½] IP ΩT�Ao�@��nX���í⌡μC

12. ÷ Esc ΣA �D\αϕC

13. ∩�nXD�xC

w� Secure Managed Client �z��

�÷w�Mtm LANDesk w�ß��znΘ���ΩTA� \� 13��� 5 �,

yLANDesk ΩTzC

�� Secure Managed Client xsΘ}C

xsΘ}COzL LANDesk Secure Managed Client nΘ��Cp��÷ΩTA� \

� 13��� 5 �, yLANDesk ΩTzC

12 Secure Managed Client 2.0 � ípΓU

Page 21: Secure Managed Client 20 pU

� 5 � LANDesk ΩT

LANDesk Management Suite iú��π�t��zuπA²z�°BtmB�zMO

@⌠⌠W��mCo�@�íú�@�D�x⌡μC��Ní� LANDesk nΘ�w

�{�AH�zL LANDesk SMC �z{ítm Secure Managed Client �n@�C

p��÷ LANDesk Management Suite ú��ΣL\α�÷ΩTA� \ LANDesk

Management Suite User’s GuideA⌠}pUG

http://www.landesk.com/supportdownload/resourcelibrary.aspx

Secure Managed Client / LANDesk ]w

p²�o�ú�A�ó�z� Lenovo �NMaC

ϕz�R�ú��A�¼�@�qll≤A�t LANDesk ú���v≈�C

�� Secure Managed Client D�x

p²�o�ú�A�ó�z� Lenovo �NMaC

�n°≤

w� LANDesk ºeA�²�¿UCBJG

1. e�sW/�ú{íA÷@UsW/�ú Windows �≤C

2. j�π�]²ú�∩���{í°A�AMß÷@U��Ω�C

3. �∩⌠�⌠⌠ΩTA� (IIS)C

4. �∩ ASP.NETC

5. ÷@UTwC

6. j�π�]²ú�∩��zP�°uπAMß÷@U��Ω�C

7. VU �A∩��÷⌠⌠�zqT≤wA÷@UTwC

8. ÷U@BAMßíJ CD]YX{ú��C

⌠�⌠⌠M≤

pGO ASP.NET M .NET [cA�⌡μUC�@G

v qUC⌠�Uⁿ�⌡μ .NET Framework 3.5G

http://www.microsoft.com/downloads

FamilyId=333325FD-AE52-4E35-B531-508D977D32A6&displaylang=en

pGO Web Services Enhancements 2.0 SP3A�⌡μUC�@G

v qUC⌠�Uⁿ�⌡μ WSE 2.0 SP3G

http://www.microsoft.com/downloads

familyid=8070E1DE-22E1-4C78-AB9F-07A7FCF1B6AA&displaylang=en

© Copyright Lenovo 2009, 20010 13

Page 22: Secure Managed Client 20 pU

⌠�⌠⌠ΩTA� (IIS) tm

�¿HW�n°≤BJºßAzb⌡μ LANDesk �n°≤�d{í�Aiα�J�ó

��¼pCpGó�TºiDz�M�� ASP.NETA�⌡μUC�@G

1. ∩�}l -> {í� -> t��zuπ -> ⌠�⌠⌠ΩTA� (IIS) �z�A�� IIS

�z�C

2. b¬�íμ∩�⌠�⌠⌠ΩTA� -> �≈qú -> Web A���C

3. bk�íμ�uWeb A���vMμñA��½kΣ÷@U ASP.NET 2.x.x �A

Mß÷@U�\C

Secure Managed Client °A�

p��s�D��÷ΩTA� \uLANDesk Management Suite t��DM¡xΣ�v

⌠�G

http://www.landesk.com/SolutionServices/product.aspx?id=670

w� LANDeskTw�X�n°≤ºßALANDesk K�π��Yw�∩�C

1. ÷@U�Yw�AMßbyÑú�÷@UTwA��A÷U@BC

2. ∩���ⁿ...AMß÷U@BC

3. T{S��∩ LANDesk t��z{íAMß÷U@BC�w]��∩�Y��s

Ω�w∩�C

4. ΘJ���W��KX�[HT{AMß÷U@BC

5. ΘJ��W�M�W�AMß÷U@BC�W��bw����C

6. �°�∩��������°oG�°iAMß÷U@BC

7. pGznq��w��αA��∩q��w��α��]wAMß÷@Uw�C

8. w��ª�A�ú�@� PKCS#12 ��� SMC D��su�z{íC��

]t��� p12 �ΘJKXA�[HT{C� \� 18��yD��su�z

{ízC

9. �w�ºßA�÷@U½s}≈C

10. ΘJ���W�MKXH�� LANDeskA�÷@U��C

11. o���X{@�∩ �Aq�z��¿\C�÷¼o�∩ �A�� Windows �

�≥}≈C

�: z]iH∩�}l -> {í� -> LANDesk -> ����°A�A��

LANDeskC

q Secure Managed Client 1.2 ���� 2.0 �

izLUⁿ��{íq 1.x ���� 2.0 �C

w� LANDesk A�M≤M SMC 2.0 �zD�x

1. b SMC 2.0 w��²U÷ΓU Autorun.exeC

2. ÷@UN SMC w�b��°A�C�n°≤�d{í�ó�A�°iz�nw�

LANDesk Management Suite 8.80 Service Pack 3C

3. bß≥�UⁿMw�ú�÷@U⌡μC

4. ÷@UOAM� Service Pack 3 ≤sC

14 Secure Managed Client 2.0 � ípΓU

Page 23: Secure Managed Client 20 pU

5. ���∩u�ⁿvΦ�AMßbu���X�v°í÷@UOC��A÷TwC

6. w�A�M≤j��ß 30 �¬k��íC�¿ßA�÷@U÷¼AMß÷½s

}≈C

7. t�½s}≈ºßAA≤ SMC 2.0 w��²÷ΓU Autorun.exeCo��n°≤�

d{í��Nα¿\C

8. ÷@U�Yw�A}lw� SMC �zD�x 2.0 �C

9. ΘJ PKCS#12 ��KX�[HT{AMß÷@Uú���Co��i�t

mD��su�z{íC� \� 18��yD��su�z{ízCú���

�W��O ldms4smc.p12

10. ��÷@UTwB÷¼H��Y½s}≈C

≤sxsΘ}CW�}≈M��

b��� SMC 2.0 ºeA��∩ SMC �z{í�����xsΘ}C⌡μUC{�G

1. buSMC �z{ív°íñ�xsΘ}C÷@U�½kΣA∩�w�}≈M��C

2. bu≤s}≈M��v°í�u@�vμ�ñAΘJ LANDesk °A� IP �}�

DNS W�A�A[W \ldmain

3. ΘJw� SMC nΘºH�����W�MKXAMß÷@U�O

4. bM���m�qñA÷@Us²÷sC

5. bu}���v∩ �ñ�² tcm\dist\A∩� SMCBoot-2.0.0.172.imgCMß÷@

U}�

6. bu≤s}≈M��v°í÷@U≤sC

7. ÷@UOA≤½{��}≈M��C

8. }≈M��≤s�ªºßA÷@UTwC

tm LANDesk Secure Managed Client D�x

Secure Managed Client D�xi²zqzΦK��mA⌡μ½n�⌠⌠�z\αCzú

�e�⌠≤ⁿ�z��mAYi⌡μ�μ@@��∩�Diμ�°��CziHq

D�xteM≤snΘBtm]wBE�nwΘ�DBíp@�t�M��AH��

α���]w�C]iH��ñΓ¼�z�ε���∩\αM�m�s�vA�B

Q����ε\αVm@δ�����M�DC

�÷��p≤�²M��D�x�°M���mAH�s�U��zuπ�ΣLΩ

TA� \ LANDesk Management Suite User’s GuideA⌠}pUG

http://www.landesk.com/supportdownload/resourcelibrary.aspx

ziH�h���°A�MΩ�wAú�zM��⌠⌠�z�DCp�w���°

A�MD�xBΣLD�xBWeb D�xH��zh���°A�MΩ�w��÷Ω

TA� \w�MípΓUA⌠}pUG

http://www.landesk.com/supportdownload/resourcelibrary.aspx

�� LANDesk Management SuitepGn�� LANDesk Management SuiteA�⌡μUC�@G

1. ∩�}l -> {í� -> LANDesk Management SuiteC

2. ΘJ��w� LANDesk º���� Windows ���W�MKXC

� 5 � LANDesk ΩT 15

Page 24: Secure Managed Client 20 pU

�xsΘ}C

��OⁿzNxsΘ}Ctm�ft�� Secure Managed Client D�x�{�C

pGn��xsΘ}CA�⌡μUC�@G

1. b¬Φ�uuπcve�÷@U SMC �z{íCpGS�π�uπcAhbu@

C÷@U�°AMßA÷@UuπcC

2. buSMC �z{ív°íñ�xsΘ}C÷@U�½kΣAA÷@UsWC

3. b�l]wxsΘ}C°íΘJΩTC

a. b�l IP �}μ�ΘJxsΘ}C�{μ IP �}AMßAΘJz�KXC

b. bRA IP �}μ�AΘJz μxsΘ}Cb��ºßπ�� IP �}C�n

� A]�±gΣLμ�C

c. pGxsΘ}Cπ��π⌠�W�A�bD≈W� (FQDN) μ�ΘJ�W�A��ΘJPW@�BJΘJ��P IP �}C

4. ÷@U�l]wAMßb��X{�u∩g{�Ω�v��iñA÷@U�≥i

μC

����≥�M��

pGn����≥�M��A�⌡μUC�@Cp���ΣL�¼≥�M����÷

ΩTA� \� 18��yM���¼zC

1. b SMC �z{í°íñA�OzΦΦb¬�íμxsΘ}C≡¼�cñ���x

sΘ}CAMßi}�xsΘ}C���C

2. b≥�M��÷@U�½kΣAA÷@Us�≥�M��C

3. ±gs≥�M����÷ΩTC

a. ��DΘJ≥�M��]�p WinXP M����W��Σní�C

b. ∩�AX�M��jpC��qo�≥�M��������M��AúNu

�o�jpC

c. pGz μqo�M��������α≈��� CDA��pGz�Γq CD

�J�M��A�÷�����∩]t CD-ROMC

4. ÷@U��C

�Q�¿ºßA≥�M��K�Cb�xsΘ}CUΦ≥�M������mñ

ΣU�C

�J≥�M��

p��J≥�M����÷ΩTA� \� 41��� 7 �, y�J≥�M��zC

����M���μ@M�����M��

b LANDesk tm Active Directory Manager: pGnb LANDesk ñtm AD �

²�z{íA�⌡μUC�@G

1. b LANDesk Management Suite u@C÷@Uuπ -> te -> �²�z{íC

2. bu�²�z{ív°í÷@U�z�²��]t≈��v�Ω�¿�C

3. bB��u�²�z{ív°í÷@UsWC

4. ΘJ AD °A�/⌠��ε��ΩTAMß÷@UTwC

5. bB��u�²�z{ív°í÷@UTwC

16 Secure Managed Client 2.0 � ípΓU

Page 25: Secure Managed Client 20 pU

6 . Twu�²�z{ív°í�¬íμñA�@�μí� “ L D A P : / /

#ADSERVERNAME#” ���

Active Directory Σ�: nJ�t�M���Aú��[J⌠�C���bú�ñΘ

J���W�AMß÷@UTwC

�����: pGn�����A�⌡μUC�@G

1. bu�²�z{ív�¬íμñ�² AD �²≡A��Σ�zn������C

2. No�����±�uSecure Managed Client �z{ív°íñ�xsΘ}C��

�u���vΣWC

3. bu��s����M��v°íñ∩�≥�M��AHKq�M���s���

�M��A��A��±gΣLΩTCMß÷@UTwAA÷U@BCϕe�X{

ú��A�A÷U@BC

�v��

ΣL��iHQ��v��[H���\αCª�]AG

v PBMDPB�g

v μ@M��M�lM��Σ�

z��nDs��vA�α}l��o�\αG

1. nDs��vCΣBJpUG

a. buSMC �z{íve�WA��½kΣ÷@UxsΘ}C��AA÷@U�

eC

b. ∩��vCo���X{xsΘ}C���\αC

�: o�°í]�π�BJ 2a ���xsΘ}C (san) �C

c. ÷@UnDs�vAo��}�unDΩTv°íC

d. ϕunDs�vv°íW�ⁿ�iμAH�os��vC

2. �J�v�CΣBJpUG

a. buWindows ����vñANz¼���v�½sRWAΣμípUG

<san serial number>_1.txt

<san serial number>_x.txt

Σñ x O�W���X]pG�ΣL�v�sb� �C

b. No����s� <install directory>tcm\dist\licensing\ami �²U

3. ≤s�v�CΣBJpUG

a. buSMC �z{íve�WA��½kΣ÷@UxsΘ}C��AA÷@U�

eC

b. ∩��vC

c. ÷@U≤s�vC

d. qui�v�vMμñ∩��v�C

e. ÷@UM�Ao��}�u≤sxsΘ}C�vv°íC�ϕ°íñ�ⁿ�

iμA�¿≤s@�C

� 5 � LANDesk ΩT 17

Page 26: Secure Managed Client 20 pU

D��su�z{í

YnbDn LANDesk °A�≈u�Aú��l� Secure Managed Client ULOS]�

��nJe��O\αAziHtm@�D��su�z{íCo� Windows Server

2003 t���[JP LANDesk °A��P�⌠�AB��� SMC �ß�úiH

s�o�t�C@�tmºßAo�t�N�∩�nJ SMC �ß�º ULOS �

SMC ���Aú��≈OC

w�BJG

1. b SMC 2.0 w��²U÷ΓU Autorun.exeC

2. ÷@Uw� SMC su�z{íC

3. b�n°≤�d{í⌡μºßA÷@U�Yw�CpG�n°≤�d{íó�FA

� \� 13��y�n°≤zAMDw��n ≤�≤UC

4. ÷U@BAA÷w�C

5. buw� SMC �v°íñAΘJ LANDesk °A�� IP �}� DNS W�B

w� LANDesk °A��í�ú�� PKCS#12 ����mAH�����K

XC��W���O ldms4smc.p12C

6. �w��ª�A�÷@Uw�AA÷@UTwC��A÷@U�¿C

7. ÷¼uLANDesk �n°≤�d{ív°íC

pGntmD��su�z{íA�⌡μUC�@G

1. bDn LANDesk °A�º SMC �zD�x� SMC �z{íWA��½kΣ÷

@UxsΘ}CAMß∩��eC

2. b¬íμñ∩�su�z{íCo��AzΦΦw�D��su�z{í�qúW

�A���X{bkíμ�ui�vsu�z{íMμñC

3. j�π��qúW�AMß÷@UsWC�qúW�K���o≈xsΘ}CMμ

�b���su�z{íC

4. ÷@UxsA��z����≤C

M���¼

Secure Managed Client 2.0 ���M���T��¼C��N@@�zQ�C

��M��

��M��O@� Secure Managed Client M���¼AOC@����≥�M���

�π��C�÷��≥�M��M�����M���ΩTA� \� 19��y��

μ@M��≥�M��zC

μ@M��

μ@M��O@�M���¼Aª�N���Ω�xs�p¼����AsW�@δ

�μ@≥�M��Co�M���¼iH�íA]�C@�����@δΩ�A

bxsΘ}CWúS�½�Co�@δΩ�xsΘ]iHb SMC �ß�}≈�A�q

vÑW[��αC

18 Secure Managed Client 2.0 � ípΓU

Page 27: Secure Managed Client 20 pU

��μ@M��≥�M��

1. b{��@�ñ≥�M��÷@U�½kΣC

2. ∩���≥�μ@M��C

3. ΘJAϕ���W�Mí�C

4. ÷@U��C

��μ@M�����M��

� \� 16��y����≥�M��zC

����M��

Secure Managed Client i²ztm@�u@�B����≥�M�������A

úOxsΘ}CW����≥�M��Co�ΦkiHYu}≈�íA]iH °P

xsΘ}C�u@Z≈Cϕz²t�iμ�����AC@��ß�W���w�ú

�μíCM��O� SMC �zD�xRWA���@W�AH�ε���Ω��l

�≥óC

������≥�M��

1. τ�zwN Sysprep M����C� \� 38��yN Sysprep M����H

F����αzC

2. b{��@�ñ≥�M��÷@U�½kΣC

3. ∩���≥�����M��C

4. ΘJAϕ���W�Mí�C

5. ÷@U��C

�: �M���jpwAo�{�iα�n�p���í�¿CziH�{bUZ�íA�Ob��@δ���α≈�� Secure Managed Client ºeA��o�M

��C

² SMC �ß�������

1. buSMC �z{ív°íñA÷@Us� -> tms�

2. ÷@UsW�����ms�A}�u�����m]wv°íC

3. ����A]wΣLzn�≤�����xsΘ�±Co��±Nϕw�W�

����M���Od�í]úF�@�����≥�M���jpº��C

ziH��u�����m]wvW�d�Ω�m�≤UzC�ΘJz≥�M��

����� (GB)Bw�jp (GB)AH��ß��w��OΘjpCϕz�≤��

�±�Ω�m�ñ�o��r�A������Od��r (GB) ]����≤C

4. e�⌠⌠°� -> �m -> ���mC

5. qMμñj�π�zn�����tm�t�ANª���zbe�BJ����

����tms�C

���������M��

1. ��½kΣ÷@U��� -> sW���

2. ΘJznsW�⌠����W�C

3. ÷@UTwCo��}���s����M��°íC

� 5 � LANDesk ΩT 19

Page 28: Secure Managed Client 20 pU

4. ∩�M���¼ -> ����M��

5. ±gAϕ����M��ΩTC

6. ÷@U��C

7. ÷@Uú�W�TwA�¿���������@�C

N����íp� SMC �ß�

1. Tww���μíC

2. Mwp≤b��F����º SMC �ß�WANw�μíG

v �z�nD�μí

pGznD��w���μíAiHb����tms�ñ��ß�÷@U�

½kΣA∩�U�}≈��l]ww�CpGw�wgw∩����μíFA

z]iH��o�∩�ANw�½sμíC

v ���∩��μí

pGz��∩��z�nD�μí∩�ABw�]��w∩����[Hμ

íAht��ú����Ae\L�nJ�ß��ANw�μíC

3. N����∩�G

a. w�

b. iSCSI

4. nJ���� SMC �ß�AH�l≥�M��UⁿCo��ApGz��∩��z

�nD�μí∩�At��ú����Ae\Nw�μíC

�: LF@q�íºßASMC �ß���lUⁿ����≥�M���w�Co�

{�iα�°F@�p�CU@ñ�½s}≈A]� Uⁿ@�Co�Uⁿ@�

ObI�⌡μA]����ú�ÑUⁿ�¿ºßA��M��C

5. Uⁿ�¿ºßA���N���� SMC �ß�tm����w�C

ⁿúu�

ⁿúu�i²zNM��÷p� SMC �ß�AúO Secure Managed Client ���C

�Fⁿúu�ASMC �ß��⌡L ULOS nJA�����ⁿú�M��C

�: ��M��Mμ@M��úΣ�ⁿúu�C²O����M���úΣ�ⁿúu�C

1. b SMC �z{íñA��½kΣ÷@U��≥�M���μ@M��≥�M��A

Mß∩�u��ⁿúu�M��v

2. �ⁿúu�M��ΘJAϕ���W�Mí�C

3. ÷@U��C

4. ÷@UTwCϕ@��¿�AuxsΘ}CnDv°íN�π�u¿\v¼A

5. b⌠⌠°� -> �m -> ���mANzn�ⁿúu�tm� SMC �ß�A���

xsΘ}C�ⁿúu�ΣC

6. bⁿúM��UANzΦΦ���ⁿúM��A���ⁿúu�U�C�Aϕ�

SMC ��C

20 Secure Managed Client 2.0 � ípΓU

Page 29: Secure Managed Client 20 pU

�lM��

�lM�� o�]w�A�b½s}≈�íAN]w@½]�w]�C�pA�]z

���uW [�����F@�M��CL������≤�]w]p���ñ

����¬�Aun½s}≈ºßA��ú� ��l�ACpGznNM���

���lM��A�⌡μUC�@G

1. ÷¼�ß�t�

2. bM��í�÷@U�½kΣA∩�u���l Snapshotv

3. ϕu���l Snapshotv°í}��A÷@UO

4. ���bß��K��≤

� 5 � LANDesk ΩT 21

Page 30: Secure Managed Client 20 pU

22 Secure Managed Client 2.0 � ípΓU

Page 31: Secure Managed Client 20 pU

� 6 � ��P�π Secure Managed Client M��

��NQ�[j Secure Managed Client �α�X�ΦkC

Secure Managed Client O@�WS�⌠�A]�z�������{ívT�úμuO

@����AOπ� Secure Managed Client ⌠�CípºeNC@�M����A

KiTO�ß�M��úX�DFC

�Fo��n��GA�²b�ß�≈�Wtm BIOS ]wºßAA]wz� XP �

Vista ≥�M��Co�NiH�K⌠≤ AHCI �e��Do�C� \� 10��

ySecure Managed Client Γ�]wzC

�� Sysprep M��

α�ípOQ����s��{í⌡μC Sysprep O���@�t�A²@�t�

����M��iμ���sC��M��e\�sDnt��nΘ⌠�C

�� Windows XP M��

�� Windows XP .wim ��A�JuSecure Managed Client Ω�⌠⌠�� (VNIF)v

X�{íC

�: pGz�ΓyßA⌡μ SMCSetup.exe �ANú�J VNIF X�{íC

SMCSetup.exe ��b Windows XP WA�zw� VNIF X�{íC

pGn�� Windows XP M��A�⌡μUC�@G

1. N Windows XP w�bDnt�WC

2. H�z�¡nJC

�: nH�z��¡nJA��²qt@�π��z�M�v����bßA�����z�M�vCΦkOb��qú÷@U�½kΣA∩��z -> �≈�

��Ms� -> ���CMßA÷ΓU�z�A�°�∩��÷sC

3. Rú⌠≤ún����bßC

4. ��u�m�z{ívñ����Γ��AMß��nw�����{íC

5. ��@�W� C:\SysPrep ��²AN���n���s�o�AHK⌡μ

Sysprep.exe �CziHq Microsoft® MΣ�s�� Sysprep uπA⌠}pUG

www.microsoft.com

6. ��@�W� C:\Drivers\Network ��²ANt�ú�� Secure Managed Client

(VNIF) X�{í��±bo��²UC

7. t��ú�@�d� Sysprep.inf �CziH⌡μ setupmgr.exe �∩t�ú��

tm�]�pAz�ú���A]iH���v� Sysprep.inf �C

8. �� notepad.exe }� Sysprep.inf �Cb�@�W� Unattended ���ñA�

�N OemPnPDriversPath ��]w� \Drivers\NetworkA�BN OemPreinstall �

�]w� YesC

9. ⌡μ Sysprep.exe �CMß�∩∩ �ñ� enable mini-setupA½s��ªC

© Copyright Lenovo 2009, 20010 23

Page 32: Secure Managed Client 20 pU

10. Sysprep {�@�¿At�N�÷≈C

11. ½s��t�A � Windows PEC

12. íJ@� USB w�A��N��≈∩M�znxsM���°A�C�]ªO D

��≈C

13. o�A�� ImageX ��qú�M��ANªxsbz� D ��≈ñG

Imagex /capture C: D:\myimg\Vista32.wim “SMC Vista32”

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

{bzN�@�t Secure Managed Client VNIF X�{í� Secure Managed Cli-

ent XP .wim �iHípFC

�s{�� Windows XP M��

z� Windows XP ��wg⌡μF@q�íAW��z�����{íM�HΩ�Cp

Gznb Secure Managed Client U⌡μªAiH��N{��t��s� Secure Man-

aged ClientCo�M��ú�⌡μ SysprepC

�: �≤ Secure Managed Client 2.0 �uΣ� BIOS ���íA]���{��°í

w�iαLk�α� Secure Managed Client ⌠�CpGnτ�t�OiH�αA�

⌡μUC{�G

v �≈�ß�t�

v iμHU��T�n²�≤

v ½s}≈AiJ BIOS ]w

v ÷@U NetworkAN Boot Agent ]� SMC

v ½s���ß�t�C

pG�ß�t�iH}≈ANϕ�t�iH�αC

pGzO�� Lenovo Secure Managed Client PE CDAN{��M���s� Secure

Managed ClientAunϕ CD ⁿ�YiC

�F�ε⌠≤�Do�ApGzO���v�uπ�st�ABO⌡μ SP3A�H

�z�¡nJ�⌡μ regeditC��÷@U HKLM\System\CurrentControlSet\Services\PciIdeAN�l�∩� 0 H�� PciIdeFA÷@U HKLM\System\CurrentControlSet\Services\IntelIdeAN�l�∩� 0 H�� IntelIdeAMßA÷@

U HKLM\System\CurrentControlSet\Services\atapiAN�l�∩� 0 H�� atapiC

�: ���]�ß�≈�÷ww� IDE �mX�{íAoQ Windows ����FC

pG�ß�≈�S�w�o�X�{íAh��²w��n�X�{íΣ� IDE }≈

ºßA�αiμ�αC

�� Windows Vista M��

� Secure Managed Client �� Windows Vista M��APN Windows Vista M��

íp�@δt���ⁿCpGnN Windows Vista M��íp�@δt�A�⌡μUC

�@G

1. tmz�Dnt�A²ª��n�ⁿ�sC

24 Secure Managed Client 2.0 � ípΓU

Page 33: Secure Managed Client 20 pU

2. ½s����G� Windows @�t�AMßH ImageX � Ghost ÑM��uπ

��M��Cz�n@�ww� Windows ��w�M≤ (WAIK) �Dnt�A

tmz����M��C WAIK �≤Uzw�B�qMíp Microsoft Windows @

�t�C

�: Lenovo ú�ú� ImageX M Ghost ���ⁿ�C� \o�M��uπ�ú

��σ≤C

3. ⌡μ]A��Mμí��ÑBJtmz���t�AMßQ�z�v∩��

M��uπANM�������t�WC

�: �≤���M�������ⁿ≤xsΘ}CW� LUNAB�buLenovo @�

Ω�¡x (LCVP)vW⌡μA]���n⌡μΣLBJAHTO��ß�M��α≈÷

]pB@CU�O��m�G

� Secure Managed Client ��s� Windows Vista M��

pGn� Secure Managed Client ��s� Windows Vista M��A�n�ΦkNOϕ

Microsoft �hiμAo��hJ�pUG

1. bDnt�Ww��tm Windows VistaC

2. �� Windows t�M���z{í (WSIM) w�A��@� ¬�C WSIM i²

z����∩ ¬�C

�: WSIM O WAIK �@íCªiH≤Uzw�B�q�íp Windows Vista t

C�@�t�C]iH²zb�NH�t�W����∩ ¬�CúLAoO∩�

���@FziH��H �d� ¬�C

3. ��t�� Sysprep M��C Sysprep iH≤Uz��M��AH���M��H

KNª�íp�hí��a≈�WCª�Múzn[Híp�t�A�Nª@δ

C

4. �� ImageX /capture ⁿOA�� Windows Vista PE U�w�C ImageX O@�

ⁿOμuπA���B�∩MM�w�M��Absy�X@⌠�ñiμípC

ImageX �D⌡μ���sA�ú��M��A±�ΣL�O Ghost Ñ�suπ�ú

��M���pAGhost O@���M�M��uπAªNO�����s�Φí

�sw�C

5. �� ImageX /apply ⁿOANM��íp��ⁿ≤xsΘ}C� LUNC

�: pGOA�≤ BitLocker � Vista M��Ah����SϕBJC BitLocker �

�≈[KO Hb Microsoft Windows Vista Ultimate �@��π��[K\αCp

Gz�t��eO]wi�≤ BitLockerAh��²÷¼ªºßA�αw∩ Secure

Managed Client ���⌡μ SysprepC BitLocker ��nΓ����α[K��

≈AH�τ�}≈�π�CoΓ���@P�¿@�}ⁿJtmC}ⁿJt

miNDn@�t���P��qú�@�ñt���j}C Lenovo M58

Preload Vista wi�≤ BitLockerCp��÷ΩTA� \� 30��yN Lenovo

M58p Vista wⁿM��½síp� Secure Managed Client ⌠�zC

b Lenovo M57]π�A���A²S� Secure Managed Client�W�@�ñt������ Windows Vista wⁿ

1. N Lenovo OEM Vista w�]qw� CD �qwⁿ���bDnt�WC

2. H�z�¡nJC

� 6 � ��P�π Secure Managed Client M�� 25

Page 34: Secure Managed Client 20 pU

3. Rúzbw� Windows Vista �íB�������bßCzb���bß�εx

WA��u�o�u�z�vMuX�v]w���bßC

4. ���m�z{íñ⌠≤�Γ��AMß��nw�ΣL�mX�{íM��

{íC{bt�W��wgU�⌠�Auϕ Lenovo Secure Managed Client VNIF

X�{íFC

5. ⌡μ cmd.exe �]H�z�¡⌡μ�AMß�½�² C:\windows\System32\

sysprepC

6. Nt�ú�� UNATTENDOEM.XML ��s�{μ�²UA�BNª½sRW�

UNATTEND.XMLF����z�v� UNATTEND.XML �C

�: Lenovo ú�o� UNATTENDOEM.XMLAu�ϕ@d���C

7. �d UNATTEND.XML �ATwΣñuS�v⌠≤ ProductKey ��CpG�A

�RúªCY�O���Aú��ε Sysprep {�ALk�TB@ OEM �

�Cz��q .xml ��úo���C

8. bY� Lenovo qúWw�� OEM Windows VistaAΣ°TX�{í�úw�{

í�@�w��DAτYbiμ Sysprep {��íA°TX�{íLk�Tw�/�

úw�C]�ºDOe� “regedit”AMΣ “DevicePath” ��CN°TX�{í⌠

� [�o���ß�]��O C:\Drivers\Video�AMß[HxsC

9. b cmd ΘJUCⁿOG

Sysprep.exe /generalize /oobe/shutdown /unattend:C:\windows\System32\Sysprep\UNATTEND.XML

ΣñG

v /oobe - U�}≈�A�Nqú���uWindows w∩��v�íC

v /generalize - Mú≈�C

v /shutdown - �¿ Sysprep {�ºß÷≈

v /unattend - ²zⁿw�v� UNATTEND.XML �C

�: ��t�� Sysprep M��q�nX���íC Sysprep M����º

ßAt����÷≈C

10. ÷≈ºßAA�� Windows Vista PE CD ½s��t�A � Windows Vista PEC

���b BIOS ]w�T�����A�b}≈�í÷ F12 ΣA����� Win-

dows Vista PECpGúV��� Windows VistaAh��A��@� Sysprep Win-

dows Vista M��C

11. pGzO����í��≈xsM��A���o���≈CpGzOHñí

xsΘ°A�xsM��A�Tw Windows Vista PE �⌠⌠suAMßAN⌠

⌠��≈∩M�z�ñíxsΘ°A�C��AoX Net use * \\centralserver\

sharedpath ⁿO]�]��≈NO D�C

12. �� ImageX ��t���≈�M��]�]��≈NO C�AMßNªxs

b .wim �ñC

Imagex /capture C: D:\myimg\Vista32.wim “SMC Vista32”

13. �� ImageX ��uA���v�M��]�]��≈NO F�AMßNª

xsb .wim �ñC

Imagex /capture F: D:\myimg\ServicePartition.wim “Service Partition”

26 Secure Managed Client 2.0 � ípΓU

Page 35: Secure Managed Client 20 pU

{bAzw�@� .wim �Co� .wim �U�⌠�Auϕ Lenovo Secure Man-

aged Client VNIF X�{íC

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

14. N VNIF X�{íJoΓ� Windows Vista t�� .wim �Cz��N WAIK

w�bDnt�W⌡μUCBJC

�: ]�⌡μ SMCSetup.exe �N VNIF X�{íw�b Windows Vista WAY

z�p��ΓANú�J VNIF X�{í��C

v MΣz� Secure Managed Client VNIF X�{í��A�B�ª�∩�ú

�� OfflineUnattend.xml �C

v �ⁿzwbBJ � 26��12 M � 26��13 ��� .wim �C

mkdir C:\wim_mountImagex /mountrw D:\myimg\Vista32.wim 1 C:\wim_mount

v ��Oⁿ\αC÷MoO∩���AoO�n�@kC

– ⌠�G HKLM\Software\Microsoft\Windows\CurrentVersion\Device Installer

– ≈�G DebugPkgMgr

– �¼G REG_DWORD

– �G 0x01

v ��M≤�z{íw� VNIF X�{íC�½{μ�² pkgmgr.exe ��b

��²G

Pkgmgr /o:”C:\wim_mount\;C:\wim_mount\Windows”/n:”C:\tmp\OfflineUnattend.xml” /l:”C:\pkgmgrlogs\logfile.txt”

v �d logfile.txt �ATwS�o�⌠≤��AB XO 0C

v b�ⁿ� Windows M��ñA�\ %WINDIR%\inf\ �²��eATwwgw

� .inf �CsW Windows M���X�{í�RW� oem*.infCoO�FT

OsWqú�X�{íAΣW���@W�C�pAMyDriver1.inf M

MyDriver2.inf �{bú½sRW� oem0.inf M oem1.infC

v °ⁿ .wim �AMßTww�C

Imagex /unmount /commit C:\wim_mount

15. N VNIF X�{íJ� Windows Vista ��C

�: SMCSetup.exe ��ú�N VNIF X�{íw�bA���CpGzbíp

ºßA�nqA����o⌠⌠s�vAh��⌡μUCBJAJX�{

íG

v �ⁿ .wim �C

Imagex /mountrw D:\myimg\ServicePartition.wim 1 C:\wim_mount

v MΣ winpe.wim �]b tvtos �²U�A�B�ⁿªC

�: pG��úsbAN��²�� c:\mype_mountC

Imagex /mountrw C:\wim_mount\tvtos\winpe.wim 1 C:\mype_mount

v �]z� VNIF X�{í�≤ E:\vnifdrivers �²C

Peimg.exe /inf=E:\vnifdrivers\lndrvbus.inf C:\mype_mount\WindowsPeimg.exe /inf=E:\vnifdrivers\netvnif.inf C:\mype_mount\Windows

v pGS�⌠≤��A�Tw wim �C

� 6 � ��P�π Secure Managed Client M�� 27

Page 36: Secure Managed Client 20 pU

Imagex /unmount /commit C:\mype_mountImagex /unmount /commit C:\wim_mount

{b Vista32.wim M ServicePartition.wim �wg��NⁿAiH��� LUN FC

16. s��xsΘ}CA�ⁿ@�jpAñ� LUNC���Mú����eA]���

�N LUN W��½nΩ��≈UC

17. H�z�¡⌡μ .cmd �AMßΘJ diskpartAA÷ Enter ΣC

>list disk]�] disk 2 OzΦ�ⁿ� LUN�>select disk 2>clean>create partition primary size=5012]pGOA����Ah� 5012MCz]iH��ΣL�jpAúL��úα�p�>format LABEL=”ServiceV002” [quick]/*��G����O “ServiceV002”Ao� bmgr32 yß�α�TB@*/>assign [letter=I]>set id=27]NA����⌠����>create partition primary]oOz� Vista t�����>active]���² Vista ���¿�i}≈����>format [LABEL=”your system part name”] [quick]>assign [letter=J]>list volume]pGzS�buⁿúv�ⁿw��≈N�A���o�ⁿO�MΣ LUN ���≈N�AH�MΣ]t wim �� USB ��≈���≈N��C>exit

�N .wim �M��z� LUNC�] USB ��≈�NO DAzb LUN W�

��A����NO IAzb LUN W��� Windows Vista t����

NO JC

Imagex /apply D:\myimg\Vista32.wim 1 J:Imagex /apply D:\myimg\ServicePartition.wim 1 I:

18. �� LUNC�@����At��½s��T�C

19. ImageX ���O��MM�A���M��A]���sWDn}≈O² (MBR)

ΩTAA����αB@C

�: pGzbe�BJ���O Ghost úO ImageXAhiH⌡L�BJC

Cd C:\program files\common files\lenovo\BMGRBmgr32.exe /fbootmgr.bin /M0 /Think

20. {b LUN wg��NⁿFC�b BIOS ú�÷ F11A���A���C Win-

dows Vista MA���ú��²w�n Lenovo VNIF X�{íC

� Secure Managed Client ��@δ Windows Vista1. N Windows Vista w�bDnt�WC

2. H�z�¡nJC

3. Rúzbw� Windows Vista �íB�������bßCzb���bß�εx

WA��u�o�u�z�vMuX�v]w���bßC

4. ���m�z{íñ⌠≤�Γ��AMß��nw�ΣL�mX�{íM��

{íC

{bt�W��wgU�⌠�Auϕ Secure Managed Client VNIF X�{íFC

5. ⌡μ cmd]H�z�¡⌡μ�AMß�≤�²� C:\windows\System32\

SysprepC

6. Nt�ú�� UNATTENDNONOEM.XML �s�{μ�²UA�B½sRW�

UNATTEND.XMLC

�: Lenovo ú�o� UNATTENDOEM.XMLAu�ϕ@d���C

28 Secure Managed Client 2.0 � ípΓU

Page 37: Secure Managed Client 20 pU

7. }� UNATTEND.XML �AjM ProductKey ��Cú����b���}YA

�≤M���qñC

8. Nú���∩�z�ú���C

9. qⁿOμ⌡μ SysprepC�ΘJUCⁿOG

Sysprep.exe /generalize /oobe /shutdown /unattend:C:\windows\System32\Sysprep\UNATTEND.XML

ΣñG

v /oobe - U�}≈�A�Nqú���uWindows w∩��v�íC

v /generalize - Múqú

v /shutdown - �¿ Sysprep {�ºß÷≈

v /unattend - ²zⁿw�v� UNATTEND.XML �

�: ��t�� Sysprep M��q�nX���íC Sysprep M����º

ßAt����÷≈C

10. ÷≈ºßAA�� VistaPE CD ½s}≈A � Windows Vista PEC���b BIOS

]w�T�����A�b}≈�í÷ F12 ΣA����� Windows Vista PEC

pGúV��� Windows VistaAh��A��@� Sysprep Windows Vista M�

�C

11. pGzO����í��≈xsM��A�í���≈�q�íYCpGzO

HñíxsΘ°A�xsM��A�Tw Windows Vista PE �⌠⌠suAMß

AN⌠⌠��≈∩M�z�ñíxsΘ°A�]�]��≈NO D�C

Net use * \\centralserver\sharedpath

12. �� ImageX ��t���≈�M��]�]��≈NO C�CMßNªxs

� D ��≈C

Imagex /capture C: D:\myimg\Vista32.wim “SMC Vista32”

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

��z�@� .wim �Co� .wim �U���Auϕ Secure Managed Client VNIF

X�{íC

13. N VNIF X�{íJ� .wim �ñCz��N WAIK w�bDnt�WATO

UCBJ�TB@C

v MΣz� Secure Managed Client VNIF X�{í��A�B�ª�∩�ú

�� OfflineUnattend.xml �C

v �ⁿzbBJ 12 ��� wim �C

mkdir C:\wim_mountImagex /mountrw D:\myimg\Vista32.wim 1 C:\wim_mount

v ��Oⁿ\αC÷MoO∩���AoO�n�@kC

– ⌠�G HKLM\Software\Microsoft\Windows\CurrentVersion\Device Installer

– ≈�G DebugPkgMgr

– �¼G REG_DWORD

– �G 0x01

v ��M≤�z{íw� VNIF X�{íCN{μ�²�≤� pkgmgr.exe ��

b��²C

� 6 � ��P�π Secure Managed Client M�� 29

Page 38: Secure Managed Client 20 pU

Pkgmgr /o:”C:\wim_mount\;C:\wim_mount\Windows”/n:”C:\tmp\OfflineUnattend.xml” /l:”C:\pkgmgrlogs\logfile.txt”

v �d logfile.txt �ATwS�o�⌠≤��AB XO 0C

v b�ⁿ� Windows M��ñA�\ %WINDIR%\inf\ �²��eATwwgw

� .inf �CsW Windows M���X�{í�RW� oem.infCoO�FT

OsWqú�X�{íAΣW���@W�C�pAMyDriver1.inf M

MyDriver2.inf ��½sRW� oem0.inf M oem1.infC

v °ⁿ .wim �AMßTww�C

Imagex /unmount /commit C:\wim_mount

14. .wim �wg��NⁿAiH��� LUN FC LUN �ⁿ�ªºßA�⌡μ ImageX

/apply ...C

N Lenovo M58p Vista wⁿM��½síp� Secure ManagedClient ⌠�

ϕ���Q� ImageX M Ghost Ñ@δM��uπAN Lenovo M58P Windows Vista

wⁿM��½síp� Secure Managed Client ⌠��A���M��iα��oLk

}≈Ciα�π� Windows }≈�z{íLk�� ...Mt�n²t�L����⌠�....

Ñ��TºCo�ípASysprep MD Sysprep M��ú�iαo�Cπ�W�t�

��M@�t����@δ Windows Vista M��A]iαo�C

M58 Vista wⁿM��]tT���CeΓ�O}≈�z{í�b�t��� (S:

ServiceV003)AH�@�t�}≈ⁿJ��b�@�t��� (C: SW_Preload)C�T

��� (Q: Lenovo) O�≈Ω���C

1. N Lenovo OEM Vista w�]qw� CD �qwⁿ���bDnt�W

2. H�z�¡nJ

3. Rúzbw� Windows Vista �íB�������bßCzb���bß�εx

WA��u�o�u�z�vMuX�v]w���bß

4. ���m�z{íñ⌠≤�Γ��AMß��nw�ΣL�mX�{íM��

{íC{bt�W��wgU�⌠�Auϕ Lenovo Secure Managed Client VNIF

X�{íF

5. ⌡μ cmd.exe �]H�z�¡⌡μ�AMß�½�² C:\windows\System32\

sysprepC

6. Nt�ú�� UNATTENDOEM.XML ��s�{μ�²UA�BNª½sRW�

UNATTEND.XMLF����z�v� UNATTEND.XML �C

�: Lenovo ú�o� UNATTENDOEM.XMLAu�ϕ@d���C

7. �d UNATTEND.XML �ATwΣñuS�v⌠≤ ProductKey ��CpG�A

�RúªCY�O���Aú��ε Sysprep {�ALk�TB@ OEM ��C

z��q .xml ��úo���C

8. HWo�NO UNATTEND.XML ���iμ����≤CpGz�ⁿLVmA�

����o�{í��NA�iH∩ xml ��ΣL�≤C

9. b cmd ΘJUCⁿOG

Sysprep.exe /generalize /oobe/shutdown /unattend:C:\windows\System32\sysprep\UNATTEND.XML

ΣñG

30 Secure Managed Client 2.0 � ípΓU

Page 39: Secure Managed Client 20 pU

v /oobe - U�}≈�A�Nqú���uWindows w∩��v�íC

v /generalize - Múqú

v /shutdown - �¿ Sysprep {�ºß÷≈

v /unattend - ²zⁿw�v� UNATTEND.XML �

�: ��t�� Sysprep M��q�nX���íC Sysprep M����º

ßAt����÷≈C

10. ÷≈ºßAA�� Windows Vista PE CD ½s��t�A � Windows Vista PEC

���b BIOS ]w�T�����A�b}≈�í÷ F12 ΣA����� Win-

dows Vista PECpGúV��� Windows VistaAh��A��@� Sysprep Win-

dows Vista M��C

11. pGzO����í��≈xsM��A�í�w��q�íYCpGzOH

ñíxsΘ°A�xsM��A�Tw Windows Vista �⌠⌠suAMßAN⌠

⌠��≈∩M�z�ñíxsΘ°A�C��AoX Net use * \\centralserver\

sharedpath]�]��≈NO G:�C

12. �� ImageX ��@�t����M��]�]��≈NO D�AMßNª

xs� wim �ñC

Imagex /capture D: G:\myimg\Vista32.wim “SW_Preload”

13. �� ImageX ��A�/t����M��]�]��≈NO C�C

Imagex /capture C: G:\myimg\SystemPartition.wim “ServiceV003”

14. ��Ω����M��]�]��≈NO E�C

Imagex /capture E: G:\myimg\DataPartition.wim "Lenovo"

Imagex /capture E: G:\myimg\DataPartition.wim ″Lenovo″

{bAzw�@� .wim �Co� .wim �U�⌠�Auϕ Lenovo Secure Man-

aged Client VNIF X�{íC

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

15. N VNIF X�{íJ� wim �]Vista t�MA���ún��Cz��²

N Windows AIK w�bDnt�WA�αbDnt�W⌡μU����BJC

�: ]�⌡μ SMCSetup.exe �N VNIF X�{íw�b Windows Vista WAY

z�p��ΓANú�J VNIF X�{í��C

v MΣz� Secure Managed Client VNIF X�{í��A�B�ª�∩�ú

�� OfflineUnattend.xml �C

v �ⁿzwbBJ 12B 13 MBJ 14 ��� .wim �C

mkdir C:\wim_mountImagex /mountrw D:\myimg\Vista32.wim 1 C:\wim_mount

v ��Oⁿ\αC÷MoO∩���AoO�n�@kC

– ⌠�G HKLM\Software\Microsoft\Windows\CurrentVersion\Device Installer

– ≈�G DebugPkgMgr

– �¼G REG_DWORD

– �G 0x01

v ��M≤�z{íw� VNIF X�{íC�½{μ�² pkgmgr.exe ��b

��²G

� 6 � ��P�π Secure Managed Client M�� 31

Page 40: Secure Managed Client 20 pU

Pkgmgr /o:”C:\wim_mount\;C:\wim_mount\Windows”/n:”C:\tmp\OfflineUnattend.xml” /l:”C:\pkgmgrlogs\logfile.txt”

v �d logfile.txt �ATwS�o�⌠≤��AB XO 0C

v b�ⁿ� Windows M��ñA�\ %WINDIR%\inf\ �²��eATwwgw

� .inf �CsW Windows M���X�{í�RW� oem*.infCoO�FT

OsWqú�X�{íAΣW���@W�C�pAMyDriver1.inf M

MyDriver2.inf �{bú½sRW� oem0.inf M oem1.infC

v {bA°ⁿ .wim �AMßTww�G

Imagex /unmount /commit C:\wim_mount

16. N VNIF X�{íJ� Windows Vista ��C

�: SMCSetup.exe ��ú�N VNIF X�{íw�bA���CpGzbíp

ºßA�nqA����o⌠⌠s�vAh��⌡μUCBJAJX�{

íG

v �ⁿ .wim �C

Imagex /mountrw D:\myimg\ServicePartition.wim 1 C:\wim_mount

v MΣ winpe.wim �]b tvtos �²U�A�B�ⁿªC

�: pG��úsbAN��²�� c:\mype_mountC

Imagex /mountrw C:\wim_mount\tvtos\winpe.wim 1 C:\mype_mount

v �]z� VNIF X�{í�≤ E:\vnifdrivers �²C

Peimg.exe /inf=E:\vnifdrivers\lndrvbus.inf C:\mype_mount\WindowsPeimg.exe /inf=E:\vnifdrivers\netvnif.inf C:\mype_mount\Windows

v pGS�⌠≤��A�Tw wim �C

Imagex /unmount /commit C:\mype_mountImagex /unmount /commit C:\wim_mount

{b Vista32.wim M ServicePartition.wim �wg��NⁿAiH��� LUN FC

17. {b “Vista32.wim” M “SystemPartition.wim” �wg��NⁿAiH��� LUN

FC

18. s�xsΘ}CA�B�ⁿ��a LUNC����Mú����eA]���

��≈o� LUN W���½nΩ�C

19. H�z�¡⌡μ cmd �AMßΘJ diskpartAA÷ Enter ΣC

>list disk]�] disk 2 OzΦ�ⁿ� LUN�>select disk 2>clean>create partition primary size=1500]pGOt����Ah� 1.5GCz]iH��ΣL�jpAun��ú��p�>format LABEL=”ServiceV003” [quick]/*��G����O “ServiceV003”Ao� bmgr32 yß�α�TB@*/

>assign [letter=I]>active]��i²t����¿�i}≈����>create partition primary size= yoursize]oOz� Vista t�����>format LABEL=”SW_Preload" [quick]>assign [letter=J]>create partition primary /*z�Ω����*/>format LABEL="Lenovo" [quick]>assign [letter=k]>list volume]pGzS�buⁿúv�ⁿw��≈N�A���o�ⁿO�MΣ LUN ���≈N�AH�MΣ]t wim �� USB ��≈���≈N��C>exit

32 Secure Managed Client 2.0 � ípΓU

Page 41: Secure Managed Client 20 pU

�] USB ��≈�NO DAzb LUN W���t����NO IAzb

LUN W��� Windows Vista t����NO JA����NO KC

{bziHN .wim �M�� LUN FC

Imagex /apply D:\myimg\Vista32.wim 1 J:Imagex /apply D:\myimg\ServicePartition.wim 1 I:Imagex /apply D:\myimg\DataPartition.wim 1 K:

20. ��t�ú��σ�� DriveLetter.bat �π��≈NC

Script ��G

v /currentsystem:″driveletter″ - ⁿwt����{μ��≈N]b WinPE U�C

oO�n��C

v /targetsystem:″driveletter″ - ⁿwt��������≈N]b Windows Vista

U�CoO�n��C

v /currentos:″driveletter″ - ⁿw@�t����{μ��≈N]b WinPE U�C

oO�n��C

��i²M��¿�i}≈M��C

�: zuαq Vista/Vista PE Isσ��Cb XP/XP PE ñhLkIsσ��C

DriveLetter /currentsystem:I /targetsystem:S /currentos:J

21. {bziH�� LUN FC

22. Windows Vista �bgL��½s��ºßA}l⌡μC

23. ��H�z�¡�⌡μAH}� DOS ⁿOC⌡μt�ú��σ�� BCDFix.bat

�� BCD ��A²wⁿoH�TB@C�]z� Vista ��≈ (SW_Preload) O

CAt���≈ (ServiceV003) O SAΩ���≈ (Lenovo) O DC

BCDFix /system:s /os:c /data:d

�:

a. t��b Script �⌠�½s}≈C

b. �F²wⁿ�B@Ab�� Ghost �t@���íM���uπ�A��⌡

μBJ 20 MBJ 23C

�s{�� Windows Vista M��

z� Windows Vista ��wg⌡μF@q�íAW��z�����{íM�HΩ�C

pGznb Secure Managed Client U⌡μªAiH��N{��t��s� Secure

Managed ClientC

pGzO�� Lenovo Secure Managed Client PE CDAN{��M���s� Secure

Managed ClientA�ϕ CD ⁿ�iμC

pGzO���v�uπ�st�Aiαn²��@��DºßA�α²íp�M

���T}≈C�ϕUCBJG

1. �� BCD ��Mn²��C

a. pGz� Vista úA�≤ BitLockerA�H�z�¡qíp@�t�⌡μ cmdA

MßΘJUCⁿOG

BCDEDIT /set {bootmgr} device bootBCDEDIT /set {default} device bootBCDEDIT /set {default} osdevice bootBCDEDIT /set {memdiag} device boot

� 6 � ��P�π Secure Managed Client M�� 33

Page 42: Secure Managed Client 20 pU

b. pGz� Vista A�≤ BitLockerA�qíp@�t�]íp@�t���O Vista

� Vista PE�⌡μt�ú�� DriveLetter σ��A�π��≈NM BCD �

�C

2. H�z�¡nJAMß⌡μ regeditC÷@U HKLM\System\CurrentControlSet\Services\PciIdeAN�l��∩� 0 H�� PciIdeC÷@UHKLM\System\CurrentControlSet\Services\IntelIdeAN�l��∩� 0 H�� IntelIdeC

�: ���]�ß�≈�÷ww� IDE �mX�{íAoQ Windows ����FC

pG�ß�≈�S�w�o�X�{íAh��²w��n�X�{íΣ� IDE }≈

ºßA�αiμ�αC

{bt�wg��NⁿAiH�ⁿ�sFCziH�� ImageXBGhost � xcopyCpG

zO�� ImageXAh�MiH÷Ω�m� 1 �í���PBJAH≈uΦísW

Lenovo VNIF X�{íC� \� 25��y� Secure Managed Client ��s� Win-

dows Vista M��zC

M�����

bípºeA²NC@�M����AiHTO�ß�M��ú�X{⌠≤�óC

��{ívT�úOμ@���AOπ� Secure Managed Client ⌠�C Secure

Managed Client O@�WS�⌠�A�����Dw]�w���{íC

�w�@�

ϕzb Secure Managed Client ⌠�UNM�����A��qUCU�G

�rnΘ

C@��ß�ú��w�@�ñ��rA�{íC²Oϕztm�MΦ��A���

q� Secure Managed Client ⌠��≤C�����r{íút�@�@�ñ�Lo

�X�{íAiHY�O@t�C�tmbUZ�íiμt��yCpGo@I�ú

�A�≥Cg�y@�A�O⌡μCu²����z¼�yA��úP≤zZ Secure

Managed Client ⌠�C

�MjM��{í

�Fú¬�αA��úw�⌠≤������{í�A�]�p Windows jMBWin-

dows α�jM� Windows ��A��C

Windows jMBWindows α�jM� Windows �A�: pGniμ�úA�

⌡μUC�@G

1. b Windows �εx÷@UsW��ú{í��AMßVU �MμAd�O�w

� Windows jMBWindows α�jM�⌠≤ΣL���jM��{íCpG�A

h÷@U�{íAA÷@U�≤/�úC

2. t�]b Windows �εx÷@UsW/�ú Windows �≤��A�T{u��A

�vΦ�S��∩C

3. ÷ΓUu��qúvAMßb C: ��≈��W÷@U�½kΣAA÷@U�eC�

úue\��A�H∩���iμs���t��jMv�∩���C

34 Secure Managed Client 2.0 � ípΓU

Page 43: Secure Managed Client 20 pU

w²ú�: pGn��w²ú�A�⌡μUC�@G

1. �}l -> ⌡μAMßΘJ RegeditCo��}�un²sΦ�v∩ �C

2. �² HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\

Memory Management\PrefetchParametersAMß÷@U EnablePrefetcher

3. N��Ω�Φ�ñ��r∩� 0C

4. ÷@UTw

SuperFetch]¡�≤ Vista�:

1. ��εx -> A�A��b}l\αϕ�jM�⌡μΦ�ñΘJ services.mscCo

��}�uA�v°íC

2. ÷ΓUMμñ� SuperfetchAY�}� SuperFetch �eC

3. NU \αϕ∩�uw��vCz]iH÷@Uu�εvA�Y÷¼ªC

4. ÷@UTw

⌠�su

�F�εD Secure Managed Client �ß�q Secure Managed Client �ß��o IP �

}A��⌠�⌠≤⌠⌠CΣBJpUG

1. �}l -> �εx -> ⌠⌠suAMßbz�@�ñsuW÷@U�½kΣC

2. �T{�≤ Secure Managed Client �su�L⌠��ΣL⌠≤⌠⌠suC

pGn�ε���⌠⌠]wA��� Windows s��hC

�½�

Windows Vista t�@�@�ñ���½��{A�w≤CP�Tñ� 12 IC���

�����½��{]L�O≥≤≤Ot�O@�t�ú@��A�]�UCX

IG

v pG�{���½�ObypWZ�íiμASecure Managed Client ⌠�N��CC

v w����½�]�����≈�� (Volsnaps) �C Secure Managed Client �αC

v b�� Secure Managed Client 2.0 ������\α�A��½���≤\h��

xsbw�W≥�M��������mA�BnDqxsΘ}CW������

¬�o���A]ε�F�����uIC

b Secure Managed Client ⌠�ñA⌡μ@�ñ���½�{í�úAϕC�≤�Φ�

�OGbh�ΩΘ��WAp�@⌡μ��½�N�o@LNqA]��Φ��

MΩΘ��ºí�Lu����∩���÷�C��½�]iα��P���ΣLΦ

���≡A]�⌡μ��½�ºßA��GbΩΘ���s≥Ω��⌠≤[ C

]�A�núnb Secure Managed Client ⌠�⌡μ��½�C

≤s��

ziHb��≈�W��t�≤s��HTO�e�C²z���q�O�≥μ�

{íM≤s��AH�ª�∩ Secure Managed Client ⌠��vTC��@���]A

@�t�B��{íM⌠⌠�e�CpGo�@�Ob�WZ�í⌡μA�≥�j

¼�≤s��]]AA�M≤BX�{íM��{í�iα�� Secure Managed Cli-

ent ⌠���αC�¿qN≥μ�{íM≤s���bDWZ�í⌡μC

� 6 � ��P�π Secure Managed Client M�� 35

Page 44: Secure Managed Client 20 pU

O@M��

pG⌠�ϕñS�Ωw�M��AN���{��@�ñ�≈{íC Windows XP M

Windows Vista út����≈�� (Volsnaps) A�C�w]Ao�A�OA⌡μ]ú

Σ� Microsoft Vista Home Basic M Home Premium�AiHú�úí��Ω�O@C

pGiHA���o�A�A�B�����≈A� (VSS) �≤OtuπAbDWZ

�í��Cg�≈C VSS ∩≤n²�≤�ϕ�PApG�ß�M��W���{íú

�a�≤n²Ahw��≈��jqΩ�gJw�Cp��]�⌠⌠MxsΘ}C I/O

íMA�P Secure Managed Client ⌠��αC¿C

��{í�e���

�⌡μAϕ���AP���{íPπ�@�t���e�C Microsoft ú�Fif

t Windows VistaBServer 2008 H��@�t���� Windows �αuπM≤

http://www.microsoft.com/whdc/system/sysperf/perftools.mspx

C

�: Microsoft XP uπúbΣ�ºCC

¼� Windows �αl�Ω� (WPT)WPT iH ° 5 �]wG

v }≈

v ÷≈

v ≡v

v R

v Y�

pGn¼�l�Ω�A���UCykG

xbootmgr -trace <???> -numRuns <X> -resultPath <(output)> -traceFlags base

bo�ⁿOϕñ����ú����AΣí�pUG

v ??? - }≈B≡vBRB÷≈

v X - n�¿�⌡μ�

v (output) - ΘXl����m

ΘX�iH��αR{í]H ≤ WPT ñ�}�C

�OCt�A�M{�

ϕz¼�Fl��A�H Windows �αR{í}�ªºßAA���K�w∩Sw

�@A�CY�A��ßO��í�pCΣñ@�A��ß��íA��WLΣLA

�A�No�A���u��]w�≡�vAún²ªb���vT½nA�C

p�ΣLσ≤A�e�UC⌠}G

http://www.microsoft.com/whdc/system/sysperf/On-Off_Transition.mspx

36 Secure Managed Client 2.0 � ípΓU

Page 45: Secure Managed Client 20 pU

�Oú¡w�μ�

��{íiα�b���í��íA�Pú¡w�μ�CpGnb Windows ¼�l

�Ω�A�⌡μUCⁿOG

xperf -on base+cswitch+latency+power

pGn�εl�A�⌡μUCⁿOG

xperf -d (output)

bo�ⁿOϕñ����ΘJ���AΣí�pUG

(output) - ΘXl����m

@�t�A�

�]t@�t�A���÷ΩTC

��

u�½nA���nN���¼]�u��vC

@δ½nA�]AUCA�G

v �n�@�t�A�

v �rA�{í

��]w�≡�

D÷Σ�A�AΣ���¼��u��]w�≡�vC

@δD÷Σ�A�]A≤OtA�C

�/w��

��ú½n�A�AΣ���¼�uΓ�v�uw��vC

@δú½n�A�]AUCA�G

v Windows jM

v Windows ≤s

v ≤Ot≤sA�

v Θu@ú����@�t�A�

����

ziH�⌠�A�∩≤⌠��@�íO½n�A�C���UCA�A��

LANDesk iμ�z@�G

Windows XP A�

ϕ 3. Windows XP A�

A� \α

°i �e WER °i� Microsoft

í��Σ� Microsoft xΦí�σ≤

sC�� Σ�sst������AHiμ�tjM

� 6 � ��P�π Secure Managed Client M�� 37

Page 46: Secure Managed Client 20 pU

ϕ 3. Windows XP A� (�≥)

A� \α

��n² e\������∩n²

��≤s�� e\ⁿ� Microsoft °A�AHΣX≤s��

ΩTwñ� °t�w

���≈�� �z�≈������≈��

t���A� ⌡μt���\α

Wireless Zero Configura-

tion

� 802.11 t�dú���tm

Windows Vista A�

ϕ 4. Windows Vista A�

A� \α

��� q�zd���

≈u�� ú�≈u���@í�

ReadyBoost Σ� ReadyBoost ��{í

��n² e\������∩n²

�zd �zqú¬���zd

TabletPC Σ�¡Oqú�ΘJ

���≈�� �z�≈������≈��

Windows ≤s e\ⁿ� Microsoft °A�AHΣX≤s��

Windows jM Σ�sst������AHiμ�tjM

Windows ��°i �e WER °i� Microsoft

ThinkVantage® �N

�≤ Secure Managed Client �]pΦíAUC ThinkVantage �Nwgú�A�Az

iH�{�úª�Hú¬�αG

v Rescue and Recovery®

v Client Security Solution

N Sysprep M���� HF����α

pGzbC@��ß�ú��P��wΘANiHN Secure Managed Client ����

\α��α��CΣ@kO�� Windows t�M���z{íAN x86_Microsoft-

Windows-pnpSysprep-neutral M��sW@δqμ�AMßN PersistAllDeviceInstalls

]w∩� trueC

HU��� .xml ��d���G

<settings pass="generalize"><component name="Microsoft-Windows-PnpSysprep" processorArchitecture="x86"publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

<PersistAllDeviceInstalls>true</PersistAllDeviceInstalls></component></settings

38 Secure Managed Client 2.0 � ípΓU

Page 47: Secure Managed Client 20 pU

ú� Vista �α

ziH��Y� Vista A�ú� Vista �αC

�: �Mμ�C�A����C���T{zA]ú�no�A�ºßAA��ª�C

v SERVICES

– ���≈A�

– Windows ≤s

– Windows jM

– SuperFetch

– ReadyBoost

– ¡OqúA�

v MSCONFIG

– Google ≤s{í

�C���]w�MΩ�¿½s�V

�C]w�e\���N]w�xsb NAS °A�A]����L�nJ�@íq

úAúiH��P��u@⌠�C���b���C]w�ºß�@�nJ�A�C

]w�∩����í�úsbA]� Windows ���xsb�� C:\Documents and

Settings\ Ω�¿�]w�Cϕ���nX�Aπ���]w��e]ú]A Internet

Explorer �����s�°A�WCpG����\hj¼��Ao�{�iα�ß�

°��í�¿C

�: pGznNí�xsΘ}Ctm�⌠⌠s�xsΘA� \� 47��� 8 �,

y]w⌠⌠@�zC

�F�ε�α�Do�A���Ω�¿½s�VCo�iH²zNí����]w

�Axsb⌠⌠WP�C]w�úP��mWC��Ω�¿½s�V�nBOAun

Ω�¿Q½s�V�t@��mANú�H�C����nJ�nX��s@�CU

�OziH½s�V�Ω�¿G

v ��{íΩ�

v α�

v ��σ≤

v }l\αϕ

p����C���]w���÷ΩTA� \ http://technet.microsoft.comCp�Ω@

���@k��÷ΩTA� \ http://technet.microsoft.comC

ziHjMUCⁿJMμG

v p≤���C���]w�

v p≤tm���bß���C���]w�

v ��@�Ω�¿xs�C���]w�

v Ω@�C���]w�

v ���]w�MΩ�¿½s�V

� 6 � ��P�π Secure Managed Client M�� 39

Page 48: Secure Managed Client 20 pU

v tmΩ�¿½s�V

v Ω@Ω�¿½s�V

�: Q����]w�MΩ�¿½s�VAO²���N��xsb�lM��⌠��nΦkCbNM������lM��ºeA��²]w���]w�MΩ�¿½

s�VCϕ�lM��½s���A⌠≤xs�⌠⌠@�����úú�QRúC

40 Secure Managed Client 2.0 � ípΓU

Page 49: Secure Managed Client 20 pU

� 7 � �J≥�M��

��s����M��ú��q≥�M����CpG≥�M��]t��� Sysprep

M��Aíps����L{N����TCpG≥�M��O��tmíAh

C@�s���]�¼��íC÷M�í�DL�Ao]]�Lk�oº

Secure Managed Client �M��OqC

�Q�N≥�M��íp�w��xsΘ}CAH����s����X�Dn

ΦkC

��i}≈� CD/DVD CΘ

o�ΦkON�ß���� ULOSBN�ß�s��xsΘ}CW�≥�M��AH�

��CΘw�z�n�M��Ci}≈�CΘiαO@i]t ImageX M��� Ghost

M��� DVDB@� CDA�O@i@�t�w� CDC²OpG�n⌠⌠s�

vA��� LANDesk w�M≤�ú�� SMCWinPE.iso CDC SMCWinPE.iso O@�

Windows PE CDA�tq�ß��ms��⌠⌠���⌠⌠X�{íCo� Windows

PE CD ]]t@�������� (GUI)AiN��ΩΘw�W�����≈�e�s

�≥�M��C

�:

1. ImageX O@�ⁿOμuπA���B�∩MM�w�M��Absy�X@⌠�

ñiμípC ImageX úO⌡μ���sC]�ª�ú��M��A�±ΣL�s

uπ]�p Ghost��ú��M��≤pC

2. Ghost O@������sΦí�sw��M��uπC

ziH��z¡íp@�t�M�����⌠≤�mCM��iH±mb@� DVDB

⌠⌠@��A�O��ΩΘw�WC

pGnípz�n�M��A��¿UCBJG

1. ��s�≥�M��]� \� 23��� 6 �, y��P�π Secure Managed Cli-

ent M��z�CP�o�M���nh�íCs�M���X{b�mñΩ�

¿CúDzT{�M��w��n��s���Ah�ún��ªC

2. íJi}≈�CΘA�BN�ß���� ULOSCo��únΘJ⌠≤{�C

3. qu⌠⌠v°�i}Aϕ� LANDesk ��C∩��m -> ���mAMßNMμñ

�W�∩���]�qb]����C

4. N�m���zΦΦ���s�mñ≥�M��C

5. o���X{@��� SMC �ß�∩ �C����∩N CDROM �J����

ñAMß÷@U}≈C

6. �ß� ULOS �°óBs��xsΘ}CW��≥�M��A�B}l���C

ΘC

7. íp≥�M��CpGzO�� SMCWinPE CDA��� GUI N�e�s�ΩΘ

��≈�xsΘ}CA��}�ROú�r A⌡μ⌠≤M��uπCz∩w��

��⌠≤�≤Aú�M���≤xsΘ}CW�≥�M��íC

© Copyright Lenovo 2009, 20010 41

Page 50: Secure Managed Client 20 pU

SMCWinPE.isoSMCWinPE.iso ��≤ LANDesk w��cº ldmain @��� tcm\dist �²UC

�� iSCSI �l�s�� SMC xsΘ}CW���M�� LUN�Ní�p≤�� iSCSI �l�{íAs�� Secure Managed Client xsΘ}CW

�Sw���mC�w]AiSCSI �l�{íOw�b Microsoft Vista WAúLziH

NªUⁿ�≤ XP M Windows Server 2003CH imagex � xcopy ÑuπNM���

��s�íB�∩wgsb�M��A�Os²xsΘ}CW��²�cAMΣz

ns��M���Ao�{����CziHs��≥�M��A²uαb�m¼A

Us�Cz]iHs��⌠≤���M��Aun�M��úb��ñCU�NO⌡

μo�{��Ω�m�G

1. �� iSCSI �l�{íC

2. ÷@U�≤...÷sAN�l�½sRWCziHb��D�x��� SMC xsΘ

}CW÷@U�½kΣAA÷@U�eA}�uM���ev°íAH�oo�

ΩTCb�¼μ�ñAu≥�M��v��Ou�mñM��vúOu@�ñ

M��vAz�α�� CHAP KXC�No�ΩTK�μ�ñAMß÷@UTwC

3. b iSCSI �l�{í�@δ��WA÷@UKX÷sCMßN CHAP KX�s�

KW�μ�AA÷@UTwC

4. ÷@UuiSCSI �l��ev°íñ�����AA÷@UsWJf⌠�...CNSMC xsΘ}C� IP �}sW��μ�AA÷@UTwA÷¼°íC

5. ÷@Uu��v��Co��z�����@≈t� 5 ���¬k�MμC�÷@

U½sπzATOz�C���O�s��CNt�zb SMC xsΘ}Cs��

íW����j�π�XC��A÷@UnJ...A}�unJ��v°íC

6. ÷@UiÑ...AY�}�uiÑ]wv°íC

7. �∩ CHAP nJΩTΦ�CNBJ 2 ñAuM���eve��u�l���

�vMuCHAP KXvμ�ΩTA�s�K���W�GM��KXGμ�ñC

÷@UTwC

8. {bzN���o���≈OuwsuvFCz{bNiH�����≈iμM

��@�FC

9. }� DOS ROú�r AΘJUCⁿOG

�: ���∩�Aϕ���iμU�BJC clean ⁿO��°ú��CziH

⌡μ list disk � Disk ManagementA�d���O�°úC

a. diskpart - }� > ú�C

b. list disk - �y��CX���AHK��Aϕ���C

c. select disk 1 - Σñ 1]�Aϕ��r�NϕzbW�BJ�s��Aϕ��C

ziH�����jp@� �ATOzH diskpart ���T���C

d. clean - NMú�∩������Ω�C

e. create partition primary - ��Dn��C

f. active - N��]�@�ñ��C

g. assign - ⁿúU@�i����≈NC

h. exit - ²z ���ROú�r C

i. format X: /fs:NTFS /q /yAΣñ - X: NϕbBJ 9g ⁿú���≈NC

42 Secure Managed Client 2.0 � ípΓU

Page 51: Secure Managed Client 20 pU

10. �n�A�≤s}≈��CpGznq XP t�M� XP .wim �A��q Vista

t�M� Vista .wim �Ahú�≤sC²OpGznq Vista M� XP WIMA�

�q XP M� Vista WIMA���⌡μ BOOTSECT.EXE ⁿO�π}≈��C

pGnM� XP WIMA��⌡μ bootsect.exe /nt52 X: ⁿOCpGnM� Vista .wim

�Ah��⌡μ bootsect.exe /nt60 X: ⁿOC

11. HUCⁿOM� wim M��

imagex.exe /apply foo.wim 1 x:\

12. ÷@Uwsu���AA÷@Uu��Ω�v÷sAñ� iSCSI �l�P LUN �

suC�∩ ID ��Φ�AMß÷@UnX...C���÷¼��iαs��Φ����≈�uWindows ����v°í�ROú�r C

Nh���M���s�xsΘ}C 1.x �

\h���bL���HqúM��ñ��h���Cbjí�ípUA�@�

��O Windows ��A�G���O½s�V�Ω���A�xs��

�Ω�CpGzne\o���q Secure Managed Client �ß����w��s�

xsΘ}CA�⌡μUC�@G

1. �� Secure Managed Client �zD�xAbxsΘ}CW��≥�M��Co�

M��NB≤�m¼AC

2. Q�∩w�⌡μ sysprep {��M��AN�ß���� ULOS e�C

3. N Secure Managed Client WinPE CD íJ��ß�� CD-ROM ��≈ñC

4. b Secure Managed Client �zD�xñA��½¬Σ÷@U�ß�≈�ANª÷

ϕ�����m¼A�≥�M��C�pAN@�W� LENOVO-L3A0426 ��ß

��U���u��≥�M��vC

5. o���}�u�� SMC �ß�v°íC�∩�°í���N CDROM �J�

���ñC

6. ÷@U}≈C

7. �ϕºßA�ß�N�½s��Aq CD }≈C Windows PE �ⁿJ���@�

δFC���²�ß�s��zbBJ 1 ���xsΘ}C�mM��íAHK

²zN@�t�m≤o�íC

8. ÷U@BAqδF∩�ⁿOμ∩�A}�ROú�r C

9. ΘJ diskpartA�� diskpart ⁿOμ��{íC

10. ΘJ list volumesACX diskpart �������C

z�����T���G

a. C: oOz��W��w��@�t���C

b. D: oOz SMC �ß�W��w��Ω���C

c. �l�G zbBJ 1 ���xsΘ}C≥�M��C

11. ΘJ list diskCz������� 0]��w��AH��� 1]zbBJ 1 ��

�xsΘ}C≥�M���C

12. ΘJ select disk 1Co�ⁿO�∩�zbBJ 1 ���xsΘ}C≥�M��C

13. ΘJ Create partition primary size=nAΣñ n Nϕnb≥�M��ñ���@�

t���jpCo�ⁿO�b≥�M��ñ��@�t���C

14. ΘJ Create partition extendedCo�ⁿO�H�� 1 �l�íA����Ω�

��C

� 7 � �J≥�M�� 43

Page 52: Secure Managed Client 20 pU

15. ΘJ Create partition logicalCo�ⁿO�N�Ω���ⁿw��Φ��ñC

16. ΘJ Format fs=ntfs label=”data” quickCo�ⁿO�N�� 1 μí� NTFSC

17. ΘJ Assign letter=gCo�ⁿO�ⁿú@�����≈N�Ω���C

18. ΘJ xcopy d:\ g:\ /s /h /e /y /qCo�ⁿO�Nz��w�� D: ��≈W���

Ω�Aí�s�≥�M��íñxsΘ}C�Ω���Co�@��n�

���í⌡μA]�ªO D: ��≈W��Ω��Gi���C

19. �¿�A�÷@U½s��δF÷sC���½s��δFA�s C: ��≈C

20. ÷@U∩����≈C

21. ∩� C: ��C

22. ∩�� 1 @��s���aC

23. �∩Φ�Ab�� 1 ∩���C

24. �∩n@�@�t�������� 1C

25. ÷U@BCo�{��O@��í�¿C

26. �¿�Az�M��]N��NⁿFC

Nh���M���s�xsΘ}C 2.0 �

pGzne\o���q Secure Managed Client �����w��s� 2.0 ��

xsΘ}CA�⌡μUC�@G

1. �� Secure Managed Client �zD�xAbxsΘ}CW��≥�M��Co�

M��NB≤�m¼AC

2. Q�∩w�⌡μ sysprep {��M��AN�ß���� ULOS e�C

3. Nz�v� WinPE CD íJ��ß����≈ñC

4. b Secure Managed Client �zD�xñA��½¬Σ÷@U�ß�≈�ANª÷

ϕ�����m¼A�≥�M��C�pAN@�W� LENOVO-L3A0426 ��ß

��U���u��≥�M��vC

5. o���}�u�� SMC �ß�v°íC�∩�°í���N CDROM �J�

���ñC

6. ÷@U}≈C

7. �ϕºßA�ß�N�½s��Aq CD }≈C Windows PE �ⁿJ���@�

δFC���²�ß�s��zbBJ � 43�� 1 ���xsΘ}C�mM��

íAHK²zN@�t�m≤o�íC

8. ÷@UqSw��m�sM��AMß÷U@BC

9. o�°í�π�����≈W�X���CpGz∩�N CD-ROM �s���

�xsΘ}C∩�Ao�°í]�π� CD_ROMC÷U@BC

10. �zbBJ 9 ÷@U�ß@�����M��∩���aCpGz�@�t�O

Windows VistaABpGoOzn�s��ß@���A��∩oOzn�s�

h��� Vista t���ß@���∩�C÷U@BCM��K}l�sC

11. buT{v��÷U@BC

12. o����sM��]���CpGz��ΣL��n�sA�÷½s�

�AhN÷½s}≈C

�: pGz�h��� VistaA��÷@U�Φ�]pBJ 9 �í��Ah�

���≈iαLk}≈C

44 Secure Managed Client 2.0 � ípΓU

Page 53: Secure Managed Client 20 pU

NM����íp�xsΘ}C

ziH��o�ΦkA��s��xsΘ}CW�≥�M��Aú�zL�ß�Cu

�bz�M��iHw��w�AB⌠x iSCSI �l���k�A���o�ΦkC

iSCSI �l�� H Windows Vista @�w�Az]iHqUC⌠}Uⁿ�≤ XPG

http://www.microsoft.com/iscsi/

�: pGznq@�w�CΘ�ΩΘw�w�A� \� 41 ��y��i}≈�

CD/DVD CΘzC

pGnípz�n�M��A��¿UCBJG

1. P�o�M���nh�íAMß��s�≥�M��Cs�M���X{b�

mñΩ�¿CúDzT{�M��w��n��s���Ah�ún��ªC

2. b LANDesk D�xWA��½kΣ÷@U≥�M��A∩��eCo���X{M

���e∩ �Cz�nUCΩTG

v ISCSI �l�

v �l����

v CHAP KX

v ��

3. e�π� iSCSI �l�BiHs��xsΘ}C IP �}�t�C

4. �≤t��l��]wAH�X�l�W�B���M CHAP KXΩTC

5. bxsΘ}C� IP �}⌡μ�@�CziHqu��vΩT�oo��}C

6. �@����� @��XWz��W����CpGS�Aϕ� iSCSI �l�

]wS��TΘJC

7. nJ iSCSI ��C�l����bt���@�s��C

8. ϕBJAN≥�M��íp���WC

9. nX iSCSI ��C

uno{���≥�M��W��xsΘ}CANϕⁿ�Ab LANDesk D�x��

s����C

}≈[t

Q�}≈[tAxsΘ}CYiN}≈�C@� LUN ���O²A∩M�}≈�Dn

M�����O²C

�≤xsΘ}COq�}≈Bz}≈[t�Ω�A]�úDÑ�jí����ú

g�L]wípM����l����Ah�nún��}≈[tCU�O@δ

��BJ��G

1. íp���zL LANDesk u²���M��C

2. �����A�BzL LANDeskANM�����L����C

3. w∩jí����⌡μ�l}≈C

4. zL LANDesk GUI ��}≈[tC

a. ∩� <storage array name>A��A∩��e -> }≈[t

b. w∩≥�M����}≈[tC

� 7 � �J≥�M�� 45

Page 54: Secure Managed Client 20 pU

w∩��q≥�M��l��M��ALANDesk ú���}≈[tC

5. ²��Σñ@����AA��ΣL���Co� LUN K��YΓª�}≈O²�

[����FC

6. ��������A@�j��� 30 �Co�BJ�¼�Σ�����Ω�A]i

HRo�Ω�CϕxsΘ}CBz�o�Ω�ºßA���}≈O²�Dn��

}≈O²�∩MAN�xsbxsΘ}CñCß≥}≈�íAN�q}≈��ú�

��O²A]���⌡μ}≈[t���AΣ}≈t�ú�[�\hC

ú�

�� SMCWinPE.iso CD �A�NUC��G

v T{�ß�t�b��� CD ºeA�²��� ULOSCpG CD ²≤ ULOS }

≈At�NLks��xsΘ}CC

v }�ROú�r �AJI�b�¿°íWApGo��÷ Enter ΣAN�½s}≈]�¿°í�iDzo@I�C

v pGzbiμ�l]w{��í�� SMCWinPE.iso CDA�l]we��°óXϕ

�A½sX{�Aπ�e�jp����≤C

v w�sM��ºßA�@�}≈�A�ñ�w�su]T{°í�iDzo@

I�C

v ϕzq CD �sM���A�b÷ Enter ΣºeA²bT{°íN CD ½¿��

]T{°í�iDzo@I�C

v Oⁿ SMCWinPE.iso w��G�Θx�AOxsb smccopy.log ñ���a�mC

v SMCWinPE.iso CD ���úONA���Ω��s�xsΘ}CAONΩ��

s�@δ�i}≈��≈]qOⁿ C ��≈�C

pGúO�� Lenovo CDziH��⌠≤@�i}≈ CD/DVD CΘ���ß�CpGt��nxsΘ}Cs

�vANúα�� USB CΘ]]A USB ≈�� USB w��FC��i}≈ CD �A

�NUC��G

v T{�ß�t�b��� CD ºeA�²��� ULOSCpG CD ²≤ ULOS �

�At�NLks��xsΘ}C���M��C

v pG CD ½s}≈A�ß�bA���� CD ºeA��²�� ULOSC

v ϕzHσr�íw� Windows XP �Ae�W�X{}≈�z{í��TºCϕ

z������í�Ao�σrK�°óC

46 Secure Managed Client 2.0 � ípΓU

Page 55: Secure Managed Client 20 pU

� 8 � ]w⌠⌠@�

ziHNxsΘ}Ctm�⌠⌠s�xsΘ (NAS) �mCtm�A�⌡μUC�@G

1. tm Active Directory®G

a. Twwbu�²�z{ívtmF Active DirectoryCp��÷ΩTA� \� 13

��ySecure Managed Client / LANDesk ]wzC

�: S� Active Directory tmA]iH�� NAS ��C²OA��tmF

Active DirectoryA�α�� AD v¡M�h�zo���C

b. buSMC �z{íve�WA��½kΣ÷@UxsΘ}Cñ� NAS ��AA

÷@U Active Directory tmA}� Active Directory ∩�e�C

c. ÷U \αϕAA÷@Uzn�tm NAS ��� Active Directory ⌠�C

d. ÷@U∩�C

2. �� NAS ��G

a. bxsΘ}CñA��½kΣ÷@U NAS ��AA÷@UsW NAS � A

}�u��⌠⌠xsΘve�C

b. ΘJ��W�C�NAW���ípgC��A∩���jp]H GB �μ

��C

c. ÷@U��Co��N���s��FC�w]ASMC ���s�@�A���

P���P�W�C

3. NAS v¡M�hG

a. b⌠⌠@��÷@U�½kΣAA÷@U�úΩw NAS @��C

b. q Active Directory °A�tm Active Directory v¡M�hC

c. A��½kΣ÷@U⌠⌠@��AMß÷@UΩw NAS @��C

�w]A@��w]v¡Ou�¬vCpGn�≤��A�⌡μUC�@G

a. b@��÷@U�½kΣA∩��úΩw NAS @��Co���X{uSMC �

z{ív�iAq�zun�úΩw NAS @��ANÑ≤ß���wO��

���π�s�vC

b. ÷@UTwC

iJ Active DirectoryAtm ACL @��CMßA��½kΣ÷@U@��A�÷

@UΩw NAS @��Co≥@AActive Directory tmNπ�@���s�vFC

4. Rú NAS @��G

a. pGnRú NAS @�����A�b@��÷@U�½kΣAA÷@URú

NAS @��/�C

ziH��ΣLs�@��M��G

1. b���÷@U�½kΣA}�u��⌠⌠@��v°íC

2. pGzn� A]iHΘJ@��W�Mí�C

3. ÷@U��C

© Copyright Lenovo 2009, 20010 47

Page 56: Secure Managed Client 20 pU

48 Secure Managed Client 2.0 � ípΓU

Page 57: Secure Managed Client 20 pU

� 9 � tmPBMDPB�g

��N�dbJ��D�Ap≤��PBMDPB�gAH�p≤N�nxsΘ}C

���DnxsΘ}CC��P�]NQ�DPB�g��k

�g]���h�xsΘ}CAoHiμa° FΣñ@��@Dn}CAt@

��@�n��≈}CC

PB�giú�Y��≈C�≤o�tGA�≈xsΘ}C��≥FDnxsΘ}

CC

DPB�g���O SnapshotCzuαNo�¼��gAtmb�wíjiμCziH

�w�≈AN�nxsΘ}C]m�≈�C

�n°≤

PBMDPB�g��n°≤pUG

v DnM�nxsΘ}Cú��w�PB�g�vC

v �nxsΘ}C�xsΘ��j≤�Ñ≤DnxsΘ}CCp��÷ΩTA� \

� 9��� 4 �, ySecure Managed Client M��w�zC

v �nxsΘ}C��� LANDesk D�x��C

v �nxsΘ}Cúαw�⌠≤≥�M��B������ NAS @��C

v �g�nB��vC� \� 17��y�v��z

��PB�g

pGn��PB�gA�⌡μUC�@G

1. ��½kΣ÷@UDnxsΘ}CAA÷@Utm�gCo��}�utm�gv

°íC

2. qu�g�ívU \αϕ∩�uPBvC SMC �z{í�CXAXPB�g�i

�xsΘ}CC

3. ∩�@��nxsΘ}C�xsΘ}CAMß÷@UPB C

4. tm�¿ºßA�nxsΘ}CK�Cb SMC �z{íñ�DnxsΘ}CU�C

�: Y�oΓ�}Cºí���wg�¿APB�g@�iα�O��≥iμ@q�íAon°wbDnxsΘ}CW����������wC

��DPB�g

pGn��DPB�gA�⌡μUC�@G

1. ��½kΣ÷@UDnxsΘ}CAA÷@Utm�gC

2. qu�g�ívU \αϕ∩�u� Snap UvC SMC �z{í�CXAXD

PB�g�i�xsΘ}CC

© Copyright Lenovo 2009, 20010 49

Page 58: Secure Managed Client 20 pU

3. pGn��w]��≈�{A�∩�n@��nxsΘ}C�xsΘ}CAMß÷

@UPB C

4. pGntm�q�≈�{A�÷@UiÑB��DsΦμ�AMßA÷@UPB

5. tm�¿ºßA�nxsΘ}C�CbDnxsΘ}CU�C

�: Y�oΓ�}Cºí���wg�¿ADPB�g@�iα�O��≥iμ@q�íAon°wbDnxsΘ}CW����������wC

Γ�ó��Γ

U@DnxsΘ}Co��DAziHN�n}C���Dn}CC

pGn���n}CA�⌡μUC�@G

1. ��½kΣ÷@U�nxsΘ}CAA÷@U���Dn

2. {��¿ºßA�nxsΘ}CN�Y¿�DnxsΘ}CC��Dn}CNú

A��A�BqxsΘ}C≡¼�c�úC

3. ½] DHCP ⌠�A²ªⁿVs�DnxsΘ}CC

4. ��xsΘ}C{biH��� 49��y��PB�gz�π��BJ½s�

�A�tm��nxsΘ}CC

�: bz���n}CºeA�n²�d�g�¼AC���½kΣ÷@U SMC �

z{íñDn}CUΦ��n}C��A∩��g¼ACo���X{u�gi

�v°íAπ�πΘ��gi�AH�C@�M���i�CpG�n}Cb�g

�¿ºeY��A�n}C��ºßAiα��íM��Lkb}CW��C

50 Secure Managed Client 2.0 � ípΓU

Page 59: Secure Managed Client 20 pU

� 10 � �°��

��]t�°��B⌠⌠G�IH�zbtmM�� Secure Managed Client �iαJ

��¡εÑ�÷ΩTC�÷�°���ΣLΩTA� \ Secure Managed Client - Stor-

age Array User GuideC

�D

�]tziαJ��U��DAH�p≤��o��D��÷��C

xsΘ}CE�{í

�dxsΘ}CO��B@�@�ΦkAOd���� 12 �±ΓOCpGΣñ\

hOúe±ΓANϕ�xsΘ}C���va⌡μCpGjíúúGAϕ�xs

Θ}CweíM¼AC

gJ��≈�AO��C]�ApGOú��Aϕ�xsΘ}CweíM¼

AAú�iα��va⌡μCpGO¡wG��{{Aϕ�xsΘ}C���Fí

M¼AC

Secure Managed Client ú�}≈

pGo�}≈��AiDzuS�i�� iSCSI }≈≡vA���N iSCSI ]�Dn

}≈≡Cp��÷ΩTA� \� 10��ySecure Managed Client Γ�]wzC

pG BIOS Lks��xsΘ}CA�� D0 M ULOS M��AN�X{��TºC

�ún½�o�����A∩÷ Ctrl-Alt-DelAjε BIOS ½ss��xsΘ}CC

pG��ó�AiαO⌠⌠�xsΘ}CwgG�FC

ϕt�s��xsΘ}C�}l}≈�AN�X{ Secure Managed Client e�CpG

��e�°óAe�@�ú�Aϕ� D0 ñ� LANDesk Nz{í�b�s��

LANDesk ��°A�C²OA��°A��⌠⌠suwgG�FC

pGt�iH�� D0 M ULOSAϕ�⌠⌠MxsΘ}Cú�B@CpGz� Win-

dows M��Lk��A�ϕ LANDesk ULOS ���ú��ú�iμC

���zD�xºßA�ß�Lk}≈

pGzb��uSecure Managed Client �zD�xvºßANLk���ß�A���

≤sxsΘ}C���tm/ΩTC�⌡μUCBJG

1. }� Secure Managed Client D�xAMßbxsΘ}C÷@U�½kΣA∩�w�

}≈M��C

2. ΘJ�n�ΩTG

share \\<localhost name/IP\ldmainuser <admiinistrator group user on the box>password

3. ∩��O

4. bτ�O�A�s²� tcm\dist\\SMCBoot-<version>.imgAMß∩�≤sC

© Copyright Lenovo 2009, 20010 51

Page 60: Secure Managed Client 20 pU

÷MªoßX���íⁿJA²���ΩT��úO�s�AB�ß�]��i

H}≈FC

�z��°A� IP �}wg�≤F

pG��°A�wQ��AB�°A�� DHCP IP �}wg�≤A�⌡μUCBJ

[H��C

1. N IP ½]��l� IP �}]]�RA�

2. ½s����A�ot@�Ωú�z�yA²Ωú�zPBCpGzún½s}

≈A�bⁿOμΘJUCⁿOG

\<path to landesk install>\ManagementSuite\ldlogon\ldiscn32/ntt= NATIONWI-IX4CN8/s= NATIONWI-IX4CN8/sync/v

�ó�

ϕ��ó��A��dUCU�G

v pGz�b°A�h�w� LANDeskA��d c:\Program Files\LANDesk\Shared

Files\certs Ω�¿ñ��A��TwªP protect.ini ���C

v ��q Secure Managed Client xsΘ}C� Secure Managed Client �zD�x°

A�AAq�zD�x°A� �xsΘ}CAiμsu��C�DiαXb��

°A���⌡≡C��do���GC:\program files\landesk\shared files\keys\

Protect.iniC

S����M��

pG�����@�ⁿG�Q�¿A�BbxsΘ}C����Σñú�@���

���A²oS��������⌠≤M���ANϕ�xsΘ}Cíú¼ALk

e��M��C

LANDesk Θx

biμ Secure Managed Client �D��°���AiH �Γ� LANDesk ΘxMΓ

�⌠�A�z�iμ�°��G

1. Program Files/LANDesk/Management Suite/console.exe.logC

2. Program Files/LANDesk/Management Suite/logs/san_portal.logC

3. https://localhost/connectionmanager/connectionmgr.asmxC

4. https://localhost/san_portal/sanportal.asmxC

�@⌠⌠G�I

ϕ 5. ⌠⌠G�I

¼p iα��] vT

�ß�t�l�BΩw Windows X�{í/��{í

�G�

xsΘ}CG�

A�⌠⌠uú}

�@����ß�°il�¼p

μ½�W���t�úⁿ�vT

xsΘ}CW����ß�úⁿ�vT

lu�s��t�úⁿ�vT

52 Secure Managed Client 2.0 � ípΓU

Page 61: Secure Managed Client 20 pU

ϕ 5. ⌠⌠G�I (�≥)

¼p iα��] vT

�ß�°iΩ�yó Windows �l

�G�

xsΘ}CG�

A�⌠⌠uú}

@�������lF

μ½�W���t�ú��]/Ω�yó�¼p

xsΘ}CW����ß�úⁿ�vT

lu�s��t�úⁿ�vT

��iH���

ULOSAoLk�� Win-

dows

Windows �l

LDMS G�

Active Directory G�

@�������lF

����ß�ú°iX{O�∩ �

�ß�X{@��÷nJ�∩ �

��Lk��� ULOS CMOS ]w

�G�

xsΘ}CG�

A�⌠⌠u

LDMS G�

DHCP °A�G�

�@�X��ß�°iX{}≈�D

μ½�W���t�úⁿ�vT

xsΘ}CW����ß�úⁿ�vT

lu�s��t�úⁿ�vT

����ß�ú°iX{O�∩ �

l⌠⌠W���t�úⁿ�vT

⌠⌠�C�D DNS °A�

�G�

���� DNS °A��t�

�h����°iX{ Web �D

Secure Managed Client ⌠�ñ�s���

ziH�≤⌠⌠t�dbuiÑ]wv°íñ�π���CpGz μu��suv

t�dbu��s�suvt�dºeπ�A�⌡μUCΣñ@�{�G

�≤ Windows XP �s���

pGn�≤ Windows XP �Dns���A�⌡μUC�@G

1. }� DOS ROú�r C

2. ΘJ ipconfingAMß÷ Enter ΣCqz���@�P@ IP �}�u��suv

��H�u��su 2v��C

3. ΘJ ncpa.cplAMß÷ Enter ΣCY�}�u⌠⌠suv°íC

4. bu⌠⌠suv°íWA÷@UiÑ -> iÑ]wCY�}�uiÑ]wv°íC

5. ∩�ut�dPs�v��C

6. busuvΦ�ñAN IP �} 172.30.0.2 �u��suv����Mμ��]p

Gª��busuvMμ��� �C

7. ²÷≈AMßA½s��t�C

�≤ Windows Vista �s���

pGn�≤ Windows Vista �Dns���A�⌡μUC�@G

1. }���� DOS ROú�r C

2. ΘJ ipconfingAMß÷ Enter ΣCqz���@�P@ IP �}�u��suv

��H�u��su 2v��C

3. ÷@U}l -> ⌡μC

4. ΘJ ncpa.cplAMß÷@UTwCY�}�u⌠⌠suv°íC

5. bu⌠⌠suv°íWA÷@UiÑ -> iÑ]wCY�}�uiÑ]wv°íC

6. ∩�ut�dPs�v��C

� 10 � �°�� 53

Page 62: Secure Managed Client 20 pU

�: �����iα�n÷ Alt ΣA�απ�o�\αϕC

7. busuvΦ�ñAN IP �} 172.30.0.2 �u��suv����Mμ��]p

Gª��busuvMμ��� �C

8. ²÷≈AMßA½s��t�C

¡ε

v úΣ�zL��⌠⌠≡vC

v N ThinkCentre M57p eco �ß�� BIOS ≤s��s�ºßA⌠⌠�mñ�

SMCBoot ∩�NLk��FCoiαO]� ThinkCentre M57p eco �ß�Ob

Secure Managed Client }oºe�R�Cz��≤so�t�ñ� NIC �ΘAHK

Σ� Secure Managed Client ��� iSCSI }≈Cp��÷Uⁿo���{í�ΩTA

� \ Secure Managed Client Σ�⌠�C

v SMCWinPE CD uα�NA���Ω��s�@δi}≈��≈C

v �� SMC WinPE CD �AuLenovo A���vú��s�xsΘ}CW���

�M��C Secure Managed Client WinPE CD �]p¡�≤�sμ@����

�AúOπ�w�CpGzn�sA���A�⌡μUC�@G

1. MúxsΘ}CW�M��C

2. b LUN W��A��� [ diskpart -> create partition primary size=6131 ]C

3. b LUN W��t��� [ diskpart -> create partition primary ]C

4. Nt���]w�@�ñC

5. NA���q��w��s� LUNC

6. Nt���q��w��s� LUNC

7. �ú��w�C

8. NA�����]w� SERVICEV002C

9. ⌠�A��� [ set id=27 ]C

10. Nt�����]w� SW_PreloadC

11. ���α�AMß�úw� Rescue and RecoveryC

12. ½sw� Rescue and RecoveryC

v bπ�ΩΘw���ß�WH CD }≈A����ΩΘw�AúOxsΘ}C

W�M��C CD @������ 0Cbπ�ΩΘw��t�ñA���≈N

O�� 0AxsΘ}C��≈O�� 1Cb��@�wⁿ CD ºeA�²εU

��ΩΘw�C

v Secure Managed Client ú���⌠≤�s Microsoft M����DCbH Secure Man-

aged Client iμ�s�A���s Windows M����Dú�MsbC

v b�u@qUAWindows t���b 24 p����≡ 3 ϕ¬kC Secure Man-

aged Client }≈�z{íO��t���g�Aunu@q@W[AN��≡ Win-

dows t���C��� Windows ���\αAN��P⌠�⌠⌠�í°A�PB

C

v u��≤UviαLks��zns��t�C�ß�b Windows ��Γ� NICC

@��≤@δ⌠⌠qTAt@�hP Secure Managed Client }≈�z{íqTCo

Γ� NIC ú��u��≤UvH��τ�C� IP �}ú��DCb��u��

≤Uv��A����G���⌠⌠C

54 Secure Managed Client 2.0 � ípΓU

Page 63: Secure Managed Client 20 pU

v pG CSS � SafeGuard Easy GINA Ow�b Windows XPASecure Managed Cli-

ent μ@nJ\αNLkB@C�������w�b Windows � GINAAA�n

J WindowsC

v LANDesk D�xú�π���TºAiDzxsΘ}Cíú¼C

v �� 100 xt�b�@����Aú�]��� 100 xt�� Windows PnPA

SOwCCpG 100 xt�P���A�bxsΘ}Cú�jq��� I/OC]��

@���t��A�núnP�WL 30 xC

v ���b�� Secure Managed Client WinPE CD N��w����s�xsΘ}

C�A��²úΩΘ��≈A�α½s}≈C�²ú��ΩΘw��q�AA

���xsΘ}C����M��C

v Windows XP w�ϕ�Le��½s}≈Aú�bw� Windows XP � F5 w�[

c�ío�Cbw� Windows XP � Windows Vista]ACPI h½Bz� PC HAL�

�A�ß�uΣ�w]� HALC

� 10 � �°�� 55

Page 64: Secure Managed Client 20 pU

56 Secure Managed Client 2.0 � ípΓU

Page 65: Secure Managed Client 20 pU

�². �N��

Lenovo úúo�∩��Ωa�a�úú��σ≤�ú�U�ú�BA��\αCp�o

�ú�PA���÷ΩTA�ó�ϕa� Lenovo ��NϕC�σ≤bú� Lenovo �

ú�B{í�A��Aúϕ��t�uα�� Lenovo �ú�B{í�A�Cun�I

� Lenovo ��z]úvA⌠≤\α�ϕ�ú�B{í�A�úiH�N Lenovo �ú

�B{í�A�CúLA⌠≤ΣLú�B{í�A�A������μtd@�º�

⌠Mτ�d⌠C

b�σ≤ñiα]t� Lenovo ���ºMQ��mMQ��í��eC�σ≤���

�ú��ezMQº⌠≤�vCziH���Φíd��vAτ�H�G

Lenovo (United States), Inc

1009 Think Place

Building One

Morrisville, NC 27560

USA

Attention: Lenovo Director of Licensing

LENOVO GROUP LTD. Yu�{¼vú��X��Aúú�⌠≤���q�ºO�A

Σñ]ABú¡≤úH!WwBi���Sw��ºA���⌠tO�C���

ú"\±≤bSwμ÷ñ����q�O�A]�Ao�n�∩ziαúA�C

��ñiα���NW������LΩW��C]�ALenovo �w��qF�N�

qß��e�Js��í�σ≤ñCLenovo oH��∩�/��≤��ñ�í��ú�

�/�{íAñútμq�C

�σ≤ñ�zú�úA�≤��ΓN�ΣL��R���A]Σ\αó�y¿H

� #�iαC�σ≤ñ�]t�ΩTúvT��≤ Lenovo ú��Wμ�O�C�σ

≤ú�b Lenovo �≤Ot��z]úvH�ú�⌠≤���t��O�C�σ≤ñ

�ú����ΩTí�Sw⌠��oAB@�í���CbΣL@�⌠�ñ��

Giα���úPC

búy¿zxZ�l�z�Hvq�eúUALenovo oHA���� GzHU�¼í

�ú���÷ΩTC

��ñ��ú�D Lenovo ⌠��í�¬� �ΦKALenovo �ú∩o�⌠�iμ

⌠≤Φ��I�Co�⌠�ñ�Ω�A�ú]tb Lenovo ú��Ω�ñA��⌠�ñ

�Ω�A��μtß�IC

�Bú���αΩ�íúOb�ε⌠�ñ�o�C]�AYbΣL@�⌠�UA�

o��Giα���j�tºCí�q�Giαo�}oñ�t�ABLkO��

B�q�G�M@δt�W�o�G�PCA�Aí�q�GiαO���ík�

o��⌠�AΩ��GiαúPC�σ≤�������v�Sw⌠�Ad�A��

Ω�C

© Copyright Lenovo 2009, 20010 57

Page 66: Secure Managed Client 20 pU

��

UCM�WⁿO Lenovo bⁿΩ�/�ΣLΩa�a���G

Lenovo

Lenovo �x

ThinkCentre

Intel � Intel vPro O Intel Corporation �Σl�qbⁿΩ�ΣLΩa�a����

U�C

MicrosoftBWindows ServerBWindows Vista � Windows O Microsoft Corporation b

ⁿΩ�/�ΣLΩa�a���C

Linux O Linus Torvalds bⁿΩ�/�ΣLΩa�a��U�C

ΣL�qBú��A�W�AiαO�T����A��xC

58 Secure Managed Client 2.0 � ípΓU

Page 67: Secure Managed Client 20 pU

Wⁿ��

K�

�lM�� (Pristine image). �lM��O@�\αAi²zMú⌠≤∩M���������≤���C@�

����lAM��tm�M��N��ΩwAúα�

∩C�n�AziH�ú�lΩwAe\z�����∩

M��C

Q@�

�AD≈tmqT≤w (Dynamic Host ConfigurationProtocol, DHCP) . �AD≈tmqT≤wO DHCP �

ß��� IP �}ⁿú�ΣLtmΩT���@�qú⌠⌠

qT≤wC

QG�

iÑD≈�ε��� (Advanced Host Controller Inter-face, AHCI). � Intel wq���{í]p��AHDΩ

@SwΦíAwq Serial ATA D≈�y�t�d�@�C

QC�

xsΘ}C (Storage array). @�wOs Secure Man-

aged Client �ß�Ω���mC���tmú� 12 ��

�M 6 � 1GB �A�⌠⌠≡CxsΘ}COzL SMC

�zD�xAb��[H�zM��C

GQT�

�Φ�mX (Logical Unit Number, LUN). b iSCSI

⌠�ñALUN Ω�WOgLs���≈C�l�P��

≤�su� LUNFΣ�G��� SCSI w�� iSCSI Ñq

@�C

B

BitLocker. BitLocker ��≈[KO Hb Microsoft Win-

dows Vista Ultimate �@��π��[K\αCΣ]pú

���[KAO@�C

I

ISCSI. @�qT≤wAªe\�ß�]���l���eSCSI ⁿO���°A�W� SCSI xs�m]���Co

≥@Aúi²��NxsΘX��Ω�ñ�xsΘ}

CAP�S��D≈@���s������

U

ULOS. Secure Managed Client ���nJe�

V

VNIF. Ω�⌠⌠��

© Copyright Lenovo 2009, 20010 59

Page 68: Secure Managed Client 20 pU

Printed in Taiwan