Secure Managed Client 20 pU

68
Secure Managed Client 2.0 ípΓU ΘG20102δ24Θ

Transcript of Secure Managed Client 20 pU

Secure Managed Client 2.0 �ípΓU

Θ�G2010�2δ24Θ

Secure Managed Client 2.0 �ípΓU

Θ�G2010�2δ24Θ

�@�]2010 � 2 δ�

© Copyright Lenovo 2009, 20010.

�ΓUA�∩H� IT �z�A�Otdb��qúWíp Secure Managed Client®

(SMC) {í�H�C�ΓU���AO� Secure Managed Client ú�w�B�πM�

�@k���ΩTC

Secure Managed Client Ow∩ IT M�H�H�L��J��M�D��}oCo�í

pΓUNw∩ Secure Managed Client ���Aú�ⁿ�M�MΦ�CpGz�⌠≤�

��NúA�P Lenovo® ��vNϕp�CpGn�d�ΓU�w�≤sA�yXUC

⌠�G

www.lenovo.com

© Copyright Lenovo 2009, 20010 iii

iv Secure Managed Client 2.0 � ípΓU

�²

eÑ . . . . . . . . . . . . . . . . iii

� 1 � º[ . . . . . . . . . . . . . 1

� 2 � @δ]w . . . . . . . . . . . 3⌠⌠su . . . . . . . . . . . . . . . . 3w�Mtm LANDesk . . . . . . . . . . . 3��xsΘ}C . . . . . . . . . . . . . 3�m≥�M�� . . . . . . . . . . . . . 3�����M�� . . . . . . . . . . . . . 3∩�zn���M���¼ . . . . . . . . . 3

� 3 � ⌠⌠�q . . . . . . . . . . . 5≥ª[c�D . . . . . . . . . . . . . . 5L��¼�ß�[c . . . . . . . . . . . . 6Active Directory �q . . . . . . . . . . . 6iSCSI }≈ . . . . . . . . . . . . . . . 7eq . . . . . . . . . . . . . . . . . 7��E�]�¿� . . . . . . . . . . . . . 8�]yó . . . . . . . . . . . . . . . . 8⌠⌠�� . . . . . . . . . . . . . . . . 8

� 4 � Secure Managed Client M��

w� . . . . . . . . . . . . . . . . 9�n°≤ . . . . . . . . . . . . . . . . 9Secure Managed Client Γ�]w . . . . . . . 10

Secure Managed Client μ½� . . . . . . . 11Secure Managed Client - xsΘ}C]w. . . . . 11w� Secure Managed Client �z��. . . . . . 12�� Secure Managed Client xsΘ}C . . . . . 12

� 5 � LANDesk ΩT . . . . . . . . 13Secure Managed Client / LANDesk ]w . . . . . 13�� Secure Managed Client D�x . . . . . 13�n°≤ . . . . . . . . . . . . . . 13w� LANDesk . . . . . . . . . . . . 14q Secure Managed Client 1.2 ���� 2.0 �. . 14tm LANDesk Secure Managed Client D�x . . 15

M���¼ . . . . . . . . . . . . . . 18��M�� . . . . . . . . . . . . . 18μ@M�� . . . . . . . . . . . . . 18����M�� . . . . . . . . . . . . 19ⁿúu� . . . . . . . . . . . . . . 20

�lM�� . . . . . . . . . . . . . . 21

� 6 � ��P�π Secure ManagedClient M�� . . . . . . . . . . . . 23�� Sysprep M�� . . . . . . . . . . . 23�� Windows XP M�� . . . . . . . . 23

�s{�� Windows XP M�� . . . . . . 24�� Windows Vista M�� . . . . . . . . 24

M���� . . . . . . . . . . . . . . 34�w�@� . . . . . . . . . . . . . 34��{í�e��� . . . . . . . . . . 36@�t�A� . . . . . . . . . . . . . 37���� . . . . . . . . . . . . . . 37

�C���]w�MΩ�¿½s�V . . . . . . 39

� 7 � �J≥�M�� . . . . . . . . 41��i}≈� CD/DVD CΘ . . . . . . . . . 41

SMCWinPE.iso . . . . . . . . . . . . 42�� iSCSI �l�s�� SMC xsΘ}CW���M�� LUN. . . . . . . . . . . . 42Nh���M���s�xsΘ}C 1.x � . . 43Nh���M���s�xsΘ}C 2.0 � . . 44

NM����íp�xsΘ}C . . . . . . . . 45}≈[t . . . . . . . . . . . . . . . 45ú� . . . . . . . . . . . . . . . . . 46pGúO�� Lenovo CD . . . . . . . . . . 46

� 8 � ]w⌠⌠@� . . . . . . . . 47

� 9 � tmPBMDPB�g . . . . . 49�n°≤ . . . . . . . . . . . . . . . 49��PB�g . . . . . . . . . . . . . . 49��DPB�g . . . . . . . . . . . . . 49Γ�ó��Γ . . . . . . . . . . . . . . 50

� 10 � �°�� . . . . . . . . . . 51�D . . . . . . . . . . . . . . . . . 51xsΘ}CE�{í . . . . . . . . . . 51Secure Managed Client ú�}≈ . . . . . . 51���zD�xºßA�ß�Lk}≈ . . . . 51�z��°A� IP �}wg�≤F . . . . . 52��ó� . . . . . . . . . . . . . . 52S����M�� . . . . . . . . . . . 52

LANDesk Θx . . . . . . . . . . . . . 52�@⌠⌠G�I . . . . . . . . . . . . . 52Secure Managed Client ⌠�ñ�s��� . . . . 53�≤ Windows XP �s��� . . . . . . . 53�≤ Windows Vista �s��� . . . . . . 53

¡ε . . . . . . . . . . . . . . . . . 54

�². �N��. . . . . . . . . . . . 57� . . . . . . . . . . . . . . . . . 58

Wⁿ�� . . . . . . . . . . . . . . 59

© Copyright Lenovo 2009, 20010 v

vi Secure Managed Client 2.0 � ípΓU

� 1 � º[

Lenovo Secure Managed Client �MΦ�O@�xsΘ¼��N�ß�pΓ�MΦ�A

M��≤U°�ε�Σ�¿�AH�ú¬Ω�w�AP�Sú������αW

¼qú�u�M�αCSecure Managed Client iN����qα�M��A��qxs

Θ}C�e� ThinkCentre M57p ecoBM58 � M58p �ß�CnΘMΩ�úOQ�

uSecure Managed Client �zD�xv�ñ�zCSecure Managed Client �MΦ�O

M��ε��≥W[�@¿�Ao�¿�°[U]�n�¿hC

Secure Managed Client �MΦ�O�T�Dn ≤��¿G

v Secure Managed ClientG�ß�]tF�� Intel vPro® �N� Lenovo L��

ThinkCentre M tCαW¼qúCo��ß�Otm���q Secure Managed Cli-

ent xsΘ}C}≈C

v xsΘ}CGSecure Managed Client xsΘ}CO Secure Managed Client ��ñí

Ω�xswCªO@��[�ⁿBíw�iF 12 í 3.5 T Serial ATA (SATA)

w����AαzL�� 6 x 1 GB �A�⌠⌠≡AH��Φíú� iSCSI Ω�

yqCxsΘt�OM���zhF 100 �@�ñ�ß�w�C

v nΘ∩�G Secure Managed Client nΘ∩�iN Secure Managed Client s��x

sΘ}CW����M��C Secure Managed Client �zD�xizL LANDesk

nΘú���NA�zxsΘ}C�C@��O�ß�C

© Copyright Lenovo 2009, 20010 1

2 Secure Managed Client 2.0 � ípΓU

� 2 � @δ]w

U�o��dMμi≤Uz�t]w Secure Managed Client ⌠�CoO]w⌠���

���C

⌠⌠su

__BJ 1. � 5��y≥ª[c�Dz

__BJ 2. � 6��yL��¼�ß�[cz

__BJ 3. � 6��yActive Directory �qz

__BJ 4. � 7��yiSCSI }≈z

__BJ 5. � 7��yeqz

__BJ 6. � 8��y⌠⌠��z

w�Mtm LANDesk__ 1. � 13��y�n°≤z

__ 2. � 14��yw� LANDeskz

__ 3. � 13��y�� Secure Managed Client D�xz

__ 4. � 15��y�� LANDesk Management Suitez

__ 5. � 16��y����≥�M��z

__ 6. � 41��� 7 �, y�J≥�M��z

__ 7. � 16��y����M���μ@M�����M��z

��xsΘ}C

__BJ 1. � 16��y��xsΘ}Cz

�m≥�M��

__ 1. tm����

__ 2. � 23��y�� Sysprep M��z

__ 3. ��/W�≥�M��� 16��y����≥�M��z

�����M��

∩�zn���M���¼

__ 1. ∩�zn���M���¼CU�O@≈M���¼�MμC

v Secure Managed Client ��M��

v μ@M��

v ����

© Copyright Lenovo 2009, 20010 3

ϕ 1 ú�úPM���¼�í�G

ϕ 1. M���¼

M���¼ S� ΣLΩT

��M�� v C����@�M��AC

����ú�@�M�M�

v C����bxsΘ}C�

n≤hxsΘC

v Σ�ⁿúu�

v ��lM��

v � 23��� 6 �, y��P

�π Secure Managed Client

M��z

v � 20��yⁿúu�z

v � 21��y�lM��z

μ@M�� v Oq@δ≥�M����

v Σ�ⁿúu�

v ��H��lM��Fw

]�O�HC

v � 18��yμ@M��z

v � 20��yⁿúu�z

v � 21��y�lM��z

����M�� v Oq@δ≥�M����

v S�ⁿúu�

v NM��xsb����

≈C

v �t}≈A�αuq

v �����≤Ot�xsb

xsΘ}C

v ��lM��

v � 19 ��y����M�

�z

v � 21��y�lM��z

__ 2. �����

__ 3. ípM��� 45��yNM����íp�xsΘ}Cz

4 Secure Managed Client 2.0 � ípΓU

� 3 � ⌠⌠�q

��NQ�]w Secure Managed Client ��DMΣL�qC

��]tUCDDG

v y≥ª[c�Dz

v � 6��yL��¼�ß�[cz

v � 6��yActive Directory �qz

v � 7��yiSCSI }≈z

v � 7��yeqz

v � 8��y��E�]�¿�z

v � 8��y�]yóz

v � 8��y⌠⌠��z

≥ª[c�D

U�Ou²���⌠⌠�DG

v h GB �≥F⌠⌠

v Secure Managed Client xsΘ}C�X 6 � 1 GB �≡

v μ½�uwmbxsΘ}CM�ß�ºí

U�O�N�⌠⌠�DG

v @�tv� 1 GB HW�≥F⌠⌠

v C 1 GB ���h 20 ���

v �π�@� 100 MB �μ½�

– ��π� 1 Gb]Q⌡� ��Wμ��

– π� 1 GB Wμ��� 100 MB μ½�AC@��hi� 20 ��ß�

v Σ�⌠�⌠⌠

– ��ún�≤ Secure Managed Client

– ���XWz⌠⌠�D

– u²�� 10 GB �⌠��

v Secure Managed Client �bC@��ß���Γ�CΘs��ε (MAC) lh

© Copyright Lenovo 2009, 20010 5

v P⌠⌠s��ε (NAC) ú�e

– nzL iSCSI }≈A��π�⌠⌠s�v

– ⌠⌠��d (NIC) OPROM úΣ� NAC

L��¼�ß�[c

U�O Secure Managed Client �����º[G

v ΩΘwΘOs��xsΘ}CM LANDesk Management Suite (LDMS)CS����

�xsΘC}≈�z{íOQ���bΩΘ NIC ñ� iSCSI A�AzL iSCSI q

@δ}≈M��}≈C

v ���nJ}≈�z{íC�� LDMS °A��τ����AMßbxsΘ}CM

ΣM��C

v ���@�t����A���hN⌠≤��wΘú�� WindowsC�pA�hi

α�¡εz∩����≈� USB ≡�s�vC

Active Directory �q

Active Directory i²zⁿú�hA�NnΘM≤s��íp���ϕñ�O��ß�

WCpG Secure Managed Client ≥ª[c���s��{��⌠⌠��AzNiHQ

�ª�⌠�ñ{μ� Active Directory ]wC

ziH� Secure Managed Client M���≤ Active Directory ]wC�M��

íp��ß��ΦíwA��]wiα�∩�αú�vTCziH��@�j≈�

��≥ª[cAP�O�⌠≤�≡C��qUCU�G

v LANDesk Secure Managed Client D�xúαw�b�⌠�� Active Directory °A

�WC

� 1. Secure Managed Client ]p

6 Secure Managed Client 2.0 � ípΓU

v LANDesk °A�H�nJ�°A�����Aú��[J�⌠�A�αq�⌠���

Secure Managed Client ���C

v u� LANDesk °A��⌠��≡tñ����A�αb LANDesk Secure Man-

aged Client D�xñ��C≡tO Active Directory ñC@�½≤BΣ���Wh�

�XC

p� Active Directory ��÷ΩTA�e�UC⌠}G

http://www.microsoft.com/windowsserver2003/technologies/directory/activedirectory/default.mspx

iSCSI }≈

Secure Managed Client �X iSCSI ��qT≤wC���Ω≡ 3260AHK]�ΩF

iSCSI Ω�yqCp��÷ΩTA� \

www.ietf.org

�l@�t�]}≈�z{í�OzL iSCSI }≈A� NIC ⁿJ��ß�Cz��t

mu�AD≈tmqT≤w (DHCP)v°A�A²ªiD NIC nⁿJ@� iSCSI �

�C DHCP °A��b DHCP tm�}≈∩�ñA�e IP �}B��W�Mu�Φ

�mX (LUN)v�XCM�ykMΦk]�yk�Φk�n��ß⌠����

DHCP °A��¼wA]�úb��Q�d≥�C

iSCSI ��Ob∩M�����m�A� iSCSI ��A�δ��@�rΩ���CH

Secure Managed Client ��AiSCSI A�ObxsΘ}Cñ⌡μAΣ��]����O

�xsΘ}CM LANDesk °A���X�ú�C��W��rO�xsΘ}Cú�A

]�O�ú�½�CW��ΣlíO� LANDesk ú�AqO smcbootC

pGnMΣ}≈�z{í��W�A�∩xsΘ}C IP �}⌡μ iSCSI �Co��

�� xsΘ}Cñ���MμCΣñ@�����O smcboot ��C DHCP °A�

��N iSCSI }≈tmñ���W�]�o�W�]]A�xsΘ}Cú���@r

�CpG IP �}OHRAΦíⁿúAh LUN qO 0C

eq

÷M Secure Managed Client �ú��@δí��ϕ�A²�O��w∩ypeq]

p⌠⌠C÷MúPt���bP@�íú�yps�qA²OnX�t�P����

ípoO���úC⌠⌠�����o��í]]NO}≈�����C

@° 100 MB �u⌠iHΣ�@����A²pGAW[X��ß�AN�WL 100

MB u⌠�eqA]�z�n@° 1 Gb �u⌠C 1 Gb �u⌠iHⁿ 20 � 25 �

�ß��ypΩ�yqC�ß�Yh≤o���AN�nh°u⌠FC

� 3 � ⌠⌠�q 7

��E�]�¿�

pGWL 20 � 25 ��ß�b��Y�Sw��AhiHNh�ΩΘ���X�@�

�Φ��Aú�≤j�eqC÷M��E��X ISO 802.3ADA²]�]μ½�t

úPC

b Secure Managed Client �MΦ�ñAxsΘ}CMDnμ½�ºíO�� 6 ���

E�Co≥@AxsΘ}Cu��@� IP �}ANα�¼≈�⌠⌠eqe�hF

100 ���C

pGzN�μ½�Θxñ� MAC �t�½��]½����TºAiHbzⁿú�

xsΘ}C� 6 �μ½�≡ºí]w@�A�⌠qDC

�: pGz�n½s��xsΘ}CA��²�úo�A�⌠qDA�α�Q�½s��C� \� 16��y��xsΘ}Cz

�]yó

pG Secure Managed Client b�@�íp��αúⁿA���d⌠⌠O��]yó

�ípo�Cϕ�@�h�Ω��]LkzLqú⌠⌠�F��a�AN�yó�

]C�]iα�X�GHεzB⌠⌠�DB⌠⌠��Wⁿ��]�lCpG�]O

b��⌠⌠¼�NyóAiα�∩�αy¿½jvTCz��OϕA����]y

ó�DN�¼pC{N�≥ª[chbúα�ⁿ 1% ��]yóvCpGb Secure Man-

aged Client ⌠�yó�]Aiα�vT�ß��αA]��ß�OzL⌠⌠Ω�Cb

� Secure Managed Client ≥ª[c∩�wΘ�A����qo��DC

pG Secure Managed Client ⌠�t�ⁿ�z�]�z¼�μ½�A]\iH�qg�

�O≡o���]yóC]�o�Φk�bμ½h�ú�Ω�A�Hiu²��C²

pG�]Obμ½�yóANú@wα�����≤��]FCμ½��pΩ�ñ�

�≤��]AqO]�o�T����� ��Ñ�D�����≤�]Co�

�]P]�bh�ΩΘ��te�]�o����≤��]úPCt@��d�≤

�]�ΦkAO��⌠⌠�αuπAb⌠⌠Wjq�e�]AMß�dO�T�e

�]CΣñ@�d�NOoX Linux ping -f ⁿOC

t@��q�]yó�ΦkAObwΘºíwm@�IC�pAziHb@��ß

��Σ�O�μ½�ºíAwm@íí�Γi⌠⌠d� Windows � Linux ≈�C

⌠⌠��

Secure Managed Client �MΦ�ñ�@δ��qO�UC���¿G

v @�ñíμ½�A�t 6 � 1 GB ���AE�xsΘ}C

v 4 � 5 ��Pμ½�AC@�μ½�ú� 1 GB ���q�ñíμ½�

v C@�π� 1 GB � 100 Mb ����Pμ½�Aú� 0 � 25 ��ß�

8 Secure Managed Client 2.0 � ípΓU

� 4 � Secure Managed Client M��w�

���e]tw� Secure Managed Client �MΦ���n°≤M{�C

��]tUCDDG

v y�n°≤z

v � 10��ySecure Managed Client �]wz

v � 11��ySecure Managed Client - xsΘ}C]wz

v � 12��yw� Secure Managed Client �z��z

v � 12��y�� Secure Managed Client xsΘ}Cz

�n°≤

UN��í�w� Secure Managed Client �MΦ���n°≤G

v Γ�w²tm�RA IP �}F@��≤uSecure Managed Client �z��vA@�

�≤uSecure Managed Client xsΘ}CvC

v @� DHCP ⌠�]∩� 17�AQ���xsΘ}Cºß���xsΘ}CXA

[H]wC

v A�≤uSecure Managed Client �z��°A�v� Microsoft® Windows 2003

Server®C

v ⌠≤iα�vTuSecure Managed Client �z��°A�vw�@���ßM�°A

�w�ΩTA�pwd�Mus��h½≤ (GPO)vC

v bGudñtm�íC

v ��tmG

– Windows® XP SP2]���� SP3�A�B�π� 1 GB �OΘ]��π�

2 GB�

– Windows Vista® SP1]�≤s����A�B�π� 2 GB �OΘ]��π

� 3 GB�

v A�≤ ThinkCentre® M57pBM58 � M58p ≈���ßα�M��C

�:

1. ��úΣ� Windows 7C

2. �JΩ� Secure Managed Client NIC X�{íC

3. ún�wΘ�qúRWA]�o�wΘúOΩ��mC

v ⌠≤iH@��⌠⌠w�hM⌠⌠tmC

v τ� Secure Managed Client ⌠��Σ��ñ@�C

v xsΘ}CG

ϕ 2. xsΘ}Cw�jp

xsΘ}CG��� Secure Managed Client ���w�jp

���M���� 6 TB xsΘ}C 9 TB xsΘ}C 12 TB xsΘ}C

150 C��� 35 GB C��� 50 GB C��� 70 GB

© Copyright Lenovo 2009, 20010 9

ϕ 2. xsΘ}Cw�jp (�≥)

xsΘ}CG��� Secure Managed Client ���w�jp

���M���� 6 TB xsΘ}C 9 TB xsΘ}C 12 TB xsΘ}C

100 C��� 50 GB C��� 75 GB C��� 100 GB

50 C��� 100 GB C��� 150 GB C��� 200 GB

ziH��UC�íApΓxsΘ}C�α�ⁿ������G

����� = [(11* ��jp -15) / (≥�M��jp)] - 2.5 * ≥�M����

�:

1. ��jpúH GB �μ�C

2. 15 ϕ�� Secure Managed Client }≈M��M�zΩ�Od�íO 15 GBC

3. @�xsΘ}C�hα≈�ⁿ 250 ��@M��C

4. @�xsΘ}C�hα≈�ⁿ 150 �@�ñ���C

5. @�ñ�����qA�vT Secure Managed Client �MΦ���αC

Secure Managed Client Γ�]w

1. H�s� Secure Managed Client �{OΘ BIOS ≤s��A≤s≈�W�

BIOSC

2. pGt�t�w�A�²úw��YC

3. ½s}≈AMß÷ F1 ΣA��� BIOS ]we�C

4. b�⌠≤�≤ºeA²÷ F9 Setup DefaultsA]ww]�C

5.

v M57 ≈�Gb IDE Drives Setup ñAN Serial ATA ]� EnabledBN Native

Mode Operation ]� Serial ATABN SATA Raid Enable ]� DisabledAMßN SATA AHCI Enable ]� DisabledC

v M58 ≈�Gb ATA Drives Setup ñAN External SATA Port ]� EnabledBN Serial ATA ]� EnabledBN Native Mode Operation ]� EnabledBNSATA Raid Enable ]� DisabledAMßN SATA AHCI Enable ]� Dis-abledC

6.

v M57 ≈�GbuNetwork SetupvñAN LAN options ROM ]� SMC BootC

v M58 ≈�Gb Network Setup ñAN Boot Agent ]� SMCC

7. b����ñ�J PCI SCSIC

8. q�����ú IDE HDDC

9.

v M57 ≈�Gb Advanced ñAN Intel Virtualization Technology ]� EnabledC

v M58 ≈�Gb AdvancedBCPU Setup ñAN Intel Virtualization Technology ]

� EnabledC

10. ÷ F10 [HxsAMß½s��C

11. ÷¼≈�q�A⌡μjó÷≈C

10 Secure Managed Client 2.0 � ípΓU

12. }�≈�q�Aϕz�� Intel iSCSI Boot e�]≥�b�@� Lenovo ��e

�ºßX{��A�÷ Ctrl M DC

13. ÷ PAN}≈]�DnC

pG⌠�wb DHCP °A�Wtm�ϕA��≥iμBJ 23C

14. ÷ Enter ΣAs� iSCSI Port Configuration \αϕC

15. ∩� iSCSI Boot ConfigurationC

16. ÷ Tab ΣΓ�� Use DHCP for iSCSI Target InformationAMßA÷�ΣA�°∩��∩�C

17. ÷ Tab ΣAMßb Target Name ñAw∩z��ß⌠�w�ΘJ��W�C

18. ÷ Tab ΣCMßb Target IP μ�ñΘJ°A�� IP �}C

19. U�Γ�μ�ú÷ Tab ΣAOdw]�C

20. ÷ Tab ΣA��z�� OK �εAMß÷ Enter ΣC

21. ÷U�ΣAxsz����≤AMß�⌠C

22. ÷@U Enter ΣA∩� Yes [HT{C

23. ÷@U Esc ΣFo�� Secure Managed Client t���N}l�}≈FC

Secure Managed Client �

SMCsetup.exe �Γ��@μ½�Cª�OG

v NOCRED

pG]� 1Ahú�w�{�ú�� SSOG

SMCSetup.exe /v NOCRED=1

v NODISKSTAT

pG]� 1Ahú�w����α °�G

SMCSetup.exe /v NODISKSTAT=1

Secure Managed Client - xsΘ}C]w

Secure Managed Client �ú� CD ��w²ⁿJCpGS�w²ⁿJA���g

L�π�q��C�y� (USB) CD-ROM w�ªCw��A�∩����w]�A

�⌡μΣL�nBJ]wxsΘ}CC��zNxsΘ}Cw�≤��íb Secure

Managed Client ��μ½��GudñAp�KαO���q⌠⌠�w�Ω�yqC

]wxsΘ}C�A�⌡μUC�@G

1. w�xsΘ}CC

2. s����°⌠⌠uC

3. NΣLM °�s��xsΘ}CC

4. ϕxsΘ}C���AΘJw]KX passwordC LANDesk �b��°A��A�

≤o�KXC

5. ∩� SysInfoA�BTO��≡Wú�@� IP �}C

6. ∩� IPConfAMß÷ Enter ΣC

7. ∩� NIC 1AMß÷�ΣC

� 4 � Secure Managed Client M��w� 11

8. ÷U�Σ�tm NICAMß÷ Enter ΣC

9. ∩�RA IP �}C

10. ΘJw²]w�uRA IP �}vΩTG

v IP �}

v l⌠⌠Bn

v w]hD

v Dn DNS

v �n DNS

v DNS r�

11. ÷ Enter ΣCb½] IP ΩT�Ao�@��nX���í⌡μC

12. ÷ Esc ΣA �D\αϕC

13. ∩�nXD�xC

w� Secure Managed Client �z��

�÷w�Mtm LANDesk w�ß��znΘ���ΩTA� \� 13��� 5 �,

yLANDesk ΩTzC

�� Secure Managed Client xsΘ}C

xsΘ}COzL LANDesk Secure Managed Client nΘ��Cp��÷ΩTA� \

� 13��� 5 �, yLANDesk ΩTzC

12 Secure Managed Client 2.0 � ípΓU

� 5 � LANDesk ΩT

LANDesk Management Suite iú��π�t��zuπA²z�°BtmB�zMO

@⌠⌠W��mCo�@�íú�@�D�x⌡μC��Ní� LANDesk nΘ�w

�{�AH�zL LANDesk SMC �z{ítm Secure Managed Client �n@�C

p��÷ LANDesk Management Suite ú��ΣL\α�÷ΩTA� \ LANDesk

Management Suite User’s GuideA⌠}pUG

http://www.landesk.com/supportdownload/resourcelibrary.aspx

Secure Managed Client / LANDesk ]w

p²�o�ú�A�ó�z� Lenovo �NMaC

ϕz�R�ú��A�¼�@�qll≤A�t LANDesk ú���v≈�C

�� Secure Managed Client D�x

p²�o�ú�A�ó�z� Lenovo �NMaC

�n°≤

w� LANDesk ºeA�²�¿UCBJG

1. e�sW/�ú{íA÷@UsW/�ú Windows �≤C

2. j�π�]²ú�∩���{í°A�AMß÷@U��Ω�C

3. �∩⌠�⌠⌠ΩTA� (IIS)C

4. �∩ ASP.NETC

5. ÷@UTwC

6. j�π�]²ú�∩��zP�°uπAMß÷@U��Ω�C

7. VU �A∩��÷⌠⌠�zqT≤wA÷@UTwC

8. ÷U@BAMßíJ CD]YX{ú��C

⌠�⌠⌠M≤

pGO ASP.NET M .NET [cA�⌡μUC�@G

v qUC⌠�Uⁿ�⌡μ .NET Framework 3.5G

http://www.microsoft.com/downloads

FamilyId=333325FD-AE52-4E35-B531-508D977D32A6&displaylang=en

pGO Web Services Enhancements 2.0 SP3A�⌡μUC�@G

v qUC⌠�Uⁿ�⌡μ WSE 2.0 SP3G

http://www.microsoft.com/downloads

familyid=8070E1DE-22E1-4C78-AB9F-07A7FCF1B6AA&displaylang=en

© Copyright Lenovo 2009, 20010 13

⌠�⌠⌠ΩTA� (IIS) tm

�¿HW�n°≤BJºßAzb⌡μ LANDesk �n°≤�d{í�Aiα�J�ó

��¼pCpGó�TºiDz�M�� ASP.NETA�⌡μUC�@G

1. ∩�}l -> {í� -> t��zuπ -> ⌠�⌠⌠ΩTA� (IIS) �z�A�� IIS

�z�C

2. b¬�íμ∩�⌠�⌠⌠ΩTA� -> �≈qú -> Web A���C

3. bk�íμ�uWeb A���vMμñA��½kΣ÷@U ASP.NET 2.x.x �A

Mß÷@U�\C

Secure Managed Client °A�

p��s�D��÷ΩTA� \uLANDesk Management Suite t��DM¡xΣ�v

⌠�G

http://www.landesk.com/SolutionServices/product.aspx?id=670

w� LANDeskTw�X�n°≤ºßALANDesk K�π��Yw�∩�C

1. ÷@U�Yw�AMßbyÑú�÷@UTwA��A÷U@BC

2. ∩���ⁿ...AMß÷U@BC

3. T{S��∩ LANDesk t��z{íAMß÷U@BC�w]��∩�Y��s

Ω�w∩�C

4. ΘJ���W��KX�[HT{AMß÷U@BC

5. ΘJ��W�M�W�AMß÷U@BC�W��bw����C

6. �°�∩��������°oG�°iAMß÷U@BC

7. pGznq��w��αA��∩q��w��α��]wAMß÷@Uw�C

8. w��ª�A�ú�@� PKCS#12 ��� SMC D��su�z{íC��

]t��� p12 �ΘJKXA�[HT{C� \� 18��yD��su�z

{ízC

9. �w�ºßA�÷@U½s}≈C

10. ΘJ���W�MKXH�� LANDeskA�÷@U��C

11. o���X{@�∩ �Aq�z��¿\C�÷¼o�∩ �A�� Windows �

�≥}≈C

�: z]iH∩�}l -> {í� -> LANDesk -> ����°A�A��

LANDeskC

q Secure Managed Client 1.2 ���� 2.0 �

izLUⁿ��{íq 1.x ���� 2.0 �C

w� LANDesk A�M≤M SMC 2.0 �zD�x

1. b SMC 2.0 w��²U÷ΓU Autorun.exeC

2. ÷@UN SMC w�b��°A�C�n°≤�d{í�ó�A�°iz�nw�

LANDesk Management Suite 8.80 Service Pack 3C

3. bß≥�UⁿMw�ú�÷@U⌡μC

4. ÷@UOAM� Service Pack 3 ≤sC

14 Secure Managed Client 2.0 � ípΓU

5. ���∩u�ⁿvΦ�AMßbu���X�v°í÷@UOC��A÷TwC

6. w�A�M≤j��ß 30 �¬k��íC�¿ßA�÷@U÷¼AMß÷½s

}≈C

7. t�½s}≈ºßAA≤ SMC 2.0 w��²÷ΓU Autorun.exeCo��n°≤�

d{í��Nα¿\C

8. ÷@U�Yw�A}lw� SMC �zD�x 2.0 �C

9. ΘJ PKCS#12 ��KX�[HT{AMß÷@Uú���Co��i�t

mD��su�z{íC� \� 18��yD��su�z{ízCú���

�W��O ldms4smc.p12

10. ��÷@UTwB÷¼H��Y½s}≈C

≤sxsΘ}CW�}≈M��

b��� SMC 2.0 ºeA��∩ SMC �z{í�����xsΘ}C⌡μUC{�G

1. buSMC �z{ív°íñ�xsΘ}C÷@U�½kΣA∩�w�}≈M��C

2. bu≤s}≈M��v°í�u@�vμ�ñAΘJ LANDesk °A� IP �}�

DNS W�A�A[W \ldmain

3. ΘJw� SMC nΘºH�����W�MKXAMß÷@U�O

4. bM���m�qñA÷@Us²÷sC

5. bu}���v∩ �ñ�² tcm\dist\A∩� SMCBoot-2.0.0.172.imgCMß÷@

U}�

6. bu≤s}≈M��v°í÷@U≤sC

7. ÷@UOA≤½{��}≈M��C

8. }≈M��≤s�ªºßA÷@UTwC

tm LANDesk Secure Managed Client D�x

Secure Managed Client D�xi²zqzΦK��mA⌡μ½n�⌠⌠�z\αCzú

�e�⌠≤ⁿ�z��mAYi⌡μ�μ@@��∩�Diμ�°��CziHq

D�xteM≤snΘBtm]wBE�nwΘ�DBíp@�t�M��AH��

α���]w�C]iH��ñΓ¼�z�ε���∩\αM�m�s�vA�B

Q����ε\αVm@δ�����M�DC

�÷��p≤�²M��D�x�°M���mAH�s�U��zuπ�ΣLΩ

TA� \ LANDesk Management Suite User’s GuideA⌠}pUG

http://www.landesk.com/supportdownload/resourcelibrary.aspx

ziH�h���°A�MΩ�wAú�zM��⌠⌠�z�DCp�w���°

A�MD�xBΣLD�xBWeb D�xH��zh���°A�MΩ�w��÷Ω

TA� \w�MípΓUA⌠}pUG

http://www.landesk.com/supportdownload/resourcelibrary.aspx

�� LANDesk Management SuitepGn�� LANDesk Management SuiteA�⌡μUC�@G

1. ∩�}l -> {í� -> LANDesk Management SuiteC

2. ΘJ��w� LANDesk º���� Windows ���W�MKXC

� 5 � LANDesk ΩT 15

�xsΘ}C

��OⁿzNxsΘ}Ctm�ft�� Secure Managed Client D�x�{�C

pGn��xsΘ}CA�⌡μUC�@G

1. b¬Φ�uuπcve�÷@U SMC �z{íCpGS�π�uπcAhbu@

C÷@U�°AMßA÷@UuπcC

2. buSMC �z{ív°íñ�xsΘ}C÷@U�½kΣAA÷@UsWC

3. b�l]wxsΘ}C°íΘJΩTC

a. b�l IP �}μ�ΘJxsΘ}C�{μ IP �}AMßAΘJz�KXC

b. bRA IP �}μ�AΘJz μxsΘ}Cb��ºßπ�� IP �}C�n

� A]�±gΣLμ�C

c. pGxsΘ}Cπ��π⌠�W�A�bD≈W� (FQDN) μ�ΘJ�W�A��ΘJPW@�BJΘJ��P IP �}C

4. ÷@U�l]wAMßb��X{�u∩g{�Ω�v��iñA÷@U�≥i

μC

����≥�M��

pGn����≥�M��A�⌡μUC�@Cp���ΣL�¼≥�M����÷

ΩTA� \� 18��yM���¼zC

1. b SMC �z{í°íñA�OzΦΦb¬�íμxsΘ}C≡¼�cñ���x

sΘ}CAMßi}�xsΘ}C���C

2. b≥�M��÷@U�½kΣAA÷@Us�≥�M��C

3. ±gs≥�M����÷ΩTC

a. ��DΘJ≥�M��]�p WinXP M����W��Σní�C

b. ∩�AX�M��jpC��qo�≥�M��������M��AúNu

�o�jpC

c. pGz μqo�M��������α≈��� CDA��pGz�Γq CD

�J�M��A�÷�����∩]t CD-ROMC

4. ÷@U��C

�Q�¿ºßA≥�M��K�Cb�xsΘ}CUΦ≥�M������mñ

ΣU�C

�J≥�M��

p��J≥�M����÷ΩTA� \� 41��� 7 �, y�J≥�M��zC

����M���μ@M�����M��

b LANDesk tm Active Directory Manager: pGnb LANDesk ñtm AD �

²�z{íA�⌡μUC�@G

1. b LANDesk Management Suite u@C÷@Uuπ -> te -> �²�z{íC

2. bu�²�z{ív°í÷@U�z�²��]t≈��v�Ω�¿�C

3. bB��u�²�z{ív°í÷@UsWC

4. ΘJ AD °A�/⌠��ε��ΩTAMß÷@UTwC

5. bB��u�²�z{ív°í÷@UTwC

16 Secure Managed Client 2.0 � ípΓU

6 . Twu�²�z{ív°í�¬íμñA�@�μí� “ L D A P : / /

#ADSERVERNAME#” ���

Active Directory Σ�: nJ�t�M���Aú��[J⌠�C���bú�ñΘ

J���W�AMß÷@UTwC

�����: pGn�����A�⌡μUC�@G

1. bu�²�z{ív�¬íμñ�² AD �²≡A��Σ�zn������C

2. No�����±�uSecure Managed Client �z{ív°íñ�xsΘ}C��

�u���vΣWC

3. bu��s����M��v°íñ∩�≥�M��AHKq�M���s���

�M��A��A��±gΣLΩTCMß÷@UTwAA÷U@BCϕe�X{

ú��A�A÷U@BC

�v��

ΣL��iHQ��v��[H���\αCª�]AG

v PBMDPB�g

v μ@M��M�lM��Σ�

z��nDs��vA�α}l��o�\αG

1. nDs��vCΣBJpUG

a. buSMC �z{íve�WA��½kΣ÷@UxsΘ}C��AA÷@U�

eC

b. ∩��vCo���X{xsΘ}C���\αC

�: o�°í]�π�BJ 2a ���xsΘ}C (san) �C

c. ÷@UnDs�vAo��}�unDΩTv°íC

d. ϕunDs�vv°íW�ⁿ�iμAH�os��vC

2. �J�v�CΣBJpUG

a. buWindows ����vñANz¼���v�½sRWAΣμípUG

<san serial number>_1.txt

<san serial number>_x.txt

Σñ x O�W���X]pG�ΣL�v�sb� �C

b. No����s� <install directory>tcm\dist\licensing\ami �²U

3. ≤s�v�CΣBJpUG

a. buSMC �z{íve�WA��½kΣ÷@UxsΘ}C��AA÷@U�

eC

b. ∩��vC

c. ÷@U≤s�vC

d. qui�v�vMμñ∩��v�C

e. ÷@UM�Ao��}�u≤sxsΘ}C�vv°íC�ϕ°íñ�ⁿ�

iμA�¿≤s@�C

� 5 � LANDesk ΩT 17

D��su�z{í

YnbDn LANDesk °A�≈u�Aú��l� Secure Managed Client ULOS]�

��nJe��O\αAziHtm@�D��su�z{íCo� Windows Server

2003 t���[JP LANDesk °A��P�⌠�AB��� SMC �ß�úiH

s�o�t�C@�tmºßAo�t�N�∩�nJ SMC �ß�º ULOS �

SMC ���Aú��≈OC

w�BJG

1. b SMC 2.0 w��²U÷ΓU Autorun.exeC

2. ÷@Uw� SMC su�z{íC

3. b�n°≤�d{í⌡μºßA÷@U�Yw�CpG�n°≤�d{íó�FA

� \� 13��y�n°≤zAMDw��n ≤�≤UC

4. ÷U@BAA÷w�C

5. buw� SMC �v°íñAΘJ LANDesk °A�� IP �}� DNS W�B

w� LANDesk °A��í�ú�� PKCS#12 ����mAH�����K

XC��W���O ldms4smc.p12C

6. �w��ª�A�÷@Uw�AA÷@UTwC��A÷@U�¿C

7. ÷¼uLANDesk �n°≤�d{ív°íC

pGntmD��su�z{íA�⌡μUC�@G

1. bDn LANDesk °A�º SMC �zD�x� SMC �z{íWA��½kΣ÷

@UxsΘ}CAMß∩��eC

2. b¬íμñ∩�su�z{íCo��AzΦΦw�D��su�z{í�qúW

�A���X{bkíμ�ui�vsu�z{íMμñC

3. j�π��qúW�AMß÷@UsWC�qúW�K���o≈xsΘ}CMμ

�b���su�z{íC

4. ÷@UxsA��z����≤C

M���¼

Secure Managed Client 2.0 ���M���T��¼C��N@@�zQ�C

��M��

��M��O@� Secure Managed Client M���¼AOC@����≥�M���

�π��C�÷��≥�M��M�����M���ΩTA� \� 19��y��

μ@M��≥�M��zC

μ@M��

μ@M��O@�M���¼Aª�N���Ω�xs�p¼����AsW�@δ

�μ@≥�M��Co�M���¼iH�íA]�C@�����@δΩ�A

bxsΘ}CWúS�½�Co�@δΩ�xsΘ]iHb SMC �ß�}≈�A�q

vÑW[��αC

18 Secure Managed Client 2.0 � ípΓU

��μ@M��≥�M��

1. b{��@�ñ≥�M��÷@U�½kΣC

2. ∩���≥�μ@M��C

3. ΘJAϕ���W�Mí�C

4. ÷@U��C

��μ@M�����M��

� \� 16��y����≥�M��zC

����M��

Secure Managed Client i²ztm@�u@�B����≥�M�������A

úOxsΘ}CW����≥�M��Co�ΦkiHYu}≈�íA]iH °P

xsΘ}C�u@Z≈Cϕz²t�iμ�����AC@��ß�W���w�ú

�μíCM��O� SMC �zD�xRWA���@W�AH�ε���Ω��l

�≥óC

������≥�M��

1. τ�zwN Sysprep M����C� \� 38��yN Sysprep M����H

F����αzC

2. b{��@�ñ≥�M��÷@U�½kΣC

3. ∩���≥�����M��C

4. ΘJAϕ���W�Mí�C

5. ÷@U��C

�: �M���jpwAo�{�iα�n�p���í�¿CziH�{bUZ�íA�Ob��@δ���α≈�� Secure Managed Client ºeA��o�M

��C

² SMC �ß�������

1. buSMC �z{ív°íñA÷@Us� -> tms�

2. ÷@UsW�����ms�A}�u�����m]wv°íC

3. ����A]wΣLzn�≤�����xsΘ�±Co��±Nϕw�W�

����M���Od�í]úF�@�����≥�M���jpº��C

ziH��u�����m]wvW�d�Ω�m�≤UzC�ΘJz≥�M��

����� (GB)Bw�jp (GB)AH��ß��w��OΘjpCϕz�≤��

�±�Ω�m�ñ�o��r�A������Od��r (GB) ]����≤C

4. e�⌠⌠°� -> �m -> ���mC

5. qMμñj�π�zn�����tm�t�ANª���zbe�BJ����

����tms�C

���������M��

1. ��½kΣ÷@U��� -> sW���

2. ΘJznsW�⌠����W�C

3. ÷@UTwCo��}���s����M��°íC

� 5 � LANDesk ΩT 19

4. ∩�M���¼ -> ����M��

5. ±gAϕ����M��ΩTC

6. ÷@U��C

7. ÷@Uú�W�TwA�¿���������@�C

N����íp� SMC �ß�

1. Tww���μíC

2. Mwp≤b��F����º SMC �ß�WANw�μíG

v �z�nD�μí

pGznD��w���μíAiHb����tms�ñ��ß�÷@U�

½kΣA∩�U�}≈��l]ww�CpGw�wgw∩����μíFA

z]iH��o�∩�ANw�½sμíC

v ���∩��μí

pGz��∩��z�nD�μí∩�ABw�]��w∩����[Hμ

íAht��ú����Ae\L�nJ�ß��ANw�μíC

3. N����∩�G

a. w�

b. iSCSI

4. nJ���� SMC �ß�AH�l≥�M��UⁿCo��ApGz��∩��z

�nD�μí∩�At��ú����Ae\Nw�μíC

�: LF@q�íºßASMC �ß���lUⁿ����≥�M���w�Co�

{�iα�°F@�p�CU@ñ�½s}≈A]� Uⁿ@�Co�Uⁿ@�

ObI�⌡μA]����ú�ÑUⁿ�¿ºßA��M��C

5. Uⁿ�¿ºßA���N���� SMC �ß�tm����w�C

ⁿúu�

ⁿúu�i²zNM��÷p� SMC �ß�AúO Secure Managed Client ���C

�Fⁿúu�ASMC �ß��⌡L ULOS nJA�����ⁿú�M��C

�: ��M��Mμ@M��úΣ�ⁿúu�C²O����M���úΣ�ⁿúu�C

1. b SMC �z{íñA��½kΣ÷@U��≥�M���μ@M��≥�M��A

Mß∩�u��ⁿúu�M��v

2. �ⁿúu�M��ΘJAϕ���W�Mí�C

3. ÷@U��C

4. ÷@UTwCϕ@��¿�AuxsΘ}CnDv°íN�π�u¿\v¼A

5. b⌠⌠°� -> �m -> ���mANzn�ⁿúu�tm� SMC �ß�A���

xsΘ}C�ⁿúu�ΣC

6. bⁿúM��UANzΦΦ���ⁿúM��A���ⁿúu�U�C�Aϕ�

SMC ��C

20 Secure Managed Client 2.0 � ípΓU

�lM��

�lM�� o�]w�A�b½s}≈�íAN]w@½]�w]�C�pA�]z

���uW [�����F@�M��CL������≤�]w]p���ñ

����¬�Aun½s}≈ºßA��ú� ��l�ACpGznNM���

���lM��A�⌡μUC�@G

1. ÷¼�ß�t�

2. bM��í�÷@U�½kΣA∩�u���l Snapshotv

3. ϕu���l Snapshotv°í}��A÷@UO

4. ���bß��K��≤

� 5 � LANDesk ΩT 21

22 Secure Managed Client 2.0 � ípΓU

� 6 � ��P�π Secure Managed Client M��

��NQ�[j Secure Managed Client �α�X�ΦkC

Secure Managed Client O@�WS�⌠�A]�z�������{ívT�úμuO

@����AOπ� Secure Managed Client ⌠�CípºeNC@�M����A

KiTO�ß�M��úX�DFC

�Fo��n��GA�²b�ß�≈�Wtm BIOS ]wºßAA]wz� XP �

Vista ≥�M��Co�NiH�K⌠≤ AHCI �e��Do�C� \� 10��

ySecure Managed Client Γ�]wzC

�� Sysprep M��

α�ípOQ����s��{í⌡μC Sysprep O���@�t�A²@�t�

����M��iμ���sC��M��e\�sDnt��nΘ⌠�C

�� Windows XP M��

�� Windows XP .wim ��A�JuSecure Managed Client Ω�⌠⌠�� (VNIF)v

X�{íC

�: pGz�ΓyßA⌡μ SMCSetup.exe �ANú�J VNIF X�{íC

SMCSetup.exe ��b Windows XP WA�zw� VNIF X�{íC

pGn�� Windows XP M��A�⌡μUC�@G

1. N Windows XP w�bDnt�WC

2. H�z�¡nJC

�: nH�z��¡nJA��²qt@�π��z�M�v����bßA�����z�M�vCΦkOb��qú÷@U�½kΣA∩��z -> �≈�

��Ms� -> ���CMßA÷ΓU�z�A�°�∩��÷sC

3. Rú⌠≤ún����bßC

4. ��u�m�z{ívñ����Γ��AMß��nw�����{íC

5. ��@�W� C:\SysPrep ��²AN���n���s�o�AHK⌡μ

Sysprep.exe �CziHq Microsoft® MΣ�s�� Sysprep uπA⌠}pUG

www.microsoft.com

6. ��@�W� C:\Drivers\Network ��²ANt�ú�� Secure Managed Client

(VNIF) X�{í��±bo��²UC

7. t��ú�@�d� Sysprep.inf �CziH⌡μ setupmgr.exe �∩t�ú��

tm�]�pAz�ú���A]iH���v� Sysprep.inf �C

8. �� notepad.exe }� Sysprep.inf �Cb�@�W� Unattended ���ñA�

�N OemPnPDriversPath ��]w� \Drivers\NetworkA�BN OemPreinstall �

�]w� YesC

9. ⌡μ Sysprep.exe �CMß�∩∩ �ñ� enable mini-setupA½s��ªC

© Copyright Lenovo 2009, 20010 23

10. Sysprep {�@�¿At�N�÷≈C

11. ½s��t�A � Windows PEC

12. íJ@� USB w�A��N��≈∩M�znxsM���°A�C�]ªO D

��≈C

13. o�A�� ImageX ��qú�M��ANªxsbz� D ��≈ñG

Imagex /capture C: D:\myimg\Vista32.wim “SMC Vista32”

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

{bzN�@�t Secure Managed Client VNIF X�{í� Secure Managed Cli-

ent XP .wim �iHípFC

�s{�� Windows XP M��

z� Windows XP ��wg⌡μF@q�íAW��z�����{íM�HΩ�Cp

Gznb Secure Managed Client U⌡μªAiH��N{��t��s� Secure Man-

aged ClientCo�M��ú�⌡μ SysprepC

�: �≤ Secure Managed Client 2.0 �uΣ� BIOS ���íA]���{��°í

w�iαLk�α� Secure Managed Client ⌠�CpGnτ�t�OiH�αA�

⌡μUC{�G

v �≈�ß�t�

v iμHU��T�n²�≤

v ½s}≈AiJ BIOS ]w

v ÷@U NetworkAN Boot Agent ]� SMC

v ½s���ß�t�C

pG�ß�t�iH}≈ANϕ�t�iH�αC

pGzO�� Lenovo Secure Managed Client PE CDAN{��M���s� Secure

Managed ClientAunϕ CD ⁿ�YiC

�F�ε⌠≤�Do�ApGzO���v�uπ�st�ABO⌡μ SP3A�H

�z�¡nJ�⌡μ regeditC��÷@U HKLM\System\CurrentControlSet\Services\PciIdeAN�l�∩� 0 H�� PciIdeFA÷@U HKLM\System\CurrentControlSet\Services\IntelIdeAN�l�∩� 0 H�� IntelIdeAMßA÷@

U HKLM\System\CurrentControlSet\Services\atapiAN�l�∩� 0 H�� atapiC

�: ���]�ß�≈�÷ww� IDE �mX�{íAoQ Windows ����FC

pG�ß�≈�S�w�o�X�{íAh��²w��n�X�{íΣ� IDE }≈

ºßA�αiμ�αC

�� Windows Vista M��

� Secure Managed Client �� Windows Vista M��APN Windows Vista M��

íp�@δt���ⁿCpGnN Windows Vista M��íp�@δt�A�⌡μUC

�@G

1. tmz�Dnt�A²ª��n�ⁿ�sC

24 Secure Managed Client 2.0 � ípΓU

2. ½s����G� Windows @�t�AMßH ImageX � Ghost ÑM��uπ

��M��Cz�n@�ww� Windows ��w�M≤ (WAIK) �Dnt�A

tmz����M��C WAIK �≤Uzw�B�qMíp Microsoft Windows @

�t�C

�: Lenovo ú�ú� ImageX M Ghost ���ⁿ�C� \o�M��uπ�ú

��σ≤C

3. ⌡μ]A��Mμí��ÑBJtmz���t�AMßQ�z�v∩��

M��uπANM�������t�WC

�: �≤���M�������ⁿ≤xsΘ}CW� LUNAB�buLenovo @�

Ω�¡x (LCVP)vW⌡μA]���n⌡μΣLBJAHTO��ß�M��α≈÷

]pB@CU�O��m�G

� Secure Managed Client ��s� Windows Vista M��

pGn� Secure Managed Client ��s� Windows Vista M��A�n�ΦkNOϕ

Microsoft �hiμAo��hJ�pUG

1. bDnt�Ww��tm Windows VistaC

2. �� Windows t�M���z{í (WSIM) w�A��@� ¬�C WSIM i²

z����∩ ¬�C

�: WSIM O WAIK �@íCªiH≤Uzw�B�q�íp Windows Vista t

C�@�t�C]iH²zb�NH�t�W����∩ ¬�CúLAoO∩�

���@FziH��H �d� ¬�C

3. ��t�� Sysprep M��C Sysprep iH≤Uz��M��AH���M��H

KNª�íp�hí��a≈�WCª�Múzn[Híp�t�A�Nª@δ

C

4. �� ImageX /capture ⁿOA�� Windows Vista PE U�w�C ImageX O@�

ⁿOμuπA���B�∩MM�w�M��Absy�X@⌠�ñiμípC

ImageX �D⌡μ���sA�ú��M��A±�ΣL�O Ghost Ñ�suπ�ú

��M���pAGhost O@���M�M��uπAªNO�����s�Φí

�sw�C

5. �� ImageX /apply ⁿOANM��íp��ⁿ≤xsΘ}C� LUNC

�: pGOA�≤ BitLocker � Vista M��Ah����SϕBJC BitLocker �

�≈[KO Hb Microsoft Windows Vista Ultimate �@��π��[K\αCp

Gz�t��eO]wi�≤ BitLockerAh��²÷¼ªºßA�αw∩ Secure

Managed Client ���⌡μ SysprepC BitLocker ��nΓ����α[K��

≈AH�τ�}≈�π�CoΓ���@P�¿@�}ⁿJtmC}ⁿJt

miNDn@�t���P��qú�@�ñt���j}C Lenovo M58

Preload Vista wi�≤ BitLockerCp��÷ΩTA� \� 30��yN Lenovo

M58p Vista wⁿM��½síp� Secure Managed Client ⌠�zC

b Lenovo M57]π�A���A²S� Secure Managed Client�W�@�ñt������ Windows Vista wⁿ

1. N Lenovo OEM Vista w�]qw� CD �qwⁿ���bDnt�WC

2. H�z�¡nJC

� 6 � ��P�π Secure Managed Client M�� 25

3. Rúzbw� Windows Vista �íB�������bßCzb���bß�εx

WA��u�o�u�z�vMuX�v]w���bßC

4. ���m�z{íñ⌠≤�Γ��AMß��nw�ΣL�mX�{íM��

{íC{bt�W��wgU�⌠�Auϕ Lenovo Secure Managed Client VNIF

X�{íFC

5. ⌡μ cmd.exe �]H�z�¡⌡μ�AMß�½�² C:\windows\System32\

sysprepC

6. Nt�ú�� UNATTENDOEM.XML ��s�{μ�²UA�BNª½sRW�

UNATTEND.XMLF����z�v� UNATTEND.XML �C

�: Lenovo ú�o� UNATTENDOEM.XMLAu�ϕ@d���C

7. �d UNATTEND.XML �ATwΣñuS�v⌠≤ ProductKey ��CpG�A

�RúªCY�O���Aú��ε Sysprep {�ALk�TB@ OEM �

�Cz��q .xml ��úo���C

8. bY� Lenovo qúWw�� OEM Windows VistaAΣ°TX�{í�úw�{

í�@�w��DAτYbiμ Sysprep {��íA°TX�{íLk�Tw�/�

úw�C]�ºDOe� “regedit”AMΣ “DevicePath” ��CN°TX�{í⌠

� [�o���ß�]��O C:\Drivers\Video�AMß[HxsC

9. b cmd ΘJUCⁿOG

Sysprep.exe /generalize /oobe/shutdown /unattend:C:\windows\System32\Sysprep\UNATTEND.XML

ΣñG

v /oobe - U�}≈�A�Nqú���uWindows w∩��v�íC

v /generalize - Mú≈�C

v /shutdown - �¿ Sysprep {�ºß÷≈

v /unattend - ²zⁿw�v� UNATTEND.XML �C

�: ��t�� Sysprep M��q�nX���íC Sysprep M����º

ßAt����÷≈C

10. ÷≈ºßAA�� Windows Vista PE CD ½s��t�A � Windows Vista PEC

���b BIOS ]w�T�����A�b}≈�í÷ F12 ΣA����� Win-

dows Vista PECpGúV��� Windows VistaAh��A��@� Sysprep Win-

dows Vista M��C

11. pGzO����í��≈xsM��A���o���≈CpGzOHñí

xsΘ°A�xsM��A�Tw Windows Vista PE �⌠⌠suAMßAN⌠

⌠��≈∩M�z�ñíxsΘ°A�C��AoX Net use * \\centralserver\

sharedpath ⁿO]�]��≈NO D�C

12. �� ImageX ��t���≈�M��]�]��≈NO C�AMßNªxs

b .wim �ñC

Imagex /capture C: D:\myimg\Vista32.wim “SMC Vista32”

13. �� ImageX ��uA���v�M��]�]��≈NO F�AMßNª

xsb .wim �ñC

Imagex /capture F: D:\myimg\ServicePartition.wim “Service Partition”

26 Secure Managed Client 2.0 � ípΓU

{bAzw�@� .wim �Co� .wim �U�⌠�Auϕ Lenovo Secure Man-

aged Client VNIF X�{íC

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

14. N VNIF X�{íJoΓ� Windows Vista t�� .wim �Cz��N WAIK

w�bDnt�W⌡μUCBJC

�: ]�⌡μ SMCSetup.exe �N VNIF X�{íw�b Windows Vista WAY

z�p��ΓANú�J VNIF X�{í��C

v MΣz� Secure Managed Client VNIF X�{í��A�B�ª�∩�ú

�� OfflineUnattend.xml �C

v �ⁿzwbBJ � 26��12 M � 26��13 ��� .wim �C

mkdir C:\wim_mountImagex /mountrw D:\myimg\Vista32.wim 1 C:\wim_mount

v ��Oⁿ\αC÷MoO∩���AoO�n�@kC

– ⌠�G HKLM\Software\Microsoft\Windows\CurrentVersion\Device Installer

– ≈�G DebugPkgMgr

– �¼G REG_DWORD

– �G 0x01

v ��M≤�z{íw� VNIF X�{íC�½{μ�² pkgmgr.exe ��b

��²G

Pkgmgr /o:”C:\wim_mount\;C:\wim_mount\Windows”/n:”C:\tmp\OfflineUnattend.xml” /l:”C:\pkgmgrlogs\logfile.txt”

v �d logfile.txt �ATwS�o�⌠≤��AB XO 0C

v b�ⁿ� Windows M��ñA�\ %WINDIR%\inf\ �²��eATwwgw

� .inf �CsW Windows M���X�{í�RW� oem*.infCoO�FT

OsWqú�X�{íAΣW���@W�C�pAMyDriver1.inf M

MyDriver2.inf �{bú½sRW� oem0.inf M oem1.infC

v °ⁿ .wim �AMßTww�C

Imagex /unmount /commit C:\wim_mount

15. N VNIF X�{íJ� Windows Vista ��C

�: SMCSetup.exe ��ú�N VNIF X�{íw�bA���CpGzbíp

ºßA�nqA����o⌠⌠s�vAh��⌡μUCBJAJX�{

íG

v �ⁿ .wim �C

Imagex /mountrw D:\myimg\ServicePartition.wim 1 C:\wim_mount

v MΣ winpe.wim �]b tvtos �²U�A�B�ⁿªC

�: pG��úsbAN��²�� c:\mype_mountC

Imagex /mountrw C:\wim_mount\tvtos\winpe.wim 1 C:\mype_mount

v �]z� VNIF X�{í�≤ E:\vnifdrivers �²C

Peimg.exe /inf=E:\vnifdrivers\lndrvbus.inf C:\mype_mount\WindowsPeimg.exe /inf=E:\vnifdrivers\netvnif.inf C:\mype_mount\Windows

v pGS�⌠≤��A�Tw wim �C

� 6 � ��P�π Secure Managed Client M�� 27

Imagex /unmount /commit C:\mype_mountImagex /unmount /commit C:\wim_mount

{b Vista32.wim M ServicePartition.wim �wg��NⁿAiH��� LUN FC

16. s��xsΘ}CA�ⁿ@�jpAñ� LUNC���Mú����eA]���

�N LUN W��½nΩ��≈UC

17. H�z�¡⌡μ .cmd �AMßΘJ diskpartAA÷ Enter ΣC

>list disk]�] disk 2 OzΦ�ⁿ� LUN�>select disk 2>clean>create partition primary size=5012]pGOA����Ah� 5012MCz]iH��ΣL�jpAúL��úα�p�>format LABEL=”ServiceV002” [quick]/*��G����O “ServiceV002”Ao� bmgr32 yß�α�TB@*/>assign [letter=I]>set id=27]NA����⌠����>create partition primary]oOz� Vista t�����>active]���² Vista ���¿�i}≈����>format [LABEL=”your system part name”] [quick]>assign [letter=J]>list volume]pGzS�buⁿúv�ⁿw��≈N�A���o�ⁿO�MΣ LUN ���≈N�AH�MΣ]t wim �� USB ��≈���≈N��C>exit

�N .wim �M��z� LUNC�] USB ��≈�NO DAzb LUN W�

��A����NO IAzb LUN W��� Windows Vista t����

NO JC

Imagex /apply D:\myimg\Vista32.wim 1 J:Imagex /apply D:\myimg\ServicePartition.wim 1 I:

18. �� LUNC�@����At��½s��T�C

19. ImageX ���O��MM�A���M��A]���sWDn}≈O² (MBR)

ΩTAA����αB@C

�: pGzbe�BJ���O Ghost úO ImageXAhiH⌡L�BJC

Cd C:\program files\common files\lenovo\BMGRBmgr32.exe /fbootmgr.bin /M0 /Think

20. {b LUN wg��NⁿFC�b BIOS ú�÷ F11A���A���C Win-

dows Vista MA���ú��²w�n Lenovo VNIF X�{íC

� Secure Managed Client ��@δ Windows Vista1. N Windows Vista w�bDnt�WC

2. H�z�¡nJC

3. Rúzbw� Windows Vista �íB�������bßCzb���bß�εx

WA��u�o�u�z�vMuX�v]w���bßC

4. ���m�z{íñ⌠≤�Γ��AMß��nw�ΣL�mX�{íM��

{íC

{bt�W��wgU�⌠�Auϕ Secure Managed Client VNIF X�{íFC

5. ⌡μ cmd]H�z�¡⌡μ�AMß�≤�²� C:\windows\System32\

SysprepC

6. Nt�ú�� UNATTENDNONOEM.XML �s�{μ�²UA�B½sRW�

UNATTEND.XMLC

�: Lenovo ú�o� UNATTENDOEM.XMLAu�ϕ@d���C

28 Secure Managed Client 2.0 � ípΓU

7. }� UNATTEND.XML �AjM ProductKey ��Cú����b���}YA

�≤M���qñC

8. Nú���∩�z�ú���C

9. qⁿOμ⌡μ SysprepC�ΘJUCⁿOG

Sysprep.exe /generalize /oobe /shutdown /unattend:C:\windows\System32\Sysprep\UNATTEND.XML

ΣñG

v /oobe - U�}≈�A�Nqú���uWindows w∩��v�íC

v /generalize - Múqú

v /shutdown - �¿ Sysprep {�ºß÷≈

v /unattend - ²zⁿw�v� UNATTEND.XML �

�: ��t�� Sysprep M��q�nX���íC Sysprep M����º

ßAt����÷≈C

10. ÷≈ºßAA�� VistaPE CD ½s}≈A � Windows Vista PEC���b BIOS

]w�T�����A�b}≈�í÷ F12 ΣA����� Windows Vista PEC

pGúV��� Windows VistaAh��A��@� Sysprep Windows Vista M�

�C

11. pGzO����í��≈xsM��A�í���≈�q�íYCpGzO

HñíxsΘ°A�xsM��A�Tw Windows Vista PE �⌠⌠suAMß

AN⌠⌠��≈∩M�z�ñíxsΘ°A�]�]��≈NO D�C

Net use * \\centralserver\sharedpath

12. �� ImageX ��t���≈�M��]�]��≈NO C�CMßNªxs

� D ��≈C

Imagex /capture C: D:\myimg\Vista32.wim “SMC Vista32”

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

��z�@� .wim �Co� .wim �U���Auϕ Secure Managed Client VNIF

X�{íC

13. N VNIF X�{íJ� .wim �ñCz��N WAIK w�bDnt�WATO

UCBJ�TB@C

v MΣz� Secure Managed Client VNIF X�{í��A�B�ª�∩�ú

�� OfflineUnattend.xml �C

v �ⁿzbBJ 12 ��� wim �C

mkdir C:\wim_mountImagex /mountrw D:\myimg\Vista32.wim 1 C:\wim_mount

v ��Oⁿ\αC÷MoO∩���AoO�n�@kC

– ⌠�G HKLM\Software\Microsoft\Windows\CurrentVersion\Device Installer

– ≈�G DebugPkgMgr

– �¼G REG_DWORD

– �G 0x01

v ��M≤�z{íw� VNIF X�{íCN{μ�²�≤� pkgmgr.exe ��

b��²C

� 6 � ��P�π Secure Managed Client M�� 29

Pkgmgr /o:”C:\wim_mount\;C:\wim_mount\Windows”/n:”C:\tmp\OfflineUnattend.xml” /l:”C:\pkgmgrlogs\logfile.txt”

v �d logfile.txt �ATwS�o�⌠≤��AB XO 0C

v b�ⁿ� Windows M��ñA�\ %WINDIR%\inf\ �²��eATwwgw

� .inf �CsW Windows M���X�{í�RW� oem.infCoO�FT

OsWqú�X�{íAΣW���@W�C�pAMyDriver1.inf M

MyDriver2.inf ��½sRW� oem0.inf M oem1.infC

v °ⁿ .wim �AMßTww�C

Imagex /unmount /commit C:\wim_mount

14. .wim �wg��NⁿAiH��� LUN FC LUN �ⁿ�ªºßA�⌡μ ImageX

/apply ...C

N Lenovo M58p Vista wⁿM��½síp� Secure ManagedClient ⌠�

ϕ���Q� ImageX M Ghost Ñ@δM��uπAN Lenovo M58P Windows Vista

wⁿM��½síp� Secure Managed Client ⌠��A���M��iα��oLk

}≈Ciα�π� Windows }≈�z{íLk�� ...Mt�n²t�L����⌠�....

Ñ��TºCo�ípASysprep MD Sysprep M��ú�iαo�Cπ�W�t�

��M@�t����@δ Windows Vista M��A]iαo�C

M58 Vista wⁿM��]tT���CeΓ�O}≈�z{í�b�t��� (S:

ServiceV003)AH�@�t�}≈ⁿJ��b�@�t��� (C: SW_Preload)C�T

��� (Q: Lenovo) O�≈Ω���C

1. N Lenovo OEM Vista w�]qw� CD �qwⁿ���bDnt�W

2. H�z�¡nJ

3. Rúzbw� Windows Vista �íB�������bßCzb���bß�εx

WA��u�o�u�z�vMuX�v]w���bß

4. ���m�z{íñ⌠≤�Γ��AMß��nw�ΣL�mX�{íM��

{íC{bt�W��wgU�⌠�Auϕ Lenovo Secure Managed Client VNIF

X�{íF

5. ⌡μ cmd.exe �]H�z�¡⌡μ�AMß�½�² C:\windows\System32\

sysprepC

6. Nt�ú�� UNATTENDOEM.XML ��s�{μ�²UA�BNª½sRW�

UNATTEND.XMLF����z�v� UNATTEND.XML �C

�: Lenovo ú�o� UNATTENDOEM.XMLAu�ϕ@d���C

7. �d UNATTEND.XML �ATwΣñuS�v⌠≤ ProductKey ��CpG�A

�RúªCY�O���Aú��ε Sysprep {�ALk�TB@ OEM ��C

z��q .xml ��úo���C

8. HWo�NO UNATTEND.XML ���iμ����≤CpGz�ⁿLVmA�

����o�{í��NA�iH∩ xml ��ΣL�≤C

9. b cmd ΘJUCⁿOG

Sysprep.exe /generalize /oobe/shutdown /unattend:C:\windows\System32\sysprep\UNATTEND.XML

ΣñG

30 Secure Managed Client 2.0 � ípΓU

v /oobe - U�}≈�A�Nqú���uWindows w∩��v�íC

v /generalize - Múqú

v /shutdown - �¿ Sysprep {�ºß÷≈

v /unattend - ²zⁿw�v� UNATTEND.XML �

�: ��t�� Sysprep M��q�nX���íC Sysprep M����º

ßAt����÷≈C

10. ÷≈ºßAA�� Windows Vista PE CD ½s��t�A � Windows Vista PEC

���b BIOS ]w�T�����A�b}≈�í÷ F12 ΣA����� Win-

dows Vista PECpGúV��� Windows VistaAh��A��@� Sysprep Win-

dows Vista M��C

11. pGzO����í��≈xsM��A�í�w��q�íYCpGzOH

ñíxsΘ°A�xsM��A�Tw Windows Vista �⌠⌠suAMßAN⌠

⌠��≈∩M�z�ñíxsΘ°A�C��AoX Net use * \\centralserver\

sharedpath]�]��≈NO G:�C

12. �� ImageX ��@�t����M��]�]��≈NO D�AMßNª

xs� wim �ñC

Imagex /capture D: G:\myimg\Vista32.wim “SW_Preload”

13. �� ImageX ��A�/t����M��]�]��≈NO C�C

Imagex /capture C: G:\myimg\SystemPartition.wim “ServiceV003”

14. ��Ω����M��]�]��≈NO E�C

Imagex /capture E: G:\myimg\DataPartition.wim "Lenovo"

Imagex /capture E: G:\myimg\DataPartition.wim ″Lenovo″

{bAzw�@� .wim �Co� .wim �U�⌠�Auϕ Lenovo Secure Man-

aged Client VNIF X�{íC

��M��q�n 20 � 50 ���íAon°z�t�M⌠⌠t�wC

15. N VNIF X�{íJ� wim �]Vista t�MA���ún��Cz��²

N Windows AIK w�bDnt�WA�αbDnt�W⌡μU����BJC

�: ]�⌡μ SMCSetup.exe �N VNIF X�{íw�b Windows Vista WAY

z�p��ΓANú�J VNIF X�{í��C

v MΣz� Secure Managed Client VNIF X�{í��A�B�ª�∩�ú

�� OfflineUnattend.xml �C

v �ⁿzwbBJ 12B 13 MBJ 14 ��� .wim �C

mkdir C:\wim_mountImagex /mountrw D:\myimg\Vista32.wim 1 C:\wim_mount

v ��Oⁿ\αC÷MoO∩���AoO�n�@kC

– ⌠�G HKLM\Software\Microsoft\Windows\CurrentVersion\Device Installer

– ≈�G DebugPkgMgr

– �¼G REG_DWORD

– �G 0x01

v ��M≤�z{íw� VNIF X�{íC�½{μ�² pkgmgr.exe ��b

��²G

� 6 � ��P�π Secure Managed Client M�� 31

Pkgmgr /o:”C:\wim_mount\;C:\wim_mount\Windows”/n:”C:\tmp\OfflineUnattend.xml” /l:”C:\pkgmgrlogs\logfile.txt”

v �d logfile.txt �ATwS�o�⌠≤��AB XO 0C

v b�ⁿ� Windows M��ñA�\ %WINDIR%\inf\ �²��eATwwgw

� .inf �CsW Windows M���X�{í�RW� oem*.infCoO�FT

OsWqú�X�{íAΣW���@W�C�pAMyDriver1.inf M

MyDriver2.inf �{bú½sRW� oem0.inf M oem1.infC

v {bA°ⁿ .wim �AMßTww�G

Imagex /unmount /commit C:\wim_mount

16. N VNIF X�{íJ� Windows Vista ��C

�: SMCSetup.exe ��ú�N VNIF X�{íw�bA���CpGzbíp

ºßA�nqA����o⌠⌠s�vAh��⌡μUCBJAJX�{

íG

v �ⁿ .wim �C

Imagex /mountrw D:\myimg\ServicePartition.wim 1 C:\wim_mount

v MΣ winpe.wim �]b tvtos �²U�A�B�ⁿªC

�: pG��úsbAN��²�� c:\mype_mountC

Imagex /mountrw C:\wim_mount\tvtos\winpe.wim 1 C:\mype_mount

v �]z� VNIF X�{í�≤ E:\vnifdrivers �²C

Peimg.exe /inf=E:\vnifdrivers\lndrvbus.inf C:\mype_mount\WindowsPeimg.exe /inf=E:\vnifdrivers\netvnif.inf C:\mype_mount\Windows

v pGS�⌠≤��A�Tw wim �C

Imagex /unmount /commit C:\mype_mountImagex /unmount /commit C:\wim_mount

{b Vista32.wim M ServicePartition.wim �wg��NⁿAiH��� LUN FC

17. {b “Vista32.wim” M “SystemPartition.wim” �wg��NⁿAiH��� LUN

FC

18. s�xsΘ}CA�B�ⁿ��a LUNC����Mú����eA]���

��≈o� LUN W���½nΩ�C

19. H�z�¡⌡μ cmd �AMßΘJ diskpartAA÷ Enter ΣC

>list disk]�] disk 2 OzΦ�ⁿ� LUN�>select disk 2>clean>create partition primary size=1500]pGOt����Ah� 1.5GCz]iH��ΣL�jpAun��ú��p�>format LABEL=”ServiceV003” [quick]/*��G����O “ServiceV003”Ao� bmgr32 yß�α�TB@*/

>assign [letter=I]>active]��i²t����¿�i}≈����>create partition primary size= yoursize]oOz� Vista t�����>format LABEL=”SW_Preload" [quick]>assign [letter=J]>create partition primary /*z�Ω����*/>format LABEL="Lenovo" [quick]>assign [letter=k]>list volume]pGzS�buⁿúv�ⁿw��≈N�A���o�ⁿO�MΣ LUN ���≈N�AH�MΣ]t wim �� USB ��≈���≈N��C>exit

32 Secure Managed Client 2.0 � ípΓU

�] USB ��≈�NO DAzb LUN W���t����NO IAzb

LUN W��� Windows Vista t����NO JA����NO KC

{bziHN .wim �M�� LUN FC

Imagex /apply D:\myimg\Vista32.wim 1 J:Imagex /apply D:\myimg\ServicePartition.wim 1 I:Imagex /apply D:\myimg\DataPartition.wim 1 K:

20. ��t�ú��σ�� DriveLetter.bat �π��≈NC

Script ��G

v /currentsystem:″driveletter″ - ⁿwt����{μ��≈N]b WinPE U�C

oO�n��C

v /targetsystem:″driveletter″ - ⁿwt��������≈N]b Windows Vista

U�CoO�n��C

v /currentos:″driveletter″ - ⁿw@�t����{μ��≈N]b WinPE U�C

oO�n��C

��i²M��¿�i}≈M��C

�: zuαq Vista/Vista PE Isσ��Cb XP/XP PE ñhLkIsσ��C

DriveLetter /currentsystem:I /targetsystem:S /currentos:J

21. {bziH�� LUN FC

22. Windows Vista �bgL��½s��ºßA}l⌡μC

23. ��H�z�¡�⌡μAH}� DOS ⁿOC⌡μt�ú��σ�� BCDFix.bat

�� BCD ��A²wⁿoH�TB@C�]z� Vista ��≈ (SW_Preload) O

CAt���≈ (ServiceV003) O SAΩ���≈ (Lenovo) O DC

BCDFix /system:s /os:c /data:d

�:

a. t��b Script �⌠�½s}≈C

b. �F²wⁿ�B@Ab�� Ghost �t@���íM���uπ�A��⌡

μBJ 20 MBJ 23C

�s{�� Windows Vista M��

z� Windows Vista ��wg⌡μF@q�íAW��z�����{íM�HΩ�C

pGznb Secure Managed Client U⌡μªAiH��N{��t��s� Secure

Managed ClientC

pGzO�� Lenovo Secure Managed Client PE CDAN{��M���s� Secure

Managed ClientA�ϕ CD ⁿ�iμC

pGzO���v�uπ�st�Aiαn²��@��DºßA�α²íp�M

���T}≈C�ϕUCBJG

1. �� BCD ��Mn²��C

a. pGz� Vista úA�≤ BitLockerA�H�z�¡qíp@�t�⌡μ cmdA

MßΘJUCⁿOG

BCDEDIT /set {bootmgr} device bootBCDEDIT /set {default} device bootBCDEDIT /set {default} osdevice bootBCDEDIT /set {memdiag} device boot

� 6 � ��P�π Secure Managed Client M�� 33

b. pGz� Vista A�≤ BitLockerA�qíp@�t�]íp@�t���O Vista

� Vista PE�⌡μt�ú�� DriveLetter σ��A�π��≈NM BCD �

�C

2. H�z�¡nJAMß⌡μ regeditC÷@U HKLM\System\CurrentControlSet\Services\PciIdeAN�l��∩� 0 H�� PciIdeC÷@UHKLM\System\CurrentControlSet\Services\IntelIdeAN�l��∩� 0 H�� IntelIdeC

�: ���]�ß�≈�÷ww� IDE �mX�{íAoQ Windows ����FC

pG�ß�≈�S�w�o�X�{íAh��²w��n�X�{íΣ� IDE }≈

ºßA�αiμ�αC

{bt�wg��NⁿAiH�ⁿ�sFCziH�� ImageXBGhost � xcopyCpG

zO�� ImageXAh�MiH÷Ω�m� 1 �í���PBJAH≈uΦísW

Lenovo VNIF X�{íC� \� 25��y� Secure Managed Client ��s� Win-

dows Vista M��zC

M�����

bípºeA²NC@�M����AiHTO�ß�M��ú�X{⌠≤�óC

��{ívT�úOμ@���AOπ� Secure Managed Client ⌠�C Secure

Managed Client O@�WS�⌠�A�����Dw]�w���{íC

�w�@�

ϕzb Secure Managed Client ⌠�UNM�����A��qUCU�G

�rnΘ

C@��ß�ú��w�@�ñ��rA�{íC²Oϕztm�MΦ��A���

q� Secure Managed Client ⌠��≤C�����r{íút�@�@�ñ�Lo

�X�{íAiHY�O@t�C�tmbUZ�íiμt��yCpGo@I�ú

�A�≥Cg�y@�A�O⌡μCu²����z¼�yA��úP≤zZ Secure

Managed Client ⌠�C

�MjM��{í

�Fú¬�αA��úw�⌠≤������{í�A�]�p Windows jMBWin-

dows α�jM� Windows ��A��C

Windows jMBWindows α�jM� Windows �A�: pGniμ�úA�

⌡μUC�@G

1. b Windows �εx÷@UsW��ú{í��AMßVU �MμAd�O�w

� Windows jMBWindows α�jM�⌠≤ΣL���jM��{íCpG�A

h÷@U�{íAA÷@U�≤/�úC

2. t�]b Windows �εx÷@UsW/�ú Windows �≤��A�T{u��A

�vΦ�S��∩C

3. ÷ΓUu��qúvAMßb C: ��≈��W÷@U�½kΣAA÷@U�eC�

úue\��A�H∩���iμs���t��jMv�∩���C

34 Secure Managed Client 2.0 � ípΓU

w²ú�: pGn��w²ú�A�⌡μUC�@G

1. �}l -> ⌡μAMßΘJ RegeditCo��}�un²sΦ�v∩ �C

2. �² HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\

Memory Management\PrefetchParametersAMß÷@U EnablePrefetcher

3. N��Ω�Φ�ñ��r∩� 0C

4. ÷@UTw

SuperFetch]¡�≤ Vista�:

1. ��εx -> A�A��b}l\αϕ�jM�⌡μΦ�ñΘJ services.mscCo

��}�uA�v°íC

2. ÷ΓUMμñ� SuperfetchAY�}� SuperFetch �eC

3. NU \αϕ∩�uw��vCz]iH÷@Uu�εvA�Y÷¼ªC

4. ÷@UTw

⌠�su

�F�εD Secure Managed Client �ß�q Secure Managed Client �ß��o IP �

}A��⌠�⌠≤⌠⌠CΣBJpUG

1. �}l -> �εx -> ⌠⌠suAMßbz�@�ñsuW÷@U�½kΣC

2. �T{�≤ Secure Managed Client �su�L⌠��ΣL⌠≤⌠⌠suC

pGn�ε���⌠⌠]wA��� Windows s��hC

�½�

Windows Vista t�@�@�ñ���½��{A�w≤CP�Tñ� 12 IC���

�����½��{]L�O≥≤≤Ot�O@�t�ú@��A�]�UCX

IG

v pG�{���½�ObypWZ�íiμASecure Managed Client ⌠�N��CC

v w����½�]�����≈�� (Volsnaps) �C Secure Managed Client �αC

v b�� Secure Managed Client 2.0 ������\α�A��½���≤\h��

xsbw�W≥�M��������mA�BnDqxsΘ}CW������

¬�o���A]ε�F�����uIC

b Secure Managed Client ⌠�ñA⌡μ@�ñ���½�{í�úAϕC�≤�Φ�

�OGbh�ΩΘ��WAp�@⌡μ��½�N�o@LNqA]��Φ��

MΩΘ��ºí�Lu����∩���÷�C��½�]iα��P���ΣLΦ

���≡A]�⌡μ��½�ºßA��GbΩΘ���s≥Ω��⌠≤[ C

]�A�núnb Secure Managed Client ⌠�⌡μ��½�C

≤s��

ziHb��≈�W��t�≤s��HTO�e�C²z���q�O�≥μ�

{íM≤s��AH�ª�∩ Secure Managed Client ⌠��vTC��@���]A

@�t�B��{íM⌠⌠�e�CpGo�@�Ob�WZ�í⌡μA�≥�j

¼�≤s��]]AA�M≤BX�{íM��{í�iα�� Secure Managed Cli-

ent ⌠���αC�¿qN≥μ�{íM≤s���bDWZ�í⌡μC

� 6 � ��P�π Secure Managed Client M�� 35

O@M��

pG⌠�ϕñS�Ωw�M��AN���{��@�ñ�≈{íC Windows XP M

Windows Vista út����≈�� (Volsnaps) A�C�w]Ao�A�OA⌡μ]ú

Σ� Microsoft Vista Home Basic M Home Premium�AiHú�úí��Ω�O@C

pGiHA���o�A�A�B�����≈A� (VSS) �≤OtuπAbDWZ

�í��Cg�≈C VSS ∩≤n²�≤�ϕ�PApG�ß�M��W���{íú

�a�≤n²Ahw��≈��jqΩ�gJw�Cp��]�⌠⌠MxsΘ}C I/O

íMA�P Secure Managed Client ⌠��αC¿C

��{í�e���

�⌡μAϕ���AP���{íPπ�@�t���e�C Microsoft ú�Fif

t Windows VistaBServer 2008 H��@�t���� Windows �αuπM≤

http://www.microsoft.com/whdc/system/sysperf/perftools.mspx

C

�: Microsoft XP uπúbΣ�ºCC

¼� Windows �αl�Ω� (WPT)WPT iH ° 5 �]wG

v }≈

v ÷≈

v ≡v

v R

v Y�

pGn¼�l�Ω�A���UCykG

xbootmgr -trace <???> -numRuns <X> -resultPath <(output)> -traceFlags base

bo�ⁿOϕñ����ú����AΣí�pUG

v ??? - }≈B≡vBRB÷≈

v X - n�¿�⌡μ�

v (output) - ΘXl����m

ΘX�iH��αR{í]H ≤ WPT ñ�}�C

�OCt�A�M{�

ϕz¼�Fl��A�H Windows �αR{í}�ªºßAA���K�w∩Sw

�@A�CY�A��ßO��í�pCΣñ@�A��ß��íA��WLΣLA

�A�No�A���u��]w�≡�vAún²ªb���vT½nA�C

p�ΣLσ≤A�e�UC⌠}G

http://www.microsoft.com/whdc/system/sysperf/On-Off_Transition.mspx

36 Secure Managed Client 2.0 � ípΓU

�Oú¡w�μ�

��{íiα�b���í��íA�Pú¡w�μ�CpGnb Windows ¼�l

�Ω�A�⌡μUCⁿOG

xperf -on base+cswitch+latency+power

pGn�εl�A�⌡μUCⁿOG

xperf -d (output)

bo�ⁿOϕñ����ΘJ���AΣí�pUG

(output) - ΘXl����m

@�t�A�

�]t@�t�A���÷ΩTC

��

u�½nA���nN���¼]�u��vC

@δ½nA�]AUCA�G

v �n�@�t�A�

v �rA�{í

��]w�≡�

D÷Σ�A�AΣ���¼��u��]w�≡�vC

@δD÷Σ�A�]A≤OtA�C

�/w��

��ú½n�A�AΣ���¼�uΓ�v�uw��vC

@δú½n�A�]AUCA�G

v Windows jM

v Windows ≤s

v ≤Ot≤sA�

v Θu@ú����@�t�A�

����

ziH�⌠�A�∩≤⌠��@�íO½n�A�C���UCA�A��

LANDesk iμ�z@�G

Windows XP A�

ϕ 3. Windows XP A�

A� \α

°i �e WER °i� Microsoft

í��Σ� Microsoft xΦí�σ≤

sC�� Σ�sst������AHiμ�tjM

� 6 � ��P�π Secure Managed Client M�� 37

ϕ 3. Windows XP A� (�≥)

A� \α

��n² e\������∩n²

��≤s�� e\ⁿ� Microsoft °A�AHΣX≤s��

ΩTwñ� °t�w

���≈�� �z�≈������≈��

t���A� ⌡μt���\α

Wireless Zero Configura-

tion

� 802.11 t�dú���tm

Windows Vista A�

ϕ 4. Windows Vista A�

A� \α

��� q�zd���

≈u�� ú�≈u���@í�

ReadyBoost Σ� ReadyBoost ��{í

��n² e\������∩n²

�zd �zqú¬���zd

TabletPC Σ�¡Oqú�ΘJ

���≈�� �z�≈������≈��

Windows ≤s e\ⁿ� Microsoft °A�AHΣX≤s��

Windows jM Σ�sst������AHiμ�tjM

Windows ��°i �e WER °i� Microsoft

ThinkVantage® �N

�≤ Secure Managed Client �]pΦíAUC ThinkVantage �Nwgú�A�Az

iH�{�úª�Hú¬�αG

v Rescue and Recovery®

v Client Security Solution

N Sysprep M���� HF����α

pGzbC@��ß�ú��P��wΘANiHN Secure Managed Client ����

\α��α��CΣ@kO�� Windows t�M���z{íAN x86_Microsoft-

Windows-pnpSysprep-neutral M��sW@δqμ�AMßN PersistAllDeviceInstalls

]w∩� trueC

HU��� .xml ��d���G

<settings pass="generalize"><component name="Microsoft-Windows-PnpSysprep" processorArchitecture="x86"publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

<PersistAllDeviceInstalls>true</PersistAllDeviceInstalls></component></settings

38 Secure Managed Client 2.0 � ípΓU

ú� Vista �α

ziH��Y� Vista A�ú� Vista �αC

�: �Mμ�C�A����C���T{zA]ú�no�A�ºßAA��ª�C

v SERVICES

– ���≈A�

– Windows ≤s

– Windows jM

– SuperFetch

– ReadyBoost

– ¡OqúA�

v MSCONFIG

– Google ≤s{í

�C���]w�MΩ�¿½s�V

�C]w�e\���N]w�xsb NAS °A�A]����L�nJ�@íq

úAúiH��P��u@⌠�C���b���C]w�ºß�@�nJ�A�C

]w�∩����í�úsbA]� Windows ���xsb�� C:\Documents and

Settings\ Ω�¿�]w�Cϕ���nX�Aπ���]w��e]ú]A Internet

Explorer �����s�°A�WCpG����\hj¼��Ao�{�iα�ß�

°��í�¿C

�: pGznNí�xsΘ}Ctm�⌠⌠s�xsΘA� \� 47��� 8 �,

y]w⌠⌠@�zC

�F�ε�α�Do�A���Ω�¿½s�VCo�iH²zNí����]w

�Axsb⌠⌠WP�C]w�úP��mWC��Ω�¿½s�V�nBOAun

Ω�¿Q½s�V�t@��mANú�H�C����nJ�nX��s@�CU

�OziH½s�V�Ω�¿G

v ��{íΩ�

v α�

v ��σ≤

v }l\αϕ

p����C���]w���÷ΩTA� \ http://technet.microsoft.comCp�Ω@

���@k��÷ΩTA� \ http://technet.microsoft.comC

ziHjMUCⁿJMμG

v p≤���C���]w�

v p≤tm���bß���C���]w�

v ��@�Ω�¿xs�C���]w�

v Ω@�C���]w�

v ���]w�MΩ�¿½s�V

� 6 � ��P�π Secure Managed Client M�� 39

v tmΩ�¿½s�V

v Ω@Ω�¿½s�V

�: Q����]w�MΩ�¿½s�VAO²���N��xsb�lM��⌠��nΦkCbNM������lM��ºeA��²]w���]w�MΩ�¿½

s�VCϕ�lM��½s���A⌠≤xs�⌠⌠@�����úú�QRúC

40 Secure Managed Client 2.0 � ípΓU

� 7 � �J≥�M��

��s����M��ú��q≥�M����CpG≥�M��]t��� Sysprep

M��Aíps����L{N����TCpG≥�M��O��tmíAh

C@�s���]�¼��íC÷M�í�DL�Ao]]�Lk�oº

Secure Managed Client �M��OqC

�Q�N≥�M��íp�w��xsΘ}CAH����s����X�Dn

ΦkC

��i}≈� CD/DVD CΘ

o�ΦkON�ß���� ULOSBN�ß�s��xsΘ}CW�≥�M��AH�

��CΘw�z�n�M��Ci}≈�CΘiαO@i]t ImageX M��� Ghost

M��� DVDB@� CDA�O@i@�t�w� CDC²OpG�n⌠⌠s�

vA��� LANDesk w�M≤�ú�� SMCWinPE.iso CDC SMCWinPE.iso O@�

Windows PE CDA�tq�ß��ms��⌠⌠���⌠⌠X�{íCo� Windows

PE CD ]]t@�������� (GUI)AiN��ΩΘw�W�����≈�e�s

�≥�M��C

�:

1. ImageX O@�ⁿOμuπA���B�∩MM�w�M��Absy�X@⌠�

ñiμípC ImageX úO⌡μ���sC]�ª�ú��M��A�±ΣL�s

uπ]�p Ghost��ú��M��≤pC

2. Ghost O@������sΦí�sw��M��uπC

ziH��z¡íp@�t�M�����⌠≤�mCM��iH±mb@� DVDB

⌠⌠@��A�O��ΩΘw�WC

pGnípz�n�M��A��¿UCBJG

1. ��s�≥�M��]� \� 23��� 6 �, y��P�π Secure Managed Cli-

ent M��z�CP�o�M���nh�íCs�M���X{b�mñΩ�

¿CúDzT{�M��w��n��s���Ah�ún��ªC

2. íJi}≈�CΘA�BN�ß���� ULOSCo��únΘJ⌠≤{�C

3. qu⌠⌠v°�i}Aϕ� LANDesk ��C∩��m -> ���mAMßNMμñ

�W�∩���]�qb]����C

4. N�m���zΦΦ���s�mñ≥�M��C

5. o���X{@��� SMC �ß�∩ �C����∩N CDROM �J����

ñAMß÷@U}≈C

6. �ß� ULOS �°óBs��xsΘ}CW��≥�M��A�B}l���C

ΘC

7. íp≥�M��CpGzO�� SMCWinPE CDA��� GUI N�e�s�ΩΘ

��≈�xsΘ}CA��}�ROú�r A⌡μ⌠≤M��uπCz∩w��

��⌠≤�≤Aú�M���≤xsΘ}CW�≥�M��íC

© Copyright Lenovo 2009, 20010 41

SMCWinPE.isoSMCWinPE.iso ��≤ LANDesk w��cº ldmain @��� tcm\dist �²UC

�� iSCSI �l�s�� SMC xsΘ}CW���M�� LUN�Ní�p≤�� iSCSI �l�{íAs�� Secure Managed Client xsΘ}CW

�Sw���mC�w]AiSCSI �l�{íOw�b Microsoft Vista WAúLziH

NªUⁿ�≤ XP M Windows Server 2003CH imagex � xcopy ÑuπNM���

��s�íB�∩wgsb�M��A�Os²xsΘ}CW��²�cAMΣz

ns��M���Ao�{����CziHs��≥�M��A²uαb�m¼A

Us�Cz]iHs��⌠≤���M��Aun�M��úb��ñCU�NO⌡

μo�{��Ω�m�G

1. �� iSCSI �l�{íC

2. ÷@U�≤...÷sAN�l�½sRWCziHb��D�x��� SMC xsΘ

}CW÷@U�½kΣAA÷@U�eA}�uM���ev°íAH�oo�

ΩTCb�¼μ�ñAu≥�M��v��Ou�mñM��vúOu@�ñ

M��vAz�α�� CHAP KXC�No�ΩTK�μ�ñAMß÷@UTwC

3. b iSCSI �l�{í�@δ��WA÷@UKX÷sCMßN CHAP KX�s�

KW�μ�AA÷@UTwC

4. ÷@UuiSCSI �l��ev°íñ�����AA÷@UsWJf⌠�...CNSMC xsΘ}C� IP �}sW��μ�AA÷@UTwA÷¼°íC

5. ÷@Uu��v��Co��z�����@≈t� 5 ���¬k�MμC�÷@

U½sπzATOz�C���O�s��CNt�zb SMC xsΘ}Cs��

íW����j�π�XC��A÷@UnJ...A}�unJ��v°íC

6. ÷@UiÑ...AY�}�uiÑ]wv°íC

7. �∩ CHAP nJΩTΦ�CNBJ 2 ñAuM���eve��u�l���

�vMuCHAP KXvμ�ΩTA�s�K���W�GM��KXGμ�ñC

÷@UTwC

8. {bzN���o���≈OuwsuvFCz{bNiH�����≈iμM

��@�FC

9. }� DOS ROú�r AΘJUCⁿOG

�: ���∩�Aϕ���iμU�BJC clean ⁿO��°ú��CziH

⌡μ list disk � Disk ManagementA�d���O�°úC

a. diskpart - }� > ú�C

b. list disk - �y��CX���AHK��Aϕ���C

c. select disk 1 - Σñ 1]�Aϕ��r�NϕzbW�BJ�s��Aϕ��C

ziH�����jp@� �ATOzH diskpart ���T���C

d. clean - NMú�∩������Ω�C

e. create partition primary - ��Dn��C

f. active - N��]�@�ñ��C

g. assign - ⁿúU@�i����≈NC

h. exit - ²z ���ROú�r C

i. format X: /fs:NTFS /q /yAΣñ - X: NϕbBJ 9g ⁿú���≈NC

42 Secure Managed Client 2.0 � ípΓU

10. �n�A�≤s}≈��CpGznq XP t�M� XP .wim �A��q Vista

t�M� Vista .wim �Ahú�≤sC²OpGznq Vista M� XP WIMA�

�q XP M� Vista WIMA���⌡μ BOOTSECT.EXE ⁿO�π}≈��C

pGnM� XP WIMA��⌡μ bootsect.exe /nt52 X: ⁿOCpGnM� Vista .wim

�Ah��⌡μ bootsect.exe /nt60 X: ⁿOC

11. HUCⁿOM� wim M��

imagex.exe /apply foo.wim 1 x:\

12. ÷@Uwsu���AA÷@Uu��Ω�v÷sAñ� iSCSI �l�P LUN �

suC�∩ ID ��Φ�AMß÷@UnX...C���÷¼��iαs��Φ����≈�uWindows ����v°í�ROú�r C

Nh���M���s�xsΘ}C 1.x �

\h���bL���HqúM��ñ��h���Cbjí�ípUA�@�

��O Windows ��A�G���O½s�V�Ω���A�xs��

�Ω�CpGzne\o���q Secure Managed Client �ß����w��s�

xsΘ}CA�⌡μUC�@G

1. �� Secure Managed Client �zD�xAbxsΘ}CW��≥�M��Co�

M��NB≤�m¼AC

2. Q�∩w�⌡μ sysprep {��M��AN�ß���� ULOS e�C

3. N Secure Managed Client WinPE CD íJ��ß�� CD-ROM ��≈ñC

4. b Secure Managed Client �zD�xñA��½¬Σ÷@U�ß�≈�ANª÷

ϕ�����m¼A�≥�M��C�pAN@�W� LENOVO-L3A0426 ��ß

��U���u��≥�M��vC

5. o���}�u�� SMC �ß�v°íC�∩�°í���N CDROM �J�

���ñC

6. ÷@U}≈C

7. �ϕºßA�ß�N�½s��Aq CD }≈C Windows PE �ⁿJ���@�

δFC���²�ß�s��zbBJ 1 ���xsΘ}C�mM��íAHK

²zN@�t�m≤o�íC

8. ÷U@BAqδF∩�ⁿOμ∩�A}�ROú�r C

9. ΘJ diskpartA�� diskpart ⁿOμ��{íC

10. ΘJ list volumesACX diskpart �������C

z�����T���G

a. C: oOz��W��w��@�t���C

b. D: oOz SMC �ß�W��w��Ω���C

c. �l�G zbBJ 1 ���xsΘ}C≥�M��C

11. ΘJ list diskCz������� 0]��w��AH��� 1]zbBJ 1 ��

�xsΘ}C≥�M���C

12. ΘJ select disk 1Co�ⁿO�∩�zbBJ 1 ���xsΘ}C≥�M��C

13. ΘJ Create partition primary size=nAΣñ n Nϕnb≥�M��ñ���@�

t���jpCo�ⁿO�b≥�M��ñ��@�t���C

14. ΘJ Create partition extendedCo�ⁿO�H�� 1 �l�íA����Ω�

��C

� 7 � �J≥�M�� 43

15. ΘJ Create partition logicalCo�ⁿO�N�Ω���ⁿw��Φ��ñC

16. ΘJ Format fs=ntfs label=”data” quickCo�ⁿO�N�� 1 μí� NTFSC

17. ΘJ Assign letter=gCo�ⁿO�ⁿú@�����≈N�Ω���C

18. ΘJ xcopy d:\ g:\ /s /h /e /y /qCo�ⁿO�Nz��w�� D: ��≈W���

Ω�Aí�s�≥�M��íñxsΘ}C�Ω���Co�@��n�

���í⌡μA]�ªO D: ��≈W��Ω��Gi���C

19. �¿�A�÷@U½s��δF÷sC���½s��δFA�s C: ��≈C

20. ÷@U∩����≈C

21. ∩� C: ��C

22. ∩�� 1 @��s���aC

23. �∩Φ�Ab�� 1 ∩���C

24. �∩n@�@�t�������� 1C

25. ÷U@BCo�{��O@��í�¿C

26. �¿�Az�M��]N��NⁿFC

Nh���M���s�xsΘ}C 2.0 �

pGzne\o���q Secure Managed Client �����w��s� 2.0 ��

xsΘ}CA�⌡μUC�@G

1. �� Secure Managed Client �zD�xAbxsΘ}CW��≥�M��Co�

M��NB≤�m¼AC

2. Q�∩w�⌡μ sysprep {��M��AN�ß���� ULOS e�C

3. Nz�v� WinPE CD íJ��ß����≈ñC

4. b Secure Managed Client �zD�xñA��½¬Σ÷@U�ß�≈�ANª÷

ϕ�����m¼A�≥�M��C�pAN@�W� LENOVO-L3A0426 ��ß

��U���u��≥�M��vC

5. o���}�u�� SMC �ß�v°íC�∩�°í���N CDROM �J�

���ñC

6. ÷@U}≈C

7. �ϕºßA�ß�N�½s��Aq CD }≈C Windows PE �ⁿJ���@�

δFC���²�ß�s��zbBJ � 43�� 1 ���xsΘ}C�mM��

íAHK²zN@�t�m≤o�íC

8. ÷@UqSw��m�sM��AMß÷U@BC

9. o�°í�π�����≈W�X���CpGz∩�N CD-ROM �s���

�xsΘ}C∩�Ao�°í]�π� CD_ROMC÷U@BC

10. �zbBJ 9 ÷@U�ß@�����M��∩���aCpGz�@�t�O

Windows VistaABpGoOzn�s��ß@���A��∩oOzn�s�

h��� Vista t���ß@���∩�C÷U@BCM��K}l�sC

11. buT{v��÷U@BC

12. o����sM��]���CpGz��ΣL��n�sA�÷½s�

�AhN÷½s}≈C

�: pGz�h��� VistaA��÷@U�Φ�]pBJ 9 �í��Ah�

���≈iαLk}≈C

44 Secure Managed Client 2.0 � ípΓU

NM����íp�xsΘ}C

ziH��o�ΦkA��s��xsΘ}CW�≥�M��Aú�zL�ß�Cu

�bz�M��iHw��w�AB⌠x iSCSI �l���k�A���o�ΦkC

iSCSI �l�� H Windows Vista @�w�Az]iHqUC⌠}Uⁿ�≤ XPG

http://www.microsoft.com/iscsi/

�: pGznq@�w�CΘ�ΩΘw�w�A� \� 41 ��y��i}≈�

CD/DVD CΘzC

pGnípz�n�M��A��¿UCBJG

1. P�o�M���nh�íAMß��s�≥�M��Cs�M���X{b�

mñΩ�¿CúDzT{�M��w��n��s���Ah�ún��ªC

2. b LANDesk D�xWA��½kΣ÷@U≥�M��A∩��eCo���X{M

���e∩ �Cz�nUCΩTG

v ISCSI �l�

v �l����

v CHAP KX

v ��

3. e�π� iSCSI �l�BiHs��xsΘ}C IP �}�t�C

4. �≤t��l��]wAH�X�l�W�B���M CHAP KXΩTC

5. bxsΘ}C� IP �}⌡μ�@�CziHqu��vΩT�oo��}C

6. �@����� @��XWz��W����CpGS�Aϕ� iSCSI �l�

]wS��TΘJC

7. nJ iSCSI ��C�l����bt���@�s��C

8. ϕBJAN≥�M��íp���WC

9. nX iSCSI ��C

uno{���≥�M��W��xsΘ}CANϕⁿ�Ab LANDesk D�x��

s����C

}≈[t

Q�}≈[tAxsΘ}CYiN}≈�C@� LUN ���O²A∩M�}≈�Dn

M�����O²C

�≤xsΘ}COq�}≈Bz}≈[t�Ω�A]�úDÑ�jí����ú

g�L]wípM����l����Ah�nún��}≈[tCU�O@δ

��BJ��G

1. íp���zL LANDesk u²���M��C

2. �����A�BzL LANDeskANM�����L����C

3. w∩jí����⌡μ�l}≈C

4. zL LANDesk GUI ��}≈[tC

a. ∩� <storage array name>A��A∩��e -> }≈[t

b. w∩≥�M����}≈[tC

� 7 � �J≥�M�� 45

w∩��q≥�M��l��M��ALANDesk ú���}≈[tC

5. ²��Σñ@����AA��ΣL���Co� LUN K��YΓª�}≈O²�

[����FC

6. ��������A@�j��� 30 �Co�BJ�¼�Σ�����Ω�A]i

HRo�Ω�CϕxsΘ}CBz�o�Ω�ºßA���}≈O²�Dn��

}≈O²�∩MAN�xsbxsΘ}CñCß≥}≈�íAN�q}≈��ú�

��O²A]���⌡μ}≈[t���AΣ}≈t�ú�[�\hC

ú�

�� SMCWinPE.iso CD �A�NUC��G

v T{�ß�t�b��� CD ºeA�²��� ULOSCpG CD ²≤ ULOS }

≈At�NLks��xsΘ}CC

v }�ROú�r �AJI�b�¿°íWApGo��÷ Enter ΣAN�½s}≈]�¿°í�iDzo@I�C

v pGzbiμ�l]w{��í�� SMCWinPE.iso CDA�l]we��°óXϕ

�A½sX{�Aπ�e�jp����≤C

v w�sM��ºßA�@�}≈�A�ñ�w�su]T{°í�iDzo@

I�C

v ϕzq CD �sM���A�b÷ Enter ΣºeA²bT{°íN CD ½¿��

]T{°í�iDzo@I�C

v Oⁿ SMCWinPE.iso w��G�Θx�AOxsb smccopy.log ñ���a�mC

v SMCWinPE.iso CD ���úONA���Ω��s�xsΘ}CAONΩ��

s�@δ�i}≈��≈]qOⁿ C ��≈�C

pGúO�� Lenovo CDziH��⌠≤@�i}≈ CD/DVD CΘ���ß�CpGt��nxsΘ}Cs

�vANúα�� USB CΘ]]A USB ≈�� USB w��FC��i}≈ CD �A

�NUC��G

v T{�ß�t�b��� CD ºeA�²��� ULOSCpG CD ²≤ ULOS �

�At�NLks��xsΘ}C���M��C

v pG CD ½s}≈A�ß�bA���� CD ºeA��²�� ULOSC

v ϕzHσr�íw� Windows XP �Ae�W�X{}≈�z{í��TºCϕ

z������í�Ao�σrK�°óC

46 Secure Managed Client 2.0 � ípΓU

� 8 � ]w⌠⌠@�

ziHNxsΘ}Ctm�⌠⌠s�xsΘ (NAS) �mCtm�A�⌡μUC�@G

1. tm Active Directory®G

a. Twwbu�²�z{ívtmF Active DirectoryCp��÷ΩTA� \� 13

��ySecure Managed Client / LANDesk ]wzC

�: S� Active Directory tmA]iH�� NAS ��C²OA��tmF

Active DirectoryA�α�� AD v¡M�h�zo���C

b. buSMC �z{íve�WA��½kΣ÷@UxsΘ}Cñ� NAS ��AA

÷@U Active Directory tmA}� Active Directory ∩�e�C

c. ÷U \αϕAA÷@Uzn�tm NAS ��� Active Directory ⌠�C

d. ÷@U∩�C

2. �� NAS ��G

a. bxsΘ}CñA��½kΣ÷@U NAS ��AA÷@UsW NAS � A

}�u��⌠⌠xsΘve�C

b. ΘJ��W�C�NAW���ípgC��A∩���jp]H GB �μ

��C

c. ÷@U��Co��N���s��FC�w]ASMC ���s�@�A���

P���P�W�C

3. NAS v¡M�hG

a. b⌠⌠@��÷@U�½kΣAA÷@U�úΩw NAS @��C

b. q Active Directory °A�tm Active Directory v¡M�hC

c. A��½kΣ÷@U⌠⌠@��AMß÷@UΩw NAS @��C

�w]A@��w]v¡Ou�¬vCpGn�≤��A�⌡μUC�@G

a. b@��÷@U�½kΣA∩��úΩw NAS @��Co���X{uSMC �

z{ív�iAq�zun�úΩw NAS @��ANÑ≤ß���wO��

���π�s�vC

b. ÷@UTwC

iJ Active DirectoryAtm ACL @��CMßA��½kΣ÷@U@��A�÷

@UΩw NAS @��Co≥@AActive Directory tmNπ�@���s�vFC

4. Rú NAS @��G

a. pGnRú NAS @�����A�b@��÷@U�½kΣAA÷@URú

NAS @��/�C

ziH��ΣLs�@��M��G

1. b���÷@U�½kΣA}�u��⌠⌠@��v°íC

2. pGzn� A]iHΘJ@��W�Mí�C

3. ÷@U��C

© Copyright Lenovo 2009, 20010 47

48 Secure Managed Client 2.0 � ípΓU

� 9 � tmPBMDPB�g

��N�dbJ��D�Ap≤��PBMDPB�gAH�p≤N�nxsΘ}C

���DnxsΘ}CC��P�]NQ�DPB�g��k

�g]���h�xsΘ}CAoHiμa° FΣñ@��@Dn}CAt@

��@�n��≈}CC

PB�giú�Y��≈C�≤o�tGA�≈xsΘ}C��≥FDnxsΘ}

CC

DPB�g���O SnapshotCzuαNo�¼��gAtmb�wíjiμCziH

�w�≈AN�nxsΘ}C]m�≈�C

�n°≤

PBMDPB�g��n°≤pUG

v DnM�nxsΘ}Cú��w�PB�g�vC

v �nxsΘ}C�xsΘ��j≤�Ñ≤DnxsΘ}CCp��÷ΩTA� \

� 9��� 4 �, ySecure Managed Client M��w�zC

v �nxsΘ}C��� LANDesk D�x��C

v �nxsΘ}Cúαw�⌠≤≥�M��B������ NAS @��C

v �g�nB��vC� \� 17��y�v��z

��PB�g

pGn��PB�gA�⌡μUC�@G

1. ��½kΣ÷@UDnxsΘ}CAA÷@Utm�gCo��}�utm�gv

°íC

2. qu�g�ívU \αϕ∩�uPBvC SMC �z{í�CXAXPB�g�i

�xsΘ}CC

3. ∩�@��nxsΘ}C�xsΘ}CAMß÷@UPB C

4. tm�¿ºßA�nxsΘ}CK�Cb SMC �z{íñ�DnxsΘ}CU�C

�: Y�oΓ�}Cºí���wg�¿APB�g@�iα�O��≥iμ@q�íAon°wbDnxsΘ}CW����������wC

��DPB�g

pGn��DPB�gA�⌡μUC�@G

1. ��½kΣ÷@UDnxsΘ}CAA÷@Utm�gC

2. qu�g�ívU \αϕ∩�u� Snap UvC SMC �z{í�CXAXD

PB�g�i�xsΘ}CC

© Copyright Lenovo 2009, 20010 49

3. pGn��w]��≈�{A�∩�n@��nxsΘ}C�xsΘ}CAMß÷

@UPB C

4. pGntm�q�≈�{A�÷@UiÑB��DsΦμ�AMßA÷@UPB

5. tm�¿ºßA�nxsΘ}C�CbDnxsΘ}CU�C

�: Y�oΓ�}Cºí���wg�¿ADPB�g@�iα�O��≥iμ@q�íAon°wbDnxsΘ}CW����������wC

Γ�ó��Γ

U@DnxsΘ}Co��DAziHN�n}C���Dn}CC

pGn���n}CA�⌡μUC�@G

1. ��½kΣ÷@U�nxsΘ}CAA÷@U���Dn

2. {��¿ºßA�nxsΘ}CN�Y¿�DnxsΘ}CC��Dn}CNú

A��A�BqxsΘ}C≡¼�c�úC

3. ½] DHCP ⌠�A²ªⁿVs�DnxsΘ}CC

4. ��xsΘ}C{biH��� 49��y��PB�gz�π��BJ½s�

�A�tm��nxsΘ}CC

�: bz���n}CºeA�n²�d�g�¼AC���½kΣ÷@U SMC �

z{íñDn}CUΦ��n}C��A∩��g¼ACo���X{u�gi

�v°íAπ�πΘ��gi�AH�C@�M���i�CpG�n}Cb�g

�¿ºeY��A�n}C��ºßAiα��íM��Lkb}CW��C

50 Secure Managed Client 2.0 � ípΓU

� 10 � �°��

��]t�°��B⌠⌠G�IH�zbtmM�� Secure Managed Client �iαJ

��¡εÑ�÷ΩTC�÷�°���ΣLΩTA� \ Secure Managed Client - Stor-

age Array User GuideC

�D

�]tziαJ��U��DAH�p≤��o��D��÷��C

xsΘ}CE�{í

�dxsΘ}CO��B@�@�ΦkAOd���� 12 �±ΓOCpGΣñ\

hOúe±ΓANϕ�xsΘ}C���va⌡μCpGjíúúGAϕ�xs

Θ}CweíM¼AC

gJ��≈�AO��C]�ApGOú��Aϕ�xsΘ}CweíM¼

AAú�iα��va⌡μCpGO¡wG��{{Aϕ�xsΘ}C���Fí

M¼AC

Secure Managed Client ú�}≈

pGo�}≈��AiDzuS�i�� iSCSI }≈≡vA���N iSCSI ]�Dn

}≈≡Cp��÷ΩTA� \� 10��ySecure Managed Client Γ�]wzC

pG BIOS Lks��xsΘ}CA�� D0 M ULOS M��AN�X{��TºC

�ún½�o�����A∩÷ Ctrl-Alt-DelAjε BIOS ½ss��xsΘ}CC

pG��ó�AiαO⌠⌠�xsΘ}CwgG�FC

ϕt�s��xsΘ}C�}l}≈�AN�X{ Secure Managed Client e�CpG

��e�°óAe�@�ú�Aϕ� D0 ñ� LANDesk Nz{í�b�s��

LANDesk ��°A�C²OA��°A��⌠⌠suwgG�FC

pGt�iH�� D0 M ULOSAϕ�⌠⌠MxsΘ}Cú�B@CpGz� Win-

dows M��Lk��A�ϕ LANDesk ULOS ���ú��ú�iμC

���zD�xºßA�ß�Lk}≈

pGzb��uSecure Managed Client �zD�xvºßANLk���ß�A���

≤sxsΘ}C���tm/ΩTC�⌡μUCBJG

1. }� Secure Managed Client D�xAMßbxsΘ}C÷@U�½kΣA∩�w�

}≈M��C

2. ΘJ�n�ΩTG

share \\<localhost name/IP\ldmainuser <admiinistrator group user on the box>password

3. ∩��O

4. bτ�O�A�s²� tcm\dist\\SMCBoot-<version>.imgAMß∩�≤sC

© Copyright Lenovo 2009, 20010 51

÷MªoßX���íⁿJA²���ΩT��úO�s�AB�ß�]��i

H}≈FC

�z��°A� IP �}wg�≤F

pG��°A�wQ��AB�°A�� DHCP IP �}wg�≤A�⌡μUCBJ

[H��C

1. N IP ½]��l� IP �}]]�RA�

2. ½s����A�ot@�Ωú�z�yA²Ωú�zPBCpGzún½s}

≈A�bⁿOμΘJUCⁿOG

\<path to landesk install>\ManagementSuite\ldlogon\ldiscn32/ntt= NATIONWI-IX4CN8/s= NATIONWI-IX4CN8/sync/v

�ó�

ϕ��ó��A��dUCU�G

v pGz�b°A�h�w� LANDeskA��d c:\Program Files\LANDesk\Shared

Files\certs Ω�¿ñ��A��TwªP protect.ini ���C

v ��q Secure Managed Client xsΘ}C� Secure Managed Client �zD�x°

A�AAq�zD�x°A� �xsΘ}CAiμsu��C�DiαXb��

°A���⌡≡C��do���GC:\program files\landesk\shared files\keys\

Protect.iniC

S����M��

pG�����@�ⁿG�Q�¿A�BbxsΘ}C����Σñú�@���

���A²oS��������⌠≤M���ANϕ�xsΘ}Cíú¼ALk

e��M��C

LANDesk Θx

biμ Secure Managed Client �D��°���AiH �Γ� LANDesk ΘxMΓ

�⌠�A�z�iμ�°��G

1. Program Files/LANDesk/Management Suite/console.exe.logC

2. Program Files/LANDesk/Management Suite/logs/san_portal.logC

3. https://localhost/connectionmanager/connectionmgr.asmxC

4. https://localhost/san_portal/sanportal.asmxC

�@⌠⌠G�I

ϕ 5. ⌠⌠G�I

¼p iα��] vT

�ß�t�l�BΩw Windows X�{í/��{í

�G�

xsΘ}CG�

A�⌠⌠uú}

�@����ß�°il�¼p

μ½�W���t�úⁿ�vT

xsΘ}CW����ß�úⁿ�vT

lu�s��t�úⁿ�vT

52 Secure Managed Client 2.0 � ípΓU

ϕ 5. ⌠⌠G�I (�≥)

¼p iα��] vT

�ß�°iΩ�yó Windows �l

�G�

xsΘ}CG�

A�⌠⌠uú}

@�������lF

μ½�W���t�ú��]/Ω�yó�¼p

xsΘ}CW����ß�úⁿ�vT

lu�s��t�úⁿ�vT

��iH���

ULOSAoLk�� Win-

dows

Windows �l

LDMS G�

Active Directory G�

@�������lF

����ß�ú°iX{O�∩ �

�ß�X{@��÷nJ�∩ �

��Lk��� ULOS CMOS ]w

�G�

xsΘ}CG�

A�⌠⌠u

LDMS G�

DHCP °A�G�

�@�X��ß�°iX{}≈�D

μ½�W���t�úⁿ�vT

xsΘ}CW����ß�úⁿ�vT

lu�s��t�úⁿ�vT

����ß�ú°iX{O�∩ �

l⌠⌠W���t�úⁿ�vT

⌠⌠�C�D DNS °A�

�G�

���� DNS °A��t�

�h����°iX{ Web �D

Secure Managed Client ⌠�ñ�s���

ziH�≤⌠⌠t�dbuiÑ]wv°íñ�π���CpGz μu��suv

t�dbu��s�suvt�dºeπ�A�⌡μUCΣñ@�{�G

�≤ Windows XP �s���

pGn�≤ Windows XP �Dns���A�⌡μUC�@G

1. }� DOS ROú�r C

2. ΘJ ipconfingAMß÷ Enter ΣCqz���@�P@ IP �}�u��suv

��H�u��su 2v��C

3. ΘJ ncpa.cplAMß÷ Enter ΣCY�}�u⌠⌠suv°íC

4. bu⌠⌠suv°íWA÷@UiÑ -> iÑ]wCY�}�uiÑ]wv°íC

5. ∩�ut�dPs�v��C

6. busuvΦ�ñAN IP �} 172.30.0.2 �u��suv����Mμ��]p

Gª��busuvMμ��� �C

7. ²÷≈AMßA½s��t�C

�≤ Windows Vista �s���

pGn�≤ Windows Vista �Dns���A�⌡μUC�@G

1. }���� DOS ROú�r C

2. ΘJ ipconfingAMß÷ Enter ΣCqz���@�P@ IP �}�u��suv

��H�u��su 2v��C

3. ÷@U}l -> ⌡μC

4. ΘJ ncpa.cplAMß÷@UTwCY�}�u⌠⌠suv°íC

5. bu⌠⌠suv°íWA÷@UiÑ -> iÑ]wCY�}�uiÑ]wv°íC

6. ∩�ut�dPs�v��C

� 10 � �°�� 53

�: �����iα�n÷ Alt ΣA�απ�o�\αϕC

7. busuvΦ�ñAN IP �} 172.30.0.2 �u��suv����Mμ��]p

Gª��busuvMμ��� �C

8. ²÷≈AMßA½s��t�C

¡ε

v úΣ�zL��⌠⌠≡vC

v N ThinkCentre M57p eco �ß�� BIOS ≤s��s�ºßA⌠⌠�mñ�

SMCBoot ∩�NLk��FCoiαO]� ThinkCentre M57p eco �ß�Ob

Secure Managed Client }oºe�R�Cz��≤so�t�ñ� NIC �ΘAHK

Σ� Secure Managed Client ��� iSCSI }≈Cp��÷Uⁿo���{í�ΩTA

� \ Secure Managed Client Σ�⌠�C

v SMCWinPE CD uα�NA���Ω��s�@δi}≈��≈C

v �� SMC WinPE CD �AuLenovo A���vú��s�xsΘ}CW���

�M��C Secure Managed Client WinPE CD �]p¡�≤�sμ@����

�AúOπ�w�CpGzn�sA���A�⌡μUC�@G

1. MúxsΘ}CW�M��C

2. b LUN W��A��� [ diskpart -> create partition primary size=6131 ]C

3. b LUN W��t��� [ diskpart -> create partition primary ]C

4. Nt���]w�@�ñC

5. NA���q��w��s� LUNC

6. Nt���q��w��s� LUNC

7. �ú��w�C

8. NA�����]w� SERVICEV002C

9. ⌠�A��� [ set id=27 ]C

10. Nt�����]w� SW_PreloadC

11. ���α�AMß�úw� Rescue and RecoveryC

12. ½sw� Rescue and RecoveryC

v bπ�ΩΘw���ß�WH CD }≈A����ΩΘw�AúOxsΘ}C

W�M��C CD @������ 0Cbπ�ΩΘw��t�ñA���≈N

O�� 0AxsΘ}C��≈O�� 1Cb��@�wⁿ CD ºeA�²εU

��ΩΘw�C

v Secure Managed Client ú���⌠≤�s Microsoft M����DCbH Secure Man-

aged Client iμ�s�A���s Windows M����Dú�MsbC

v b�u@qUAWindows t���b 24 p����≡ 3 ϕ¬kC Secure Man-

aged Client }≈�z{íO��t���g�Aunu@q@W[AN��≡ Win-

dows t���C��� Windows ���\αAN��P⌠�⌠⌠�í°A�PB

C

v u��≤UviαLks��zns��t�C�ß�b Windows ��Γ� NICC

@��≤@δ⌠⌠qTAt@�hP Secure Managed Client }≈�z{íqTCo

Γ� NIC ú��u��≤UvH��τ�C� IP �}ú��DCb��u��

≤Uv��A����G���⌠⌠C

54 Secure Managed Client 2.0 � ípΓU

v pG CSS � SafeGuard Easy GINA Ow�b Windows XPASecure Managed Cli-

ent μ@nJ\αNLkB@C�������w�b Windows � GINAAA�n

J WindowsC

v LANDesk D�xú�π���TºAiDzxsΘ}Cíú¼C

v �� 100 xt�b�@����Aú�]��� 100 xt�� Windows PnPA

SOwCCpG 100 xt�P���A�bxsΘ}Cú�jq��� I/OC]��

@���t��A�núnP�WL 30 xC

v ���b�� Secure Managed Client WinPE CD N��w����s�xsΘ}

C�A��²úΩΘ��≈A�α½s}≈C�²ú��ΩΘw��q�AA

���xsΘ}C����M��C

v Windows XP w�ϕ�Le��½s}≈Aú�bw� Windows XP � F5 w�[

c�ío�Cbw� Windows XP � Windows Vista]ACPI h½Bz� PC HAL�

�A�ß�uΣ�w]� HALC

� 10 � �°�� 55

56 Secure Managed Client 2.0 � ípΓU

�². �N��

Lenovo úúo�∩��Ωa�a�úú��σ≤�ú�U�ú�BA��\αCp�o

�ú�PA���÷ΩTA�ó�ϕa� Lenovo ��NϕC�σ≤bú� Lenovo �

ú�B{í�A��Aúϕ��t�uα�� Lenovo �ú�B{í�A�Cun�I

� Lenovo ��z]úvA⌠≤\α�ϕ�ú�B{í�A�úiH�N Lenovo �ú

�B{í�A�CúLA⌠≤ΣLú�B{í�A�A������μtd@�º�

⌠Mτ�d⌠C

b�σ≤ñiα]t� Lenovo ���ºMQ��mMQ��í��eC�σ≤���

�ú��ezMQº⌠≤�vCziH���Φíd��vAτ�H�G

Lenovo (United States), Inc

1009 Think Place

Building One

Morrisville, NC 27560

USA

Attention: Lenovo Director of Licensing

LENOVO GROUP LTD. Yu�{¼vú��X��Aúú�⌠≤���q�ºO�A

Σñ]ABú¡≤úH!WwBi���Sw��ºA���⌠tO�C���

ú"\±≤bSwμ÷ñ����q�O�A]�Ao�n�∩ziαúA�C

��ñiα���NW������LΩW��C]�ALenovo �w��qF�N�

qß��e�Js��í�σ≤ñCLenovo oH��∩�/��≤��ñ�í��ú�

�/�{íAñútμq�C

�σ≤ñ�zú�úA�≤��ΓN�ΣL��R���A]Σ\αó�y¿H

� #�iαC�σ≤ñ�]t�ΩTúvT��≤ Lenovo ú��Wμ�O�C�σ

≤ú�b Lenovo �≤Ot��z]úvH�ú�⌠≤���t��O�C�σ≤ñ

�ú����ΩTí�Sw⌠��oAB@�í���CbΣL@�⌠�ñ��

Giα���úPC

búy¿zxZ�l�z�Hvq�eúUALenovo oHA���� GzHU�¼í

�ú���÷ΩTC

��ñ��ú�D Lenovo ⌠��í�¬� �ΦKALenovo �ú∩o�⌠�iμ

⌠≤Φ��I�Co�⌠�ñ�Ω�A�ú]tb Lenovo ú��Ω�ñA��⌠�ñ

�Ω�A��μtß�IC

�Bú���αΩ�íúOb�ε⌠�ñ�o�C]�AYbΣL@�⌠�UA�

o��Giα���j�tºCí�q�Giαo�}oñ�t�ABLkO��

B�q�G�M@δt�W�o�G�PCA�Aí�q�GiαO���ík�

o��⌠�AΩ��GiαúPC�σ≤�������v�Sw⌠�Ad�A��

Ω�C

© Copyright Lenovo 2009, 20010 57

��

UCM�WⁿO Lenovo bⁿΩ�/�ΣLΩa�a���G

Lenovo

Lenovo �x

ThinkCentre

Intel � Intel vPro O Intel Corporation �Σl�qbⁿΩ�ΣLΩa�a����

U�C

MicrosoftBWindows ServerBWindows Vista � Windows O Microsoft Corporation b

ⁿΩ�/�ΣLΩa�a���C

Linux O Linus Torvalds bⁿΩ�/�ΣLΩa�a��U�C

ΣL�qBú��A�W�AiαO�T����A��xC

58 Secure Managed Client 2.0 � ípΓU

Wⁿ��

K�

�lM�� (Pristine image). �lM��O@�\αAi²zMú⌠≤∩M���������≤���C@�

����lAM��tm�M��N��ΩwAúα�

∩C�n�AziH�ú�lΩwAe\z�����∩

M��C

Q@�

�AD≈tmqT≤w (Dynamic Host ConfigurationProtocol, DHCP) . �AD≈tmqT≤wO DHCP �

ß��� IP �}ⁿú�ΣLtmΩT���@�qú⌠⌠

qT≤wC

QG�

iÑD≈�ε��� (Advanced Host Controller Inter-face, AHCI). � Intel wq���{í]p��AHDΩ

@SwΦíAwq Serial ATA D≈�y�t�d�@�C

QC�

xsΘ}C (Storage array). @�wOs Secure Man-

aged Client �ß�Ω���mC���tmú� 12 ��

�M 6 � 1GB �A�⌠⌠≡CxsΘ}COzL SMC

�zD�xAb��[H�zM��C

GQT�

�Φ�mX (Logical Unit Number, LUN). b iSCSI

⌠�ñALUN Ω�WOgLs���≈C�l�P��

≤�su� LUNFΣ�G��� SCSI w�� iSCSI Ñq

@�C

B

BitLocker. BitLocker ��≈[KO Hb Microsoft Win-

dows Vista Ultimate �@��π��[K\αCΣ]pú

���[KAO@�C

I

ISCSI. @�qT≤wAªe\�ß�]���l���eSCSI ⁿO���°A�W� SCSI xs�m]���Co

≥@Aúi²��NxsΘX��Ω�ñ�xsΘ}

CAP�S��D≈@���s������

U

ULOS. Secure Managed Client ���nJe�

V

VNIF. Ω�⌠⌠��

© Copyright Lenovo 2009, 20010 59

Printed in Taiwan