Lenovo ThinkVantage (Client Security Solution 8.21) - Manual (Page 43)

Table 17. Parameters for activating or deactivating the TPM on the Lenovo system (continued)
Parameter Description
/deactivate Deactivates the TPM.
Note: If you run tpm_activate_cmd.exe without parameter
/deactivate, it will activate the TPM by default.
/verbose Displays a text output.
Example:
tpm_activate_cmd.exe /?
tpm_activate_cmd.exe /verbose
tpm_activate_cmd.exe /biospw:pass
Active Directory Support
Active Directory is a directory service. The directory is where information about users and resources is
stored. The directory service allows access so you can manipulate those resources.
Active Directory provides a mechanism that gives administrators the ability to manage computers, groups,
users, domains, security policies, and any type of user-defined objects. The mechanism used by Active
Directory to accomplish this is known as Group Policy. With Group Policy, administrators define settings that
can be applied to computers or users in the domain.
ThinkVantage Technology products currently use a variety of methods for gathering settings used to control
program settings, including reading from specific application-defined registry entries.
The following examples are settings that Active Directory can manage for Client Security Solution:
• Security policies.
• Custom security policies; such as whether to use a Windows password or Client Security Solution
passphrase.
Administrative (ADM) template files
The ADM (Administrative) template file defines policy settings used by applications on the client computers.
Policies are specific settings that govern the application behavior. Policy settings also define whether the
user will be allowed to set specific settings through the application.
Settings defined by an administrator on the server are defined as policies. Settings defined by a user on the
client computer for an application are defined as preferences. As defined by Microsoft, policy settings take
precedence over preferences.
For example, a user may put a background image on his desktop. This is the user's preference setting. An
administrator may define a setting on the server that dictates that a user must use a specific background
image. The administrators policy setting will override the preference set by the user.
When a ThinkVantage Technology product checks for a setting, it will look for the setting in the following
order:
• Computer policies
• User policies
• Default user policies
• Computer preferences
• User preferences
Chapter 3 . Working with Client Security Solution 37