Lenovo Secure Managed Client - Manual (Page 31)

Chapter 6. Secure Managed Client image creation and tuning
This chapter discusses ways to enhance the performance of Secure Managed Client.
Because Secure Managed Client is a unique environment, you must be aware that
the applications affect the entire Secure Managed Client environment, not just a
single user. By optimizing each image before deployment, you can be sure that
there are no problems with the client images.
For best results, configure the BIOS settings in the client machine before setting up
your XP or Vista base image. This will avoid any AHCI compatability issues. See
“Secure Managed Client manual setup” on page 10.
Creating Sysprep images
Desktop deployment is done using disk cloning applications. Sysprep is used to
prepare an operating system for disk cloning through the use of a disk image. The
disk image allows for cloning of a software environment of a master system.
Preparing a Windows XP image
Create a Windows XP .wim file with the Secure Managed Client Virtual Network
Interface (VNIF) drivers injected.
Note: You do not need to inject the VNIF drivers if you plan to run the
SMCSetup.exe file at a later time. The SMCSetup.exe file will install the VNIF
drivers on Windows XP for you.
To prepare a Windows XP image, do the following:
1. Install Windows XP on your master system.
2. Log in as Administrator.
Note: To do this, you need to first enable built-in administrator privileges
from another user account with administrator privileges. To do this, right click
on My Computer and select Manage −> Local Users and Groups −> Users.
Double-click Administrator and uncheck the Disable button.
3. Delete any unwanted user accounts.
4. Fix all yellow marks in Device Manager and install all applications as needed.
5. Create a directory called C:\SysPrep and copy all necessary files to it for the
Sysprep.exe file to run. You can find the latest Sysprep tool from Microsoft
® at
the following Web address:
www.microsoft.com
6. Create a directory called C:\Drivers\Network and put the provided Secure
Managed Client (VNIF) driver files into this directory.
7. A sample Sysprep.inf file is provided. You can run setupmgr.exe to modify the
provided configuration file (your product key, for example) or create your
own Sysprep.inf file.
8. Use notepad.exe to open the Sysprep.inf file. In the first sector named
Unattended, make sure that the OemPnPDriversPath entry is set to
\Drivers\Network and that the OemPreinstall entry is set to Yes.
© Copyright Lenovo 2009, 20010 23