Desktop Management Guide Business PCs Document Part Number: 391759-001 May 2005 This guide provides definitions and instructions for using security and Intelligent Manageability features that are preinstalled on some models.
© Copyright 2005 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Microsoft and Windows are trademarks of Microsoft Corporation in the U.S. and other countries. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
Contents Desktop Management Guide Initial Configuration and Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Altiris Deployment Solution Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 HP Local Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Remote System Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Cable Lock Provision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Fingerprint Identification Technology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Fault Notification and Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Drive Protection System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Surge-Tolerant Power Supply. . . . . . . .
Desktop Management Guide HP Client Management Solutions provides standards-based solutions for managing and controlling desktops, workstations, and notebook PCs in a networked environment. HP pioneered desktop manageability in 1995 with the introduction of the industry’s first fully manageable desktop personal computers. HP is a patent holder of manageability technology.
Desktop Management Guide Initial Configuration and Deployment The computer comes with a preinstalled system software image. After a brief software “unbundling” process, the computer is ready to use. You may prefer to replace the preinstalled software image with a customized set of system and application software. There are several methods for deploying a customized software image. They include: ■ Installing additional software applications after unbundling the preinstalled software image.
Desktop Management Guide HP Local Recovery Local Recovery backs-up data and system files to a protected area on the hard drive. If data or files are lost, deleted, or corrupted, Local Recovery can be used to retrieve data or restore the last good system image. To install this pre-loaded program: 1. Click Start. 2. Click Local Recovery. 3. Click Next. 4. Scroll down and click on the link to install HP Local Recovery.
Desktop Management Guide Software Updating and Management HP provides several tools for managing and updating software on desktops, workstations, and notebooks: ■ HP System Software Manager ■ HP Client Manager Software ■ HP Client Management Solutions using Altiris ■ HP OpenView Management Suite for Desktops using Radia ■ HP Local Recovery ■ Dantz Backup and Recovery ■ HP Proactive Change Notification ■ HP Subscriber's Choice HP System Software Manager HP System Software Manager (SSM) is a
Desktop Management Guide HP Client Manager Software HP Client Manager Software developed with Altiris, is available free for all supported HP business desktop, notebook, and workstation models. SSM is integrated into HP Client Manager, and enables central tracking, monitoring, and management of the hardware aspects of HP client systems.
Desktop Management Guide ■ Software distribution ■ Asset management ■ Client backup and recovery ■ Problem resolution For more information on HP Client Management Solutions using Altiris, visit www.hp.com/go/easydeploy. HP and Altiris have a unique alliance that extends beyond sales and marketing to include joint development and technology sharing that spans HP Client, Server, OpenView, and Services groups to provide best-of-breed solutions for HP partners and customers.
Desktop Management Guide ■ Altiris Connector for HP Systems Insight Manager enables consolidated deployment and management of HP clients and servers from the HP Systems Insight Manager console. HP leads the market by offering a single management solution and console for deploying and configuring PCs, handhelds, thin clients, and Windows and Linux servers plus rich integration with HP enterprise management tools.
Desktop Management Guide ■ Target individual desktops, workgroups, or entire populations of desktops for deployment and maintenance of software and content according to policies ■ Provision and manage operating systems, applications, and content on distributed desktop computers from any location ■ Integrate with HP OpenView Service Desk and other help desk and system management tools ■ Leverage a common infrastructure for management of software and content on virtually any device, any platform, and
Desktop Management Guide Local Recovery is available for free with HP business PCs. Two additional client recovery products are also available. Upgrading to these products provides you with additional recovery features: ■ Local Recovery Pro—Provides all the capabilities of Local Recovery plus support for backup and recovery to a secondary hard drive and for open and locked files.
Desktop Management Guide Dantz Retrospect Express Dantz Retrospect Express protects a single Windows desktop or notebook computer. Retrospect Express allows recovery from data loss due to viruses, newly installed software, user error, damaged hardware, hardware upgrades, hackers, and lost or stolen computers. It offers a choice between simple duplicates or comprehensive backups and an intuitive setup wizard to get you up and running in minutes.
Desktop Management Guide For more information on Dantz Retrospect Express, visit http://www.dantz.com/en/products/win_express/index.dtml.
Desktop Management Guide Insight Management Agent is no longer being provided on new HP commercial desktop, workstation, and notebook models introduced after January 1, 2004. The Insight Management (IM) Agent provided the following features: ■ DMI support allowed a client system to be managed by Insight Manager 7 or other DMI-compliant management applications. ■ A Web agent allowed the system to be managed both locally and remotely by a web browser.
Desktop Management Guide Remote ROM Flash Remote ROM Flash allows the system administrator to safely upgrade the BIOS on remote HP computers directly from the centralized network management console. Enabling the system administrator to perform this task remotely on multiple computers results in a consistent deployment of, and greater control over, HP PC BIOS images over the network. It also results in greater productivity and lower total cost of ownership.
Desktop Management Guide ❏ search removable media for BIOS image files. If an appropriate BIOS image file is found, it is automatically flashed into the ROM. ❏ start the system from bootable removable media that automatically invokes system BIOS upgrade utilities. When an invalid system BIOS image is detected, the system power LED will blink red 8 times, one blink every second. Simultaneously, the speaker will beep 8 times.
Desktop Management Guide Copying to Single Computer Ä CAUTION: A setup configuration is model-specific. File system corruption may result if source and target computers are not the same model. For example, do not copy the setup configuration from a dc7xxx PC to a dx7xxx PC. 1. Select a setup configuration to copy. Turn off the computer. If you are in Windows, click Start > Shut Down > Shut Down. 2. If you are using a USB flash media device, insert it now. 3. Turn on the computer. 4.
Desktop Management Guide Copying to Multiple Computers Ä CAUTION: A setup configuration is model-specific. File system corruption may result if source and target computers are not the same model. For example, do not copy the setup configuration from a dc7xxx PC to a dx7xxx PC. This method takes a little longer to prepare the configuration diskette or USB flash media device, but copying the configuration to target computers is significantly faster.
Desktop Management Guide 7. Click File > Replicated Setup > Save to Removable Media. Follow the instructions on the screen to create the configuration diskette or USB flash media device. 8. Download a BIOS utility for replicating setup (repset.exe) and copy it onto the configuration diskette or USB flash media device. To obtain this utility, go to tap://welcome.hp.com/support/files and enter the model number of the computer. 9. On the configuration diskette or USB flash media device, create an autoexec.
Desktop Management Guide 2. Insert the USB flash media device into one of the computer's USB ports and remove all other USB storage devices except USB diskette drives. 3. Insert a bootable DOS diskette with FDISK.COM and either SYS.COM or FORMAT.COM into a diskette drive and turn on the computer to boot to the DOS diskette. 4. Run FDISK from the A:\ prompt by typing FDISK and pressing Enter. If prompted, click Yes (Y) to enable large disk support. 5. Enter Choice [5] to display the drives in the system.
Desktop Management Guide Ä CAUTION: Be sure that you have entered the correct drive letter for the USB flash media device. FORMAT will display one or more warnings and ask you each time whether you want to proceed. Enter Y each time. FORMAT will format the USB flash media device, add the system files, and ask for a Volume Label. 11. Press Enter for no label or enter one if desired. 12. Copy any files you saved in step 9 back to your USB flash media device. 13. Remove the diskette and reboot the computer.
Desktop Management Guide 1. If there are any PCI cards in the system that have SCSI, ATA RAID or SATA drives attached, turn off the computer and unplug the power cord. Ä CAUTION: The power cord MUST be unplugged. 2. Open the computer and remove the PCI cards. 3. Insert the USB flash media device into one of the computer's USB ports and remove all other USB storage devices except USB diskette drives. Close the computer cover. 4. Plug in the power cord and turn on the computer. 5.
Desktop Management Guide 12. Turn off the computer and unplug the power cord. Open the computer and re-install any PCI cards that were previously removed. Close the computer cover. 13. Plug in the power cord, remove the diskette, and turn on the computer. 14. As soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup. Press Enter to bypass the title screen, if necessary. 15.
Desktop Management Guide Dual-State Power Button With Advanced Configuration and Power Interface (ACPI) enabled, the power button can function either as an on/off switch or as a standby button. The stand-by feature does not completely turn off power, but instead causes the computer to enter a low-power standby state. This allows you to power down quickly without closing applications and to return quickly to the same operational state without any data loss.
Desktop Management Guide World Wide Web Site HP engineers rigorously test and debug software developed by HP and third-party suppliers, and develop operating system specific support software, to ensure performance, compatibility, and reliability for HP computers. When making the transition to new or revised operating systems, it is important to implement the support software designed for that operating system.
Desktop Management Guide Asset Tracking and Security Asset tracking features incorporated into the computer provide key asset tracking data that can be managed using HP Systems Insight Manager, HP Client Manager or other system management applications. Seamless, automatic integration between asset tracking features and these products enables you to choose the management tool that is best suited to the environment and to leverage the investment in existing tools.
Desktop Management Guide The following table and sections refer to managing security features of the computer locally through the Computer Setup (F10) Utilities. Security Features Overview Option Setup Password Description Allows you to set and enable setup (administrator) password. ✎ If the setup password is set, it is required to change Computer Setup options, flash the ROM, and make changes to certain plug and play settings under Windows.
Desktop Management Guide Security Features Overview (Continued) Option Embedded Security Description Allows you to: • Enable/disable the Embedded Security device. • Reset the device to Factory Settings. This feature is supported on some models only. See the HP ProtectTools Security Manager Guide at www.hp.com for more information.
Desktop Management Guide Security Features Overview (Continued) Option Description Network Service Boot Enables/disables the computer’s ability to boot from an operating system installed on a network server. (Feature available on NIC models only; the network controller must reside on the PCI bus or be embedded on the system board.) System IDs Allows you to set: • Asset tag (18-byte identifier) and ownership Tag (80-byte identifier displayed during POST).
Desktop Management Guide Password Security The power-on password prevents unauthorized use of the computer by requiring entry of a password to access applications or data each time the computer is turned on or restarted. The setup password specifically prevents unauthorized access to Computer Setup, and can also be used as an override to the power-on password. That is, when prompted for the power-on password, entering the setup password instead will allow access to the computer.
Desktop Management Guide Establishing a Power-On Password Using Computer Setup Establishing a power-on password through Computer Setup prevents access to the computer when power is turned on, unless the password is entered. When a power-on password is set, Computer Setup presents Password Options under the Security menu. Password options include Password Prompt on Warm Boot. When Password Prompt on Warm Boot is enabled, the password must also be entered each time the computer is rebooted. 1.
Desktop Management Guide Entering a Setup Password If the system is equipped with an embedded security device, refer to the HP ProtectTools Security Manager Guide at www.hp.com. If a setup password has been established on the computer, you will be prompted to enter it each time you run Computer Setup. 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart. 2. As soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup.
Desktop Management Guide Changing a Power-On or Setup Password If the system is equipped with an embedded security device, refer to the HP ProtectTools Security Manager Guide at www.hp.com. 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. 2. To change the Power-On password, go to step 3. To change the Setup password, as soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup.
Desktop Management Guide Deleting a Power-On or Setup Password If the system is equipped with an embedded security device, refer to the HP ProtectTools Security Manager Guide at www.hp.com. 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. 2. To delete the Power-On password, go to step 3. To delete the Setup password, as soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup.
Desktop Management Guide National Keyboard Delimiter Characters Each keyboard is designed to meet country-specific requirements. The syntax and keys that you use to change or delete the password depend on the keyboard that came with the computer. National Keyboard Delimiter Characters Arabic / Greek - Russian / Belgian = Hebrew .
Desktop Management Guide DriveLock DriveLock is an industry-standard security feature that prevents unauthorized access to the data on ATA hard. DriveLock has been implemented as an extension to Computer Setup. It is only available when hard drives that support the ATA Security command set are detected. DriveLock is intended for HP customers for whom data security is the paramount concern.
Desktop Management Guide password. Either the master or the user password may be used. Users will have two attempts to enter a correct password. If neither attempt succeeds, POST will continue but the drive will remain inaccessible. DriveLock Applications The most practical use of the DriveLock security feature is in a corporate environment. The system administrator would be responsible for configuring the hard drive which would involve, among other things, setting the DriveLock master password.
Desktop Management Guide Smart Cover Sensor Protection Levels Level Setting Description Level 0 Disabled Smart Cover Sensor is disabled (default). Level 1 Notify User When the computer is restarted, the screen displays a message indicating that the computer cover or side panel has been removed. Level 2 Setup Password When the computer is restarted, the screen displays a message indicating that the computer cover or side panel has been removed. You must enter the setup password to continue.
Desktop Management Guide Smart Cover Lock The Smart Cover Lock is a software-controllable cover lock featured on some HP computers. This lock prevents unauthorized access to the internal components. Computers ship with the Smart Cover Lock in the unlocked position. Ä CAUTION: For maximum cover lock security, be sure to establish a setup password. The setup password prevents unauthorized access to the Computer Setup utility. ✎ The Smart Cover Lock is available as an option on some systems.
Desktop Management Guide Unlocking the Smart Cover Lock 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart. 2. As soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup. Press Enter to bypass the title screen, if necessary. If you do not press F10 at the appropriate time, you must restart the ✎ computer and again press F10 when the monitor light turns green to access the utility. 3.
Desktop Management Guide Cable Lock Provision The rear panel of the computer accommodates a cable lock so that the computer can be physically secured to a work area. For illustrated instructions, please see the Hardware Reference Guide on the Documentation and Diagnostics CD.
Desktop Management Guide Drive Protection System The Drive Protection System (DPS) is a diagnostic tool built into the hard drives installed in some HP computers. DPS is designed to help diagnose problems that might result in unwarranted hard drive replacement. When HP computers are built, each installed hard drive is tested using DPS, and a permanent record of key information is written onto the drive. Each time DPS is run, test results are written to the hard drive.
Index A D access to computer, controlling 24 Altiris 1–5 AClient 1–2 Deployment Solution Agent 1–2 asset tracking 24 Dantz Retrospect Express 1–10 deleting password 32 delimiter characters, table 33 deployment tools, software 2 diagnostic tool for hard drives 40 disk, cloning 2 DiskOnKey see also HP Drive Key bootable 17 to 21 drive, protecting 40 Drivelock 34 to 35 dual-state power button 22 B bootable device creating 17 to 21 DiskOnKey 17 to 21 HP Drive Key 17 to 21 USB flash media device 17 to 21 C
Index bootable 17 to 21 HP Lifecycle solutions 1–2 HP Local Recovery 1–8 HP OpenView Management Suite for Desktops Using Radia 1–7 HP System Software Manager 1–4 keyboard delimiter characters, national 33 configuring 22 dual-state 22 power supply, surge-tolerant 40 power-on password changing 31 deleting 32 entering 29 Preboot Execution Environment (PXE) 3 preinstalled software image 2 Proactive Change Notification (PCN) 11 protecting hard drive 40 protecting ROM, caution 12 PXE (Preboot Execution Environ
Index entering 30 setting 28 Smart Cover FailSafe Key, ordering 38 Smart Cover Lock 37 to 38 locking 37 unlocking 38 Smart Cover Sensor 35 protection levels 36 setting 36 software Altiris AClient 1–2 Altiris Deployment Solution Agent 1–2 asset tracking 24 Computer Setup Utilities 14 Drive Protection System 40 Fault Notification and Recovery 39 HP Local Recovery 1–3 integration 2 recovery 2 Remote ROM Flash 13 Remote System Installation 3 updating and management 1–4 Subscriber’s Choice 1–11 surge-tolerant p
