Quick Reference Guide Microsoft Windows XPe-based Thin Clients t5000 Series Document Part Number: 253378-007 October 2005 This guide supplements the standard Microsoft Windows XPe documents supplied by Microsoft Corporation. This document highlights the differences, enhancements, and additional features provided with this terminal.
Microsoft, MS-DOS, Windows, and Windows NT are trademarks of Microsoft Corporation in the U.S. and other countries. © 2005 Hewlett-Packard Development Company, L.P. The information in this document is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Image updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Server environment requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Session services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Administrative Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Peripherals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . USB to Serial converter cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Printers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Introduction HP Compaq t57x0 thin client models use the Microsoft Windows XP Embedded (XPe) operating system. These thin clients provide access to applications, files, and network resources made available on machines hosting Citrix ICA and Microsoft RDP session services. Only the keyboard, mouse, audio/video, and display data are transmitted over the network between the thin clients and session servers. Image updates HP provides periodic updates to the image for HP Compaq t57x0 thin clients.
Citrix ICA You can make Citrix Independent Computing Architecture (ICA) available on the network using Citrix MetaFrame and Presentation Server for Microsoft Windows NT 4.0, Windows 2000 Server family, and Windows 2003 Server family. Microsoft RDP The Terminal Services Client application on the thin client accesses Microsoft Terminal Services.
Support service - Altiris Deployment Solution The Altiris Deployment Solution™ support service is available for your thin client network. This service provides an easy-to-use, integrated tool that allows remote management of thin clients throughout their life cycle, including initial deployment, ongoing management, and software deployment. You must install the Altiris Deployment Solution on a Windows NT 4.
Logging on You can log on to your thin client either automatically or manually. Automatic logon The default for the XPe-based thin client is automatic logon. The administrator can use the HP Logon Manager in the Control Panel to enable/disable auto logon and change the auto logon user name, password, and domain. Only the administrator logon account can change auto logon properties.
✎ Passwords are case sensitive but user names are not. administrator may create additional user accounts using the User ✎ The Accounts utility available in the Administrative Tools option in Control Panel. However, due to local memory constraints, you should keep the number of additional users to a minimum. For more information, see “User log accounts” on page 32.
Altiris Client Agent The Altiris Client Agent allows the Altiris server to discover valid clients that are added to the network. The agent carries out assignments and reports the status of individual thin clients to the Altiris server. Citrix Program Neighborhood Citrix Program Neighborhood is a feature of ICA introduced with MetaFrame 1.8 that enables users to connect to MetaFrame and WinFrame servers and published applications.
Remote Desktop Connection The Microsoft Remote Desktop Connection allows an administrator to access a Windows XPe-based thin client (disabled by default) or a Windows Terminal Server from a remote location. With this connection, the administrator can take control of the local thin client and its applications. The XPe desktop This section gives a general overview of the XPe User and Administrator desktop features and functions.
the mouse when the pointer is on the user’s desktop ✎ Right-clicking background does not open a pop-up menu. may copy and paste text between remote session and local ✎ You computer using standard copy and paste methods. Administrator desktop The desktop that displays when you are logged on as an administrator is a standard Windows XP desktop.
Logging off from, restarting, and shutting down the thin client To restart, shut down, or log off from the thin client, click Start > Shut Down. From the Shut Down dialog box, select the desired action and click OK. may also log off or shut down using the Windows Security dialog ✎ You box. Press Ctrl+Alt+Del to open the dialog. automatic logon is enabled, when you log off (without shutting ✎ Ifdown) the thin client immediately logs on the default user.
Power management A “Monitor Saver” turns off the video signal to the monitor, allowing the monitor to enter a power-saving mode after a designated idle time. Parameters for this mode are available by right-clicking on the desktop background and selecting Properties > Screen Saver > Power. System time After power-off, clock time is not lost as long as the power source remains plugged in.
Remote Desktop Connection This selection opens the Remote Desktop Connection dialog box. which is used to establish connections to remote applications using RDP. Refer to the Microsoft Web site for documentation that offers a detailed explanation and instructions on how to use the Remote Desktop Connection dialog box. TeemNT The TeemNT terminal emulation application is installed on the thin client. Refer to the terminal emulation documentation (supplied separately) for instructions.
■ Print spooling ■ User/system temporary files You can also use the RAM disk for temporary storage of other data (such as roaming profiles) at the administrator’s discretion (see “Local drives” on page 30). Use the Ramdisk Configuration dialog box to configure the RAM disk size. If you change the size of the RAM disk, you will be prompted to restart for changes to take effect.
Peripherals Depending on the ports available, the thin client can provide services for USB, serial, parallel, and PCI devices, as long as the appropriate software is installed. Factory-installed software is described in the following section. As they become available, you can install add-ons for other services using the Altiris Deployment Solution software. For more information, see “Firmware upgrades” on page 34.
Printers A universal print driver is installed on the thin client to support text-only printing to a locally connected printer. To print full text and graphics to a locally connected printer, install the driver provided by the manufacturer and follow the manufacturer’s instructions. Be sure to disable the write filter cache or run the -commit command to save the installation. You can print to network printers from ICA and RDP applications through print drivers on the servers.
7. Click Next. 8. Select Use the Following Port. 9. Select the appropriate port from the list, and then click Next. 10. Choose the manufacturer and model of the printer, and then click Next. 11. Use the assigned default name or other name for the printer, and then click Next. 12. Select Do Not Share this Printer, and then click Next. 13. Choose whether to print a test page, and then click Next. 14. Click Finish.
Microsoft Windows XPe Service Pack 2 (SP2) Microsoft Windows XPe Service Pack 2 (SP2) addresses new challenges to the security of personal computers by making a number of basic improvements to the operating system.
Additional information about the Sygate Firewall is available in the “HP Sygate Security Agent: Frequently Asked Questions” white paper at: http://h200006.www2.hp.com/bc/docs/support/SupportManual/c 00282639/c00282639.pdf Microsoft Windows Firewall An improved Microsoft Windows Firewall (previously known as Internet Connection Firewall, or ICF) is available from HP as an add-on. The firewall is enabled by default after you install the add-on.
you launch the Windows Firewall add-on, the Control Panel ✎ After applet is only available to the Administrator account. ■ General Tab: The General tab provides access to the main three configuration options as shown below. ❏ On (Recommended) ❏ Don’t allow exceptions ❏ Off (Not Recommended) When you select Don't allow exceptions, Windows Firewall blocks all requests to connect to your computer, including those from programs or services on the Exceptions tab.
Using Windows Firewall with no exceptions is useful when connecting to a public network, such as one at an airport or hotel. This setting can help to protect your computer by blocking all attempts to connect to your computer. When you use Windows Firewall with no exceptions, you can still view Web pages, send and receive e-mail, or use an instant messaging program. ■ Exceptions Tab: Provides the ability to add program and port exceptions to permit certain types of inbound traffic.
Display a notification when the Windows Firewall blocks a program is selected by default. You can set a scope for each exception. For home and small office networks, it is recommended that you set the scope to the local network only where possible. This will enable computers on the same subnet to connect to the program on the machine, but drops traffic originating from a remote network ■ 20 Advanced Tab: Enables you to configure the following functions.
Gathering configuration information To examine the current policy configuration for Windows Firewall you can use the following command: netsh firewall show configuration. Troubleshooting applications Modifying an application to work with a stateful filtering firewall is the ideal way to resolve issues. This is not always possible, so the firewall provides an interface for configuring exceptions for ports and applications. Quick Reference Guide www.hp.
Failure symptoms Failures related to the default configuration will manifest in two ways: ■ Client applications may fail to receive data from a server. Examples include an FTP client, multimedia streaming software, and new mail notifications in some email applications. ■ Server applications running on the Windows XP computer may not respond to client requests. Examples include a Web server such as Internet Information Services (IIS), Remote Desktop, and File Sharing.
recommends adding a program instead of adding a port. Adding a ✎ HP program is easier and safer than adding a port because you do not have to know which port numbers to use, and the port is only open when the program is waiting to receive a connection. Only the specified application can use the port, whereas opening a port allows any application to use it. Adding a program The recommended configuration involves adding a program to the exception list.
To add a port exception: 1. Open Windows Firewall and click the Exceptions tab. 2. Click Add Port to display the Add a Port dialog box. a. Enter the Port Number. b. Choose TCP or UDP protocol. c. Give the port exception a descriptive name in the Name field. 3. Click Change Scope to view or set the scope for the port exception, and then click OK. 4. Click OK to close the Add a Port dialog box. 5. Click to enable the port.
Microsoft Internet Explorer Service Pack 2 made Microsoft Internet Explorer much more secure. Internet Explorer has more control over the execution of all content, including a built-in facility to block unwanted pop-up windows and manage the viewing of desired pop-up windows. Furthermore, Internet Explorer now keeps scripts from moving or resizing windows and status bars to hide them from view or obscure other windows.
Enhanced Write Filter Manager The Enhanced Write Filter Manager provides a secure environment for thin-client computing by protecting the thin client from undesired flash memory writes (the operating system and functional software components reside in flash memory). The write filter also extends the life of the thin client by preventing excessive flash write activity.
Enhanced Write Filter Manager command line control Ä CAUTION: Terminal Administrators should use Microsoft Windows NT file security to prevent undesired usage of these commands. Ä CAUTION: When using the -commit command, all the temporary contents are permanently written to the flash memory. the Enhanced Write Filter Manager commands are executed ✎ Because on the next boot, you must reboot the system for the command to take effect.
-disable Disables the overlay on the specified protected volume. -enable Enables the Enhanced Write Filter so that data written to the protected media is cached in the overlays. The current overlay level becomes 1 as soon as EWF is started, and a new overlay is created at level 1. -commitanddisable Combination of the commit and disable commands. This command commits data in the overlay upon shutdown and disables EWF after the system reboots.
Overlay configuration This button displays the Overlay information and is a combination of the information supplied when executing ewfmgr.exe c: -Description and ewfmgr.exe c: -Gauge from the DOS prompt. Clear boot command This button is the same as executing ewfmgr.exe c: -NoCmd from the DOS prompt. Commit data to volume This button is the same as executing ewfmgr.exe c: -Commit from the DOS prompt. Enhanced Write Filter status tool Windows XPe Image Refresh 5.1.
If you modify the EWF using the command line, you must right-click the icon (you can then click anywhere on the screen to close the context menu) to refresh the status icon display. The status icon display is refreshed automatically when you make modifications through the EWF Control Panel applet. The EWF applet always reflects the current status. Local drives The following sections describe the local drives located on the thin client.
Saving files Ä CAUTION: The thin client uses an embedded operating system with a fixed amount of flash memory. HP recommends that you save files that you want to retain on a server rather than on your thin client. Be careful of application settings that write to the C drive, which resides in flash memory (in particular, many applications by default write cache files to the C drive on the local system). If you must write to a local drive, change the application settings to use the Z drive.
User log accounts This section describes how to create a new user account and user profile. Creating a new user account Ä CAUTION: Make sure to disable the write filter cache during the boot session in which a new account is created. Remember to enable the write filter after all of your permanent changes have been saved to flash. You must log on as Administrator to create user accounts locally or remotely.
1. Log in as Administrator. 2. Open the Administrative Tools window by clicking Start > Control Panel > Performance and Maintenance > Administrative Tools. 3. Double-click User Manager to open the Local Users and Groups window. 4. Double-click the Users folder to view the contents in the right pane. 5. Click Action in the menu bar, and then select New User. This opens the New User dialog box. 6. Type in the user name and password, then and select the attributes you want. 7.
Remote Administration and firmware upgrades This section highlights and discusses the Remote Administration capabilities and firmware upgrade methods applicable to your thin client. Altiris Deployment Solution software The Altiris Deployment Solution software is a full-featured remote administration tool set. It accesses the thin client through the Altiris remote Agent and PXE server utilities installed on the thin client.
from a server over the network. The PXE client is installed on the thin client and the PXE server component is part of the Altiris Deployment Solution suite. ICA auto update does not function for the ICA client installed ✎ Citrix on the thin client; updates are implemented through the standard firmware upgrade process. HP Compaq Thin Client Imaging Tool The HP Compaq Thin Client Imaging Tool is part of the Softpaq deliverable that contains the original factory image for the HP Compaq t5000 thin client.
Index A adding printers 14 Administrative Tools 12 Administrator desktop 8 logon access 5 Altiris Client Agent 6 Altiris Deployment Solution 3, 34 audio 15 C Citrix ICA 2 Citrix Program Neighborhood 6, 10 configuring Microsoft Windows Firewall 17, 21 Control Panel extended selections 11 corrupted Enhanced Writer Filter 29 creating new user account 32 D desktop Administrator 8 user 7 drive C 30 drive Z 30 E Enhanced Write Filter Manager 6, 26 clear boot command 29 command line control 27 disabling 28 Qui
Index mapping network drives 31 Microsoft Internet Explorer 25 Microsoft RDP 2 Microsoft Remote Desktop Connection 7, 11 Microsoft Terminal Services 2 Microsoft Windows Firewall 17 adding a port 23 adding a program 23 additional information 24 configuring 17 failure symptoms 22 issue resolution 22 on-by-default 17 troubleshooting 21 Microsoft Windows Service Pack 2 16 additional information 24 N network drives 31 network protection 16 O on-by-default 17 P password rules 5 peripherals 13 power management