Requirements and specifications for deployment ® To view the current list of supported ThinkPad systems and wireless WLAN and WAN drivers, see the following Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=MIGR-4ZLNJB Access Connections Deployment Guide...
The Access Connections Administrator Profile Deployment feature is required to deploy location profiles that you create for client users. The Administrator Profile Deployment feature is available to IT professionals only at: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=ACON-DEPLOY For more information about the Administrator Profile Deployment feature, see: Chapter 3, “Working with the Administrator Feature,”...
Page 14
e) Rename the script file to uninst.iss. 2) Enter the following command: <path>\setup.exe -S-f1<fullpath>\uninst.iss anything -f2x Access Connections Deployment Guide...
Administrator feature. To enable the Administrator feature, complete the following steps: 1. To deploy Access Connections on to client systems, download and install the Administrator Profile Deployment feature from the following Lenovo Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=ACON-DEPLOY Note: The Import/Export feature of Access Connections is used for migrating profiles only.
Connections while traveling and hot-spot connections For instructions on how to create location profiles, or how to use Access Connections, see the Access Connections User's Guide located at the following Lenovo Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=MIGR-63042 2. Create or edit a distribution package with the Administrator Profile Deployment feature.
Page 17
The following screen captures provide examples for Windows 2000 or XP, and Windows Vista: Figure 4. Create Distribution Package panel for Windows 2000 and XP Figure 5. Create Distribution Package panel for Windows Vista 3. Select the User Access Policy from the drop down menu. The user access policy defines the restrictions that are in place for a particular profile.
v Deny all changes / Allow deletion: Users can not modify or copy the profile; however, users can delete the profile. v Allow all changes / Deny deletion: Users can modify the profile; however, users cannot delete the profile. v Allow all changes / Allow deletion: Users can modify, copy and delete the profile.
Page 19
This method of distribution enables you to type individual serial numbers or to create different groups of serial numbers that represent different organizations of users who need different location profiles. This optional step is designed primarily for securing the distribution of the profile location file (*.loa), when it is being sent to remote users for manual importing.
Page 20
The following screen capture displays the settings you can configure for the Client tab of the Client Configuration Policy: Figure 8. Client Configuration Policy Marking the box beside Do not allow clients to become an administrator: will prevent users from enabling the Administrator Feature on their installation of Access Connections.
Page 21
disabled even when the Ethernet cable is plugged in again. To re-enable the Ethernet port, manually apply the profile for the Ethernet connection. v Enable auto deletion of unused profiles v Disable the Peer to Peer community feature Chapter 3. Working with the Administrator Feature...
Page 22
The following screen captures provide examples for the Global Settings panel for Access Connections when installed on the Windows 2000 or XP operating system, and for Access Connections when installed on the Windows Vista operating system: Figure 9. Network Global Settings for Windows 2000 and XP Figure 10.
Page 23
Figure 11. Notification for Global Settings Chapter 3. Working with the Administrator Feature...
Page 24
Location Profiles: Set the following Internet Explorer policies: v Set browser home page v Set proxy settings For the Optional Settings, you can set the following policies: v Security settings v Start applications automatically v Set default printer v Use VPN connection v Override TCP/IP and DNS defaults Figure 12.
Page 25
Note: If this option is selected, none encryption profile will not be added to the automatic location switching. Default Options for Additional Settings v Network Security – Disable internet connection sharing – Enable Windows firewall – Disable file and printer sharing v Start applications automatically v Set default printer v Override TCP/IP and DNS defaults...
Page 26
– Enable Windows firewall – Disable file and printer sharing v Start applications automatically v Set default printer v Override TCP/IP and DNS defaults v Enable VPN connection v Override Home page v Override Proxy Configurations Figure 14. Additional Settings for Windows Vista PAC AID Groups with this package (Windows 2000 and XP only) Protected Access Credentials (PAC) protects user credentials that are exchanged with the Extensible Authentication Protocol-Flexible Authentication via Secure...
Page 27
Figure 15. Create Distribution Package Create a new PAC AID Group by completing the following steps: 1. On the Define PAC AID Groups panel, click Groups. 2. Right click on Available Pacs. Note: The PAC with the AID which is intended to included in the Group must be present on the machine where the AID group is being created.
Page 28
You can add or remove PAC AID Groups to a distribution package. To add a group, select it from the drop down menu and click Add. To remove a group, select the group from the available PAC AIDS list and then click Remove. Figure 16.
unattended import, enable the setting Allow silent import of this package even after installation of client while creating the .loa file. 2. Copy the distribution package (*.loa and *.sig) into the Access Connections installed directory (default installed directory is C:\Program Files\ThinkPad\ConnectUtilities) of the existing client computer.
Installing the client configuration plugin for Access Connections Designed to save you time and effort, Lenovo has provided supplemental plug-in files to set client configuration policies for Access Connections. The following supplemental file is compressed in the acplgin45.exe: v tvtacad.adm - This administrative template is used with Group Policy to set the...
Group Policy settings This table provides policies settings for Access Connections that can be modified using the ADM file template. Table 1. Computer Configuration > Administrative Templates > ThinkVantage > Access Connections Policy setting Description Block admin feature Do not allow clients to use Access Connections administrator feature so that they can not deploy profiles or policies.
Page 33
Table 1. Computer Configuration > Administrative Templates > ThinkVantage > Access Connections (continued) Policy setting Description Disable location Automatic location switching can not be changed by clients. switching feature changes Disable peer to peer The Peer to Peer community feature will not be available. This community setting is not available in Windows Vista.
Deploying .LOA and .SIG files through Active Directory with logon scripts The .loa file and .sig file will be stored in c:\programfiles\thinkpad\ connectutilities\LOA. When deploying the .loa and .sig files through Active Directory with logon scripts, mark the check box Allow silent import of this package even after installation of client on the Create Distribution Package panel of Access Connections.
Page 35
Acloa.bat When a user logs onto a domain, the Acloa.bat executes and does the following: v Checks for the file silent.txt at the following client location: c:\programfiles\thinkpad\connectutilities v If the silent.txt file exists, it does not copy the .loa and .sig files but exits. v If the silent.txt file does not exist, it copies the.
Power Management driver The Power Management driver can be downloaded at: http://www.lenovo.com/pc/support/site.wss/document.do?&lndocid=MIGR-4GXPEG v Wireless LAN drivers Refer to the wireless driver table on the following Lenovo Web site for the Wireless LAN driver required for your system: http://www.lenovo.com/pc/support/site.wss/document.do? sitestyle=lenovo&lndocid=MIGR-4ZLNJB...
PCI Adapter Driver Setup (Intel 11b). v LSID is the driver that is required for Access Connections to interface with Lenovo ThinkPad /L3000 system BIOS. Using a lower layer system BIOS interface, Access Connections controls wireless devices and system dependent hardware features.
Web sites. The materials at those Web sites are not part of the materials for this Lenovo product, and use of those Web sites is at your own risk Any performance data contained herein was determined in a controlled environment.
Furthermore, some measurements may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Trademarks The following terms are trademarks of Lenovo in the United States, other countries, or both: Access Connections Lenovo...