FARONICS DEEP FREEZE ENTERPRISE - PANDA BUSINESSSECURE ANTIVIRUS 6-13-2005 Manual page 9

3) Mounted Hard Disks
This method does not involve setting the workstations into a Thawed state before making the updates
but rather mounting Thawed partitions so the virus definition updates can take place while the
workstations are in the Frozen state.
Windows 2000 introduced the ability to mount a hard disk drive or partition to an empty folder on
an existing hard disk drive instead of assigning a drive letter to that partition. This allows a drive to be
accessed using a standard Windows path, as opposed to the traditional drive letter. This allows users
to expand the storage available in a specific directory by adding another hard disk, without having to
change the directory structure of the hard disk or the location of saved data.
For example, if a user's workstation contains a large number of documents in the user profiles and
the hard disk drive is filled, an administrator can add a second hard disk and move the user's data to
that drive. The drive can be mounted with the user's data in the same location after the data has been
moved, making the process transparent to the user.
Steps to Ensure a Successful Deployment
Ensure that the Windows 2000/XP system drive is using the NTFS file system. The ability to mount
partitions as paths is not available with the FAT32 file system.
Ensure that adequate free space is available on the workstation's hard disk drive to accommodate the
newly created partitions. The complete workstation image should be evaluated to determine what
folders need to be recreated as drives on the workstation to allow the applications to function as
required. Any application that is mounted as a drive can be damaged, uninstalled, or changed because
the files located on the secondary partition are not protected by Deep Freeze.
Only directories that require being Thawed should be opened and only enough space for the applications
to run properly should be freed. Leaving a large amount of free data space open could allow users to
load files into the workstation or install applications that are unauthorized or unwanted. Steps can be
taken to ensure that only administrators or authorized personnel can have access to modify the files
contained in these partitions.
A combination of proper application of the Windows security policy and the use of NTFS file access
rights can effectively protect the Thawed directory. For more information on Windows 2000/XP system
and security policies, refer to the link below:
How to maintain Windows security:
Refer to your imaging solution documentation for information regarding imaging
with mounted drives. Workstations should be imaged either in RAW format or in a
sector-by-sector mode. (For example: using the -ID switch in Symantec Ghost).
After all concerns have been addressed, the folders that need replacement are documented, and the
size requirements of the partitions have been determined, a new master image can be created or an
existing image can be modified.
http://www.microsoft.com/windows/security/
����������
9