Table of Contents
Advertisement
ENTERPRISE
Logon Patch Maintenance
This option allows the administrator to install updates to the client computer when a certain user logs
on. In an Active Directory environment, a logon script can be executed to update the client computer.
Using Deep Freeze command line control (DFC), Deep Freeze can be disabled before the updates are
run and re-enabled afterwards.
Logon patch maintenance is appropriate in mobile environments where users are working with laptops
and are often off the local network. When they get back to the office or school and login, a script is
executed to determine if the users require any updates. If they do, the users are prompted as to whether
they would like to run the updates. If they agree, Deep Freeze is disabled, the updates are run, and
Deep Freeze is re-enabled.
The example below assumes that the person implementing the script is familiar with Group Policy,
Active Directory, and Visual Basic Scripting.
Logon Patch Maintenance Theory
This concept deals with updating a Frozen machine when the user logs on. With some slight
modifications, the same theory can be applied to an environment where patches are scheduled or
performed in real time. The following flowchart outlines the required steps, depending on the state of
the update process:
Start
8
Yes
Update running
Run Patch
No
Yes
Update
End
Complete?
No
Prompt User
Yes
Update?
Insert Marker
No
End
Boot into Frozen
Remove Marker
state
Yes
Boot into Thawed
Frozen?
State
No
Run Patch
Remove Marker
Boot into Frozen
State
Advertisement
Table of Contents
