Lenovo ThinkPad G40 Deployment Manual

Lenovo ThinkPad G40 Deployment Manual

Access connections deployment guide

Advertisement

Access Connections

Deployment Guide
Date: April 15, 2008

Advertisement

Table of Contents
loading

Summary of Contents for Lenovo ThinkPad G40

  • Page 1: Access Connections

    Access Connections Deployment Guide Date: April 15, 2008...
  • Page 3 Access Connections Deployment Guide Date: April 15, 2008...
  • Page 4 Portions © Copyright International Business Machines Corporation 2005. All rights reserved. LENOVO products, data, computer software, and services have been developed exclusively at private expense and are sold to governmental entities as commercial items as defined by 48 C.F.R. 2.101 with limited and restricted rights to use, reproduction and disclosure.
  • Page 5 To learn more about the technologies that can help you lower the total cost of ownership and to check for periodic updates to this guide, visit the following Web site: www.lenovo.com © Lenovo 2008. Portions © IBM Corp. 2005.
  • Page 6 Access Connections Deployment Guide...
  • Page 7: Table Of Contents

    Appendix C. Notices ..33 Chapter 4. Deploying Access Trademarks . . 34 Connections ... . 21 Deploy on new computers . . 21 © Lenovo 2008. Portions © IBM Corp. 2005.
  • Page 8 Access Connections Deployment Guide...
  • Page 9: Chapter 1. Overview

    This feature is useful when you are traveling or in a public place, and you are not sure about what, if any, wireless networks are available to you. You can attempt to connect to any wireless networks that are found. If the © Lenovo 2008. Portions © IBM Corp. 2005.
  • Page 10: Considerations For Deploying Access Connections

    Requirements and specifications for deployment ® To view the current list of supported ThinkPad systems and wireless WLAN and WAN drivers, see the following Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=MIGR-4ZLNJB Access Connections Deployment Guide...
  • Page 11: Access Connections Deployment Features

    The Access Connections Administrator Profile Deployment feature is required to deploy location profiles that you create for client users. The Administrator Profile Deployment feature is available to IT professionals only at: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=ACON-DEPLOY For more information about the Administrator Profile Deployment feature, see: Chapter 3, “Working with the Administrator Feature,”...
  • Page 12 Access Connections Deployment Guide...
  • Page 13: Chapter 2. Installing Access Connections

    Go to the Access Connections install directory and Run setup.exe -r -remove. b) Click Uninstall when prompted. c) Click No to restart the system later. This will prevent automatic restart. d) Copy the script file generated at C:\Windows\setup.iss to your local directory. © Lenovo 2008. Portions © IBM Corp. 2005.
  • Page 14 e) Rename the script file to uninst.iss. 2) Enter the following command: <path>\setup.exe -S-f1<fullpath>\uninst.iss anything -f2x Access Connections Deployment Guide...
  • Page 15: Chapter 3. Working With The Administrator Feature

    Administrator feature. To enable the Administrator feature, complete the following steps: 1. To deploy Access Connections on to client systems, download and install the Administrator Profile Deployment feature from the following Lenovo Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=ACON-DEPLOY Note: The Import/Export feature of Access Connections is used for migrating profiles only.
  • Page 16: Using The Administrator Feature

    Connections while traveling and hot-spot connections For instructions on how to create location profiles, or how to use Access Connections, see the Access Connections User's Guide located at the following Lenovo Web site: http://www.lenovo.com/pc/support/site.wss/document.do?sitestyle= lenovo&lndocid=MIGR-63042 2. Create or edit a distribution package with the Administrator Profile Deployment feature.
  • Page 17 The following screen captures provide examples for Windows 2000 or XP, and Windows Vista: Figure 4. Create Distribution Package panel for Windows 2000 and XP Figure 5. Create Distribution Package panel for Windows Vista 3. Select the User Access Policy from the drop down menu. The user access policy defines the restrictions that are in place for a particular profile.
  • Page 18: Defining Policies For Access Connections

    v Deny all changes / Allow deletion: Users can not modify or copy the profile; however, users can delete the profile. v Allow all changes / Deny deletion: Users can modify the profile; however, users cannot delete the profile. v Allow all changes / Allow deletion: Users can modify, copy and delete the profile.
  • Page 19 This method of distribution enables you to type individual serial numbers or to create different groups of serial numbers that represent different organizations of users who need different location profiles. This optional step is designed primarily for securing the distribution of the profile location file (*.loa), when it is being sent to remote users for manual importing.
  • Page 20 The following screen capture displays the settings you can configure for the Client tab of the Client Configuration Policy: Figure 8. Client Configuration Policy Marking the box beside Do not allow clients to become an administrator: will prevent users from enabling the Administrator Feature on their installation of Access Connections.
  • Page 21 disabled even when the Ethernet cable is plugged in again. To re-enable the Ethernet port, manually apply the profile for the Ethernet connection. v Enable auto deletion of unused profiles v Disable the Peer to Peer community feature Chapter 3. Working with the Administrator Feature...
  • Page 22 The following screen captures provide examples for the Global Settings panel for Access Connections when installed on the Windows 2000 or XP operating system, and for Access Connections when installed on the Windows Vista operating system: Figure 9. Network Global Settings for Windows 2000 and XP Figure 10.
  • Page 23 Figure 11. Notification for Global Settings Chapter 3. Working with the Administrator Feature...
  • Page 24 Location Profiles: Set the following Internet Explorer policies: v Set browser home page v Set proxy settings For the Optional Settings, you can set the following policies: v Security settings v Start applications automatically v Set default printer v Use VPN connection v Override TCP/IP and DNS defaults Figure 12.
  • Page 25 Note: If this option is selected, none encryption profile will not be added to the automatic location switching. Default Options for Additional Settings v Network Security – Disable internet connection sharing – Enable Windows firewall – Disable file and printer sharing v Start applications automatically v Set default printer v Override TCP/IP and DNS defaults...
  • Page 26 – Enable Windows firewall – Disable file and printer sharing v Start applications automatically v Set default printer v Override TCP/IP and DNS defaults v Enable VPN connection v Override Home page v Override Proxy Configurations Figure 14. Additional Settings for Windows Vista PAC AID Groups with this package (Windows 2000 and XP only) Protected Access Credentials (PAC) protects user credentials that are exchanged with the Extensible Authentication Protocol-Flexible Authentication via Secure...
  • Page 27 Figure 15. Create Distribution Package Create a new PAC AID Group by completing the following steps: 1. On the Define PAC AID Groups panel, click Groups. 2. Right click on Available Pacs. Note: The PAC with the AID which is intended to included in the Group must be present on the machine where the AID group is being created.
  • Page 28 You can add or remove PAC AID Groups to a distribution package. To add a group, select it from the drop down menu and click Add. To remove a group, select the group from the available PAC AIDS list and then click Remove. Figure 16.
  • Page 29: Chapter 4. Deploying Access Connections

    Administrator Feature,” on page 7 earlier. If only the client configuration policy needs to be modified, you can create a distribution package without exporting any profiles but only include the modified client configuration policy. For © Lenovo 2008. Portions © IBM Corp. 2005.
  • Page 30: Deleting Locked Profiles

    unattended import, enable the setting Allow silent import of this package even after installation of client while creating the .loa file. 2. Copy the distribution package (*.loa and *.sig) into the Access Connections installed directory (default installed directory is C:\Program Files\ThinkPad\ConnectUtilities) of the existing client computer.
  • Page 31: Chapter 5. Working With Active Directory And Adm Files

    Installing the client configuration plugin for Access Connections Designed to save you time and effort, Lenovo has provided supplemental plug-in files to set client configuration policies for Access Connections. The following supplemental file is compressed in the acplgin45.exe: v tvtacad.adm - This administrative template is used with Group Policy to set the...
  • Page 32: Group Policy Settings

    Group Policy settings This table provides policies settings for Access Connections that can be modified using the ADM file template. Table 1. Computer Configuration > Administrative Templates > ThinkVantage > Access Connections Policy setting Description Block admin feature Do not allow clients to use Access Connections administrator feature so that they can not deploy profiles or policies.
  • Page 33 Table 1. Computer Configuration > Administrative Templates > ThinkVantage > Access Connections (continued) Policy setting Description Disable location Automatic location switching can not be changed by clients. switching feature changes Disable peer to peer The Peer to Peer community feature will not be available. This community setting is not available in Windows Vista.
  • Page 34: Deploying .Loa And .Sig Files Through Active Directory With Logon Scripts

    Deploying .LOA and .SIG files through Active Directory with logon scripts The .loa file and .sig file will be stored in c:\programfiles\thinkpad\ connectutilities\LOA. When deploying the .loa and .sig files through Active Directory with logon scripts, mark the check box Allow silent import of this package even after installation of client on the Create Distribution Package panel of Access Connections.
  • Page 35 Acloa.bat When a user logs onto a domain, the Acloa.bat executes and does the following: v Checks for the file silent.txt at the following client location: c:\programfiles\thinkpad\connectutilities v If the silent.txt file exists, it does not copy the .loa and .sig files but exits. v If the silent.txt file does not exist, it copies the.
  • Page 36 Access Connections Deployment Guide...
  • Page 37: Appendix A. Command Line Interface

    Access Connections processes except for profile manager service. <path>\qctray.exe/killac Restart all Access Connections processes. Considering this requires administrative privileges, the command will be routed through AcPrfMgrSvc. <path>\qctray.exe/startac Find Wireless networks. <path>\qctray.exe /findwInw Display QCTRAY help information. <path>\qctray.exe /help © Lenovo 2008. Portions © IBM Corp. 2005.
  • Page 38 Access Connections Deployment Guide...
  • Page 39: Appendix B. Integrated Packaging

    Power Management driver The Power Management driver can be downloaded at: http://www.lenovo.com/pc/support/site.wss/document.do?&lndocid=MIGR-4GXPEG v Wireless LAN drivers Refer to the wireless driver table on the following Lenovo Web site for the Wireless LAN driver required for your system: http://www.lenovo.com/pc/support/site.wss/document.do? sitestyle=lenovo&lndocid=MIGR-4ZLNJB...
  • Page 40: Directory Structure

    PCI Adapter Driver Setup (Intel 11b). v LSID is the driver that is required for Access Connections to interface with Lenovo ThinkPad /L3000 system BIOS. Using a lower layer system BIOS interface, Access Connections controls wireless devices and system dependent hardware features.
  • Page 41: Appendix C. Notices

    Web sites. The materials at those Web sites are not part of the materials for this Lenovo product, and use of those Web sites is at your own risk Any performance data contained herein was determined in a controlled environment.
  • Page 42: Trademarks

    Furthermore, some measurements may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Trademarks The following terms are trademarks of Lenovo in the United States, other countries, or both: Access Connections Lenovo...
  • Page 44 Printed in USA...

This manual is also suitable for:

Thinkpad g41Thinkpad l410Thinkpad l412Thinkpad l420Thinkpad l421Thinkpad l430 ... Show all

Table of Contents