Deep Freeze Mac User Guide
|
1
Deep Freeze Mac User Guide
2
|
Last modified: January 2023
© 1999–2023 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Deep Freeze
Cloud, Faronics Deploy, Faronics Core Console, Faronics Anti-Executable, Faronics Anti-Virus,
Faronics Device Filter, Faronics Data Igloo, Faronics Power Save, Faronics Insight, Faronics
System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics
Corporation. All other company and product names are trademarks of their respective
owners.
Deep Freeze Mac User Guide
|
3
Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Important Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
About Faronics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Product Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Definition of Terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Deep Freeze Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Installing Deep Freeze . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Installing Deep Freeze . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Installing Configuration Profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Using Deep Freeze . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Deep Freeze Menu Bar Status Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Software Installation and Permanent Changes . . . . . . . . . . . . . . . . . . . . . . . . . 20
Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Status Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Volumes Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
ThawSpaces Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Adding a Global ThawSpace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Adding a User ThawSpace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Removing a User or Global ThawSpace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Maintenance Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Maintenance Schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Creating and Naming Multiple Maintenance Schedules . . . . . . . . . . . . . . . . . . . . 28
Edit, Delete, Enable, and Disable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Passwords Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Adding, Deleting, and Editing Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Advanced Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Specify Stealth and Log Out Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Display Status in Apple Remote Desktop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Uninstall Deep Freeze when Thawed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Deep Freeze Mac Utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Command Line. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Sample Command Line Scenario . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Deep Freeze Mac User Guide
4
|
Contents
Deep Freeze Tasks for ARD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Installing Deep Freeze Task. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Using Deep Freeze Task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Uninstalling Deep Freeze . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Uninstalling Deep Freeze Manually on the Computer . . . . . . . . . . . . . . . . . . . . . . . . 46
Deep Freeze Mac User Guide
6
|
Preface
Important Information
This section contains important information about your Faronics Product.
About Faronics
Faronics delivers market-leading solutions that help manage, simplify, and secure
complex IT environments. Our products ensure 100% machine availability, and have
dramatically impacted the day-to-day lives of thousands of information technology
professionals. Fueled by a market-centric focus, Faronics' technology innovations
benefit educational institutions, health care facilities, libraries, government
organizations, and corporations.
Product Documentation
The following documents form the Deep Freeze Mac documentation set:
• Deep Freeze Mac User Guide — This document guides you how to use the product.
• Deep Freeze Mac Release Notes — This document lists the new features, bug fixes
and known issues.
Product documentation is available at:
www.faronics.com/library
Deep Freeze Mac User Guide
8
|
Preface
Definition of Terms
Term Definition
Frozen
A state of Deep Freeze where any changes, whether malicious or intentional, are
reversed on restart.
Thawed
A state of Deep Freeze where changes made to the computer are permanent and
not reversed on restart.
ThawSpace
ThawSpace is a volume that can be used to store programs, save files, or make
permanent changes. All files stored in the ThawSpace are retained after a restart,
even if the computer is Frozen. Since a ThawSpace is unprotected, it requires
standard data protection such as backup and virus scan.
Introduction
|
9
Deep Freeze Mac User Guide
Introduction
Faronics Deep Freeze helps eliminate computer damage and downtime by making
computer configurations indestructible. Once Deep Freeze is installed on a computer,
any changes made to the computer—regardless of whether they are accidental or
malicious—are never permanent when the computer is in a Frozen state. Deep Freeze
provides immediate immunity from many of the problems that plague computers
today—inevitable configuration drift, accidental system misconfiguration, malicious
software activity, and incidental system degradation.
Topics
Deep Freeze Overview
System Requirements
Deep Freeze protects the computers that are set to start from the hard
drive. Deep Freeze cannot protect the computers that are set to start
from an external drive (USB, FireWire or Thunderbolt) or from a hard
drive where Deep Freeze is not installed.
Deep Freeze Mac User Guide
10
|
Introduction
Deep Freeze Overview
Deep Freeze protects the startup volume (where the Operating System is installed)
and optionally, other volumes on your computer. Deep Freeze protects the installed
programs when they are installed on the volume protected by Deep Freeze.
Deep Freeze also manages the user home folders on the computer. The user home
folder stores user preferences, as well as data such as documents, Internet
Favorites, and music.
Deep Freeze has two states:
• Frozen — is the protected state where any changes, whether malicious or
unintentional, are reversed on restart.
• Thawed — is the unprotected state where changes made to the computer are
permanent and not reversed on restart.
Deep Freeze protects the computers that are set to start from the hard
drive. Deep Freeze cannot protect the computers that are set to start
from an external drive (USB, FireWire or Thunderbolt) or from a hard
drive where Deep Freeze is not installed.
macOS automatic software update should be disabled when Deep Freeze
is installed on the computer.
On macOS High Sierra, under System Preferences > App Store settings,
disable Install macOS updates.
On macOS Mojave or higher, under System Preferences > Software
Update > Advanced…, disable Install macOS updates.
On macOS Ventura or higher, under System Settings > General >
Software Update > Automatic Updates, disable Install macOS updates.
When applying the software update manually, ensure that the computer
is in Thawed state, otherwise some system files may become unusable
when an update is performed on a Frozen computer.
System Requirements
|
11
Deep Freeze Mac User Guide
System Requirements
System Requirements for Deep Freeze Mac:
Deep Freeze Mac 7.6 is supported on:
• macOS Sonoma 14 (on Apple Silicon and Intel architectures)
• macOS Ventura 13 (on Apple Silicon and Intel architectures)
• macOS Monterey 12 (on Apple Silicon and Intel architectures)
• macOS Big Sur 11 (on Apple Silicon and Intel architectures)
• macOS Catalina 10.15
• macOS Mojave 10.14
• macOS High Sierra 10.13.5
Supports APFS file system.
Fusion Drive only supported on macOS Mojave or higher.
Deep Freeze Mac User Guide
12
|
Introduction
Deep Freeze Mac User Guide
14
|
Installing Deep Freeze
Installing Deep Freeze
Installation and configuration of Deep Freeze Mac requires administrator access.
Deep Freeze Mac is downloadable via the Internet from:
www.faronics.com
Complete the following steps to install Deep Freeze Mac:
1. Open Deep Freeze Mac.pkg to begin the installation process. The following screen
is displayed:
2. The security notice is displayed. Click Continue.
Installing Deep Freeze
|
15
Deep Freeze Mac User Guide
3. The License is displayed. Click Continue and Agree.
4. Enter a License Key if you have one. Leave the License Key field blank to install
Deep Freeze as an evaluation. Click Continue.
Deep Freeze Mac User Guide
16
|
Installing Deep Freeze
5. Enter the administrator's password and click Install.
6. The final screen is displayed. Click Close.
You will need to log out and log in or restart the computer after installation to be able
to see the Deep Freeze menu bar status icon.
The computer restarts in a Thawed state. To make changes to Deep Freeze
configuration, click the menu bar status icon and select Login. You can also open the
Deep Freeze application from /Applications/Faronics/.
To make permanent changes to the computer when it is in a Frozen
state, you must first set computer status to Thawed. Go to Status Tab.
Installing Deep Freeze
|
17
Deep Freeze Mac User Guide
Starting from macOS Ventura:
After the installation is complete, background items crucial for Deep Freeze Mac to
perform tasks will be added and enabled under System Settings > General > Login
Items. Disabling these items will prevent Deep Freeze Mac from working.
License
After installation, log in to Deep Freeze and select Deep Freeze Mac > Enter License
Key. Specify the License Key and click OK.
Installing Configuration Profiles
Starting with macOS Big Sur, Deep Freeze can no longer install the configuration
profiles to disable automatic software updates or prevent Standard users from
performing software updates.
There are two configuration profiles included in the Deep Freeze Mac disk image.
Open the folder named Required for Big Sur Onwards and install these two
configuration profiles:
• Disable Notification.mobileconfig – This file will disable software update
notifications.
• Disable Auto Update.mobileconfig – This file will disable automatic software update
installations, as well as allow software update installations to be performed only by
admin users.
You can install these profiles using the following methods:
•Manually
• Apple Remote Desktop
• Mobile Device Management
If you are upgrading from a previous version of Deep Freeze, the existing
settings are retained.
Deep Freeze Mac User Guide
18
|
Installing Deep Freeze
Installing the Configuration Profiles Manually
1. Open Disable Notification.mobileconfig file by double-clicking it.
2. On macOS Monterey and earlier systems: Open System Preferences and click on
the Profiles.
3. Starting from macOS Ventura: Open System Settings > Privacy & Security >
Profiles.
4. On the Profiles pane, click on the Install… button to install the configuration
profile.
5. On the confirmation dialog, click Install button
6. Enter the administrator password to authenticate.
Repeat the steps for the other configuration profile.
Installing the Configuration Profiles Using Apple Remote Desktop
1. Copy the two configuration profiles to the target computers.
2. For each of the target computer:
> Select the computer from the All Computers list and control the computer.
> Navigate to the folder where the configuration profiles are copied to.
> Perform steps 1 to 5 of installing the configuration profiles manually.
Installing the Configuration Profiles Through Mobile Device Management
If you are using MDM to manage the computers, you can push the configuration
profiles to the computers running macOS Big Sur.
Deep Freeze Mac User Guide
20
|
Using Deep Freeze
Overview
After Deep Freeze has been installed the computer can be operated as usual. The
only visual evidence that Deep Freeze is installed on a computer is the presence of a
Deep Freeze icon in the menu bar.
You can make changes to the computer, including renaming or deleting files and
folders, downloading files from the Internet, changing the desktop, and more.
However, the Frozen volumes are completely restored to their original configurations
and contents at restart.
Deep Freeze Menu Bar Status Icons
When Deep Freeze is installed, the polar bear icon appears in the menu bar:
Software Installation and Permanent Changes
Permanent changes and software installations can only be made to a Thawed
volume, or a ThawSpace on the computer. If a volume is in a Frozen state, any
software that has been installed will be gone after a restart.
A newly installed application should be run at least once while the computer or
volume is Thawed in order to create a preference file, dismiss registration dialogs,
and initialize various values.
A newly installed application may require the computer to be restarted for setup to
be completed. If this is the case, it is recommended to restart the computer in a
Thawed state, and then log in with the same user account, run the application once,
and then log out before setting the volumes to restart in a Frozen state.
Indicates that the volume is currently Frozen.
Indicates that the volume is currently Thawed.
Administrators can manage Deep Freeze unless a Deep Freeze password
is specified.
Users should be set up as standard users to avoid getting around Deep
Freeze protection.
Login
|
21
Deep Freeze Mac User Guide
Login
Complete the following steps to log in to Deep Freeze:
1. Open the Deep Freeze application from /Applications/Faronics/. The following
dialog is displayed.
2. Enter the User name and password. Click OK to log in to Deep Freeze.
You can log in to Deep Freeze using your administrator credentials or
with a Deep Freeze password (if enabled in Deep Freeze).
Deep Freeze Mac User Guide
22
|
Using Deep Freeze
Status Tab
The Status tab is used to change the global status of Deep Freeze on a computer.
•Select Start Frozen to set the computer to a Frozen state (protected).
•Select Start Thawed to set the computer to a Thawed state (unprotected).
A restart is required to Thaw the computer.
Volumes Tab
|
23
Deep Freeze Mac User Guide
Volumes Tab
When the Volumes tab is selected, Deep Freeze searches the computer and lists the
volumes present on a computer. The volumes listed can be put into a Frozen state or
a Thawed state.
Volumes that are not supported are listed as well.
All volumes on the computer are initially Frozen by default.
If Deep Freeze status is Thawed, all volumes are currently Thawed, and:
• Setting the slider from Thaw to Freeze will set the volume to Frozen when status is
set to Frozen.
• Setting the slider from Freeze to Thaw will set the volume to Thawed and will
remain Thawed even when status is set to Frozen.
If Deep Freeze is Frozen, volumes set to Thaw are not Frozen, and:
• Setting the slider from Thaw to Freeze will immediately set the volume to Frozen.
• Setting the slider from Freeze to Thaw will set the volume to Thawed after the
computer is restarted.
Removable media such as USB, FireWire or Thunderbolt are not displayed
and cannot be Frozen.
Deep Freeze Mac User Guide
24
|
Using Deep Freeze
ThawSpaces Tab
The ThawSpaces tab is used to create Thawed volumes where documents and
changes are retained persistently on Frozen computers. Administrators can create a
User ThawSpace for each user, or a Global ThawSpace. The ThawSpaces tab displays
only the users that have ThawSpace.
Global and User ThawSpaces are easily distinguishable by the icons displayed in the
Type column.
ThawSpaces can be added or deleted from within the tab using the (+) and (-)
buttons.
The computer must be in a Thawed state to create or delete a ThawSpace. The
Global ThawSpace and User ThawSpace are displayed as volumes on the desktop.
Other Users' ThawSpaces are displayed as volumes with restricted access.
You can create one Global ThawSpace and User ThawSpaces up to as many users on
each computer.
The Global icon represents the Global ThawSpace.
The User icon represents a User ThawSpace.
ThawSpaces Tab
|
25
Deep Freeze Mac User Guide
Adding a Global ThawSpace
To create a Global ThawSpace, complete the following steps:
1. Click (+).
2. Select Global ThawSpace from the list of User Names.
3. Click Create to create the new ThawSpace. Enter the administrator user name and
password when prompted, then click OK, or
4. Click Cancel to return to the tab without adding the ThawSpace.
Adding a User ThawSpace
To create a ThawSpace for a particular user on the drive, complete the following
steps:
1. Click (+).
2. Select the user that the ThawSpace will be created for.
3. Click Create to create the new ThawSpace. Enter the administrator user name and
password when prompted, then click OK, or
4. Click Cancel to return to the tab without adding the ThawSpace.
Removing a User or Global ThawSpace
To remove a User or Global ThawSpace, complete the following steps:
1. Select the ThawSpace to be deleted and click (-). A dialog appears, asking for
confirmation of the deletion.
2. Click Delete to permanently delete the ThawSpace. Enter the administrator user
name and password when prompted, then click OK, or
3. Click Cancel to return to the tab with the ThawSpace retained.
A Global ThawSpace is accessible to all users.
A user ThawSpace is accessible only to the particular user. When a user
logs in, other users' ThawSpaces are displayed on the desktop as a
volume with restricted access.
It is not possible to remove an existing ThawSpace and retain its
contents. Removing a ThawSpace that has a user mapped to it will
prevent the user from logging in to the computer. It is recommended that
the user be mapped to an alternate location before the ThawSpace is
removed.
Deep Freeze Mac User Guide
26
|
Using Deep Freeze
Alternatively, Deep Freeze Mac can be uninstalled in order to remove any
ThawSpaces.
If you unmount the ThawSpace volume, it is not remounted upon log
out/log in. On a Frozen computer, if a ThawSpace is physically deleted,
the ThawSpace and its contents are deleted.
Before removing a ThawSpace, you must remove its home folder or
folder mapping and any symbolic links.
Data stored in a ThawSpace is not protected by Deep Freeze. Use
standard data protection like backup and anti-virus to protect data in a
ThawSpace.
Maintenance Tab
|
27
Deep Freeze Mac User Guide
Maintenance Tab
The Maintenance tab is used to schedule a Maintenance Period for computers.
Administrators can create, edit, delete, enable, and disable Maintenance Schedules
through the Maintenance Tab.
Maintenance Schedule
A Maintenance Schedule is a schedule when the computer will be automatically
Thawed to allow Apple Software Updates, execute script, and perform other
maintenance needed to be permanently applied. The computer must be Frozen for
the Maintenance schedule to start.
If the global status is Start Thawed (Restart required) when the
maintenance period starts, Deep Freeze will not go into maintenance
mode.
If FileVault is enabled, user needs to log in to the computer before a
scheduled maintenance in order for maintenance period to start.
On macOS Catalina or higher, adding script files from one of the folders
protected by Data Protections using the command line from the
Terminal.app will generate a prompt to allow Terminal.app to access the
folder. If Apple Remote Desktop or other third-party tool is used to
execute 'deepfreeze' command line, you have to manually add the tool
for Full Disk Access if you have not added the tool previously.
Alternatively, you can store the script file on a non-protected folder.
Deep Freeze Mac User Guide
28
|
Using Deep Freeze
A maintenance schedule in progress can be edited, but the changes will only take
effect after the current maintenance period ends.
At the end of maintenance period, Deep Freeze will set the computer back to Frozen
state without restarting the computer.
If the computer is turned off before a maintenance period starts, and turned on
within the maintenance period or after it ended, Deep Freeze will not go into that
maintenance period.
If the script is still running when the maintenance period ends, Deep Freeze will issue
a restart to ensure the computer is in a clean state before freezing.
Maintenance period can be canceled by setting the computer to Frozen or Thawed
state, however if Deep Freeze is performing software updates or executing the
selected script, the process cannot be interrupted.
If software update and scripts are selected (enabled), the software update will be
performed first, followed by script after software update has been completed.
Creating and Naming Multiple Maintenance Schedules
To create multiple individually named Maintenance Schedules, complete the following
steps:
1. On the Maintenance Tab, click (+).
2. The Add Schedule dialog is displayed. Specify or select the following:
> Name – The default is Schedule 1. You can modify the name or leave it as it is.
The schedule name has to be unique.
> Frequency – Select Repeating to assign a recurring maintenance schedule on
the selected days. Select Once Only to perform a one-time maintenance
schedule on the selected day.
A maintenance schedule set for Once Only becomes disabled after it has been
completed.
> Day – Select one or more days by clicking Mon to Sun.
> Start – Specify the start time.
> End – Specify the end time.
>Select Install Apple Software Updates to install any available Apple Software
Updates.
The Install Apple Software Updates option is disabled on Macs with Apple
Silicon architecture. The updates can be performed using System
Preferences > Software Update or System Settings > General > Software
Update (starting from macOS Ventura).
Maintenance schedules upgraded from Deep Freeze Mac 7.3 with this
option enabled will be automatically disabled when run/executed.
Maintenance Tab
|
29
Deep Freeze Mac User Guide
> Run script – Select this option and select Add Script from the drop-down. Browse
to the folder, select the script and click Choose to add script. A previously added
script can be deleted by selecting Delete Script.
>Select Lock Out User to prevent a user from logging into the computer during
the Maintenance Period.
>Select Shutdown After Maintenance to shut the computer down after the
Maintenance Period is complete.
>Select Show message x minutes before maintenance starts to provide a
message to users warning them that the computer will be taken over at a
specified time, and enter the warning time in the field provided. Use the text box
to enter a custom message for the user, explaining that the Maintenance
Schedule will take place at a specified time; by inserting %d as a variable into
the message, Deep Freeze will automatically display the number of minutes until
the Maintenance Period begins. (Again, %d is a variable corresponding to the
number of minutes between the current time and the time that scheduled
Maintenance will begin.)
3. To save any changes made, click OK; the changes take effect immediately.
Edit, Delete, Enable, and Disable
To delete a Maintenance Schedule, select it click Delete (-).
To edit a Maintenance Schedule, select it and click Edit .
To disable a Maintenance Schedule, clear the Enabled checkbox.
To enable a Maintenance Schedule, select the Enabled checkbox.
There is no limit on the number of maintenance schedules to be added.
The minimum time allowed for a Maintenance Period is 10 minutes.
There is a minimum 10-minute interval required between schedules.
Ensure sufficient time for the maintenance activity to complete if Apple
Software Update or script is enabled. Insufficient time will lead to the
failure of the update or script execution.
Deep Freeze Mac User Guide
30
|
Using Deep Freeze
Passwords Tab
The Passwords tab allows administrators to manage the Deep Freeze passwords.
There are a maximum of four passwords permitted.
Select the Enable Deep Freeze Password to enable users to log in to Deep Freeze
using a Deep Freeze password.
Adding, Deleting, and Editing Passwords
To add a password, complete the following steps:
1. Click (+).
2. Enter the Description and Password and verify the password.
Changes will take effect the next time you open Deep Freeze Mac.
Passwords Tab
|
31
Deep Freeze Mac User Guide
3. Click Add to save the changes to the password. Enter the administrator user name
and password when prompted, then click OK, or click Cancel to exit with no
changes saved.
To delete a password, click (-). A dialog appears asking for confirmation of the
deletion. Click Cancel to exit the dialog, or click Delete to delete the password
permanently.
To edit the properties of a password, click . Edit the Description and Password in the
properties dialog as needed.
If passwords are not enabled in Deep Freeze, any administrator can
access Deep Freeze using their credentials.
Deep Freeze Mac User Guide
32
|
Using Deep Freeze
Advanced Tab
The Advanced Tab allows administrators to configure stealth settings and whether to
retain or delete existing ThawSpaces when uninstalling Deep Freeze.
Specify Stealth and Log Out Settings
• Hide Frozen icon in menu bar — Select this option to hide the Frozen icon in the
menu bar.
• Hide Thawed icon in menu bar — Select this option to hide the Thawed icon in the
menu bar.
• Restart instead of Log Out — Select this option to restart the computer when a
user logs out.
If fast user switching is enabled, Deep Freeze will not restart the
computer until the last user logs out.
Display Status in Apple Remote Desktop
To display the computer status (Frozen, Thawed, Thawed (Restart required), or
Unknown) remotely in Apple Remote Desktop, select the Show Status in Apple
Remote Desktop check box and select the desired Information Field. The computer
will now write Frozen or Thawed to the selected Information Field during start up
time, or when the global status changes.
The computer must be Frozen in order for the computer to restart when
the user logs out.
If the global status is Start Thawed (Restart required), Deep Freeze will
not restart the computer when a user logs out.
Advanced Tab
|
33
Deep Freeze Mac User Guide
To view this status information in Apple Remote Desktop, select Edit > View Options
and select the matching Computer Info Field (1–4). Computers will now show their
current status, and groups of computers can be sorted by this status column.
Uninstall Deep Freeze when Thawed
All volumes in the computer must be in a Thawed state for the Uninstall option to be
available. If the computer is in a Frozen state, the Uninstall option is not available. If
there are existing ThawSpaces on a computer, choose either to retain or delete them
by selecting the preferred button.
• Retain Existing ThawSpace(s) As-is — Select this option to retain the ThawSpaces.
• Delete Existing ThawSpace(s) — Select this option to delete all the ThawSpaces on
the selected computer.
The computer restarts and Deep Freeze is uninstalled.
All program components are permanently deleted when Deep Freeze is
uninstalled.
Before removing a ThawSpace, you must remove its home folder or
folder mapping.
Deep Freeze Mac User Guide
34
|
Using Deep Freeze
Deep Freeze Mac User Guide
36
|
Deep Freeze Mac Utilities
Command Line
The Deep Freeze Mac Command Line gives network administrators increased
flexibility in managing Deep Freeze Mac computers. These commands can be run
with several different third-party enterprise management tools, such as Apple
Remote Desktop, and/or central management solutions; this includes executing
commands in Terminal while connected to a remote computer via SSH.
Deep Freeze Mac has the following command line options.
Usage: deepfreeze <command> <verb> argument [option]
Specify the Deep Freeze Mac Command Line Utility full path
/usr/local/bin/deepfreeze when executing the command using
third-party management tools.
If Deep Freeze password is enabled, Deep Freeze password can be
passed as an environment variable by specifying '--env'.
Usage:
DFXPSWD=password /usr/local/bin/deepfreeze <command> <verb>
argument [option] --env
Command Description
deepfreeze version Displays the Deep Freeze Mac version.
deepfreeze status [--thawed]
Displays the current status of Deep Freeze
Mac.
[--thawed] returns an integer representing
the global state of the computer:
•0 = Thawed
• 1 = Thawed but restart required
• 2 = Frozen, or an error code if the value is
greater than 2.
This value can be further used by a script
calling this command.
Command Line
|
37
Deep Freeze Mac User Guide
deepfreeze freeze --volume VolumeName |
--startup | --computer
deepfreeze thaw --volume VolumeName |
--startup | --computer
--volume – Freeze or thaw a specific volume
--startup – Freeze or thaw the startup
volume
--computer – Change Global state
Volumes will be set to Frozen or Thawed
depending on the status of Deep Freeze.
Refer to Volumes Tab for details on setting
Volumes to Frozen or Thawed status.
Go to Status Tab to change the status of
Deep Freeze.
deepfreeze license [--info | --set
LicenseKey]
[--info] shows detailed information of the
license
[--set LicenseKey] activate Deep Freeze Mac
with a license key
This command displays the full license key if
run with root privilege or if Deep Freeze
password is enabled.
deepfreeze thawspace create --user UserName
| --global
deepfreeze thawspace delete --user UserName
| --global
Create or delete global ThawSpace or specific
user ThawSpace, where UserName is the
user's account name.
This command requires root privilege, even
when Deep Freeze password is enabled.
deepfreeze password enable
deepfreeze password disable
Enable or disable Deep Freeze password.
deepfreeze password add --description
Description
deepfreeze password edit --description
Description [--newdescription
newDescription]
deepfreeze password delete --description
Description
Add, edit or delete Deep Freeze password.
deepfreeze hideicon frozen [--on | --off]
deepfreeze hideicon thaw [--on | --off]
Show or hide the Deep Freeze Frozen icon in
the menu bar.
Command Description
Deep Freeze Mac User Guide
38
|
Deep Freeze Mac Utilities
deepfreeze restartinstead [--on | --off]
Restart the computer after user logs out, or
the last user logs out if fast user switching is
enabled.
deepfreeze ardinfo [--set N | --clear] Set or clear ARD info field.
deepfreeze schedule add --name
"ScheduleName" [--enable on|off] --day
monday[,tuesday,wednesday,thursday,friday,s
aturday,sunday] --begin "24-hr-time" --end
"24-hr-time" [--onceonly on|off]
[--installappleupdate on|off] [--lockuser
on|off] [--warnuser off|"5-999"] [--message
"message string"] [--shutdownafter on|off]
[--runscript off|"script file name"]
deepfreeze schedule edit --name
"ScheduleName" [--enable on|off] [--day
monday[,tuesday,wednesday,thursday,friday,s
aturday,sunday]] [--begin "24-hr-time"]
[--end "24-hr-time"] [--onceonly on|off]
[--installappleupdate on|off] [--lockuser
on|off] [--warnuser off|"5-999"] [--message
"message string"] [--shutdownafter on|off]
[--runscript off|"script file name"]
deepfreeze schedule delete --all | --name
"ScheduleName"
deepfreeze schedule enable --name
"ScheduleName"
deepfreeze schedule disable --name
"ScheduleName"
Add, edit, remove, enable or disable
Maintenance schedules.
Note: The "--installappleupdate" command
option on Macs with Apple Silicon
architecture will be ignored.
deepfreeze schedule scripts --add
"ScriptFullpath"
deepfreeze schedule scripts --delete
"ScriptName"
deepfreeze schedule scripts --list
Add, delete or list scripts.
This command requires root privilege, even
when Deep Freeze password is enabled.
deepfreeze uninstall [--deletethawspaces]
Uninstall Deep Freeze Mac with the option of
deleting ThawSpaces.
This command requires root privilege, even
when Deep Freeze password is enabled.
Command Description
Command Line
|
39
Deep Freeze Mac User Guide
It is recommended that a user be specified when using Apple Remote
Desktop to send Deep Freeze task, even if Deep Freeze password is
used. If Current console user on target computer is selected and there is
no user logged in on the target computer, the task will fail.
Deep Freeze Mac User Guide
40
|
Deep Freeze Mac Utilities
Sample Command Line Scenario
This section provides an example of configuring Deep Freeze Mac to use Deep Freeze
password with one password and its description 'dfadmin' using Apple Remote
Desktop. The startup volume (Macintosh HD) will be Frozen, and each computer user
will have their own ThawSpace.
The example below assumes the following:
• There is one volume on the computer: Macintosh HD
• There are two computer users:
> admin (Administrator user)
> user1 (Standard user)
To install Deep Freeze Mac on remote computer using Apple Remote Desktop:
1. In Apple Remote Desktop, select the target computer(s) from the list.
2. Select 'Install Packages…' from the Manage menu.
3. Under the Packages pane, click the + button and select the Deep Freeze Mac
installer file to use. The installer file can also be dragged and dropped into the
pane.
4. Click the Install button.
A restart is not required to complete the installation.
After the installation completes, Deep Freeze Mac can be configured by sending UNIX
commands.
The configuration can be done by sending several UNIX commands, one after
another.
1. Select the target computer(s) to configure from the list.
2. Select 'Send UNIX Command…' from the Manage menu.
3. To enable Deep Freeze password, run the command as 'root' user:
/usr/local/bin/deepfreeze password enable
4. To add the first Deep Freeze password 'dfpswd' with its description 'dfadmin', run
the command as 'root' user:
DFXNEWPSWD=dfpswd /usr/local/bin/deepfreeze password add
--description dfadmin --env
Sample Command Line Scenario
|
41
Deep Freeze Mac User Guide
5. To create ThawSpace for admin, run the command as 'root' user:
DFXPSWD=dfpswd /usr/local/bin/deepfreeze thawspace create --user admin
--env
6. To create ThawSpace for user1, run the command as 'root' user:
DFXPSWD=dfpswd /usr/local/bin/deepfreeze thawspace create --user user1
--env
7. To add a script called 'CleanUp' to be executed during a maintenance schedule, run
the command as 'root' user:
DFXPSWD=dfpswd /usr/local/bin/deepfreeze schedule scripts --add
"/Volumes/Macintosh HD/Users/Admin/Documents/CleanUp" --env
8. To create a repeating maintenance schedule on Wednesday and Sunday:
DFXPSWD=dfpswd /usr/local/bindeepfreeze schedule add --name
"Maintenance 1" --enable on --day wednesday,sunday --begin "22:00"
--end "23:00" --installappleupdate on --lockuser on --shutdownafter on
--runscript "CleanUp" --env
9. To edit an existing maintenance schedule 'Maintenance 1' to start at different day
and time and provide warning message to the users 10 minutes before
maintenance starts:
DFXPSWD=dfpswd /usr/local/bin/deepfreeze schedule edit -n "Maintenance
1" -d tuesday,saturday -b "20:00" -e "21:00" -w "10" -m "Maintenance
will start in %d minutes, please save your work." --env
10.To freeze the computer:
DFXPSWD=dfpswd /usr/local/bin/deepfreeze freeze --computer --env
11.To see the status of Deep Freeze:
DFXPSWD=dfpswd /usr/local/bin/deepfreeze status --env
The computer is now Frozen, and both admin and user1 users have their own
ThawSpaces.
Deep Freeze Mac User Guide
42
|
Deep Freeze Mac Utilities
Deep Freeze Tasks for ARD
Deep Freeze tasks are pre-configured actions used to manage Deep Freeze via ARD.
Installing Deep Freeze Task
Complete the following steps to install Deep Freeze Task:
1. Open Deep Freeze Tasks for ARD.app to begin the installation process.
2. Select the tasks to install. Click Continue.
3. If Deep Freeze tasks for APFS is selected, you have the option to use Deep Freeze
password if Deep Freeze password is enabled. Select Use Deep Freeze Password
and enter the password. If Deep Freeze tasks for HFS+ is selected, specify Deep
Freeze user name and password. Click Continue.
Deep Freeze Tasks for ARD
|
43
Deep Freeze Mac User Guide
You must restart the computer after installing Deep Freeze Tasks for Apple Remote
Desktop.
Using Deep Freeze Task
In ARD, the Deep Freeze specific tasks are saved in the Deep Freeze (APFS) and Deep
Freeze (HFS+) folders.
The following tasks are available for Deep Freeze (APFS):
Task Description
DeepFreeze (APFS):addPassword Add Deep Freeze password.
DeepFreeze (APFS):addSchedule Add a Maintenance schedule.
DeepFreeze (APFS):addScript Add scripts.
DeepFreeze (APFS):clearArdInfo Clear the ARD Info Field.
DeepFreeze (APFS):createGlobalThawSpace Create a Global ThawSpace.
DeepFreeze (APFS):createUserThawSpace Create a User ThawSpace.
DeepFreeze (APFS):deleteAllSchedules Delete all Maintenance schedules.
DeepFreeze (APFS):deleteGlobalThawSpace Delete the Global ThawSpace.
DeepFreeze (APFS):deletePassword Delete Deep Freeze password.
DeepFreeze (APFS):deleteSchedule Delete a Maintenance schedule.
DeepFreeze (APFS):deleteScript Delete one scripts at a time.
DeepFreeze (APFS):deleteUserThawSpace Delete a User ThawSpace.
DeepFreeze (APFS):disablePassword Disable Deep Freeze password.
DeepFreeze (APFS):disableSchedule Disable a Maintenance schedule.
DeepFreeze (APFS):editPassword Edit Deep Freeze password.
DeepFreeze (APFS):editSchedule Edit a Maintenance schedule.
DeepFreeze (APFS):enablePassword Enable Deep Freeze password.
DeepFreeze (APFS):enableSchedule Enable a Maintenance schedule.
DeepFreeze (APFS):freezeComputer Change Global state to Frozen.
DeepFreeze (APFS):freezeStartup Freeze the startup volume.
DeepFreeze (APFS):freezeVolume Freeze a specific volume.
DeepFreeze (APFS):hideFrozenIcon
Show or hide the Deep Freeze Frozen icon in the
menu bar.
Deep Freeze Mac User Guide
44
|
Deep Freeze Mac Utilities
DeepFreeze (APFS):hideThawedIcon
Show or hide the Deep Freeze Thawed icon in
the menu bar.
DeepFreeze (APFS):licenseInfo Displays the License information.
DeepFreeze (APFS):listScripts List all the script files.
DeepFreeze (APFS):restartInstead
Restart the computer when the user logs out (if
fast user switching is enabled, restart the
computer when the last user logs out)
DeepFreeze (APFS):setArdInfo
Set the specific ARD Info Field to show Deep
Freeze status.
DeepFreeze (APFS):setLicense Activate the License Key.
DeepFreeze (APFS):status Displays the current status of Deep Freeze Mac.
DeepFreeze (APFS):thawComputer Change Global state to Thawed.
DeepFreeze (APFS):thawStartup Thaw the startup volume.
DeepFreeze (APFS):thawVolume Thaw a specific volume.
DeepFreeze (APFS):uninstall
Uninstall Deep Freeze Mac and delete existing
ThawSpaces.
DeepFreeze (APFS):uninstallKeepThawSpaces
Uninstall Deep Freeze Mac but retain existing
ThawSpaces.
DeepFreeze (APFS):version Displays the Deep Freeze Mac version.
Task Description
Deep Freeze Mac User Guide
46
|
Uninstalling Deep Freeze
Uninstalling Deep Freeze Manually on the Computer
Complete the following steps to uninstall Deep Freeze manually on the computer
where it is installed:
1. Log in to Deep Freeze.
2. Restart the computer to a Thawed state (if it is Frozen).
3. Go to Advanced Tab > Uninstall Deep Freeze when Thawed.
4. Select Retain Existing ThawSpace(s) As-is to retain the ThawSpaces. Select
Delete Existing ThawSpace(s) to delete all the ThawSpaces on the selected
computer.
5. Click Uninstall.
6. Enter the administrator user name and password when prompted, then click OK.
7. Click Restart.
Deep Freeze is uninstalled and the computer restarts.
