Lenovo ThinkVantage (Client Security Solution 8.21) - Manual (Page 65)

5. After rebooting the system, configure the system with the XML script file through the following procedure:
• Copy the ThinkPad.xml.enc file prepared early to the C:\ directory.
• Open a different command prompt and run
"C:\Program Files\Lenovo\Client Security Solution\vmserver.exe" C:\ThinkPad.xml.enc XMLScriptPW
6. After a reboot, the system is now ready for Client Security Solution user enrollment. Each user can log
into the system with their user ID and Windows password. Every user that logs into the system will
automatically be prompted to enroll into Client Security Solution and then be able to enroll into the
fingerprint reader.
7. After all users for the system have been enrolled in the ThinkVantage Fingerprint Software, the secure
mode setting can be enabled to force all Windows non-administrator users to logon with their fingerprint.
• Run the following command:
"C:\Program Files\ThinkVantage Fingerprint Software\fprconsole.exe" settings securemode 1
• To remove the message “Press Ctrl+Alt+Delete to log in using a password” from the logon screen,
run the following command:
"C:\Program Files\ThinkVantage Fingerprint Software\fprconsole.exe settings"
CAD 0
Deployment of Client Security Solution 8.21 and ThinkVantage Fingerprint Software is now complete.
Switching Client Security Solution modes
If you switch the Client Security Solution mode from convenient to secure or if you switch from secure to
convenient mode, and you are using Rescue and Recovery to backup your system, take a new base backup
after you switch modes.
Corporate Active Directory rollout
For a corporate Active Directory rollout, complete the following steps:
1. Install either through Active Directory or LANDesk:
a. Take backups and get reports through Active Directory and LANDesk of who and when they were
taken.
b. Give certain groups abilities to take backups, delete backups, schedule options, and password
restrictions, then change groups and see if settings persists.
c. Through Active Directory, enable Antidote Delivery Manager. Place packages to be run and make
sure reporting is captured.
Standalone Install for CD or script files
For a standalone install for CD or script file, complete the following steps:
1. Use one batch file to silently install Client Security Solution, and Fingerprint technology.
2. Configure BIOS password recovery silently.
System Update
For System Update, complete the following steps:
1. Install Client Security Solution and Fingerprint software technology through a customized system
update server simulating how a large enterprise would have a server set up instead of going to a Lenovo
server, so they can control content.
Chapter 6 . Best Practices 59