Quick Reference Guide Microsoft Windows XPe-based Thin Clients t5710 & t5720 Document Part Number: 253378-008 July 2006 This guide supplements the standard Microsoft Windows XPe documents supplied by Microsoft Corporation. This document highlights the differences, enhancements, and additional features provided with this terminal.
Microsoft, MS-DOS, Windows, and Windows NT are trademarks of Microsoft Corporation in the U.S. and other countries. © 2006 Hewlett-Packard Development Company, L.P. The information in this document is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
Contents Contents Contents Introduction Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . The XPe desktop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . User desktop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Administrator desktop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents User accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–8 Creating a new user account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–8 User Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–9 User profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Administration and image upgrades Altiris Deployment Solution software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Add-on upgrades. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Image upgrades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ThinState Capture and Deploy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents vi www.hp.
1 Introduction HP Compaq t57x0 thin client models use the Microsoft Windows XP Embedded (XPe) operating system.
Introduction ■ Extensive MUI support: English, French, German, Spanish, Traditional Chinese, Simplified Chinese, Korean, and Japanese HP provides this client “ready to go” out of the box to meet most common customer requirements. You may want to add/remove features, and customize it to your specific needs. This guide will introduce you to the features of this client that are not found in the standard Microsoft Windows XP operating system.
Introduction For information about the functionality of the standard Windows XPe desktop and Start menu items, refer to the applicable Microsoft documentation at: http://msdn.microsoft.com/embedded/windowsxpembedded/default .aspx For the Web addresses of the Citrix Program Neighborhood and Microsoft RDP help documents, see Chapter 3, in section “Citrix Program Neighborhood.
Introduction Administrator desktop The desktop that displays when you are logged on as an administrator is a standard Windows XP desktop. Icons present on the default administrator desktop Start menu include: ■ Citrix Program Neighborhood ■ Microsoft RDP ■ Internet Explorer For information about the functionality of the standard Windows XPe desktop and Start menu items, refer to the Microsoft Web site at: http://msdn.microsoft.com/embedded/windowsxpembedded/default .
Introduction Server environment requirements HP thin clients use a variety of services accessed through a network. These services include session and product support services as well as standard network services such as DHCP and DNS.
Introduction a Windows 2000/2003 server is used for both of these session ✎ Ifservices (ICA and RDP), a Terminal Services Client Access Licenses TSCAL) server must also reside somewhere on the network. Client Access licenses permit clients to use the terminal, file, print, and other network services provided by Windows 2000/2003 Server. The server grants temporary licenses (on an individual device basis) that are good for 90 days. Beyond that, you must purchase TSCALs and install them in the TSCAL server.
2 Configuration Logging on You can log on to your thin client either automatically or manually. Automatic logon The default for the XPe-based thin client is automatic logon. The administrator can use the HP Windows Logon Configuration Manager in the Control Panel to enable/disable auto logon and change the auto logon user name, password, and domain. Only the administrator account can change auto logon properties. Quick Reference Guide www.hp.
Configuration save changes, be sure to disable the write filter cache or issue the ✎ To-commit command anytime during the current boot session. See Chapter 4, in section “Enhanced Write Filter Manager” for information about and instructions for disabling the write filter. Enable the write filter when you no longer want permanent changes. Enabling automatic logon bypasses the Log On to Windows dialog box.
Configuration Administrator logon access To access Administrator logon regardless of the state of the thin client user mode: » While holding down Shift, use the mouse to initiate logoff of the User (invoked from the Start menu). The screen for Administrator logon displays. default username and password for the Administrator account is ✎ The Administrator. The default user name and password for the User account is User.
Configuration may also log off or shut down using the Windows Security ✎ You dialog box. Press Ctrl+Alt+Del to open the dialog. automatic logon is enabled, when you log off (without shutting ✎ Ifdown) the thin client immediately logs on the default user. For instructions for logging on as a different user, see Chapter 2, in section “Logging on.
Configuration Power management A “Monitor Saver” turns off the video signal to the monitor after a designated idle time, allowing the monitor to enter a power-saving mode. Parameters for this mode are available by right-clicking on the desktop background and selecting Properties > Screen Saver > Power. System time After power off, clock time is not lost as long as the power source remains plugged in.
Configuration should maintain correct time because some applications may ✎ You require access to the local thin client time. To open the Date and Time Properties dialog, click on the time area in the task bar or double-click the Date and Time icon in the Control Panel. Local drives The following sections describe the local drives located on the thin client. 2-6 www.hp.
Configuration Drive Z Drive Z is the onboard volatile memory (Ms-ramdrive) on the logic board of the thin client. Because drive Z is volatile memory, HP recommends that you do not use this drive to save data that you want to retain. For Ramdisk configuration instructions, see Chapter 4, in section “HP RAMDisk.” For information about using the Z drive for roaming profiles, see Chapter 2, in section “Roaming profiles.” Drive C and flash Drive C is in the onboard flash drive.
Configuration session. See the write filter topics in Chapter 4, in section “Enhanced Write Filter Manager.” for instructions to disable the cache. Enable the write filter when you no longer want permanent changes. Saving files Ä CAUTION: The thin client uses an embedded operating system with a fixed amount of flash memory. HP recommends that you save files that you want to retain on a server rather than on your thin client.
Configuration roaming profiles to work and be downloaded, there must be ✎ For sufficient flash space available. In some cases it may be necessary to remove software components to free up space for roaming profiles. User accounts This section describes how to create a new user account and user profile. Creating a new user account Ä CAUTION: Make sure to disable the write filter cache during the boot session in which a new account is created.
Configuration User Manager User Manager is a utility that allows the administrator to create, delete, and maintain user accounts. User profiles A new user profile is automatically configured from a template based on the default user or administrator access settings in the registry, browser profiles, and ICA and Microsoft RDP initial settings.
Configuration To create the user: Ä CAUTION: Because of the limited size of flash memory, HP strongly recommends that you configure other applications available to the new and existing users to prevent writing to the local file system. For the same reason, HP also recommends that you exercise extreme care when changing configuration settings of the factory-installed applications. 1. Log in as Administrator. 2.
Configuration Regional and Language Options The keyboard language options are preset at the factory. Should you need to make a change, the keyboard language selection is made through the Regional and Language Options selection in the Control Panel. From this program you can select the type of keyboard you are using as well as the layout/IME settings. 2-12 www.hp.
Configuration Administrative Tools Click the Administrative Tools icon in the Control Panel gain access to the available administrative tools: Quick Reference Guide www.hp.
Configuration 2-14 www.hp.
3 Applications The XP Embedded image that ships with your thin client has the following preinstalled applications: ■ Sygate Firewall ■ Citrix Program Neighborhood ■ Microsoft RDP ■ HP PC Session Allocation Manager (SAM) Client ■ TeemNT Terminal Emulation ■ Altiris Client Agent ■ Internet Explorer ■ Windows Messenger ■ Media Player ■ Macromedia Flash Player Access to the following applications is limited to the Administrator logon account: ■ Sygate Firewall ■ Altiris Client Agent ■ M
Applications Sygate firewall HP’s XPe SP2 image includes a Sygate firewall. HP Sygate Security Agent provides a customizable firewall that helps protect your computer from intrusion and misuse, whether malicious or unintentional. The firewall detects and identifies known Trojans, port scans, and other common attacks, and in response, selectively allows or blocks the use of various networking services, applications, ports, and components.
Applications Additional information about the Sygate Firewall is available in the “HP Sygate Security Agent and Symantec Embedded Security: Frequently Asked Questions” white paper at: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c0 0632596/c00632596.pdf Microsoft Windows Firewall An improved Microsoft Windows Firewall (previously known as Internet Connection Firewall, or ICF) is available from HP as an add-on. The firewall is enabled by default after you install the add-on.
Applications you launch the Windows Firewall add-on, the Control Panel ✎ After applet is only available to the Administrator account. ■ General Tab: The General tab provides access to the main three configuration options as shown below. ❏ On (Recommended) ❏ Don’t allow exceptions ❏ Off (Not Recommended) When you select Don't allow exceptions, Windows Firewall blocks all requests to connect to your computer, including those from programs or services on the Exceptions tab.
Applications Using Windows Firewall with no exceptions is useful when connecting to a public network. This setting can help to protect your computer by blocking all attempts to connect to your computer. When you use Windows Firewall with no exceptions, you can still view Web pages, send and receive e-mail, or use an instant messaging program. ■ Exceptions Tab: Provides the ability to add program and port exceptions to permit certain types of inbound traffic.
Applications Display a notification when the Windows Firewall blocks a program is selected by default. You can set a scope for each exception. For home and small office networks, it is recommended that you set the scope to the local network only where possible. This will enable computers on the same subnet to connect to the program on the machine, but drops traffic originating from a remote network. ■ 3-6 Advanced Tab: Enables you to configure the following functions.
Applications Gathering configuration information To examine the current policy configuration for Windows Firewall, you can use the following command: netsh firewall show configuration. Troubleshooting applications Modifying an application to work with a stateful filtering firewall is the ideal way to resolve issues. This is not always possible, so the firewall provides an interface for configuring exceptions for ports and applications. Quick Reference Guide www.hp.
Applications Failure symptoms Failures related to the default configuration will manifest in two ways: ■ Client applications may fail to receive data from a server. Examples include an FTP client, multimedia streaming software, and new mail notifications in some email applications. ■ Server applications running on the Windows XPe computer may not respond to client requests. Examples include a Web server such as Internet Information Services (IIS), Remote Desktop, and File Sharing.
Applications recommends adding a program instead of adding a port. Adding a ✎ HP program is easier and safer than adding a port because you do not have to know which port numbers to use, and the port is only open when the program is waiting to receive a connection. Only the specified application can use the port, whereas opening a port allows any application to use it. Adding a program The recommended configuration involves adding a program to the exception list.
Applications Once you have the port number and protocol, add an exception for that port. To add a port exception: 1. Open Windows Firewall and click the Exceptions tab. 2. Click Add Port to display the Add a Port dialog box. a. Type the Port Number. b. Choose TCP or UDP protocol. c. Give the port exception a descriptive name in the Name field. 3. Click Change Scope to view or set the scope for the port exception, and then click OK. 4. Click OK to close the Add a Port dialog box. 5.
Applications Citrix Program Neighborhood Citrix Program Neighborhood is a feature of ICA introduced with MetaFrame 1.8 that enables users to connect to MetaFrame and WinFrame servers and published applications. Program Neighborhood allows complete administrative control over application access and delivers an even greater level of seamless desktop integration. Documentation for the ICA client application is available from the Citrix Corporation Web site at: www.citrix.
Applications Remote Desktop Connection Use the Remote Desktop Connection dialog box to establish connections to a Windows Terminal Server or to access remote applications using Microsoft RDP. Refer to the Microsoft Web site for documentation that offers a detailed explanation and instructions on how to use the Microsoft RDP dialog box. 3-12 www.hp.
Applications HP PC Session Allocation Manager (SAM) Client The Consolidated Client Infrastructure (CCI) solution from HP centralizes desktop computing and storage resources into easily managed, highly secure data centers, while providing end users the convenience and familiarity of a traditional desktop environment. Additionally, companies have long used server-based computing (SBC) to create virtual instances of desktop applications on a server that multiple remote users can access.
Applications HP SAM becomes the control point in managing a CCI deployment. Specifically, it manages the assignment of Microsoft Remote Desktop connections from a user’s access device (thin client) to Remote Desktop sessions (blade PCs). Whether the session resides on a dedicated physical blade or resides together with other sessions on a virtual hardware platform, the HP SAM system can make these desktop sessions available to users as they are needed. For more information about PC SAM, see: http://h71028.
Applications Altiris Client Agent The Altiris Client Agent allows the Altiris server to discover valid clients that are added to the network. The agent carries out assignments and reports the status of individual thin clients to the Altiris server. Quick Reference Guide www.hp.
Applications Microsoft Internet Explorer Version 6.0 of the Microsoft Internet Explorer browser is installed locally on the thin client. The Internet options settings for the browser have been preselected at the factory to limit writing to the flash memory. These settings prevent exhaustion of the limited amount of flash memory available and should not be modified. You may access another browser through an ICA or RDP account if you need more browser resources. 3-16 www.hp.
Applications Service Pack 2 makes Microsoft Internet Explorer 6.0 much more secure. Internet Explorer has more control over the execution of all content, including a built-in facility to manage pop-up windows. Furthermore, Internet Explorer now prevents scripts from moving or resizing windows and status bars to hide them from view or obscure other windows. Windows XPe Service Pack 2 added a block unsafe file transfers feature to Windows Messenger.
Applications 3-18 www.hp.
4 Control Panel extended selections The Control Panel is accessed by selecting Start > Control Panel. Some of the extended selections available on the Control Panel are discussed in the following sections. Enhanced Write Filter Manager The Enhanced Write Filter Manager provides a secure environment for thin client computing by protecting the thin client from undesired flash memory writes (the operating system and functional software components reside in flash memory).
Control Panel extended selections gives the appearance of read-write access to the flash by employing a cache to intercept all flash writes and returning success to the process that requested the I/O. The intercepted flash writes that are stored in cache are available as long as the thin client remains active, but are lost when you reboot or shut down the unit.
Control Panel extended selections Enhanced Write Filter Manager command line control Ä CAUTION: Terminal Administrators should use Microsoft Windows NT file security to prevent undesired usage of these commands. Ä CAUTION: When using the -commit command, all the temporary contents are permanently written to the flash memory. the Enhanced Write Filter Manager commands are executed ✎ Because on the next boot, you must reboot the system for the command to take effect.
Control Panel extended selections -commit Commits all current level data in the overlay to the protected volume, and resets the current overlay value to 1. You can combine -commit with the -disable command to commit and then disable. -disable Disables the overlay on the specified protected volume. -enable Enables the Enhanced Write Filter so that data written to the protected media is cached in the overlays.
Control Panel extended selections To access the EWF user interface: 1. Log in as an Administrator. 2. Select Start > Control Panel > Other Control Panel Options or Start > Control Panel > Performance and Maintenance > Administrative Tools. 3. Click the EWF Manager icon. 4. Use the EWF user interface to Select Write Filter options. The EWF user interface includes the following buttons: Enable EWF This button is the same as executing ewfmgr.exe c: -Enable from the DOS prompt.
Control Panel extended selections Overlay configuration This button displays the Overlay information and is a combination of the information supplied when executing ewfmgr.exe c: -Description and ewfmgr.exe c: -Gauge from the DOS prompt. Clear boot command This button is the same as executing ewfmgr.exe c: -NoCmd from the DOS prompt. Commit data to volume This button is the same as executing ewfmgr.exe c: -Commit from the DOS prompt.
Control Panel extended selections EWF Manager console utility (ewfmgr.exe) and the EWF status ✎ Since service execute separate code, status changes by ewfmgr.exe are not automatically reflected by the EWF status icon. If you modify the EWF using the command line, you must right-click the icon (you can then click anywhere on the screen to close the context menu) to refresh the status icon display.
Control Panel extended selections ■ Print spooling ■ User/system temporary files You can also use the RAMDisk for temporary storage of other data (such as roaming profiles) at the administrator’s discretion (see Chapter 2, in section “Local drives”). Use the RAMDisk Configuration dialog box to configure the RAMDisk size. If you change the size of the RAMDisk, you will be prompted to restart for changes to take effect.
Control Panel extended selections For detailed information, please review the “Using the HP DHCP Settings Update Client” document on the HP support site at: http://welcome.hp.com/country/us/en/support.html. ThinState Capture The HP ThinState Capture tool is a very simple wizard-based tool that you can use to capture an HP thin client XP Embedded image, which you can then deploy to another HP thin client of identical model and hardware.
Control Panel extended selections 1. Once you launch the ThinState Capture tool from within the Control Panel, you are presented with the following screen. 4-10 www.hp.
Control Panel extended selections 2. Click Next. 3. At this point, attach to the unit a DOK. The DOK drive letter and size are displayed. The DOK must be greater in size than the onboard flash disk. As a result, if your thin client has 512 MB Flash, then the USB flash drive must be 1 GB. Quick Reference Guide www.hp.
Control Panel extended selections Once the right DOK size is attached, the following screen displays. 4. Click Capture. The following warning displays. 5. Click Yes. The ThinState Capture tool formats and makes the USB flash drive bootable. ThinState Capture will now reboot the system. 4-12 www.hp.
Control Panel extended selections After you performi these actions, the ThinState Capture tool displays the following screen. Please follow the on-screen instructions. You can now use the USB flash drive to deploy the captured image to another HP thin client of the exact same model and hardware. Quick Reference Guide www.hp.
Control Panel extended selections The following table lists the supported capture and deploy scenarios: ThinState Deploy To perform a ThinState deployment: 1. Set the boot order in the F10 System Bios to USB boot. 2. Attach the USB flash drive to the thin client unit you wish to deploy the captured image to, and then power on the unit. 3. Follow the on-screen instructions. 4-14 www.hp.
Control Panel extended selections After you remove the USB flash drive and cycle power to the system, the image will unbundle. This process can take between 10-12 minutes. Do not interrupt or cycle power to the unit during this process. You may use the captured image (flash.ibr) found in the USB flash drive in combination with Altiris Deployment Solution to remotely image multiple thin client units. must use flash.ibr in conjunction with HP’s ThinState Deploy ✎ You utility (e.g. ibr.exe). Flash.
Control Panel extended selections 4-16 www.hp.
5 Administration and image upgrades This section highlights and discusses the Remote Administration capabilities and firmware upgrade methods applicable to your thin client. Altiris Deployment Solution software The Altiris Deployment Solution software is a full-featured remote administration tool set. It accesses the thin client through the Altiris remote Agent and PXE server utilities installed on the thin client.
Administration and image upgrades Image upgrades The Intel Preboot Execution Environment (PXE) is a protocol that defines interaction between TCP/IP, DHCP and TFTP to enable a client to download a preboot environment from a server. PXE allows a client to boot from a server on a network prior to booting the embedded operating system or the operating system from the local flash module.
Administration and image upgrades HP Compaq Thin Client Imaging Tool The HP Compaq Thin Client Imaging Tool is part of the Softpaq deliverable that contains the original factory image for the HP Compaq t5000 thin client. You can use this utility to restore the original factory image to your thin client. This utility allows you to perform the following options: ■ Generate an ISO image to use with CD creation software to create a bootable CD for deployment using a USB CD ROM drive.
Administration and image upgrades 5-4 www.hp.
6 Peripherals Depending on the ports available, the thin client can provide services for USB, serial, parallel, and PCI devices, as long as the appropriate software is installed. Factory-installed software is described in the following section. As they become available, you can install add-ons for other services using the Altiris Deployment Solution software. For more information, see Chapter 3, in section “Altiris Client Agent.
Peripherals 5. The Ports (COM & LPT) listing will display if not already shown. Under the Ports (COM & LPT) listing, a new COM port will display for the new connection. Note which COM port number is assigned to the new connection. 6. Continue the installation procedure for the connected device using the discovered port number when prompted. Use the manufacturer's procedures for other devices, such as a serial touch screen. ✎ You cannot use more than two USB to serial converters at one time.
Peripherals Adding printers-using generic text-only print driver Follow these steps to add a printer using the text-only print driver: Connect the printer to the parallel port. 1. Choose Printers and Faxes from the Start > Settings menu. 2. Select Add a Printer to open the Add Printer Wizard. 3. Click Next in the first panel of the wizard. 4. Select Local printer configured to this computer. 5. Verify that the Automatically Detect and Install my Plug and Play Printer check box is not selected. 6.
Peripherals Audio You can redirect audio from applications to the audio jacks on the thin client. You control the level externally (such as by a 600-ohm potentiometer control) and driving speakers requires a power booster. You can adjust the volume using the sound icon in the task bar system tray. You can single-click on this icon to open the master volume control or double-click to open the volume control application dialog box. 6-4 www.hp.
Index A administrator 1–4 user 1–2 DHCP Settings Update Client 4–8 DOK 4–11 Drive C 2–7 Drive Z 2–6, 4–7 drives 2–6 Drive C and flash 2–7 Drive Z 2–6 accounts, user 2–8 adding ports to Windows Firewall 3–9 printers 6–3 programs 3–9 Administrative Tools 2–12 Administrator desktop 1–4 logon 2–3 Agent 3–2 Altiris Client Agent 3–15 Altiris Deployment Solution 1–6, 5–1 applications 3–1 audio 6–4 automatic logon 2–1 E Enhanced Write Filter 2–4 command line tool 4–3 status tool 4–6 user interface 4–4 Enhanced W
Index peripherals 6–1 ports, Windows Firewall 3–9 power management 2–4 Preboot Execution Environment 5–2 preinstalled applications 3–1 print drives 6–3 printers 6–2 profiles 2–9 PXE 5–1, 5–2 image capture 4–9 image deployment 4–14 image upgrades 5–2 imaging 5–3 Internet 1–1 Internet Explorer 3–16 L language options 2–11 local drives 2–6 log on as Administrator 2–3 logging off 2–3 logon automatic 2–1 manual 2–2 Logon Configuration Manager 2–1 R M Macromedia Flash Player 3–17 manual logon 2–2 manufacture
Index time 2–5 troubleshooting applications 3–7 troubleshooting Microsoft Windows Firewall 3–7 U Windows Firewall 3–3 Windows Media Player 3–17 Windows XPe Web site 1–3 write filter 2–7 writer filter 4–1 Z updates 1–2 upgrading images 5–2 USB to serial converter cable 6–1 user accounts 2–8 user desktop 1–2 User Manager 2–9 user profiles 2–9 using manufacturer print drivers 6–3 Z Drive 4–7 V volatile memory 2–6 W Web site Altiris 1–6, 4–15 Citrix 3–11 Deploying Windows Firewall Settings 3–10 HP Compa
Index Index-4 www.hp.
