Microsoft® Windows Embedded Standard 2009 (WES) and Windows® XP Embedded (XPe) Quick Reference Guide HP thin clients
© Copyright 2008, 2009 Hewlett-Packard Development Company, L.P. Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. Win32, Windows Internet Explorer, and Windows Media Player are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Adobe and Acrobat are trademarks or registered trademarks of Adobe Systems Incorporated. The information contained herein is subject to change without notice.
About This Book This guide supplements the standard XPe documents supplied by Microsoft Corporation. This document highlights the differences, enhancements, and additional features provided by the latest image with this terminal. WARNING! Text set off in this manner indicates that failure to follow directions could result in bodily harm or loss of life. CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage to equipment or loss of information.
iv About This Book
Table of contents 1 For More Information and Updates 2 Introduction The Desktop ......................................................................................................................................... 3 User Desktop ....................................................................................................................... 3 Administrator Desktop .........................................................................................................
Regional and Language Options ........................................................................................................ 14 Administrative Tools ........................................................................................................................... 15 4 Applications Symantec Endpoint Protection Firewall .............................................................................................. 17 About the Agent ...........................................................
DHCP Server .................................................................................................... 46 FTP Server ........................................................................................................ 46 Description ......................................................................................................................... 46 Host Settings .....................................................................................................................
viii
1 For More Information and Updates HP provides add-ons, Microsoft® Quick Fix Engineering updates (QFEs), and periodic updates for thin client images. Check the HP support site for these updates or for important documentation that provides specific information for the image version at http://www.hp.com/support. Select the country from the map, then select See support and troubleshooting information or Download drivers and software (and firmware). Type the thin client model in the field and click Enter.
2 Introduction HP WES-based thin client models use the Windows Embedded Standard 2009 (WES) operating system. HP XPe-based thin client models use the Windows XP Embedded (XPe) operating system. This guide provides information pertaining to the latest shipping WES and XPe Service Pack 3 (SP3) images.
This guide will introduce you to the features of this client that are not found in the standard Microsoft Windows XP operating system. Typically, a terminal is configured locally then used as a template for other terminals, which are then configured using local or remote administration tools. The Desktop This section provides a general overview of WES and XPe user and administrator desktop features and functions.
NOTE: Right-clicking the mouse when the pointer is on the administrator’s desktop background opens a pop-up menu. Server Environment Requirements HP thin clients use a variety of services accessed through a network. These services include session and product support services as well as standard network services such as DHCP and DNS.
Microsoft RDP The Terminal Services Client application on the thin client accesses Microsoft Terminal Services.
3 Configuration Logging On You can log on to the thin client either automatically or manually. Automatic Logon The default for the WES- or XPe-based thin client is automatic logon. The administrator can use the HP Windows Logon Configuration Manager in the Control Panel to enable/disable auto logon and change the auto logon user name, password, and domain. Only the administrator account can change auto logon properties.
Enabling automatic logon bypasses the Log On to Windows dialog box. To log on as a different user while auto logon is enabled, press and hold Shift while clicking Start > Shut Down > Log Off. This displays the Log On to Windows dialog box and allows you to type in the logon information. Manual Logon When automatic logon is disabled, thin client startup displays the Log On to Windows dialog box. Type the logon information in the User Name and Password text boxes.
Logging Off, Restarting, and Shutting Down the Thin Client To restart, shut down, or log off from the thin client, click Start > Shut Down. From the Shut Down dialog box, select the desired action, and then click OK. NOTE: You may also log off or shut down using the Windows Security dialog box. Press Ctrl+Alt +Del to open the dialog box. If automatic logon is enabled, when you log off (without shutting down), the thin client immediately logs on the default user set up in Windows Login Configuration.
Power Management A “Monitor Saver” turns off the video signal to the monitor after a designated idle time, allowing the monitor to enter a power-saving mode. To set power saving options for the monitor, right-click the desktop background and select Properties > Screen Saver > Power. System Time After power off, clock time is not lost as long as the power source remains plugged in.
NOTE: The Windows Time service is Stopped by default. You can Start the service via the administrative tools control panel applet. You may want to Start the service and maintain correct time because some applications may require access to the local thin client time. To open the Date and Time Properties dialog, click on the time area in the task bar or double-click the Date and Time icon in the Control Panel. Local Drives The following sections describe the local drives located on the thin client.
Saving Files CAUTION: The thin client uses an embedded operating system with a fixed amount of flash memory. HP recommends that you save files that you want to retain on a server rather than on the thin client. Be careful of application settings that write to the C drive, which resides in flash memory (in particular, many applications by default write cache files to the C drive on the local system). If you must write to a local drive, change the application settings to use the Z drive.
User Profiles A new user’s profile is based on the Default User profile template, which includes policies similar to the factory-defined User account. This new account will default to membership within the local Users group. If the Default User profile settings are changed from those set at the factory, the changed settings are automatically applied to any newly user profile—local or domain.
CAUTION: Because of the limited size of flash memory, HP strongly recommends that you configure other applications available to the new and existing users to prevent writing to the local file system. For the same reason, HP also recommends that you exercise extreme care when changing configuration settings of the factory-installed applications. 1. Log in as Administrator. 2. Open the Administrative Tools window by clicking Start > Control Panel > Administrative Tools. 3.
Regional and Language Options The keyboard language options are preset at the factory. Should you need to make a change, the keyboard language selection is made through the Regional and Language Options selection in the Control Panel. From this program you can select the type of keyboard you are using as well as the layout/IME settings.
Administrative Tools Click the Administrative Tools icon in the Control Panel to gain access to the available administrative tools: Administrative Tools 15
4 Applications The latest WES and XPe images have the following preinstalled applications: ● Symantec Endpoint Protection Firewall on page 17 ● Microsoft Windows Firewall on page 18 ● Citrix Program Neighborhood and PN Agent on page 24 ● Remote Desktop Connection on page 25 ● HP Remote Desktop Protocol (RDP) Multimedia and USB Enhancements on page 27 ● HP Remote Graphics Software (RGS) Receiver on page 27 ● HP Session Allocation Manager (SAM) Client on page 28 ● Teemtalk Terminal Emulation
Symantec Endpoint Protection Firewall The HP image includes a Symantec Endpoint Protection Agent Firewall. About the Agent The Symantec Endpoint Protection for Windows XPe Agent is security software that is installed on embedded endpoints, such as HP thin clients, that run the WES or XPe operating system. The agent provides a customizable firewall that protects the endpoint from intrusion and misuse, whether malicious or unintentional.
security settings, as well as IPS engine settings have been customized by HP to provide both optimal performance as well as a secure computing environment. New Features and Functionality ● All user accounts can now modify SEP Agent options and settings. Previously the Sygate Agent only granted the Administrator account this ability. User access to firewall settings may now be restricted by configuring an agent password.
NOTE: After you launch the Windows Firewall add-on, the Control Panel applet is only available to the Administrator account. ● General Tab: The General tab provides access to the main three configuration options as shown below. ◦ On (Recommended) ◦ Don’t allow exceptions ◦ Off (Not Recommended) When you select Don't allow exceptions, Windows Firewall blocks all requests to connect to the computer, including those from programs or services on the Exceptions tab.
You can specify three different modes of access: ◦ Any computer (including those on the Internet) ◦ My network (subnet) only ◦ Custom list Display a notification when the Windows Firewall blocks a program is selected by default. You can set a scope for each exception. For home and small office networks, it is recommended that you set the scope to the local network only where possible.
Gathering Configuration Information To examine the current policy configuration for Windows Firewall, you can use the following command: netsh firewall show configuration. Troubleshooting Applications Modifying an application to work with a stateful filtering firewall is the ideal way to resolve issues. This is not always possible, so the firewall provides an interface for configuring exceptions for ports and applications.
NOTE: Failures in network applications are not limited to firewall issues. RPC or DCOM security changes can cause failures. It is important to note whether the failure is accompanied by a Windows Firewall Security Alert indicating that an application is being blocked. Resolution With either of the failures mentioned above, you can add exceptions to the configuration for Windows Firewall. Exceptions configure the firewall to permit specific inbound connections to the computer.
If the port number(s) for the process are less than 1024, it is likely that the port numbers will not change. If the port numbers used greater than 1024, the application may be using a range of ports, so opening individual ports may not resolve the issue reliably. Once you have the port number and protocol, add an exception for that port. To add a port exception: 1. Open Windows Firewall and click the Exceptions tab. 2. Click Add Port to display the Add a Port dialog box. a. Type the Port Number. b.
Citrix Program Neighborhood and PN Agent Citrix Program Neighborhood is a feature of ICA introduced with MetaFrame 1.8 that enables users to connect to MetaFrame and WinFrame servers and published applications. Program Neighborhood allows complete administrative control over application access and delivers an even greater level of seamless desktop integration. Alternatively, use PN Agent where Citrix Presentation Server or XenApp is deployed with Web Interface.
Documentation for the ICA client application is available from the Citrix Corporation Web site at www.citrix.com. Remote Desktop Connection Use the Remote Desktop Connection dialog box to establish connections to a Windows Terminal Server or to access remote applications using Microsoft RDP. Refer to the Microsoft Web site for documentation that offers a detailed explanation and instructions on how to use the Microsoft RDC dialog box.
26 Chapter 4 Applications
HP Remote Desktop Protocol (RDP) Multimedia and USB Enhancements HP Remote Desktop Protocol (RDP) Multimedia and USB Enhancements software enhances your users’ Microsoft Remote Desktop Protocol virtualization experience. HP Remote Desktop Protocol Enhancements provide users with a single-logon initiated, full-screen virtual desktop experience (including stereo audio). The client-side software, which is included in the latest WES and XPe images, works seamlessly.
HP Session Allocation Manager (SAM) Client The Consolidated Client Infrastructure (CCI) solution from HP centralizes desktop computing and storage resources into easily managed, highly secure data centers, while providing end users the convenience and familiarity of a traditional desktop environment. Additionally, companies have long used server-based computing (SBC) to create virtual instances of desktop applications on a server that multiple remote users can access.
Teemtalk Terminal Emulation All WES- or XPe-based thin client models include terminal emulation software to support computing on legacy platforms. The software uses the Telnet protocol to communicate with the computing platform. Refer to the terminal emulation documentation (supplied separately) for instructions. By default, you can access the Teemtalk Connection Wizard and the Teemtalk Emulator from Start > All Programs.
Altiris Client Agent The Altiris Client Agent allows the Altiris server to discover valid clients that are added to the network. The agent carries out assignments and reports the status of individual thin clients to the Altiris server.
Altiris Client Agent 31
HP Management Agent The HP Management Agent is a software component installed on thin client devices so that HP Device Manager can interact with them. The agent is embedded in the standard thin client WES and XPe image to enable Device Manager to manage devices out-of-the-box (agents on older devices, however, may need to be upgraded).
probe again upon reboot. Once the server is contacted, RALF registers the device with the HPCA infrastructure and waits to accept the request to install the HPCA agent. Once the HPDA agent is installed, RALF periodically contacts the server and verifies device registration attributes. Microsoft Internet Explorer Version 7.0 of the Microsoft Internet Explorer browser is installed locally on the thin client.
34 Chapter 4 Applications
5 Control Panel Extended Selections The Control Panel is accessed by selecting Start > Control Panel. Some of the extended selections available on the Control Panel are discussed in the following sections.
Enhanced Write Filter Manager WES and XPe include the Enhanced Write Filter (EWF) console application command-line tool, Ewfmgr.exe. In addition to the DOS command-line tool, the WES and XPe images include an Enhanced Write Filter GUI. The EWF allows the operating system (OS) to boot from a disk volume residing on any read-only media or write-protected hard drive while appearing to have read/write access to the OS. The EWF saves all writes to another storage location called an overlay.
Status Description Red Disabled Green Enabled Yellow Commit Mode Yellow with Red 'X' Write Filter Corrupted Example NOTE: In the event of a corrupted EWF state, you will need to re-flash the thin client unit with the standard shipping image provided on the web. If you are logged-on as Administrator, you can change the status of EWF by right-clicking on the icon and selecting the desired EWF state. NOTE: Since EWF Manager console utility (ewfmgr.
To access the EWF GUI, perform the following steps: 1. Log in as an administrator. 2. Select Start > Control Panel > Other Control Panel Options or Start > Control Panel > Administrative Tools. 3. Click the EWF Manager icon. 4. Use the EWF GUI to select the Write Filter options. EWF GUI Buttons The current version of the EWF GUI includes the following buttons: 38 Button Description Enable EWF This button is the same as executing ewfmgr.exe c: -Enable from the DOS prompt.
NOTE: When using the Commit boot command, all the temporary contents will be permanently written to the flash memory. In addition, all content accessed (and changes made) after running Commit, but before rebooting the system, will be written to the flash memory as well. This includes changes made during any number of login/logout sessions before the next reboot. DOS Command-line Tool Boot Commands The following table lists the EWF boot commands that are supported.
The following items are stored on the RAMDisk: ● Browser Web page cache ● Browser history ● Browser cookies ● Browser cache ● Temporary Internet files ● Print spooling ● User/system temporary files You can also use the RAMDisk for temporary storage of other data (such as roaming profiles) at the administrator’s discretion (see Local Drives on page 10). Use the RAMDisk Configuration dialog box to configure the RAMDisk size.
HP DHCP Settings Update Client The HP DHCP Settings Update Client is a utility found in the Control Panel that allows an IT Administrator to apply some settings to an HP WES or XPe operating system. The settings are applied through an .INI file that uses a subset of parameters from Microsoft’s sysprep.inf as well as several XPe/HP-specific keys. XPePrep can run by specifying a local .
HP ThinState Capture The HP ThinState Capture tool is a very simple wizard-based tool that you can use to capture an HP thin client WES or XPe image, which you can then deploy to another HP thin client of identical model and hardware. What do you need to have? ● An HP WES- or XPe-based thin client that contains the latest HP provided image ● An HP-approved USB flash drive (Disk-On-Key). Consult the t5630 quick specs for the latest approved USB flash drives.
2. Click Next. At this point, attach a disk on key (DOK) to the unit. The DOK drive letter and size are displayed. The DOK must be greater in size than the onboard flash disk. As a result, if the thin client has 512 MB Flash, then the USB flash drive must be 1 GB. Once the right DOK size is attached, the following screen displays. 3. Click Capture. The following warning displays. 4. Click Yes. The HP ThinState Capture tool formats and makes the USB flash drive bootable.
5. After you perform these actions, the HP ThinState Capture tool displays the following screen. Please follow the on-screen instructions. You can now use the USB flash drive to deploy the captured image to another HP thin client of the exact same model and hardware with equal or greater flash size capacity.
HP ThinState Deploy To perform an HP ThinState deployment: 1. Set the boot order in the F10 System BIOS to USB boot. 2. Attach the USB flash drive to the thin client unit you wish to deploy the captured image to, and then power on the unit. 3. Follow the on-screen instructions. After you remove the USB flash drive and cycle power to the system, the image will unbundle. This process can take between 10-12 minutes. Do not interrupt or cycle power to the unit during this process.
HP FTP Image Update HP FTP Image Update Client is a utility that allows image update from an FTP share to an HP thin client system running WES or XPe operating system. Server Requirements DHCP Server Option 137 should contain a string value specifying an FTP share where the WES or XPe images and WinPE image are stored.
NOTE: FTP Image Update is only provided on the t5630, t5630w, t5730, t5730w, gt7720, and vc4820T thin clients with the latest HP XPe image (5.1.606 or greater). For FTP Image Update to function properly, it requires the following available free space on the client: ~200MB of flash and ~250MB of RAM. FTP Image Update over wireless is not supported. For greater usage flexibility and to take advantage of this and all features provided in the latest image, HP recommends at least 1 GB of flash and 1 GB of RAM.
If the flash device has enough memory, the update client starts the download of the WinPE image, modifies the boot loader to boot to WinPE in the next system restart, and then restarts the system to continue to the WinPE phase. Once WinPE is loaded, IBRPE is spawned to image the system’s flash drive using the selected image from the FTP share. When the imaging completes, IBRPE automatically restarts the system to enter the FBA phase.
6 Administration and Image Upgrades This section highlights and discusses the Remote Administration capabilities and firmware upgrade methods applicable to the thin client. Altiris Deployment Solution Software The Altiris Deployment Solution software is a full-featured remote administration tool set. It accesses the thin client through the Altiris remote Agent and PXE server utilities installed on the thin client.
client to boot from a server on a network prior to booting the embedded operating system or the operating system from the local flash module. PXE allows a network administrator to remotely wake up a thin client and perform various management tasks, including loading the operating system and other software onto the thin client from a server over the network. The PXE client is installed on the thin client and the PXE server component is part of the Altiris Deployment Solution suite.
7 Peripherals Depending on the ports available, the thin client can provide services for USB, serial, parallel, and PCI devices, as long as the appropriate software is installed. Factory-installed software is described in the following section. As they become available, you can install add-ons for other services using the Altiris Deployment or HP Device Manager solution software. For more information, see Altiris Client Agent on page 30 and HP Management Agent on page 32.
4. Click Next in the first panel of the wizard. 5. Select Local printer configured to this computer. 6. Verify that the Automatically Detect and Install my Plug and Play Printer check box is not selected. 7. Click Next. 8. Select Use the Following Port. 9. Select the appropriate port from the list, and then click Next. 10. Choose the manufacturer and model of the printer, and then click Next. 11. Use the assigned default name or other name for the printer, and then click Next. 12.
Index A accounts creating user 11 user 7 add-on modules 49 add-on upgrades 49 adding ports, Microsoft Windows Firewall 22 adding printers 51 adding programs, Microsoft Windows Firewall 22 administration 49 Administrative Tools 15 administrator desktop 3 logon 7 Altiris Client Agent 16 deployment server 5 Deployment Solution 49 Altiris Deployment Solution 5 Altiris Web site 5, 45 applications 16 audio 52 automatic logon 6 deployment solution, Altiris 5 desktop 3 desktop administrator 3 desktop, user 3 Devi
image capture 42 image deployment 45 image selection, FTP Image Update 47 image upgrades 49 imaging tool 50 information, Web sites 1 internet 2 Internet Explorer 16 Internet Explorer unsafe file list 33 L language options 14 local drives 10 log on as Administrator 7 logging off 8 logon automatic 6 manual 7 Logon Configuration Manager 6 M Management Agent 16 manual logon 7 manufacturer print drivers 52 mapping network drives 11 Media Player 16 memory, volatile 10 Microsoft Internet Explorer 16 Microsoft Inte
W Web site Altiris 45 Citrix 25 HP SAM 28 HP support 16 HP Thin Client Imaging Tool white paper 45 more information 1 peripheral QuickSpecs 51 WES 3 Windows Media Player 33 Windows XPe 3 WES Web site 3 Windows Firewall 16 Windows Media Player 16 Windows Media Player Web site 33 Windows XPe Web site 3 write filter 10 writer filter 6 Z Z drive 10 Index 55
