Manual
Table Of Contents
- Preface
- Chapter 1. Overview
- Chapter 2. Installation
- Chapter 3. Working with Client Security Solution
- Chapter 4. Working with ThinkVantage Fingerprint Software
- Chapter 5. Working with Lenovo Fingerprint Software
- Chapter 6. Best Practices
- Deployment examples for installing Client Security Solution
- Switching Client Security Solution modes
- Corporate Active Directory rollout
- Standalone Install for CD or script files
- System Update
- System Migration Assistant
- Generating a certificate using key generation in the TPM
- Using USB fingerprint keyboards with 2008 ThinkPad notebook computer models (R400/R500/T400/T500/W500/X200/X301)
- Appendix A. Special considerations for using the Lenovo Fingerprint Keyboard with some ThinkPad notebook models
- Appendix B. Synchronizing password in Client Security Solution after the Windows password is reset
- Appendix C. Using Client Security Solution on a reinstalled Windows operating system
- Appendix D. Using the TPM on ThinkPad notebook computers
- Appendix E. Notices
- Glossary
ThefollowingexamplesaresettingsthatActiveDirectorycanmanageforClientSecuritySolution:
•Securitypolicies.
•Customsecuritypolicies;suchaswhethertouseaWindowspasswordorClientSecuritySolution
passphrase.
Administrative(ADM)templateles
TheADM(Administrative)templateledenespolicysettingsusedbyapplicationsontheclientcomputers.
Policiesarespecicsettingsthatgoverntheapplicationbehavior.Policysettingsalsodenewhetherthe
userwillbeallowedtosetspecicsettingsthroughtheapplication.
Settingsdenedbyanadministratorontheserveraredenedaspolicies.Settingsdenedbyauseronthe
clientcomputerforanapplicationaredenedaspreferences.AsdenedbyMicrosoft,policysettingstake
precedenceoverpreferences.
Forexample,ausermayputabackgroundimageonhisdesktop.Thisistheuser'spreferencesetting.An
administratormaydeneasettingontheserverthatdictatesthatausermustuseaspecicbackground
image.Theadministratorspolicysettingwilloverridethepreferencesetbytheuser.
WhenaThinkVantageTechnologyproductchecksforasetting,itwilllookforthesettinginthefollowing
order:
•Computerpolicies
•Userpolicies
•Defaultuserpolicies
•Computerpreferences
•Userpreferences
•Defaultuserpreferences
Asdescribedpreviously,computeranduserpoliciesaredenedbytheadministrator.Thesesettingscanbe
initializedthroughtheXMLcongurationleorthroughaGroupPolicyintheActiveDirectory.Computerand
userpreferencesaresetbytheuserontheclientcomputerthroughoptionsintheapplicationsinterface.
DefaultuserpreferencesareinitializedbytheXMLcongurationscript.Usersdonotchangethevalues
directly.Changesmadetothesesettingsbyauserwillbeupdatedintheuserpreferences.
CustomersnotusingActiveDirectorycancreateadefaultsetofpolicysettingstobedeployedtoclient
systems.AdministratorscanmodifyXMLcongurationscriptsandspecifythattheybeprocessedduring
theinstallationoftheproduct.
Deningmanageablesettings
ThefollowingexampleshowssettingsintheGroupPolicyeditorusingthefollowinghierarchy:
ComputerConguration>AdministrativeTemplates>ThinkVantageTechnologies>
ClientSecuritySolution>AuthenticationPolicies>MaxRetries>
Passwordnumberofretries
TheADMlesindicatewhereintheregistrythesettingswillbereected.Thesesettingswillbeinthe
followingregistrylocations:
Computerpolicies:
HKLM\Software\Policies\Lenovo\ClientSecuritySolution\
Userpolicies:
HKCU\Software\Policies\Lenovo\ClientSecuritySolution\
Defaultuserpolicies:
HKLM\Software\Policies\Lenovo\ClientSecuritySolution\Userdefaults
Computerpreferences:
Chapter3.WorkingwithClientSecuritySolution41