Symantec Ghost Solution Suite 2.0 Getting Started
Symantec Ghost Solution Suite 2.0 Getting Started
Symantec Ghost Solution Suite 2.0 Getting Started
Legal Notice
Copyright © 2008 Symantec Corporation. All rights reserved.
Symantec, the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the
product are trademarks or registered trademarks of Symantec Corporation or its affiliates
in the U.S. and other countries. Other names may be trademarks of their respective owners.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING,
PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED
IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in
Commercial Computer Software or Commercial Computer Software Documentation", as
applicable, and any successor regulations. Any use, modification, reproduction release,
performance, display or disclosure of the Licensed Software and Documentation by the U.S.
Government shall be solely in accordance with the terms of this Agreement.
Symantec Corporation
20330 Stevens Creek Blvd.
Cupertino, CA 95014
http://www.symantec.com
Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our online
Knowledge Base. The Technical Support group works collaboratively with the
other functional areas within Symantec to answer your questions in a timely
fashion. For example, the Technical Support group works with Product Engineering
and Symantec Security Response to provide alerting services and virus definition
updates.
Symantec’s maintenance offerings include the following:
■ A range of support options that give you the flexibility to select the right
amount of service for any size organization
■ Telephone and Web-based support that provides rapid response and
up-to-the-minute information
■ Upgrade assurance that delivers automatic software upgrade protection
■ Global support that is available 24 hours a day, 7 days a week
■ Advanced features, including Account Management Services
For information about Symantec’s Maintenance Programs, you can visit our Web
site at the following URL:
www.symantec.com/techsupp/
Customer service
Customer service information is available at the following URL:
www.symantec.com/techsupp/
Customer Service is available to assist with the following types of issues:
■ Questions regarding product licensing or serialization
■ Product registration updates, such as address or name changes
■ General product information (features, language availability, local dealers)
■ Latest information about product updates and upgrades
■ Information about upgrade assurance and maintenance contracts
■ Information about the Symantec Buying Programs
■ Advice about Symantec's technical support options
■ Nontechnical presales questions
■ Issues that are related to CD-ROMs or manuals
Maintenance agreement resources
If you want to contact Symantec regarding an existing maintenance agreement,
please contact the maintenance agreement administration team for your region
as follows:
Symantec Early Warning Solutions These solutions provide early warning of cyber attacks, comprehensive threat
analysis, and countermeasures to prevent attacks before they occur.
Managed Security Services These services remove the burden of managing and monitoring security devices
and events, ensuring rapid response to real threats.
Consulting Services Symantec Consulting Services provide on-site technical expertise from
Symantec and its trusted partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include assessment, design,
implementation, monitoring, and management capabilities. Each is focused on
establishing and maintaining the integrity and availability of your IT resources.
Educational Services Educational Services provide a full array of technical training, security
education, security certification, and awareness communication programs.
To access more information about Enterprise services, please visit our Web site
at the following URL:
www.symantec.com
Select your country or language from the site index.
Contents
Symantec User Symantec User Migration is an application that lets you migrate
Migration user settings and files from one computer to another.
Symantec Ghost OEM The Symantec Ghost OEM version of 3Com Boot Services is
version of 3Com Boot included with Symantec Ghost. 3Com Boot Services lets you install
Services a PXE server.
10 Introducing Symantec Ghost Solution Suite
About Symantec Ghost™ Solution Suite
Create image files of Use Symantec Ghost to create image files of and restore
and restore computers computers. Computers can be backed up to a network or to a wide
range of hard drives and removable media, including CD/DVD
drives, FireWire and USB hard drives, ZIP, and JAZ drives.
Hardware and Manage hardware and software inventory from the centralized
software inventory Console.
Client staging area Use a directory on a client computer as a repository for Symantec
Ghost image files, application packages, user profiles, or other
files.
Manage computers Remotely manage all client computers from a central Console and
execute tasks on client computers from the Console or from the
client.
Multicast file transfer Transfer all files, including installation packages, using the
multicasting functionality from the Console. Reduce network
traffic by sending an individual file to multiple recipients
simultaneously. Flexible file transfer lets you specify where a file
transfer goes.
Introducing Symantec Ghost Solution Suite 11
About Symantec Ghost™ Solution Suite
Retire disks Wipe disks to U.S. Department of Defense standards using GDisk.
Transfer user data Capture user files, application settings, and operating system
settings from a computer and transfer them onto another
computer or onto a reimaged computer.
File system support Back up, restore, or clone FAT, FAT32, NTFS, and Linux Ext2/3
file systems.
Image file editing Edit FAT, FAT32, NTFS, and Linux image files by using Ghost
Explorer.
Restore individual files Restore individual files from an image file by using Ghost Explorer.
SID-changing Change SIDs using the Symantec Ghost utility Ghost Walker.
capability Symantec Ghost also supports Microsoft Sysprep.
Disk and partition Run GDisk from DOS or from a command shell in Windows to
management manage partitions and disks.
OmniFS utility Manipulate files and directories in a locally attached NTFS, FAT,
or Linux file system.
GhRegEdit utility Edit the Windows registry from DOS or WinPE by using the
executable programs GhRegEdt and GhRegEdit32.
Tutorials View the set of tutorials that are included in Symantec Ghost to
provide a demonstration of the most commonly used features.
WinPE PreOS Support Both the console, and the standard tools include WinPE 2.0 in
addition to PC-DOS. This greatly improves hardware compatibility.
Hot Imaging Images may be created hot, using Volume Snapshot, from both
the Ghost Console and the standard tools.
Machine Erase The Console has a task to perform the secure erase of a computer
for decommissioning, or prior to re-imaging.
Support for VMDK and VMDK virtual disk, Symantec Backup Exec System Recovery (V2I)
V2i/PQI images and Symantec Deploy Center (PQI) images can be deployed directly
from the Console and from Ghost.
Native Linux versions Native Linux versions of the Ghost executable and standard tools
of Ghost tools are provided, along with a bundled Linux distribution (ThinStation)
for use when creating boot packages.
New Software and File You can specify the order in which to perform file transfer,
Actions Interface command execute and AI package deployment task steps in the
Ghost Console. The ability to transfer folders to clients, retrieve
files from clients, and obtain return codes when running command
actions is also provided.
Improved Sysprep The interface for creating sysprep unattend files has been
Interface improved.
User Migration A User Migration content development tool which allows advanced
Application Content users to create their own application migration definitions is
IDE provided.
Backup and restore Create and restore image files and copy information from an
computers existing disk to a new one during a hardware upgrade.
Introducing Symantec Ghost Solution Suite 13
Where to find more information
Edit image files Create and copy image files, copy partitions within image files,
compress/uncompress partitions, and restore individual files from
images.
Microsoft Sysprep Use DeployPrep to aid in the use of Microsoft SysPrep for
support deploying images with Windows 2000 or Windows XP. Automate
the testing of a SysPrep configuration and also add additional
configuration options to Microsoft SysPrep.
Report on a hard disk Generate a diagnostic report that includes information about your
hard disk.
Diagnostic and utility The Symantec Deploy Toolkit provides the following features:
support
■ Perform unattended imaging
■ Manipulate partitions
■ Create and modify a virtual boot environment that eliminates
the need to visit workstations
■ Generate partition diagnostics
■ Access hidden or unsupported partitions
■ Adapt processes based on environment variables
■ Restore individual files and directories from within images
■ Modify files within images
PC management
Symantec Ghost lets you remotely manage all networked computers company-wide.
Using the Symantec Ghost Console, you can perform a number of tasks to manage
computers. From the Ghost Console server, you can do the following:
■ Manage hardware and software inventory from a centralized Console.
■ Create detailed reports from fully customizable filters and views.
■ Create dynamic folders to manage a group of target computers based upon
hardware or software attributes.
■ Roll out Ghost images, application packages, user profiles, or other files to a
directory on a client computer for local tasks.
■ Preserve directories during a restore.
■ Roll out software.
■ Upgrade operating systems.
■ Migrate user settings.
■ Back up computers.
■ Execute commands remotely.
As an administrator, you can efficiently manage networked computers by grouping
them within the Symantec Ghost Console. The Symantec Ghost Console leverages
all Ghost functionality as described in this guide.
Ghost executable
The Ghost executable, Ghost.exe, is at the heart of Symantec Ghost. Ghost.exe is
a small executable run from DOS that contains all of the functions that you need
to do the following:
■ Clone disk to disk.
■ Clone partition to partition.
■ Back up or restore using LPT, USB, FireWire, TCP/IP, or a mapped network
drive.
Ghost32.exe is a Win32 version of Ghost.exe and is designed to run on Microsoft
Windows Vista/PE/XP/2000.
Client Inventory
The Symantec Ghost Client Inventory functionality obtains information from the
Windows Management Interface (WMI) repository on each Console client computer.
You can choose which information you want to collect and the computers from
which to collect it.
The information that you collect is stored in a database on the Console server and
is updated on request. You can query this database to identify the computers that
have certain properties. For example, you can search for computers that have at
least x amount of available memory and can use the selected computers as the
target of a task. For example, you can identify the computers that do not have the
required specifications for Microsoft Vista.
GhostCasting
The GhostCast Server lets you send image files to multiple computers. The
GhostCasting feature leverages the functionality of the Ghost executable program
to help restore multiple computers quickly and efficiently. You can use GhostCast
Server to create an image file of a client computer.
You can then deliver the image file to multiple computers using one of the
following options:
Directed broadcast The data is sent to all computers on a specified subnet. If more
than one subnet is targeted, one stream is sent to each subnet.
Multicast The data is sent to all of the computers on the network that have
requested the data. Only one stream of data is sent.
By selecting one of these options, you can optimize Ghost traffic to match your
environment and network bandwidth.
20 Symantec Ghost concepts and features
Symantec Ghost concepts and features
User migration
The Symantec User Migration Wizard lets you migrate user files, operating system
and application settings, and registry entries. You can run the Wizard in a direct
computer-to-computer operation, or you can save settings and files to a package.
The settings are restored for those operating systems and applications that Ghost
supports. This feature helps reduce the amount of time that users spend on
restoring files and settings after their computers are updated.
Ghost virtual partition Use the virtual partition on client computers that have an
operating system installed. The virtual partition is created
automatically when the Console client is installed.
Ghost boot partition Use the boot partition on client computers that have no operating
system installed. If there is no operating system installed, then
you cannot install the Console client directly onto the computer.
However, you can create a Ghost boot partition that contains the
Console client and then connect to the Console.
The Ghost virtual partition and the Ghost boot partition offer the same
functionality. Only one is required on a client computer.
Boot package
A boot package contains the files necessary for performing Ghost functions on a
client computer.
A boot package can be stored in a Ghost image file, ISO image, VMware Virtual
Floppy, Virtual Partition, or PXE image or on a floppy disk set, CD/DVD, or USB
flash drive.
A boot package is always created using the Ghost Boot Wizard, which guides you
through the process of selecting the type of boot package required.
For example, you might want to back up a computer using a USB cable. You must
create a boot disk set using the Ghost Boot Wizard that contains Ghost.exe and
the driver files required to write to a CD/DVD. Start the computer with the boot
disk set, and Symantec Ghost lets you write to a CD/DVD.
The Ghost Boot Wizard includes a Universal Network Driver (UNDI), which
supports most PXE-capable network cards. You can create a single boot package
Symantec Ghost concepts and features 21
Symantec Ghost concepts and features
that lets you start any computer on your network in DOS, regardless of the
different network cards.
Tasks
You create and execute tasks from the Symantec Ghost Console. Tasks leverage
the features of Symantec Ghost to perform functions efficiently and quickly.
You can run tasks on a group of computers and perform a number of functions
within the same task. You can also schedule tasks to run automatically, or you
can run them from the command line.
You can create a task to do any of the following actions:
■ Backing up or restoring
■ Applying configuration settings
■ Rolling out software
■ Transferring files
■ Executing a command
■ Moving desktop and application settings and user files
Ghost tools
Symantec Ghost Solution Suite includes the following tools to help you manage
your computers:
GDisk GDisk is a utility that lets you create partitions, reinitialize master
boot records, delete data, and wipe your disks. GDisk lets you securely
retire your hard disks to U.S. Department of Defense standards.
OmniFS OmniFS lets you manipulate files and directories in a locally attached
NTFS or FAT file system from DOS or WinPE. OmniFS supports FAT
hidden partitions.
GhRegEdit GhRegEdit lets you edit Windows registry keys and values.
22 Symantec Ghost concepts and features
Common user scenarios
Ghost Walker Ghost Walker lets you assign statistically unique security identifiers
(SIDs) to restored and cloned Microsoft Windows Vista/XP/2000
workstations.
Linux versions of all of these tools are provided, with the exception of Ghost
Walker.
■ A group that includes those computers that have the minimum specifications
to install Microsoft Vista Enterprise
■ A group that includes those computers that have the minimum specifications
to install Microsoft Vista Business
■ A group that includes those computers that do not have the minimum
specifications to install Microsoft Vista.
These filters are built-in to the Symantec Ghost Console and you need only apply
them to a Machine Group to pinpoint the Vista-readiness of your hardware
company-wide. From the Console you can then print a report that provides this
information to your technicians who can then upgrade and replace computers as
indicated.
For those computers that become redundant you can do the following steps:
Safely retire hard See “Retiring a hard disk securely” on page 24.
disks
The second step of your migration is to create a model computer with Windows
Vista installed and the required applications. Depending upon your organization
you may require more than one image, for example, an accounting department
is likely to require different applications to call support staff. An alternative to
creating multiple images is to create one image with Vista and then use AutoInstall
to roll out installation packages of specific applications to target computers.
The third step is to deploy the Vista image file to client computers. This step can
be done in combination with User Migration Capture and Restore tasks.
In one task, launched from the Console, you can do the following steps:
■ In a User Migration: Capture step, capture user settings and files and store
them in the client staging area on the client computer
■ In a Clone step, clone client computers with the Vista image file
■ In a User Migration: Restore step, restore user settings and files on the client
computer
■ In a Configuration step, configure computers
Using the multicast functionality to deploy the image lets you simultaneously
clone all targeted computers. By using the data transfer options in the Console
you can optimize the rollout to fit your environment.
24 Symantec Ghost concepts and features
Common user scenarios
patched properly. For example, you can identify the computers that do not have
the latest hot fix from Microsoft installed. You can then use File Transfer and
Execute Command from the Ghost Console to transfer the security patch to the
computers and install it.
amount of network traffic. After you create and deploy the image you can schedule
a task to restore each computer automatically in the evening or early morning.