Lock screen during software updates

(imported topic written by SystemAdmin)

hi @all,

we have only one client (Windows 7, TEM Client 8.2.1093) update per year. So the whole updates are over 1,5 GB.

We send the user a standard message with bigfix and when the user click “Take Action” the updates run.

The most updates have prerequisites like no notes.exe or acrobat*.exe or so on should run.

Our idea is to lock the screen with a picture like “Your System is in maintanance…”

Also the Tivoli Remote Control has such a feature, it is called “activate privacy” with the standard template “C:\Program Files (x86)\IBM\Tivoli\Remote Control\Target\privacy.bmp”

There a any ideas or standard solution or features from the TEM specialists??

Have anyone such a solution implemented in BigFix??? Or a idea?

Thanks Andi

(imported comment written by jgolembi)

Andi,

A few things that come to mind just from brainstorming.

  1. Use your first fixlet in this HUMUNGOUS update to change the LOGON background to “WORK IN PROGRESS” then restart the computer and work through the remainder of the Baseline. At the end of the baseline replace that LOGON BACKGROUND with “WORK IS COMPLETE.” Then restart the machine.
  2. You could launch an HTA that does the same thing…

I have not used the privacy features of Tivoli Remote Control, I will have to look into that.

-John G

(imported comment written by jgolembi)

Andi,

A few things that come to mind just from brainstorming.

  1. Use your first fixlet in this HUMUNGOUS update to change the LOGON background to “WORK IN PROGRESS” then restart the computer and work through the remainder of the Baseline. At the end of the baseline replace that LOGON BACKGROUND with “WORK IS COMPLETE.” Then restart the machine.
  2. You could launch an HTA that does the same thing…

I have not used the privacy features of Tivoli Remote Control, I will have to look into that.

-John G

(imported comment written by SystemAdmin)

Hi,

In line with John’s suggestion something we could try is extracting TRC’s privacy functionality into a standalone executable you could download and run with RunAsCurrentUser.exe before applying the changes and then run it again to disable the privacy mode.

You could also have the flexibility of enable and disable privacy within a single fixlet’s action script, although this might not be the best approach unless the action takes enough time to ensure it is worth doing, but more over you can ensure the script won’t fail halfway-through and then privacy won’t be disabled.

I’m going to be out of the office for a week, but once I’m back I’m happy to try to create this privacy executable for you if you want to try out this approach.

(imported comment written by SystemAdmin)

I would be interested in a lockable screen as well if it were a separate executable. Would be a cool feature when applying large service packs.

We just picked up TEM a couple months ago and I’m still getting familiar with it. I am a little hesitant to go and setup the remote control component until I’m more comfortable with everything first.