Page 2 - “Notices” on page 35.
Note: Before using this information and the product it supports, read the general information in Appendix B “Notices” on page 35. Fifth Edition (March 2014) © Copyright Lenovo 2008, 2014. LIMITED AND RESTRICTED RIGHTS NOTICE: If data or software is delivered pursuant a General Services Administratio...
Page 3 - Contents
Contents Preface . . . . . . . . . . . . . . . . . . ii Chapter 1. Overview . . . . . . . . . . . 1 Features . . . . . . . . . . . . . . . . . . 1 Considerations for deploying Access Connections . . 2 Requirements and specifications fordeployment . . . . . . . . . . . . . . . 2 Access Connections de...
Page 4 - ThinkVantage
Preface This guide is intended for IT administrators, or those who are responsible for deploying the AccessConnections TM program on computers in their organizations. The purpose of this guide is to provide the information required for installing Access Connections on one or many computers, provided...
Page 5 - Features
Chapter 1. Overview Access Connections is a connectivity assistant program which helps to configure various networkconnections including wireless LANs. Users can create and manage location profiles that stores the networkand Internet configuration settings needed to connect a client computer to a ne...
Page 6 - To view the current list of supported ThinkPad; Access Connections deployment features; them after the client systems have been deployed.
• Create location profiles for remote deployment(administrator only) An Access Connections administrator can define location profiles for deployment to the client computers. Considerations for deploying Access Connections Collecting information about the various places where users might attempt to c...
Page 7 - Chapter 2. Installing Access Connections; Installing Access Connections without user interaction; Windows
Chapter 2. Installing Access Connections The following instructions provide installation procedures for Access Connections. Installing Access Connections without user interaction To install Access Connections without user interaction, complete the following steps: 1. Start Microsoft ® Windows ® XP, ...
Page 9 - Chapter 3. Working with the Administrator Feature; Enabling the Administrator feature; the Import/Export feature for deploying Access Connections.; Enable; the Tools tab under the Advanced view.; Enable Administrator Feature; to close the Enabler.; Using the Administrator feature
Chapter 3. Working with the Administrator Feature This chapter provides you with the information you need to enable and use the administrator featuresof Access Connections. Enabling the Administrator feature Access Connections must be installed on your system prior to enabling the Administrator feat...
Page 10 - Creating a distribution package; Advanced
1. Using Access Connections, create location profiles. Consider the following scenarios as you create the location profiles: • Office and building connections • Home connections • Branch-office connections • Connections while traveling and hot-spot connections For instructions on how to create locat...
Page 13 - Associated MAC / IP Address; Create
4. Click on Add/Delete under Associated MAC / IP Address for selected profile. This allows the setting of MAC or IP addresses of the network router(s) to be associated with an Ethernet enabled profile forlocation switching. This will prevent the pop-up message when connecting an unknown Ethernetconn...
Page 14 - Connections; Save; Defining policies for Access Connections; Distribution Control List with this package
8. On the Export Location Profiles dialog box, navigate to your applicable directory path. and type the name for your .loa file. By default, the .loa and .sig files which are required for deployment are saved in C:\Program Files\Thinkpad\ConnectionUtilities\Loa (Windows XP) or C:\Program Files\lenov...
Page 15 - the group of serial numbers.; Client Configuration Policy; Do not allow clients to become an; • Create, import and export location profiles.
Creating Groups: When creating groups of serial numbers, flat text files can be imported which contain the group of serial numbers. Figure 8. Creating Group The file must be formatted such that each line contains a single serial number. These text files can becreated by exporting a list that has bee...
Page 16 - Marking the box beside; Do not allow clients to become an administrator:; will prevent users from enabling
The following screen capture displays the settings you can configure for the Client tab of the ClientConfiguration Policy: Figure 9. Client Configuration Policy Marking the box beside Do not allow clients to become an administrator: will prevent users from enabling the Administrator Feature on their...
Page 17 - Network
• Create and apply WLAN location profiles using the Find Wireless Network function for Windows users without administrator privileges. • Automatic location profile switching. • Control roaming for Mobile Broadband devices. Global settings: On the Network tab of Global Settings, you can set the follo...
Page 18 - On the; Notification; tab of Global settings, you can set the following policies:
The following screen captures provide examples for the Global Settings tab for Access Connections wheninstalled on the Windows Vista and Windows 7 operating system: Figure 11. Network Global Settings for Windows Vista and Windows 7 On the Notification tab of Global settings, you can set the followin...
Page 21 - Additional Settings; Connections to apply during new profile creation:; General Options; • Disable Ethernet adapter when Ethernet cable is unplugged; Roaming Options
Figure 14. Defining Location Profiles Additional Settings : You can set the following policies on the Additional Settings tab for Access Connections to apply during new profile creation: General Options • Do not show warning message when connecting to an unencrypted network • Disable Ethernet adapte...
Page 22 - Default Options for Additional Settings
Note: If this option is selected, all the new Wired/Wireless profiles will not be added to automatic locations switching. • Do not allow clients to change automatic location switching settings Note: If this option is selected, the automatic location switching settings for the end users is grayed out...
Page 25 - Include PAC AID Groups with this package:; Create a new PAC AID Group by completing the following steps:
The local authenticator sends its AID to an authenticating client, and the client checks the PAC AID groupreferenced in the location profile being applied, to see if the authenticating AID belongs to the group. If yes,then the client tries to use an existing PAC if available without any confirmatory...
Page 26 - On the Define PAC AID Groups window, click; Groups; Available Pacs; machine where the AID group is being created.
1. On the Define PAC AID Groups window, click Groups . Figure 18. Defining PAC AID Groups 2. Right click on Available Pacs . Note: The PAC with the AID which is intended to be included in the Group must be present on the machine where the AID group is being created. 22 Access Connections Deployment ...
Page 27 - . To remove a group, select the group from the available PAC AIDS; Remove; Allow silent import of this package after client installation
3. From the drop down menu, click Create Group . You can add or remove PAC AID Groups to a distribution package. To add a group, select it from thedrop down menu and click Add . To remove a group, select the group from the available PAC AIDS list and then click Remove . Figure 19. Creating PAC AID G...
Page 29 - Chapter 4. Deploying Access Connections; Deploy on new computers; Allow; Deploy on existing client computers; Allow silent import of; existing client computer.
Chapter 4. Deploying Access Connections After creating the location profiles required for client users, you can also manage and deploy new, updated,or revised location profiles to client computers. The following examples describe deployment scenariosused in deploying Access Connections: • Deploy Acc...
Page 30 - Deleting locked profiles; There are two ways to delete a locked Access Connections profile.; Updating deployed Profiles
Deleting locked profiles There are two ways to delete a locked Access Connections profile. 1. Uninstall Access Connections and choose No when asked to save existing profiles. 2. To delete locked profiles remotely complete the following steps: • Create another deployment package with the same profile...
Page 31 - Chapter 5. Working with Active Directory and ADM files; Adding Administrative Templates
Chapter 5. Working with Active Directory and ADM files Active Directory provides a mechanism that gives administrators the ability to manage computers, groups,end users, domains, security policies, and any type of user-defined objects. The mechanisms used by ActiveDirectory to accomplish this are kn...
Page 32 - Group Policy settings; Policy Setting
4. The Access Connections installation on the client machine should not show the Peer-to-Peer tab on main interface. Note: In a real time scenario, the client system automatically refreshes the Group Policy at certain time intervals. By default, this time interval is 90 mins, with a random offset of...
Page 35 - Adding logon scripts into Group policy; Creating the Acloa.bat file
Deploying .LOA and .SIG files through Active Directory with logon scripts The .loa file and .sig file will be stored in C:\Program Files\ThinkPad\ConnectUtilities [Windows XP] or C:\Program Files\lenovo\Access Connections [Windows Vista or 7]. When deploying the .loa and .sig files through Active Di...
Page 37 - Appendix A. Command line interface
Appendix A. Command line interface Access Connections can accept command line input to switch between location profiles and to import orexport locations profiles. You can input these commands interactively within a command prompt window,or you can create batch files for use by other users. Access Co...
Page 40 - Trademarks
Trademarks The following terms are trademarks of Lenovo in the United States, other countries, or both: Access ConnectionsLenovoThinkVantageThinkPad Microsoft, Windows, and Windows Vista are trademarks of the Microsoft group of companies. Intel is a trademark of Intel Corporation in the United State...
