What if you could deliver a temporary work environment to a user while running a virus scan or other utilities in the background?
Check out the following demo with more information provided below
Double-click to launch in YouTube*.
Background information: Intel vPro Technology provides the capability to deliver a bootable ISO image to a client, commonly referred to as IDE-Redirection. That bootable ISO image could do a number of items including a WinPE-based temporary work environment with network connectivity and associated utilities.
Customers who have experimented with IDE-Redirection may have noticed a few challenges as summarized below.
- Determining "what" should be delivered via IDE-Redirection
- Delivering a large ISO image via IDE-Redirection may have undesirable latencies.
- Network drivers are missing from the bootable ISO image. This is especially common with newer generation Intel vPro Technology platforms if the base image of the bootable ISO has not been updated.
- The ability to integrate with remote client once the ISO image loads (of course, if you have KVM Remote Control on newer Intel vPro Technology systems, this is less of an issue).
- It would be REALLY nice if the end-user could still "use" the system while the administrator\technician performs remediation activities.
- Customers want a single out-of-the-box solution that meets every need (reality check here - some customization will be required as everyone has their own requirements or preferences... but if a solid and extensible framework is provided, that often meets the need)
Take a look at "Instant Back to Work" - http://communities.intel.com/docs/DOC-19012
The document and resources provided at the download will guide you through the steps to create your own ISO image. A number of utilities and other downloads will be referenced. "Instant Back to Work" is a solution reference - meaning that it shows how the solution can be created while also allowing you to further customize if desired.
The solution reference includes a number of Intel vPro Technology Use Case Reference Designs (UCRDs).
One that you'll find very hand is the 2-stage IDE-Redirection boot referenced\linked in the documentation. When the final ISO image is generated, it will be ~400MB in size. The trick is to send a smaller boot-strap or "trigger" ISO image to the client and then load the large ISO. The large ISO can be local to the remote client harddrive, at a UNC path within the next, or even from a URL.
Another handy UCRD is the Remote ISO Launcher (RIL). If you are testing Intel vPro Technology and do not have support software to start an IDE-Redirect or Serial-over-LAN session, RIL is a nice reference tool. More information including link for download is inside the "Instant Back to Work" PDF.
The documentation will point you to ISO Builder and driver downloads for LAN and MEI. These will provide the latest\greatest versions to allow network connectivity and interactions from the WinPE on the remote client.
What will the end state look like?
When the ISO image is loaded on the "end-user" system, it will look similar to the image below. Basically - you have a web browser with proxy settings in place to communicate to web-enabled applications. For example - if you have email with web-based interface (Outlook WebAccess, Google, etc), then you are able to login and use it. Incidentally, during the ISO build process a default URL is specified. In addition, you can open up other browser tabs as shown in the example.
Meanwhile - on the "admin console" you have a commandline interface to perform remediation tasks. The instructions will guide you through steps to include SSH, Putty, network drivers, and Intel AMT related drivers. Using this framework, the administrator has a commandline interface that can operate unbeknownst to the user. You could map a drive from the remote client to a valid fileshare to transfer files. You could start an anti-virus\malware scan as noted in the documentation and image below. (Putty window is the commandline. The scan.log was transferred from the remote client to a fileshare and then opened on the admin screen)
The remediation activity may take several minutes... but that doesn't mean the user is totally shutdown from using the system. Hence the name - "Instant Back to Work"
Give it a try. Post comments to let us know what you think.