FDCC(Federal Desktop Core Configuration)是美国NIST(National Institute of Standards and Technology)和Microsoft联合制定的桌面安全标准,由NSA(National Security Agency)在全美政府机构中推行. 部署了FDCC的Vista,其安全策略主要指组策略(Group Policy),下面是怎么修改组策略来远程部署ITM6 OS agent。

1. 在目标机上修改组策略,允许文件和打印机共享,允许网络登录，使远程文件系统共享成为可能。

C:\> gpedit
     computer configuration/
        windows settings/
          security settings/
             windows firewall with Advance Security/
                Inbound Rules
              右击 "New Rule" ,添加,--  Predefined/"File and Printer Sharing"和Predefined/"Netlogon service"

C:\> gpupdate /force

２．在目标机上启动远程文件共享。
C:\>net share c=c:\

３. 在目标机上启动远程注册服务.
Control Panel->Administrative Tools->Services->"Remote Registry"

4. 部署ITM6 OS agent

C:\>tacmd createnode -h machine1 -u administrator -w password123
KUICCN001I Initializing required services...
KUICCN039I Attempting to connect to host tiv01 ...
KUICCN050I Distributing file 111 of 111 (88.6 MB / 88.7 MB)...
KUICCN002I Beginning the installation and configuration process...

KUICCN057I The node creation on host tiv01 was successful.

KUICCN065I The node creation operation was a success.