Symantec Ghost is disk-imaging software used to create an image of a fully functional Windows computer along with the necessary applications. The image can then be staged to a central location such as a CD‑ROM to allow for multiple installations from the original image.

NOTE: Machines running data encryption software such as Pointsec cannot utilize the Ghost process. You must perform Ghost procedures prior to the application of data encryption programs such as Pointsec.

NOTE: If any language packs are installed, the origin language of English must be used for the Ghost Image. For example, if Spanish is the language currently used, this must be changed to English prior to ghosting the workstation. The procedure to revert to English for ghost imaging is given on page 2. The system can be changed back to the local language after the Ghost Image process is finished.

NOTE: If creating an image of a Windows computer in a different language than English, the Administrator ID name may be spelled differently (an example would be Administrateur for the French language).

NOTE: All Images should be labeled with the creation date and recreated each quarter with the release of the Quarterly Maintenance CD’s and ensure that they have the latest Tivoli deployed updates. This is in accordance with the District IE assessment.

NOTE: A Ghosted PC should not be used to create an image.

NOTE: A Windows computer must have been created with a Windows Request ID.

Prepare A Computer For Disk Imaging

Ensure that you are logged on to the domain using a Domain ID with the local Administrative rights on the source PC (for example, your unique Support ID).

Revert To English For Ghost Imaging

If any language packs are installed, the origin language of English must be used for the Ghost Image. Use this procedure to change the displayed language to English. The system can be changed back to the local language after the Ghost Image process is finished.

NOTE: These procedures may vary slightly with different operating system versions.

1. Log on to the computer with an Administrative equivalent ID.

2. From the Taskbar, click Start | Settings | Control Panel.

3. Click Regional Options. Some operating systems will label this Regional and Locale Options.

4. Under the General or Regional Options tab, at the Locale (location) drop‑down menu, select English.

5. If there is a Menus & Dialogs drop‑down menu, select English (United States). Click Apply when all options have been selected.

6. If the system displays a confirmation window, click Yes to confirm this change for all users.

7. Click OK. Close all windows and log off the machine for the settings to take effect.

Run The GETSID Utility

NOTE: Use this (source) SID to compare with the (target) SID when you restore the image. The difference between the two SID values indicates a successful regeneration of the SID.

1. Log on with an Administrative equivalent ID.

2. Insert the Ghost CD into the CD‑ROM drive.

3. Open a Command Prompt.

4. At the Command Prompt, change to the CD‑ROM drive letter.

5. Type:

getsid \\ComputerName ComputerName \\ComputerName ComputerName

For example, if the computer name is UPSNJRARPW0000, the syntax to obtain computer SID is:

getsid \\UPSNJRARPW0000 UPSNJRARPW0000 \\UPSNJRARPW0000 UPSNJRARPW0000

Press e, and the result will resemble:

The SID for account UPSNJRARPW0000\UPSNJRARPW0000 matches account UPSNJRARPW0000\ UPSNJRARPW0000
The SID for account UPSNJRARPW0000\UPSNJRARPW0000 is S‑1‑5‑21‑1796367639-1623354958-1310069909—1

The SID for account UPSNJRARPW0000\UPSNJRARPW0000 is S‑1‑5‑21‑1796367639-1623354958-1310069909—1

6. Write down the SID information. You will need this (source) SID to compare with the target SID, when you restore the image.

7. Remove the Ghost CD from the CD‑ROM drive.

Run The Ghost Preparation Utility

1. Type DSGhostPrep and press e.

The Ghost preparation tools will now run. The Microsoft Windows System Preparation tool prepares the preinstalled hard-disk contents of a Windows PC (referred to here as the Source PC) for imaging and subsequent transfer to other PCs (referred to here as the Target PCs). The SysPrep Tool prepares the Source Windows PC image to run a Mini-Setup Wizard and regenerate System Security Identifier (SID).

Sysprep prevents the use of third-party SID modification tools, such as Ghost Walker.

2. When the following message is displayed:

The system is now ready to be imaged. Shut down the system immediately and initiate the disk imaging process.

press any key to continue.

3. Insert the Ghost CD in the CD‑ROM drive.

4. Shut down the computer.

Connect To A Windows Member Server

1. Power on the computer with the Ghost CD in the CD‑ROM drive.

2. When the system prompts you to boot from CD, press e.

NOTE: Windows PE will load, this process will take several minutes. When the process is complete, the Command Prompt is displayed.

3. From the Command Prompt, type:

NET USE J: \\ServerName\Users /USER:DOMAIN\USERID

and press e.

NOTE: ServerName is the computer name of the member server, and Users is the name of the shared device. If you want to store the image in a different location, use the above command with that alternate location. Domain is the Domain in which you are storing the image. USERID is the ID with rights to the share.

4. When prompted, type your password, and press e.

5. Examine the Users directory for Ghost32.exe. If it exists, delete or rename it (the file may be an earlier version of Ghost).

6. Remove the Ghost CD from the CD‑ROM drive.

Create A Ghost Image

1. From the X:\Windows\System32 Command Prompt, type:
GhoCreat and press e.

NOTE: The status bar will indicate that the image is being saved. The version shown should be the latest.

2. When Ghost exits type:
Ghocheck.bat
and press e.

3. Click Yes to proceed with dump verify.

NOTE: The status bar will indicate that the image is being verified.

4. If the system displays a message:

SPAN VOLUME [1] DONE

press e to continue.

5. When prompted:

Found 0 difference(s)

press e to select OK.

Ghost has finished checking the image file. You now have a valid image file to restore.

Reset The Image Creation Computer

After completing the last procedure, the computer is left in a state equivalent to a newly ghosted machine. To complete a restoration, reboot the computer and continue from the Mini-Setup Wizard section of the Ghost Image Cloning Restore Procedures document.

K-Smart

Breaking News

GHOST Image Cloning Creation Procedures