During an initial deployment of GSS in a 80 station lab we started experiencing this issue. As a result we removed the Automation Partition post imaging.
Since then I have been able to replicate it using VMs. The problem stems from a "feature" of pevious versions of GSS/Altiris. The details of this feature are outlined in this thread and I'm going to expand on them here for completeness and how they relate to Deep Freeze: PC booting into Automation if I power it off after hang or crash
Eric, you're correct in that this issue only occurs when the workstation is frozen. With the information in the article linked above, here is what I believe is causing the issue. Would love to hear from a Symantec Official about this and if this may be corrected/changed in future builds.
As mentioned in the linked article, when you install an Automation Partition, the bootloader is replaced with an Altiris/GSS bootloader. During the boot process the bootloader sets the Automation Partition as the default boot option, but continues to perform a standard Windows boot. The user uses the OS normally and when they shut down the AClient changes the bootloader to boot Windows as default.
Throwing Deep Freeze into the mix complicates things. Here is what I think is the chronological process of what causes this problem. We'll begin with the problem workstation being in a "Frozen" state.
- Workstation starts, BIOS/EFI posts, performs hand off to GSS Bootloader.
- GSS Bootloader, as per the feature linked above, sets the Automation Partition as the default and continues to load Windows.
- Windows loads, user uses the machine normally and initiates a "graceful" shut down.
- AClient updates the GSS Bootloader to set Windows as the default and continues the shut down.
- Deep Freeze detects the GSS Bootloader modification and reverts the change (as it should), thus setting the Automation Partition back to the default. This happens before Deep Freeze is unloaded and the workstation restarted.
- Workstation restarts, BIOS/EFI posts, performs hand off to GSS Bootloader.
- GSS Bootloader determines that the Automation Partition is the default and loads into Automation.
- Automation determines there are no tasks scheduled for this workstation, updates the GSS Bootloader to set Windows to the default, and restarts. At this point Deep Freeze was never loaded and therefore doesn't undo the GSS Bootloader modification.
- Workstation starts, BIOS/EFI posts, performs hand off to GSS Bootloader. We return to Step 2 above and continue to loop indefinitely or until we set the machine to "Thaw".
Depending on your "Frozen"/"Thawed" state and the transition between them will effect the behavior. So picking up DURING Step 3 above with the same machine, but before the shut down:
- From the Deep Freeze Console, Faronics Core Console, or Deep Freeze Client inform Deep Freeze to reboot the workstation "Thawed".
- Deep Freeze initiates a "graceful" shutdown.
- AClient updates the GSS Bootloader to set Windows as the default and continues the shut down.
- Deep Freeze, again, detects the GSS Bootloader modification and reverts the change (again as it should), thus setting the Automation Partition back to the default.
- Workstation starts, BIOS/EFI posts, performs hand off to GSS Bootloader.
- GSS Bootloader still has the Automation Partition as the default. Workstation boots to Automation and exits as there are no jobs assigned to the specific workstation.
- Windows loads fully and you make whatever changes necessary to the machine.
- You perform a simple restart, not "Freezing" the workstation.
- AClient updates the GSS Bootloader to set Windows as the deafult and continues the restart. This time Deep Freeze doesn't undo the change to the GSS Bootloader and Windows restarts normally without entering Automation.
Also spotted this behavior during a Windows Update window which had nothing to do with Deep Freeze.
- Windows is running normally, Windows Updates are installed, and a reboot is required.
- Workstation starts, BIOS/EFI posts, performs hand off to GSS Bootloader.
- GSS Bootloader sets the Automation Partition as the default and continues to load Windows.
- As a part of the Windows Update installation, Windows only performs a partial boot while "Configuring Updates". Windows Update requests another restart. The Client, having never being loaded, fails to restore Windows as the default in the GSS Bootloader.
- Workstation starts, BIOS/EFI posts, performs hand off to GSS Bootloader.
- GSS Bootloader determines that the Automation Partition is the default and loads into Automation.
- Automation determines there are no tasks scheduled for this workstation, updates the GSS Bootloader to set Windows to the default, and restarts.
- Workstation starts, BIOS/EFI posts, performs hand off to GSS Bootloader.
- GSS Bootloader sets the Automation Partition as the default and continues to load Windows.
- Windows starts normally and Windows Update completes normally.
Would love the option to enable/disable this option in the Automation Partion. Would help eliminate problems like those described above.
Should also note that I modified the local workstation's Deep Freeze configuration to NOT protect the MBR and that failed to make any change in the behavior described above.
Hope this information helps anyone else who has come across this issue.