Symantec Ghost is disk-imaging software used to create an image of a fully functional Windows computer along with the necessary applications. The image can then be staged to a central location such as a CD‑ROM to allow for multiple installations from the original image. 
NOTE:     Machines
running data encryption software such as Pointsec cannot utilize the Ghost process.  You must perform Ghost procedures prior
to the application of data encryption programs such as Pointsec.  
NOTE:     If any language packs are installed, the
origin language of English must be used for the Ghost Image.  For example, if Spanish is the language
currently used, this must be changed to English prior to ghosting the
workstation.  The procedure to revert to
English for ghost imaging is given on page
2.  The system can be changed back to the local
language after the Ghost Image process is finished. 
NOTE:     If creating an image of a Windows computer
in a different language than English, the Administrator ID name may be spelled
differently (an example would be Administrateur for the French language). 
NOTE:     All Images should be labeled with the creation date and recreated each quarter with the release of the Quarterly Maintenance CD’s and ensure that they have the latest Tivoli deployed updates. This is in accordance with the District IE assessment.

NOTE:     A Ghosted PC should not be
used to create an image. 
NOTE:     A Windows computer must
have been created with a Windows Request ID. 
. 

Prepare A Computer For Disk Imaging

Ensure that you are logged on to the domain
using a Domain ID with the local Administrative rights on the source PC (for
example, your unique Support ID). 

Revert To English For Ghost
Imaging

If any
language packs are installed, the origin language of English must
be used for the Ghost Image.  Use this
procedure to change the displayed language to English.  The system can be changed back to the local
language after the Ghost Image process is finished.  

NOTE:           These
procedures may vary slightly with different operating system versions.  
1.    Log on to the computer with an Administrative equivalent ID. 
2.    From the Taskbar, click Start
| Settings | Control Panel. 
3.    Click Regional Options.  Some operating systems will label this Regional and Locale Options. 
4.    Under the General or Regional Options tab, at the Locale
(location)
drop‑down menu, select English. 
5.    If there is a Menus & Dialogs drop‑down menu, select English (United States).  Click Apply
when all options have been selected. 
6.    If the system displays a confirmation window, click Yes to confirm this change for all
users. 
7.    Click OK.  Close all windows and log off the machine for
the settings to take effect.  

Run The GETSID
Utility

NOTE:     Use this (source) SID to
compare with the (target) SID when you restore the image.  The difference between the two SID values
indicates a successful regeneration of the SID. 
1.    Log on with an
Administrative equivalent ID. 
2.    Insert the Ghost CD into the CD‑ROM
drive. 
3.    Open a Command
Prompt. 
4.    At the Command Prompt, change
to the CD‑ROM drive letter. 
5.    Type:
getsid \ComputerName ComputerName
\ComputerName ComputerName
For example, if the computer name is UPSNJRARPW0000, the syntax to obtain
computer SID is:
getsid\UPSNJRARPW0000UPSNJRARPW0000 \UPSNJRARPW0000UPSNJRARPW0000
Press e, and the
result will resemble: 
The SID for account
UPSNJRARPW0000UPSNJRARPW0000
matches account UPSNJRARPW0000UPSNJRARPW0000

The SID for account UPSNJRARPW0000UPSNJRARPW0000 is S‑1‑5‑21‑1796367639-1623354958-1310069909—1

The SID for account UPSNJRARPW0000UPSNJRARPW0000 is S‑1‑5‑21‑1796367639-1623354958-1310069909—1

6.    Write down the SID
information.  You will need this (source)
SID to compare with the target SID, when you restore the image. 
7.    Remove the Ghost CD from the CD‑ROM
drive. 

Run The Ghost
Preparation Utility

1.    Type DSGhostPrep and press e. 
The Ghost
preparation tools will now run. 
The Microsoft Windows System Preparation tool prepares the
preinstalled hard-disk contents of a Windows PC (referred to here as the Source
PC) for imaging and subsequent transfer to other PCs (referred to here as the
Target PCs).  The SysPrep Tool prepares
the Source Windows PC image to run a Mini-Setup Wizard and regenerate System
Security Identifier (SID).

Sysprep prevents the use of third-party SID modification tools, such as Ghost
Walker. 

2.    When the following message
is displayed:

The system is now ready to be imaged.  Shut down the system immediately and initiate
the disk imaging process.

press any key to continue. 

3.    Insert the Ghost CD in the CD‑ROM drive. 
4.    Shut down the
computer. 

Connect To A Windows Member
Server

1.    Power on the computer with
the Ghost  CD in the CD‑ROM
drive. 
2.    When the system prompts
you to boot from CD, press
e.  
NOTE:           Windows PE will
load, this process will take several minutes. 
When the process is complete, the Command Prompt is displayed. 
3.    From the Command Prompt,
type:

NET USE J: \ServerNameUsers /USER:DOMAINUSERID

and press e. 

NOTE:           ServerName is the
computer name of the member server, and Users is the name of the shared
device.  If you want to store the image
in a different location, use the above command with that alternate
location.  Domain is the Domain in
which you are storing the image.  USERID
is the ID with rights to the share. 
4.    When prompted, type your
password, and press
e. 
5.    Examine the Users directory for Ghost32.exe.  If it exists, delete or rename it (the file
may be an earlier version of Ghost). 
6.    Remove the Ghost CD from the CD‑ROM drive.  

Create A Ghost Image

1.    From the X:WindowsSystem32
Command Prompt, type:
GhoCreat and
press
e. 
NOTE:           The status bar will
indicate that the image is being saved. 
The version shown should be the latest.  
2.    When Ghost exits type:
Ghocheck.bat
and press e.  
3.    Click Yes to proceed with dump verify. 
NOTE:           The status bar will
indicate that the image is being verified. 
4.    If the system displays a
message:

SPAN VOLUME [1] DONE

press e to continue. 

5.    When prompted:

Found 0 difference(s)

press e to select OK.  

Ghost has finished checking the image file.  You now have a valid image file to
restore.  

Reset The Image Creation Computer

After
completing the last procedure, the computer is left in a state equivalent to a
newly ghosted machine.  To complete a
restoration, reboot the computer and continue from the Mini-Setup Wizard section of the Ghost Image Cloning Restore Procedures document.