Installation in an NT Domain
You are advised to save this page in
HTM format, or print it with your online printer, for later reference.
The installation of InVircible to the domain server serves
to protect the server itself from malware attacks, to distribute the software
and the license to client PCs and to centrally manage and monitor the operation
of IV throughout the domain.
Basic requirements:
- The machine to be installed must have genuine Windows "server"
software installed (e.g. NT4, W2K Server, 2003 Server and like). A workstation
acting as server won't initiate the IV server mode of the setup wizard.
- The installation should be performed with administrator permissions, from
the server console. The installation of IV to an NT server through remote
access is also possible.
- The presence of a valid site license package is required to initiate
the server setup wizard. The site license package presents in the form of
a self-extract ZIP file, issued by NetZ and supplied from either NetZ or its
resellers. Have the license file ready, on floppy, CD-ROM, or stored on the
hard disk, before starting the setup. Note that the regular single PC license
will not do for the purpose, only the site license package.
Installation of the software on the domain server
- To start the installation from floppies, insert disk 1 to drive A:, select
the floppy drive through MyComputer and double click the IVsplit.exe
icon to start the installation. Change to disk 2 when prompted, and follow
the instructions displayed on screen. The setup wizard will start automatically
when the extraction of the files completes.
- It is strongly recommended that you accept the InVircible
installation defaults. The default settings were carefully selected
and optimized and you are advised to not change them unless advised otherwise
by qualified IV support personnel.
- Point to the site license package file when the wizard prompts for
the license. The wizard will take care of extracting the license
templates to the IV distribution directory on the server.
- Assigning the IV logon script to users: The distribution
of IV to clients, its updating and maintenance are controlled by the network
logon script. The script is a batch file thyat the wizard places in the logon
path (the path varies depending on the Windows version installed on the server).
The default name of that script is IVLOG.BAT.
Where no other login script exists: When prompted for the users
that should receive IV, select the users and press the "Add"
button of the users selection window.
Where a login script already exists: Select a dummy user from
the list and press "Add". When finished with the IV setup on
the server, go to the scripts directory (search for IVLOG.BAT on the system
drive, if you don't know where the scripts are. Explorer must be set to
show all files to find the scripts, including hidden and system files)
and paste the content of IVLOG.BAT into your system login script.
-
Setting the InVircible working configuration on clients
The last step in setting IV on the server is the configuration of how IV
will be installed to the client and its working parameters. These settings
may be later changed by aid of the IV configuration tool, IVCONFIG, and
you are advised to accept the default settings at this stage. The accepted
configuration will be saved to the User.ini profile file.
-
Additional tasks undertaken by the setup of the server installation
The installation wizard takes care of creating the necessary shares for the
proper operation of InVircible and the IV administration
utility, IVADMIN. The wizard will assign the proper permissions to the
shares created and listed below:
- IVSRC. This is the IV software distribution directory on the server. IVSRC
is read-only to plain users, with full permissions to administrators only
and it is designated InstShare in the registry.
- IVSRC_LOG$, the repository for the IVADMIN logs (reports). Domain users
have full permissions to this share and it is designated as LogShare
in the registry
- IVSRC_CMD$, the share from which users poll for IVADMIN commands. This
share is read-only to plain users and full permissions to administrators.
The share is designated PollShare in the registry
Finalization of the server installation:
The following procedures are not performed by the server setup wizard and are
left to the sysadmin choice.
- Interceptor start mode on server: As servers are not used as a workstation,
normally, then Interceptor may run on them in a relaxed mode, without affecting
security. After having completed the IV setup on the server, click the IV
icon on the tray, select Interceptor Options and change "Start
in mode" to Executable only. The IV icon will turn yellow
from green, the next time the server is started. You may change the status
of Interceptor to "executables" without restarting, by use
of the status menu of the IV icon.
- Configuration of Smart Update on clients: Normally, the IV Smart
Update is not installed to clients in a network environment. This is taken
care of every time the client connects to the network, by the logon script.
Only the server need to update from the site. Run the procedure described
at the page linked here to initiate the server IV
smart updating.
- Subscribing the server as member of the IVADMIN community: IV
Administrator (IVADMIN) is a powerful tool to centrally manage and
monitor the operation of InVircible throughout an NT domain. Clients do automatically
sunscribe to the IVADMIN monitoring. The server needs to be added manually
through the following procedure:
- From the server desktop, run REGEDIT and navigate to the key "HKLM/Software/NetZ
Computing Ltd./InVircible/Install"
- Open the IV users profile file USER.INI, with NOTEPAD, and navigate to
the "Install" section.
- Copy and paste the following three values from User.ini to the
same key in the registry: InstShare, LogShare and PollShare.
- Close REGEDIT and User.ini when done.
The server will now automatically subscribe to IVADMIN for monitoring
and controlling.
|
Site Map
