Installation in an NT Domain
You are advised to save this page in
HTM format, or print it with your online printer, for later reference.
The purpose of installing InVircible to an NT server is to
check and protect the server itself, and to distribute the software to workstations
connected to the NT domain. .
The installation to an NT server and its setup should be performed
by an administrator, on the server machine itself. Although possible, a remote
installation to the NT server won't set InVircible to run properly.
Installation of the software on the domain server
The installation differs slightly depending on the source of
the installation file(s).
Setting up InVircible on an NT server
Use the “Next” button to proceed through the setup procedure.
Set the target directory on the server. If installing on an NTFS partition,
then the “Tighten IV Directory” option will set the directory attributes
to read-only. The IV distribution directory on the NT server
should be shared.
Installing the registration templates
To complete the installation, copy your set of registration
templates to the distribution directory. Owners of a site license should have
three templates: User.txt, PwrUser.txt, and Admin.txt.
The presence of the administrator template, Admin.txt, is required
in the IV distribution directory, in order to set the distribution and configuration
parameters, described next.
Setting InVircible's working configuration
The following procedure will set which components of InVircible will be distributed
and installed to the clients workstations, as well as the settings of how InVircible
will work on these workstations. The default settings were selected for optimal
operation in most installations. Normally, there is no need to change these
default settings.
- Edit “ivb.ini” on the server, in the distribution directory to add/remove
files to be checked or skipped by IVB. See IV's online documentation how to
do this.
- Edit “ivx.ini” on the server to add/remove files to be checked or skipped
by IVX for macro viruses. See IV's online documentation how to do this.
- Edit “iv.ini” on the server to configure the desired options for the end-users
(start IV.EXE from the distribution directory, then press Alt
+ K to set and save the parameters stored in IV.INI).
- Create a configuration profile for Win32 users (Windows 95/98 and NT workstations).
This profile defines which components will be installed on end-user workstations,
and sets their working configuration.
Proceed as follows:
- Start the “IV configuration utility” from the InVircible program
group (Windows start menu).
- Determine the path and target directory for installing IV on the client's
workstations. "C:\IV" is recommended.
- Define if creating a program group is required on the workstation.
- Determine which components should be installed to workstations and their
working configuration.
- Save the configuration (INI) profile in the distribution directory.
To prevent users from making modifications to the distribution
InVircible files, the directory should have its attributes set to “Read-Only”.
The directory should also be “shared” in order to let the programs execute
on the client workstations. Proceed as follows:
- Go to the target directory (..\IVSRC, for example) with Windows' File
Manager or Explorer.
- Select the Disk menu, for NT 3.51, or "Share as"
for NT 4 (by right clicking the folder with the mouse, then select “properties”),
and specify a share name (IVsrc, for example).
- Next, select “Permission”, check both “Read” and “Execute”
for “Everyone” and “Full Control” for “Administrator”.
- Save the changes.
Preparing / modifying an NT logon script
The NT logon script is a batch file that is executed at logon
time. The distribution of InVircible throughout a domain is controlled by that
script. If a logon script already exists, then all you need doing is editing
the existing batch file, to contain the following lines:
@ECHO OFF
NET USE x: \\Server_name\IVSRC
x:IVLOGIN /FallBack /REG=reg_template /DIR=C:\IV
NET USE x: /DELETE
\\Server_name\IVSRC\IVWLOGIN.EXE /ForceOpt profile.ini
Script legend:
|
X:
|
A temporary logical drive required for running IVLOGIN.
Assign a letter not yet in use, for the temporary logical drive.
|
|
IVSRC
|
Replace with the share name you gave the IV distribution
directory.
|
|
Server_name
|
The UNC name of the server that contains the IV distribution
directory.
|
|
/FallBack
|
Directive to instruct IVLOGIN to run without graphic
display, for minimal workstation memory consumption.
|
|
Reg_template
|
Replace with the license template filename, to be used
on end-user workstations, e.g. User.txt.
|
|
DIR=C:\IV
|
Directive to specify the target directory at the workstation
for installing IV.
|
|
/ForceOpt
|
Directive to force the settings contained in the Win32 profile file to
the logging workstation, whenever connecting to the server.
|
|
profile.ini
|
Replace profile.ini with the filename of the
profile that defines the Win32 components for installation and settings.
|
Save the NT logon batch-script in the default "netlogon"
directory, described below:
NT_root\SYSTEM32\REPL\IMPORT\SCRIPTS
Where NT_root is the “\WinNTxx” directory, normally
\WINNT3x under NT3,xx, and ..\WINNT4 under NT4.x.
Assign the logon script to the users' profile as follows:
- From NT's “Administrative tools” select “User manager for Domain”.
- Select all standard users from the list, then “properties”, and then
“profile”.
- In the “Logon Script” box, enter the name of the new or modified
batch, described above.
Initializing the IV Interceptor throughout an NT domain
The IV Interceptor is a key element of the InVircible
package. Although being installed by default, the IV NT Interceptor
requires initialization before it can be used by non-privileged users (administrators
excluded) on their workstation. A special tool, IVIAdmin.exe,
is provided for the purpose. To initialize all the NT workstations that are
currently logged to the domain, an administrator should run: IVIADMIN
<domain name>
IVIAdmin will search the domain for active NT workstations
and initialize the Interceptor for local use. Since only active workstations
will have IVI for NT initialized, it is recommended that an administrator
runs IVIAdmin from time to time until all the workstation have been
initialized.
Daily operation
If you did all the above correctly, then InVircible should
now be set for automatic distribution and upgrading throughout the NT domain.
As of now, any workstation that logs-on to the domain will first execute the
logon script. InVircible will install itself just once to every workstation.
On subsequent logon, InVircible will compare the version number
on the server and on the workstation. If they differ, the copy on the workstation
will be upgraded to the same as on the server. All you need to do in order to
keep InVircible up-to-date throughout the domain, or to renew a license, is
to update the copy in the distribution directory on the server. The rest will
be done automatically, in the course of daily work, simply by connecting to
the domain.
|