19 March 2010

• netlogon.bat (logon script) 2.0.0 - uses TWEAK (Unattended) to provide a framework to automatically deploy user configuration.
• netlogon.bat 1.1 had an issue where the comment 'S: for shared area for everyone in the <ORGANISATION>-staff group' missed out the '<ORGANISATION>' and the command 'net use LPT1: "\\SERVER\<printer name>"' missed out the '<printer name>'
• Similarly, the comment at the top of smb.conf instructing you to replace '' with your orgnisation name, should have said read '<ORGANISATION>'.

• Added pfSense 1.2.3
• Added info on changing IRQs in system BIOS to cope with multiple cards using the same IRQ

• Added the DHCP option of 'DNS Server address' to the OpenVPN server so VPN clients can access computers on the LAN by name

• Added section on adding more LAN interfaces / Dual LAN
• Added a method of very quick installation of a new site's pfSense by restoring another site's backup

• Added 'Etch and a Half' / Debian 4.0 Etch release 4 kernel 2.6.24
• Added disk labeling section in General Configuration section
• Added 'Recommended Size' to disk partitions
• Added 'Upgrading from the Previous Debian Stable Version' section to the Mail Server section
• Added packages 'htop' and 'lshw' to General Configuration - Useful Tools section

• 'Linux Kernels' - added Debian Etch'n'Half kernels
• 'Roaming Computing System (Windows Edition)' - 'Create sub-groups and shared directories for the organisation-wide group' - changed to new method described in my Debian Etch Samba guide of hosting all sub-group directories in the one 'restricted' directory (R:)
• Labeled menu for regular Debian 4.0 Etch kernels as also being appropriate for Debian 5.0 Lenny

This version uses packages.xml version 1.5.0 and profiles.xml version 1.0.

Added

• Some automated system and user account configuration using a new unattended version of TWEAK has been added. The system config is done using WPKG; the user config is done using the logon script, netlogon.bat.

  Manual updates for the transition from RCS 3.3 to 3.4 are now no longer necessary. In future more automated configuration will be added. More was actually written - Windows configuration 'general settings' and 'domain-specific settings' and Flash Player revision 6 'auto copy of config file mms.cfg' - but WPKG hangs when running them so they were pulled at the last mnute. The hope is that the bottleneck for deploying the RCS on a large numer of workstations, of having to apply updated configuration manually using TWEAK, can be eliminated.

  The changes required are the addition of various batch files in \\server\windows-admin\tweak-unattended\, an addition to netlogon.bat and to packages.xml, see the Release Notes for details. Only the minimum required to deploy an RCS 3.3 to 3.4 upgrade has been implemented so far:

• System configuration
• Remove applications' system-wide shortcuts
• User configuration
• OpenOffice 3 user config (part 1)
• OpenOffice 3 user config (part 2)
• OpenOffice 3 user config (part 3)
• Refresh user shortcuts
• IrfanView configuration
• odf-converter-integrator (from http://katana.oooninja.com/w/odf-converter-integrator)
• New documentation: Creating Certificates and Keys For pfSense 1.2 Series OpenVPN Servers and Clients

Updated

• The server's Linux kernel has been updated from Debian Etch's 2.6.18 kernel to Etch-and-a-half's 2.6.24
• pfSense (firewall appliance) 1.2.0 → 1.2.2
• 7-Zip 4.57 → 4.64 rev6
• Adblock Plus 0.7.5.5 → 1.0
• Adobe Reader 8.1.2SU1 → 9
• CCleaner (Slim) 2.11.636 → 2.16.830 rev7
• Enigmail 0.95.6 → 0.95.7
• Eraser 5.81 → 5.86a (AKA 5.86.1)
• FileZilla 3.1.2 → 3.1.6
• Firefox 3.0.4 → 3.0.6
• Flash Player 9.0.124.0 → 10.0.12.36
• ghostscript 8.61 → 8.63
• GIMP 2.4.7 → 2.6.3
• GNUPG 1.4.8 → 1.4.9
• InfraRecorder 0.45 → 0.46.1
• Inkscape rev5 (uninstaller fixed)
• Kompozer rev3 (uninstaller fixed)
• K-Lite Codec Pack (Standard) 4.1.0 → 4.3.4 (no changes to klite-settings.ini)
• Lightning 0.8 → 0.9
• MailManager 1.6 → 1.7 + fix from author
• MySQL Connector/ODBC 3.51.26 → 5.1.5
• Nero BurnRights rev (uninstaller fixed, error at commandline "not installed on your machine")
• OpenOffice 2.4.1 → 3.0.1
• Picasa 2.7 build 37.49 → 3.1 build 70.73
• Pidgin 2.5.0 → 2.5.2
• Sun Java Runtime Environment (JRE) 1.6 update 7 → 1.6 update 11
• Thunderbird 2.0.0.18 → 2.0.0.19
• TWEAK - 0.9.3 → 0.9.4
• winscp 4.1.6 → 4.1.8

Fixed

• Irfanview is now the default viewer for JPGs [TWEAK: I → IOI]
• Plain text files now open in Notepad++ [TWEAK: I → PON]
• Firefox can be set as default web browser so it doesn't nag when you open it [TWEAK 0.9.4]
• Right-click and edit a HTML file opens it in Notepad, should open it in KompoZer [TWEAK 0.9.4: I → WEM]
• Picasa auto update is now able to be turned off [TWEAK 0.9.4: B → P → K]

• Interfaces → WAN → General configuration → Type: DHCP
• System → General Setup → DNS servers →
• remove DNS server IP addresses
• make sure 'Allow DNS server list to be overridden by DHCP/PPP on WAN' is checked
• In the modem/router turn on DHCP server and add an address reservation for the pfSense box

• 'Shortcut Management → Remove various shortcuts' - added removal of OpenOffice 3.1 shortcuts
• File Type Associations - 'Archive files (i.e. .Zip) Open in 7-Zip (Edit for ISO opens in 7-Zip)' - setting 7-Zip to 'edit' .iso files was mistakenly setting a 7-Zip icon for .sio files when it shouldn't be. The icon should be left to that of InfraRecorder as set in 'ISO disc images to open in InfraRecorder for writing to disc' [/DIS="%PROGRAMFILES%\7-Zip\7z.dll,1"]
• Windows Configuration
• 'Configure Windows system behaviour and interface on this machine' - 'set Windows Automatic Updates to not automatically reboot after applying updates' - didn't work, now fixed. I believe this did work and that it stopped working since Windows XP SP3, but I can't be sure. The registry setting it made was at HKLM\Software\Policies\Microsoft\Windows\Windows Update\AU when it should have been at HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU. TWEAK now makes both settings as I can't be sure earlier versions of Windows didn't work the previous way.
• 'Manual settings for this user (that are not automated yet)' - amended text to say 'sounds, speach and audio devices' rather than 'sounds and audio devices'
• 'Manual settings for this machine (that are not automated yet) → File and Printer Sharing for Microsoft Networks' - changed 'disable if not required (it isn't required to login to a domain)' to 'disable if not required (only required if this machine itself is sharing files or printers)' - it's more useful to say what it's for rather than what it's not for.
• 'Manual settings for this machine (that are not automated yet) → Display Properties - Settings' - changed 'set optimum 'Screen area' (resolution) and 'Colors' settings' to add 'Note: on Windows XP at least, this changes it for all users!)' because any user changing the resolution changes it for all users.
• 'Shortcut and Icon Management' renamed 'Shortcut Management' in main menu, to match the wording used in the menu for the item

Note that the changelog for 0.9.4.1 originally indicated 'Changed all infrarecorder shortcuts to use the icon at its position 0, rather than that at position 3' should have said the other way around, that it was changed from the difficult to understand default icon at position 0 with the obvious disc-like icon with the folder icon at position 3

0.9.7 - 29 June 2009

• smb.conf 0.8.0 - added [database] share with OpLocks off for data integrity when sharing database files between multiple users
• netlogon.bat 1.1.0 - added commented out T: for \\SERVER\database
• Added 'templates' and 'images' directories to the main shared directory
• Added permissions setting for /home/samba/profiles-backup
• chgrp samba-domain-admins /home/samba/profiles-backup
• chmod 770 /home/samba/profiles-backup
• Tightened permissions on Windows administration area 'images' directory (chmod g+w,o-rx /usr/windows-admin/images)
• Tidied up the prose on permissions for the main shared area, correcting a misunderstanding that Linux permissions were inherited
• Added WPKG configuration instructions
• Added more commands to copying an existing WPKG installation and copying a Windows administration tools directory, to a new server
• Removed 'Windows printing settings' section which described the settings for when printing to a print server outside your forest
• Removed command to make winadmin the owner of the shared directory /home/<organisation>/shared because it doesn't matter who owns it
• Moved smb.conf changelog and netlogon.bat changelog out from being in the file itself to a part of this guide's prose

0.9.6 - 24 April 2009

• smb.conf 0.7.2 - Added a printing section with printcap name = /dev/null and load printers = no to explicitly disable printing. Without this /var/log/samba/syslog and /var/log/samba/log.smbd are full of messages of printing/pcap.c:pcap_cache_reload(159) Unable to open printcap file /etc/printcap for read!. If you do actually use a print server then you don't want this, instead you want the print server configuration in the Printing section.
• smb.conf 0.7.1 - removed 'preserve case = yes' and 'short preserve case = yes' as both default to yes. This is a cosmetic change as leaving them in or taking them out makes no difference.
• When creating sub-groups / restricted groups, changing the group ownership and permissions of the restricted directory was omitted (chgrp <organisation>-staff /home/<organisation>/restricted and chmod 0750 /home/<organisation>/restricted). Without the group ownership, users were prompted for an alternate username and password with which to connect to R: upon login.
• The example of how to set ownership when copying files en-masse to the shared directory neglected to change the group ownership to <organisation>-staff

This guide now specifies an inode size of 128 bytes when formatting the disk.

The fix for existing disks is to format them again using mkfs.ext3 -I 128 /dev/<disk partition reference i.e. sdb1> (which will delete everything on the disk) and name them again using e2label /dev/<disk partition reference i.e. sdb1> backup.

You can find the inode size of an existing partition using tune2fs -l /dev/<disk partition reference i.e. sdb1>, amongst the information will be something like Inode size: 256.

• Default programs → 'Set Thunderbird as default mail client / mail handler for this machine' - wasn't working
• InfraRecorder
• Desktop shortcut broken, set to 'irExpress.exe' which doesn't exist, should instead be set to 'InfraRecorder.exe'
• Desktop shortcut broken, 'Start-in' set to '%PROGRAMFILES%\InfraRecorder\cdrtools' which no longer exists, should instead be set to '%PROGRAMFILES%\InfraRecorder\cdrkit'
• Changed all infrarecorder shortcuts to use the icon at its position 0, rather than that at position 3
• Start menu shortcut - InfraExpress mistakenly left in, now removed
• File Type Associations - association of InfraRecorder .iso files (IOIR) doesn't work - '%PROGRAMFILES%\Infra Recorder\InfraRecorder.exe' should have been '%PROGRAMFILES%\InfraRecorder\InfraRecorder.exe'

• Added OpenOffice 3 Configuration section.
• Added a 'Default Programs' section with options to set Firefox as the default web browser and Thunderbird as default mail client / mail handler.
• Picasa 2 support updated to Picasa 3. OpenOffice 2 support updated to OpenOffice 3. GIMP 2.4 support updated to GIMP 2.6.

Full changelog:

• OpenOffice 3 Configuration
• Added OpenOffice 3 configuration section
• Changed graphics cache's memory per object from 5MB to 20MB. OpenOffice 3 defaults to 5.2MB. - Matt Fawcett
• Changed total graphics cache to use for OpenOffice from 33MB to 128MB (a reflection of the importance of this software for information workers and the fact that a typical workstation would now-a-days have a minimum of 512MB RAM). OpenOffice 3 defaults to 20MB. - Matt Fawcett
• Added new option to add shared templates location of S:\templates. - Matt Fawcett
• Changed expiry date. - Matt Fawcett
• Changed undo steps from default of 100 to 50. - Matt Fawcett
  "Other speed improvements can be gained by reducing the number of "undo steps", current default is 100, recommendations for speed/memory use improvements are a reduction to 50 or 25 steps. We consider 50 a good compromise."
  http://www.computerhope.com/forum/index.php?topic=31198.0 (Windows) http://www.techiequest.com/how-to-speed-up-openofficeorg-office-suite-loading-speed/ (Windows) http://www.zolved.com/synapse/view_content/28209/How_to_make_OpenOffice_run_faster_in_Ubuntu (Ubuntu)
• Default Programs
• Added this new section. Moved setting of default HTML editor from file type associations section to here.
• Added option to set Firefox as default web browser for this machine and for this user (control panel - internet - programs - default web browser). If set this as administrator (or Power User?) it sets it per-machine; if set it as non-administrator (or non-Power User?) it sets it per-user.
• Added option to set Thunderbird as default mail client / mail handler for this machine and for this user (control panel - internet - programs - default web browser). If set this as administrator it sets it per-machine; if set it as non-administrator it sets it per-user.
• 'Set KompoZer as Default HTML Editor for this user' and 'Set Notepad++ as Default HTML Editor for this user' - replaced a hack with better code. Removed default-html-editor-kompozer.reg and default-html-editor-notepad++.reg. Even though it was a per-user setting, because of the hack, it required you to be a Power User or Administrator, which it now doesn't require.
• Shortcut Management
• Picasa 2 shortcut management replaced with Picasa 3
• Removed Desktop and Quick Launch Media Player (for VLC) shortcut as we don't currently support VLC
• OpenOffice 2 shortcut management replaced with OpenOffice 3 series; no longer removes shortcuts for OpenOffice series that we don't offer a replacement shortcut for
• GIMP 2.4 series shortcuts replaced with GIMP 2.6 series; added removal of ALLUSERSPROFILE GIMP 2 Desktop shortcut
• 'Remove various shortcuts (so we can use our replacement suite)'
• Removed 'Aspell' as we no longer deploy Aspell
• Updated SoundMAX driver to remove directory
• Removed Adobe Reader desktop shortcut file. It was already, by default, prevented from being copied to the desktop by shortcuts-desktop.ini.
• Removed InfraRecorder's InfraExpress shortcut as it's no longer included with InfraRecorder
• Added support for removing Adobe Reader 9 shortcuts
• Removed the removal of Acrobat Reader 5.1 and WinSCP2 shortcuts
• Shortcuts-desktop.ini version 1.0 - removed functionality names but left in actual program names as they're redundant; removed 'media player' and 'Adobe Reader'
• Shortcuts-start-menu.ini version 1.0 - removed actual program names but left in functionality names as they're redundant; removed 'media player' and 'Adobe Reader'
• Shortcuts-quick-launch.ini version 1.0 - removed actual program names but left in functionality names as they're redundant; removed 'media player' and 'Adobe Reader'
• Picasa Configuration - added this new section with disable Picasa 2 auto update option and the two 'disable media detector...' options moved here from 'disable applications' background programs'
• Irfanview Configuration
• 'open in GIMP' configuration setting changed from loading GIMP 2.4 (via gimp-2.4.exe) to GIMP 2.6 (via gimp-2.6.exe)
• Copy user configuration from TWEAK directory rather than from %PROGRAMFILES%\Irfanview directory
• Removed 'Configure IrfanView with static preferences that apply to all users' (removed i_view32.ini-single-version)
• Removed 'Pre-configure IrfanView for future users created on this system'
• File type associations
• The file type associations section now presents just file type associations, rather than also options for setting default HTML editor and then another menu level deep for file type associations. Moved setting of default HTML editor to its own 'Program Defaults' section. The menuing has correspondingly changed.
• 'Image files Edit in GIMP' didn't work as it used '%PROGRAMFILES%\gimp\bin\gimp.exe'. It now works and is GIMP 2.6 series-specific (%PROGRAMFILES%\gimp\bin\gimp-2.6.exe)
• Web files Edit in KompoZer - didn't work as it used '%PROGRAMFILES%\Mozilla\kompozer.exe' when should have had '%PROGRAMFILES%\kompozer.exe'
• OpenOffice file type associations all used OpenOffice 1's soffice.exe where they should have used OpenOffice 2 and 3's individual .exe's for each function (apart from Formula, Chart and Extension)
• Added 'web files open in Firefox'
• Plain text files to Edit in Notepad++ (those you wouldn't Open) - added 'Edit' option for .xml files
• Plain text files Open in Notepad++ - changed the icon it used to its default icon (changed from position 1 to position 0)
• Removed 'web files open in Mozilla'
• Removed 'Set Microsoft Notepad as 'Default HTML Editor' for this user' option and removed default-html-editor-notepad.reg
• Removed 'Web files Edit in Microsoft Notepad'
• Windows Configuration
• 'L' and 'P -> P' - Rename old 'My Documents' directory in %USERPROFILE% to 'OLD My Documents' - leaving the actual 'My Documents' directory in the user's profile when we change its location to E: or H: is confusing because if the user goes to %USERPROFILE% they see this My Documents directory that isn't their actual My Documents directory. Some apps mistakenly open their file open/save dialog in %USERPROFILE%, rather than in the new My Documents location (for example the current version of Inkscape), presenting this very situation.
• 'Use D: for temp system files, prepare E: for data' now uses setenv.exe (see 'TWEAK' section of this changelog section) to set TEMP and TMP environment variables immediately. Combined with reaisation about %PROGRAMFILES% no longer being changed (see elsewhere in this changelog section) this option no longer requires a system restart to take effect.
• 'Use D: for this user's temporary system files, E: for their data' now use setenv.exe (see 'TWEAK' section of this changelog section) to set TEMP and TMP environment variables immediately. This option still requires logging out to take effect because of the change of location of My Documents.
• Various individual Windows configuration settings - 'Hide C:, D:' changed to 'Unhide C:, D: ... Z:' with the undo option doing the opposite
• Copy logo for System Properties - now first checks logo file exists before copying it. It doesn't exist in a default TWEAK so now no error message is given.
• Removed this: 'View - Hidden files and folders - Do not show hidden files and folders (set to 'Do not show...' by default but we're turning it to this for now explicitly for systems where we've previosuly turned it on, as we used to advise this)'
• Removed this: 'View - Hide protected operating system files - on (on by default but we're turning it on for now explicitly for systems where we've previosuly turned it off, as we used to advise this)'
• Menu option 'Use D: for temp system files, prepare E: for data (reboot before 'C')' changed to 'Use D: for temp system files, prepare E: for data'. Since version 0.9.0 TWEAK doesn't change the Program Files location (%PROGRAMFILES%) and so the system doesn't need the changes made in Windows Configuration option 'B' to have taken effect before running option 'C'.
• Removed 'Until TWEAK 0.8.39 there was a bug where-by the media bookmarks directory wasn't created and so the bookmarks were wrongfully copied into a file called 'media-bookmarks'. So that file is being deleted...'
• Removed this, it provides backward compatability but it also makes modern TWEAK do something unexpected, making WAU changeable when it may have been chosen by someone that it shouldn't be changed:
  'BACKWARD COMPATABILITY ISSUE: keys don't exist in a default Windows installation, but Tweak prior to 0.8.42 added a setting which turned off the ability to change Automatic Updates. We now turn Automatic Updates on by default, but by removing these keys the option is given to change that default.'
  HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
  ...
• Java Configuration
• Removed 'JRE 1.4.1_02 - set user cache to D:\%USERNAME%\java'
• Removed 'JRE 1.4.2_xx - set user cache to D:\%USERNAME%\java'
• OpenOffice 2 Configuration - renamed the menu item from 'O' to 'O2'
• TWEAK
• Added setenv.exe (by Jonathan Wilkes / Darka, from http://xanya.net/site/display_code.php?id=2&t=utils) for setting environment variables immediately rather than them taking effect after a restart.
• When it doesn't detect the operating system as one of Windows NT 4, 2000, XP, 2003, Vista, it no longer quits sayng the operating system isn't supported but gives the prompt for untested operating systems, saying it isn't tested with this operating system but asks you if you want to continue anyway or not. Which allows the program to run under WINE. (it no longer says that Windows 95/98/Me isn't supported but gives this same prompt, FWIW)
• Applications menu - choosing some letters, for which there were no longer menu items associated with, caused TWEAK to close
• Replaced Associate-Read Me.txt, Associate_-_Download.html and Associate_-_Home.html with Associate-readme.txt, combining texts, removing redundant text and adding some headings for readability.
• 'disable applications' background programs' - renamed 'disable other applications' background programs'

Update 2

• Firefox 3.0.3 → 3.0.4
• Thunderbird 2.0.0.17 → 2.0.0.18
• packages.xml 1.4.3 → 1.4.4

Update 1

• Thunderbird 2.0.0.16 → 2.0.0.17
• Firefox 3.0.1 → 3.0.3
• TWEAK - 0.9.2 → 0.9.3
• packages.xml 1.4.2 → 1.4.3

No changes are required in order to deploy this new version over version 0.2.1 other than to replace the file backup-to-hotswap-usb-disk.sh.

• If the backup disk was already mounted, it would fail to mount again and so the backup wouldn't run. An already mounted backup disk can now be coped with.
• Now saves log in /var/log/hotswap-backup/ rather than /var/log/, otherwise there are far too many log files messing up /var/log/. The new directory /var/log/hotswap-backup/ is automatically created if it doesn't already exist.
• The backup log filenames now include a description of which part of the backup they relate to 'backup-<location>-<time and date>' rather than each being called 'backup-<time and date>'. These are created when files are copied or attempted to be copied. An empty file should mean that the backup was successful. Example log filenames:
  backup-general-2008-11-12-04-00-02
  
  backup-home-2008-11-12-04-00-07
  
  backup-etc-2008-11-12-07-30-01
  
  backup-usr-2008-11-12-07-30-15
  
  backup-var-2008-11-12-08-01-49
• An additional backup log file called backup-general-<time and date> has been added for issues with mounting media. You now get the specific reason for the mount failure, rather than just 'FATAL: Backup did not run because error mounting media' for all different types of mount failures. Only if the disk isn't already mounted do you get the log file, empty or not; it should be empty if there were no issues.

• Added instructions for creating Power Users on Windows workstations
• Give winadmin access to shared files on S:

0.9.2 - 4 Oct 2008 - Windows Administration Area's 'chmod g+ws /usr/windows-admin' was wrong as it set group file system permission mode of 'wS' (writable and set group ID) when what we wanted was 'ws' (writable, executable and set group ID). This resulted in people in the samba-domain-admins group not being able to move into the directory /usr/windows-admin. It should have instead been 'chmod g+wxs /usr/windows-admin'.

0.9.1 - 23 Sept 2008 - Windows Administration Area's 'chmod g+ws,o-x /usr/windows-admin' didn't allow WPKG's winuser account access to packages for auto installation so changed to 'chmod g+ws /usr/windows-admin'. To fix an already set directory use 'chmod o+x /usr/windows-admin'.

Added Driver Configuration option to stop the Realtek HD Sound Effect Manager from loading.

Fixes for stopping Picasa Media Detector, Intel Extreme graphics driver hotkey poller loading and Adobe Reader Speed Launcher.

Other minor changes.

Changelog:

• Disable applications' background programs
• Added 'Picasa - disable media detector loading on login' because Picasa's Media Detector is no longer started per-machine but per-user
• Disable Picasa's media detector loading on system startup - mistakenly wrote 'QuickBooks - prevent Update/Delivery Agent loading on startup' in the log
• Driver Configuration
• Added 'Stop Realtek HD Sound Effect Manager loading' (HKLM/Run, RTHDCPL, REG_SZ, RTHDCPL.EXE)
• Stop Intel Extreme graphics driver hotkey poller loading - wasn't working because its registry value 'HotKeysCmds' has changed its name to 'igfxhkcmd'
• Windows configuration - Tighten security on this machine - undo - this was turning on 'Remote Desktop', which is actually off by default in Windows, so I've removed this from the 'undo'
• Adobe (Acrobat) Reader Configuration - disabling Adobe Reader Speed Launch wasn't working because it's now started from the registry (HKLM/Run, REG_SZ, %PROGRAMFILES%\Adobe\Reader 8.0\Reader\Reader_sl.exe) rather than Start Menu/Startup, as of some time around version 8.1 I think
• Shortcut and Icon Management - 'Remove future users' TWEAK shortcut suite' and 'Remove this user's TWEAK shortcut suite'
• Added the removal of the CCleaner Start Menu shortcut
• Removed the following that had been left in for backwards compatability with TWEAK < 0.9.0: Start Menu folders audio, accounting, admin, database, disk utilities, drivers, editors and viewers, file utilities, video; Desktop and Quick Launch shortcuts for accounts, audio player, CD writer, Database, drawing, DVD player, FTP, image editor, IRC, page layout, Abiword, CDR Tools Front End, Exact Audio Copy, Photoshop, audio editor, video player, command-line
• Added missing Desktop and Quick Launch shortcuts for Audio editor, Database and FTP

This version uses packages.xml version 1.4.2. See the WPKG packages.xml changelog for changes to it.

New

• Windows Media Player plugin for Firefox
• K-Lite Codec Pack 4.10 (Standard) - http://www.codecguide.com/features_standard.htm - gives us DVD playback in Windows Media Player (and a host of other media support). Ogg Codec installer has been retained for its FLAC support due to the fact we can't remove it silently.
• CCleaner (Slim) 2.11.636

Updated

• Adblock Plus 0.7.5.3 → 0.7.5.5
• Adobe Reader 8.1.2 → 8.1.2 Security Update 1
• F-Prot 6.0.8.0 → 6.0.9.1 (fixes many issues)
• FileZilla 3.0.7 → 3.1.2
• Firefox 2.0.0.14 → 3.0.1 (major upgrade)
• GIMP 2.4.5 → 2.4.7
• Irfanview 4.10 → 4.20
• Irfanview Plugins 4.10 → 4.20
• MySQL Connector/ODBC 3.51.12 → 3.51.26
• Notepad++ 4.8.1 → 5.0.3
• OpenOffice 2.4.0 → 2.4.1 (security fix, minor enhancements, and bug fixes)
• Pidgin 2.4.1 → 2.5.0
• Pidgin OTR 3.1.0-1 → 3.2.0-1
• Scribus 1.3.3.11 → 1.3.3.12 (lots of updates)
• Sun Java Runtime Environment 6.0 update 4 → update 7
• Thunderbird 2.0.0.12 → 2.0.0.16 (security updates)
• TWEAK - 0.9.0 RC3 → 0.9.2
• WinSCP 4.0.6 → 4.1.5

Removed

• ASpell and ASpell dictionaries (English) - they were for Pidgin, which has included ASpell for all languages since version 2.0.1(?)

Changed

• Adobe Reader - we spend a massively disproportionate amount of time creating an MSI transform to change the Adobe Reader installation directory so that it doesn't have a version in its path so we can maintain our Adobe Reader shortut in Start - Programs - Office. We're no longer going to do this. We're able to do this for this program in particular and not others because we don't expect people use Adobe Reader by running the program from its shortcut, instead using it from within a web browser or by choosing to load a PDF file directly from within Windows Explorer.
• With RCS 3.1 & 3.2, Thunderbird UK spellcheck dictionary is installed but isn't working as Thunderbird isn't noticing it. We installed MySpell dictionaries in %PROGRAMFILES%\Mozilla Thunderbird\components\myspell\ which was correct for Thunderbird 1.5 but Thunderbird 2.0 expects them in %PROGRAMFILES%\Mozilla Thunderbird\dictionaries. We've fixed this and also are now using a MySpell dictionary from Mozilla, version 1.16, rather than version 1.18 from the original author.

Miscellaneous

• Our new sun Java Runtime Environment WPKG packaging removes all previous versions of JRE rather than leaving them in, fixing a long-standing issue. Because JRE doesn't uninstall prior versions, and it's a large installation, it eats up disk space. This hasn't remotely been a problem yet because we've only shipped a few versions but it would become a problem in time.
• We now set 7-Zip file type associations during workstation installation, using TWEAK
• The Windows Firewall will now allow workstations to answer ping requests, useful in troubleshooting
• Changed the location of sub-group directories on the server, creating 'restricted' - see Samba guide version 0.9.0 or later

Fixed GIMP shortcut causing GIMP to have error messages on startup when installed alongside some system-wide-installed versions of GTK+ such as that come with some versions of Pidgin.

Added CCleaner shortcut management.

Changelog:

• Windows Configuration - Tighten security on this machine
• Added Remote Desktop setting to allow / disallow users to connect remotely to this computer (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\fDenyTSConnections = 00000000 REG_DWORD)
• Added Remote Assistance setting to allow / disallow Remote Assistance invitations to be sent from this computer... (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\fAllowToGetHelp = 00000001 REG_DWORD)
• Added Remote Assistance setting to enable / disable Terminal Services (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\AllowTSConnections = 00000001 REG_DWORD)
• Shortcut Management
• Remove various programs' shortcuts so we can use our replacement suite - added CCleaner
• Shortcut suite
• GIMP shortcuts hadn't been updated for GIMP 2.4 series. The shortcuts' 'Start in' was set to "C:\Program Files\Common Files\GTK\2.0\bin" resulting in GIMP using system-wide GTK+ rather than its own copy of GTK+ which caused errors on startup when some specific versions of GTK+ were installed system-wide (that should have been binary compatible) such as that come with Pidgin 2.4.x and 2.5.0; and resulting in GIMP offering this particular directory as the default for users to save their files in rather than My Documents. The GIMP installer now creates '%USERPROFILE%\My Documents\My Pictures' but this doesn't work for those who've changed My Documents' location. TWEAK now uses '%HOMEDRIVE%\images'.
• Added CCleaner to Start Menu - Programs - Accessories
• Changed NotePad++'s 'Start In' from '"C:\Documents and Settings\Administrator\Application Data\Notepad++"' to "%APPDATA%\Notepad++"
• Changed 7-zip's Start Menu shortcut from using 'C:\Program Files' to '%PROGRAMFILES%'
• Changed Infra Recorder's Start Menu shortcut from using 'C:\Program Files' to '%PROGRAMFILES%'

Changelog:

• Merged all .bat files into tweak.bat
• Added new section: 'Windows Firewall', including 'allow / disallow ICMP echo request (ping)' and 'allow / disallow VNC server (TCP port 5900, from all sources)'
• Added new section: 'FileZilla Configuration', with 'Configure FileZilla global preferences for all users' which currently just prevents FileZilla from automatically checking for updates. Adds new file configs\filezilla-fzdefaults.xml
• Windows Configuration
• Network Configuration → removed 'Windows XP Pro 'signorseal' fix to allow it to authenticate with a Windows NT4 or Samba 2.x domain controller'
• Manual settings for this user (that we haven't automated yet)
• Added 'View → Status Bar' (for XP only?)
• ClearType → added a web link to display requirements
• Shortcut Management → Remove various programs' shortcuts so we can use our replacement suite
• Typo prevented per-user Pidgin OTR Start Menu shortcut from being removed
• Added removal of 'SoundMAX' Start menu shortcut
• Added 'K-Lite Codec Pack'. It's removed and no replacement is made
• File Type Associations
• Office suite files Open in OpenOffice
• Changed the following from "OpenDocument" to "ODF" (see http://www.openoffice.org/issues/show_bug.cgi?id=80206): ODF Text Document (.odt), ODF Text Document Template (.ott), ODF Master Document (.odm), HTML Document Template (.oth), ODF Spreadsheet (.ods), ODF Spreadsheet Template (.ots), ODF Drawing (.odg), ODF Drawing Template (.otg), ODF Presentation (.odp), ODF Presentation Template (.otp)
• Added these: ODF Image (.odi), ODF Formula (.odf), ODF Chart (.odc), ODF Database (.odb), OpenOffice Extension (.oxt)
• 'Plain text files Open in Notepad++' and 'Plain text files Open in Microsoft Notepad' → removed Pegasus Mail files and Mercury Mail files
• 'Set KompoZer as 'Default HTML Editor' for this user', 'Set Notepad++ as 'Default HTML Editor' for this user' and 'Set Microsoft Notepad as 'Default HTML Editor' for this user' were all broken because of using "%SYSTEMDRIVE%"' rather than '%SYSTEMDRIVE%\'
• Sun Java Runtime Environment (JRE) Configuration → JRE 1.5.0 / 5.0 → 1.6.0u1 / 6.0 update 1 → updated it to indicate it actually works with all 1.6 / 6.0 updates
• Firefox Configuration → Configure global preferences → 'set globally,they apply to all new profiles; users can override them' changed to 'they apply to all users on this machine but they can override them'
• Thunderbird Configuration → Configure global preferences → 'set globally,they apply to all new profiles; users can override them' changed to 'they apply to all users on this machine but they can override them'
• Irfanview Configuration → added 'Note: All options set external viewer to GIMP, version 2.4.x, installed echo specifically in C:\Program Files\gimp (C:\Program Files\gimp\bin\gimp-2.4.exe)'
• Disable applications' background programs → Stop Adaptec/Roxio Direct CD (packet writer) loading on system startup → menu option was defective
• SetACL upgraded from 2.0.2 to 2.0.3
• Moved shortcuts-*.ini into 'configs' directory
• Log now includes TWEAK section the option is run from for improved readability
• Removed docs\SetACL-Command line.txt
• Removed disconnected Pegasus Mail option in applications menu

• Added new section: 'Webcam / Video Conferencing / Video Cameras'
• Added gaim-otr
• Debian kernel upgraded from 2.6.18-4 to 2.6.18-6
• backports.org kernel 2.6.22-3 (2.6.22-6~bpo40+2, upstream version 2.6.22.11) upgraded to 2.6.26-3 (2.6.26-3~bpo40+1, upstream version 2.6.26.3)
• Skype (stable) upgraded from 1.4.0.118 to 2.0.0.72
• Improved 'Spellcheckers and Dictionaries' section

• changed location of restricted sub-group from /home/<ORGANISATION>/<sub-group> to /home/<ORGANISATION>/restricted/<sub-group>. Added (commented out) corresponding smb.conf [restricted] share. Added (commented out) corresponding NETLOGON.BAT R: for \\SERVER\restricted. This scales better, when you have a number of groups, instead of a drive letter for each we now have R: for them all.
• Commented out smb.conf's [programs] because we don't use it; added 'force create mode = 0664' and 'force directory mode = 2774'; in Unix set 2774 on /usr/windows-programs rather than 2775
• Removed execute permission for others on /usr/windows-admin
• Make a directory for cloning workstations to at /usr/windows-admin/images
• Added creation of winuser account for testing purposes
• smb.conf version 0.7.0, see smb.conf section
• NETLOGON.BAT version 1.0.0, see Windows Logon script section
• smb.conf section mistakenly said Samba configuration file was /etc/smb.conf rather than /etc/samba/smb.conf (what a massive gaff that was!)

Configuration of these new applications has been added: Firefox, Thunderbird, Enigmail, Adobe Flash Player, Eraser.

Support for these applications has been removed: Pegasus Mail, F-Prot, Real Player, Nero Burning ROM, NoteTab, Zinf.

The Desktop, Start Menu and Quick Launch shortcut suite has been completely overhauled, including removing some programs' shortcuts and adding others.

Existing users, beware that if you used the options in previous versions of TWEAK supporting multiple partitions (C: for Windows, D: for Programs, E: for Temp and F: for data), TWEAK now instead assumes that C: and D:'s uses have been combined (resulting in C: for Windows and Programs, D: for Temp and E: for data).

See the changelog for the complete and detailed list of all changes.

This release has been extensively tested and refined over the last two years, having been used to deploy our Roaming Computing System versions 3.0, 3.1 and 3.2 in various organisations.

Changes since Release Candidate 7:

• IrfanView Configuration - fixed external viewer / editor setting pointing to GIMP 2.2 binary when it should point to GIMP 2.4 binary ('ExternalViewer=C:\Program Files\gimp\bin\gimp-2.4.exe')
• Adobe Reader Configuration - Adobe Reader 8.x per-user preferences - re-labeled to say it applies 8.x not 8.0.x
• OpenOffice Configuration - re-labeled to say it applies to up to version 2.4.1

• Updated documentation
• File Type Associateions - 7-Zip - changed file where icons are gotten from from 7zFM.exe to 7z.dll
• Shortcut Management - added Scribus 1.3.3.12, 1.3.3.13 and 1.3.3.14 shortcut removal
• Shortcut Management - added removal of per-user pidgin-otr shortcut, perhaps version 2.4.2 or 2.4.3 changed from per-machine shortcuts
• Shortcut Management - restored GTK+ shortcut removal because it turns out Pidgin installs a machine-wide GTK+ rather than a Pidgin-specific Gtk+
• Shortcut Management - removed Start Menu\Accessories\Select GTK+ language shortcut as it doesn't seem to be used by Gtk+ any more
• Shortcut Management - added removal of 'Gtk+ Theme Selector' shortcut

• Java Configuration - since 0.9.0 RC1 option 'A' wasn't actually run when chosen; option 'B' actually ran what option 'A' was supposed to do, but option 'BU' ran what 'AU' should have been. Option A was completely removed by mistake. In RCS documentation this was actually OK because it said to use option B. I've now swapped them around so they're in chronological order.
• Firefox Configuration - 'Backup all Firefox profiles; delete originals; create 1 new profile' - firefox profile creation now works - using -CreateProfile not -Profile . Previously it wasn't created until you next ran Firefox. Not sure if the syntax changed or I always had it wrong.
• Shortcut Management - Removed Adobe Reader Start Menu / Programs / Office shortcut. Because of the hassle of transforming Adobe Reader's MSI for every update we're now not bothering to change its install directory so that it doesn't have a version number in it and instead removing this shortcut, which people are extremely unlikely to use.
• Windows Configuration - Replace boot loader - Removed 'NT4' from 'Windows NT4/2000/XP'

• Shortcut Management
• Updated for OpenOffice 2.4
• Removed shortcut removal of no longer managed shortcuts: Adaptec ASPI, Exact Audio Copy, GTK+, Microsoft Office, Mozilla, NoteTab LightVLC and XChat
• Added removal of Pidgin OTR Start Menu item

• Application Configuration - alphabetised the menu list
• Firefox Configuration
• Added 'Uninstall Firefox 3.0.x'
• Created updated configuration option for Firefox 3, using additional config file (firefox-custom.js is now firefox2-custom.js and firefox3-custom.js). The following are changed compared with the Firefox 2 configuration:
• Changed 'allow scripts to: Disable or replace context menus' from false to true. With the current web, where richer web-based applications exist, people will expect this functionality if a web site they use uses it.
• Removed commented out 'Accept images that come from the originating server only' (network.image.imageBehavior)
• Removed 'allow scripts to: raise or lower windows - off' (pref("dom.disable_window_flip", true);) - it's now on by default
• Removed 'Display on → New Window - Blank page' (pref("browser.windows.loadOnNewWindow", 0);) - it no longer exists or works
• Removed 'display on → New Tab - Blank page' (pref("browser.tabs.loadOnNewTab", 0);) - it no longer exists or works
• Removed 'allow scripts to: Create or change cookies - on' (pref("dom.disable_cookie_set", false);) - it no longer exists. Not much mention of it on the web.
• Removed 'allow scripts to: Read cookies - on' (pref("dom.disable_cookie_get", false);) - it no longer exists. Not much mention of it on the web.
• Removed various 'disable updates' options from 'Configure global preferences - various' where it had been mistakenly left in. The original intention was for these settings to only be installed with the seperate option 'Configure global preferences - disable automatic updates'.

• Windows Configuration - Manual settings for this user - added warning that ClearType may not always look better
• Shortcuts - Removed stray Start Menu\Video directory and its VLC shortcuts
• Shortcuts - Removed stray Start Menu\Documentation\VLC media player Documentation shortcut

• Windows Configuration
• Split out local intranet zone security settings from those of Internet, trusted and untrusted zones
• Removed Various individual Windows and domain / RCS settings... - Various individual Windows configuration settings - Don't require pressing Ctrl+Alt+Del to login
• Set Windows Automatic Updates to not automatically reboot after applying updates - this setting wasn't working (I mistakenly used REG_BINARY rather than REG_DWORD)
• 'Configure %USERNAME%'s Windows interface' - No longer sets desktop background to black
• 'Various individual Windows configuration settings' - 'Set desktop background to Windows Classic's default blue' - changed to 'Set desktop background to black'
• 'Various individual Windows configuration settings' - added 'Set desktop background to rouge (a warning) for administrator accounts'
• Removed 'Windows Toolbox' logo for System Properties (oemlogo.bmp)
• Removed per-machine manual option '6. Configure printer drivers'
• Added per-machine manual settings - Windows Explorer's look and feel - Tools - Folder Options... - View - Advanced settings - Use simple file sharing (Recommended) - off
• 'Manual settings for this user' - added 'If using a flat panel monitor (+ some others too), improve legibility: Appearance - Effects - [x] Use the following method to smooth edges of screen fonts: - Clear Type'
• Added to 'Configure this user's IE interface; Internet/trustd/restrictd security' - Software channel permissions - High safety which was previously on the manual list. Left at default in Local Intranet zone. (HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1E05 = 10000)
• Removed per-user manual setting '7. Internet Explorer - Tools - Internet Options... - Security - pick zone - Custom Level... - Miscellaneous - Software channel permissions - High safety'.
• Added to 'Configure this user's IE interface; Internet/trustd/restrictd security' - User Authentication - Logon - prompt for username and password which was previously on the manual list. Left at default in Local Intranet zone. (HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1A00 = 10000)
• Removed per-user manual setting '7. Internet Explorer - Tools - Internet Options... - Security - pick zone - Custom Level... - User Authentication - Logon - Prompt for user name and password?'.
• Network Configuration - removed 'Windows XP Pro 'signorseal' fix to allow it to authenticate with a Windows NT4 or Samba 2.x domain controller' (REG_DWORD "HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\requiresignorseal" = "00000000" and "00000001")
• Configure general Windows system and interface on this machine - Don't require pressing Ctrl+Alt+Del to login (HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DisableCAD" = "00000001") http://blogs.msdn.com/tim_rains/archive/2004/11/15/257877.aspx
• 'Add branding' and 'Add branding (from A:\)' - if Windows text and graphic for System Properties already exist, make a backup before we overwrite them.
• Removed per-user Internet Explorer setting - Allow cookies that are stored on your computer - enable (for 4 zones)
• Removed per-user Internet Explorer setting - Allow per-session cookies (not stored) - enable (for 4 zones)
• Shortcut Management
• Added Start Menu - Programs - Internet - UltraVNC with 'Show Default Settings' and 'Show User Settings'
• Stopped removing UltraVNC Viewer desktop shortcut shortcut, TWEAK doesn't provide its own version of this because I only use UltraVNC Server so if it's there it means someone wanted it there.
• FileZilla / FTP shortcuts were broken
• Changed GIMP executable from gimp-2.2.exe to gimp-2.4.exe
• Updated for Scribus 1.3.3.10 and 1.3.3.11
• Updated FileZilla Start Menu items for version 3
• Added Ogg Codecs from Illiminable
• F-Prot shortcut mistakenly pointed to %SYSTEMROOT%\installer... rather than the program executable
• Removed Dia - we now recommend OpenOffice Draw instead
• Really remove FTP shortcut from desktop
• Java Configuration - Update 'Disable Java Runtime Environment updater' for JRE 6
• JRE 6.0u1 doesn't recognize the EnableAutoUpdateCheck or JavaUpdate keys
• JRE 5.0u6 is the most recent version where the automatic update behavior can be controlled for all users
• http://forum.java.sun.com/thread.jspa?threadID=784153&messageID=9481598
• HKCU\Software\JavaSoft\Java Update\Policy\EnableAutoUpdateCheck. Overrides HKLM. is a binary value
• HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy\EnableJavaUpdate removes tab from control panel applet, doesn't disable updater
• TWEAK is trying this:

  	[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
  	"EnableJavaUpdate"=dword:00000000
  	"EnableAutoUpdateCheck"=dword:00000000
  	"NotifyDownload"=dword:00000000
  	"NotifyInstall"=dword:00000000
  	"Frequency"=dword:010d0000
  	"UpdateSchedule"=dword:00000000
  	

• Adobe Reader Configuration - Added Adobe Reader 8.0 config with same options as 7.0
• Driver Configuration
• Added Stop S3 graphics driver system tray utility loading
• Added Stop S3 graphics driver hotkey poller loading
• Moved 'Stop MS Office Startup Assistant + Find Fast loading when log in' from App Config to TSR Disable
• Moved 'Stop Adobe Gamma loader from loading on system startup' from App Config to TSR Disable
• Renamed tsr-disable.bat background-disable.bat

• Added 'NTP - Set The Time From An Internet Time Server' section
• Expanded the Mail Server section
• Polished off Webmin section
• Added 'Network Addressing' section to 'General Configuration' section
• Improved 'updates' section in 'Linux kernel updates'

• Added PostgreSQL database
• Added 'updates' section to 'Linux kernel updates' section with examples of the different messages you're likley to see when updating.
• Added diagram to help explain mail server system
• Fleshed out RAID + LVM so that it's now a step-by-step guide you can follow rather than a synopsis
• Various minor updates

• Squirrelmail - added configuration to make use of IMAP SORT
• Added 'set no bouncemail' to Fetchmail configuration to fix issue of replying to spam email

• Updated for Debian 4.0r2 release
• Updated for flashplugin-nonfree 9.0.31.0.1 / 9.0.48.0.1 to 9.0.115.0.1
• Changed flashplugin-nonfree from 'non-free' to 'contrib'

• Added new section: Digital Video Broadcasting (DVB-T / Freeview)
• Added new section 'Partitioning Disks' with gparted
• Tidied up the scanner section and added scanner firmware information
• I bought a machine with an AMD 64 Athlon CPU (only £90UK) to learn about the amd64 architecture. Consequently I've been able to add amd64 information for flashplugin-nonfree, sun-java5-jre and Skype
• Replaced gpdf with evince. gpdf is a leftover from Debian Sarge that doesn't exist any more
• Fleshed out GNOME font installation
• Removed the small amount of XFCE-specific information including packages xpdf and xfmedia. I intended this guide to be as descriptive for XFCE as it is for GNOME but having not managed to spend much time with an XFCE desktop environment I haven't garnered that knowledge. I now think the best place for XFCE desktop information would be a separate guide. The packages for the XFCE desktop environment itself remain.
• Added msttcorefonts to wine
• Added unshield
• Removed mdetect as xserver-xorg no longer uses it
• Added links for information on new xorg auto-configuration

• Added new section: Digital Video Broadcasting (DVB-T / Freeview)
• Tidied up the scanner section and added scanner firmware information
• I bought a machine with an AMD 64 Athlon CPU (only £90UK) to learn about the amd64 architecture. Consequently I've been able to add amd64 information for flashplugin-nonfree, sun-java5-jre and Skype
• Fleshed out GNOME font installation
• backports.org kernel upgraded from 2.6.21 to 2.6.22
• Added unshield
• Removed the small amount of XFCE-specific information including packages xpdf and xfmedia. I intended this guide to be as descriptive for XFCE as it is for GNOME but having not managed to spend much time with an XFCE desktop environment I haven't garnered that knowledge. I now think the best place for XFCE desktop information would be a separate guide. The packages for the XFCE desktop environment itself remain.
• Removed latex-xft-fonts as they're not available in Etch
• Replaced gpdf with evince. gpdf is a leftover from Debian Sarge that doesn't exist any more

• Added unshield
• Squirrelmail - added configuration to make use of IMAP SORT

• Squirrelmail - added configuration to make use of IMAP SORT
• Added 'set no bouncemail' to Fetchmail configuration to fix issue of replying to spam email