Roaming Computing System 1.0 - System Setup

This document is here for historical purposes. For an up-to-date version go to http://thegoldenear.org/rcs/.

Contents

0.1 Key

1.0 file server setup - operating system

2.0 file server setup - software applications

3.0 Hardware

4.0 Workstation Setup

5.0 Printing

6.0 Networking

7.0 Sundry

0.1 Key

%USERNAME% defines the NT system variable %USERNAME%, when this is used in the text it indicates that you should type these exact characters and the NT system will substitute it with the current username

'username' indicates that you should type the actual name yourself

Wherever '\FILE-SERVER' is used, you may want to replace the actual name of your server if it differs from this.

1.0 file server setup - operating system

Shares and Drive Mappings

description

drive

share name

physical drive or directory

software applications

P:

PROGRAMS

D:

users' shared workspace(s)

S:

SHARED

E:


users' system files

U:*

USER-SYS

F:

users' private work space

H:

HOME

G:

physical drive or directory

for whom

permissions

subdir?

reasons...

C:

?Admini... or admin?

(full)(full)



D:

?Admini... or admin?

(full)(full)



E:

?Admini... or admin?

(full)(full)



F:

?Admini... or admin?

(full)(full)



G:

?Administrators or admin?




D:

organisation-name-STAFF?

?(RX)(RX)? W?


to run applications

\HOME\'username'

'username'

(RWXDO)(all)

yes


\USER-SYS\MAIL

organisation-name-STAFF?

(RWX)(W)

yes

email

\USER-SYS\MAIL\%USERNAME%

%USERNAME%

(RWXDO)(RWXDO)


email

\USER-SYS\%USERNAME%

%USERNAME%

(RWXDO)(RWXDO)


applications

?\WINNT\profiles\%USERNAME%?





?\WINNT\profiles\%USERNAME%?





\SHARED

organisation-name-STAFF

(RWX) (RXD)

?

for access to others

\SHARED\xxxxx

organisation-name-STAFF




\SHARED\xxxxx

organisation-name-STAFF




\SHARED\xxxxxxx

organisation-name-STAFF




Sub-directories

SHARED\...

Groups

xxxxxx (global)

User Accounts

Creating a Template User Account

NOTE: usernames should not contain capital letters (else it can complicate some MS system administration tools)

Creating a User Account from a Template

Server side

(for the user their H: isn't \HOME\username its \HOME unless we add a 'cd H:\%USERNAME%' to a logon script)

User/workstation side

Creating a User Account Without a Template

Server side

NOTE: usernames should not contain capital letters (else it can complicate some MS system administration tools)

User/workstation side

User Settings

Users' application settings are stored in \\FILE-SERVER\USER-SYS\%USERNAME%. Each application can have its own sub-directory below there to store its user settings in.

All users must have 'List' access to \USER-SYS - why?

individual users must have 'Change'? access to \USER-SYS\%USERNAME% and below - see map earlier

Windows Profiles

Setup the desktop as you wish it to be for everyone. these settings will be saved to the Profile which can then be copied to other users. Remember any settings saved by applications that specifically understand Windows NT and track application settings on a per-user basis must also be copied

Copy new shortcuts to %SYSTEMROOT%\profiles\Default Users so that they can be given to newly created users.
Copy new shortcuts to existing users by individually copying them to their profiles directory.

Users each have their own profile, in \\FILE-SERVER\USER-SYS\%USERNAME%

Windows Profiles - Networked

Roaming user profiles live in USER-SYS\%USERNAME%. It can be the same directory as for 'local' Profiles but instead we're putting it in the users' own system files area. Their 'User Profile Path' is unique for each user, the pointer to which is stored in their account settings. here's how its done:

System Policy

\\FILE-SERVER\netlogon\NTCONFIG.POL or \winnt\system32\repl\import\scripts\NTCONFIG.POL. Either way they're both the same location. this file can be copied between machines. Be sure to edit 'default computer', ?'default user'? and perhaps create groups of settings for Groups of users on the system.

worthwhile settings:

create a new group and define their settings then can cut and paste these settings to any other groups as required

Backup Strategy

User Groups

User Accounts (for administration)

Logon Script

(this needs updating)

\\FILE-SERVER\WINNT\SYSTEM32\REPL\IMPORT\SCRIPT\logon.bat
remember that %USERNAME% is case sensitive

@echo off
rem system Logon Script for all FILE-SERVER users
rem if you make any changes to this file please document them below!

rem  date   /   who   /   changes made
rem  ---------------------------------


REM NET TIME \\FILE-SERVER /SET /YES

IF %USERDOMAIN% == ORGANISATION-NAME NET USE U: \\HAL\USER-SYS >null
IF %USERDOMAIN% == ORGANISATION-NAME NET USE P: \\HAL\PROGRAMS >null
IF %USERDOMAIN% == ORGANISATION-NAME NET USE S: \\HAL\LIB >null
IF %USERNAME% == admin NET USE K: \\FILE-SERVER\ADMIN$ >null
rem this would be preferable as ORGANISATION-NAME-STAFF rather than ORGANISATION-NAME Domain

rem copy Netscape's Profile information from server's win-system directory to workstation's:
rem copy \\FILE-SERVER\admin$\nsreg.dat c:\winnt
rem (if not exist %SYSTEMROOT%\nsreg.dat copy \\hal\admin$\nsreg.dat %SYSTEMROOT%\)

NET USE H: H:\%USERNAME%

cd H:\%USERNAME%

NET PRINT \\ORGANISATION-NAME-5\EPL-Laser	
		

2.0 File Server Setup - Software Applications

Applications are installed to to the file server, to P:.

Shortcuts should point to network Shares rather than actual drives and directories on the server.

If an application installs its shortcuts to \winnt\profiles\all users they will need copying to 'Default user' and 'winman' (from whom the desktop is copied to individual users).

Pegasus Mail

Original version: 3.12c; later upgraded to: 4.1x; (with WSendTo, if it works in a multi-user environment)

Create this desktop icon: 'my email' (winpm-32 -i %USERNAME%)

Create this desktop icon: 'ORGANISATION-NAME email' (winpm-32)

Everyone must have write access to U:\MAIL and below so as to be able to send email to others locally

Pegasus Mail - Installation

Once Pegasus is up and running, you can set the 'Options' for a user and then propogate the appropriate settings files around all users if you want a consistent setup. PMAIL.INI contains most of the settings. Note that you must amend the 3 lines that specify a username near the bottom. VIEWER.PM has directions to applications that might be used to view/process various attachments

Pegasus Mail - Creating user accounts

Pegasus Mail - Mail filtering rules

Setup mail filtering rules to perform certain actions such-as moving mail into specific folders for different subject matter (using Tools / Mail filtering rules...)

mailbox

folder

action to take

letters



enquiries

done

move by hand

corporatecritic

new user accounts

general enquiries - done

subscriptions

newrenewals


mail

lists



CEO

move auto


CF

move auto


genetics

move auto

news



copy / mag / layout



Mercury Mail Transport System

Setup mail aliasing for users and for organisation-specific accounts (such as 'enquiries')

Mercury puts mail into mailboxes, that is the finest granularity it deals with; Pegasus puts mail into folders within mailboxes, that is its finest granularity.

for or from

mailbox to put in

letters

letters

enquiries

enquiries

corporatecritic

corporatecritic

subscriptions

subscriptions

CEO

mail

CF

mail

genetics

mail

news

news

Microsoft Word and Excel

Version: Office 97

Shortcuts location: 'All users'

problems:

Netscape Navigator / Communicator

Version: 4.7x

Netscape Navigator / Communicator - email client integration

To enable Netscape to launch an email client program other than 'Netscape Messenger' then you must use 'Simple MAPI' (the 1st version of Windows' Mail Application Programming Interface which gives applications a common language with which to launch and pass commands to an email client program that also speaks Simple MAPI):

Netscape Navigator / Communicator - Profiles

To run Netscape Profile Manager: netscape.exe -profile_manager

\WINNT\NSREG.DAT - settings, including profile manager settings (usernames & their Netscape Profile directories) Allow all users to have Change access. Its probably saved by the installer to %windir%, which, when logged into the server console doing the installation, is the server's C:\WINNT. so, having already installed Communicator, you could copy the server's copy of NSREG.DAT to the local C:\WINNT directory and not do any amendments to the profile registry. preferably, install in the first place with the %windir% environment variable temporarily changed in System Properties to some place more communal; unless this has wider ramifications

1) with Netscape's Profile Manager, create Profiles for each username requiring use of Netscape where the Profile Directory Name is in the user's own system area: U:\%USERNAME%\netscape

2) propogate the profile settings file (\WINNT\NSREG.DAT) around the worksatations. the downside to this is that if a new user wants to roam & still have access to their Netscape Profile one NSREG.DAT will have to be edited & re-propogated around the workstations (if they only want to use the one machine they can create a new Netscape Profile on just that machine by running Netscape with the command-line option '-?????')

3) the Netscape icon's command-line should read: p:\netscape\netscape.exe -P"%USERNAME%" where the profile name is the same as the username

theres also the situation of making permissions to just the file \\FILE-SERVER\WINNT\NSREG.DAT ...but looks unlikely, as it compromises security to make that whole directory open and may be technically impossible to just point to one

registry settings: HKEY_CURRENT_USER\software\netscape\netscape navigator

Notes:

? Netscape user settings directory would be preferable as: \\FILE-SERVER\USER-SYS\%USERNAME%\netscape

? but the netscape profile administrator doesn't allow UNC, so: \\FILE-SERVER\USER-SYS\'username'\netscape

everyone has has their own Netscape Profile, with a copy of our system-wide settings to begin with, and are able to edit their own settings.

Netscape Profiles can be stored in users' own areas, but when Netscape is installed it saves its information (part of Profile Manager), of where Netscape Profiles are stored, to somewhere on the drive & directory Netscape was installed to. so, if you installed at the server console, this info might be on the C:, meaning when a remote user runs netscape they're prompted to configure Netscape Profiles anew

when you setup Netscape/Profiles you will have to make sure its looking to U:\%USERNAME%\netscape for its Netscape Profile information

Netscape Navigator / Communicator - installation

Shortcuts location: 'All Users' on the computer used to install:

which want either deleting or moving to 'Default User'

* configure Netscape Profiles on U:\'username'\netscape

New Profile Setup

Use the name provided here for your profile or enter a different one. If you create several profiles, you will be able to tell them apart by their names. Profile name: [ ]

Your user settings, preferences, bookmarks, and stored messages will be stored in the directory below. We recommend that you use the default directory already listed. [U:\'username'\netscape]'

Users are only presented with the Netscape Profile Manager and prompted to create a new Netscape Profile when none previosuly exist

Netscape Navigator / Communicator - Preferences

'Edit / Preferences' reports: 'Unable to load the preference DLLs. Please reinstall Netscape Communicator'

- try the registry fix from Netscape

DLLs involved with preferences:

If we save our own version of BOOKMARK.HTM to ...\netscape\program\defaults, does it get copied to each new user and to a user's Netscape Profile directory when they lose their own BOOKMARK.HTM?

plug-ins installed - Flash? Shockwave?

Adobe Photoshop 5.5

Install the following components:

Local DLLs required: SPROF32.DLL, KPSYS32.DLL, KPCP32.DLL, PFPICK.DLL, ICCCODES.DLL.

Notes:

Adobe Photoshop 7

Adobe Page Maker

Version: 6.52

Network Installation

perform a network installation to P:\PM65NET (setup -fadmin.ins) and choose 'install on network server'

Notes

RefsBase 2

Database location: S:\refsbase

Adobe Acrobat Reader

Original version: 4.05; Later upgraded to: 5.1

Shortcuts location:

Asks you to accept the end user licence agreement when first run.

Copy the Netscape Acrobat plug-in files (nppdf16.dll and nppdf32.dll) to Netscape's 'splugins's directory, to enable Netscape to load PDF files into the browser window

Macromedia Dreamweaver

Original version: 3; later upgraded to: 4

Shortcuts location: All users

Registry settings: HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Dreamweaver\3\Registration

Location - possibly sets itself to C:\... and wants changing to P:\...

Problems: needs a more up-to-date version of MFC42.DLL than version 4.2, atleast works with version 6?

3. Hardware

4. Workstation Setup

Windows NT4 User interface

each workstation must conform in the following areas:

Installed Software

Windows 2000

Application Configuration

These have all been tested with Windows 2000 and our current knowledge of specific issues with Windows 2000 is included here

Adobe Page Maker 6.52

For Initial System Installation
For Other Workstations

(?) Then could install as individual users to own area on U: (?)

Adobe Photoshop 5.5

Adobe Acrobat Reader

Microsoft Office 97 - Word and Excel

run P:\msoffice\setup.exe (?)

Windows 2000 compatibility and configuration:

Macromedia Dreamweaver 4.01

Windows 2000 compatibility and configuration:

Refsbase 2

RefsBase 3

(requires Windows 2000)

WinZip

Installed on each workstation

Original version: ; later upgraded to: 8.0.

F-Prot anti-virus

Currently we're leaving (All Users) shortcuts on the desktop

Install to %PROGRAMFILES%\F-Prot

Configure F-Prot [TWEAK: B -> F ->

QuickBooks 2001

Requires users have 'Standard' priviliges and that Internet Explorer have some settings relaxed to our default.

Quickbooks is installed to a workstation, an account is created specifically for it with 'Standard'(?) user priviliges and Internet Explorer security slackened off. A corresponding account with synchronised password is created in the domain and on any print servers as required. Passwords are set to never expire.

5. Printing

Canon GPS 300-405

Enable LPR

Epson EPL 5700L

Notes

Current Setup

Printing to a Printer over TCP/IP

"You can install the LPD service under Windows NT by installing the Microsoft TCP/IP Printing Service from the Network option in the Control Panel folder. By default, the LPD service is set to start manually. To have it start automatically, use the Services icon in Control Panel, and change the startup options for the TCP/IP Print Server service" chapter 5 - setting up print servers http://www.microsoft.com/technet/winnt/Winntas/manuals/concept/xcp05.asp

6. Networking

IP Address Assignments

Name

Role

IP Address

HAL

file server

192.168.254.1

ORGANISATION-NAME-x
(where x = 1 to 18)

workstation

192.168.254.x
DHCP
(originally configured using static IP addresses

ADSL gateway

router to Internet

192.168.254.254

ISP

BT OpenWorld

BT ADSL router

7.0 Sundry