Cat 100 Setup

(This specification was last updated: 12/15/03 08:07 AM)

When we configure a Windows 95 PC to be a the TouchPRO Cat 100 CPU we need the machine to be as secure as possible to ensure system stability. Therefore we do not allow users access to most of the PC’s usual resources. We use a policy file named TMSERVER.POL to achieve this. Once the policy file is enforced, the customer will not have access to drives, devices or ability to install any new programs.

NOTE: If you plan on allowing user access to Windows programs like Word, Excel or any other programs they will be printing from.

The security levels will be set up as follows:

  1. Level 1 (Minimum)

      This level is accessible to anyone who logs on to the computer without a valid user name or password. No programs are available to run, no icons are visible on the desktop.

      This level uses custom folders for it’s desktop and menu configuration. The policy file specifies that the path to the Programs, Desktop, Startup, Network Neighborhood and Start Menu folders is: WindowsProfilesDefault…..
  2. Level 2 (TMCustomer)

      This level of access is designed for our customer. It requires that you log on as username: TMCustomer. The password is defineable by the customer, we will setup the PC with no password initially. It will provide access to ONLY the programs that Touch Menus has sold the customer. All other programs are removed or otherwise inaccessible. There are no desktop icons.Password and Time/Date settings are available through ‘Settings’ on the Start Menu. Lantastic Server is running (it is a virtual device driver and is always running) and Net HASP license manager is running. The user will have access to the C: drive through any Touch Menus ancillary programs. (like Word, Excel, etc)

      This level uses custom folders for it’s desktop and menu configuration. The policy file specifies that the path to the Programs, Desktop, Startup, Network Neighborhood and Start Menu folders is: WindowsProfilesTMCustomer…..
  3. Level 3 (Support)

      This level is for support technicians ONLY. It requires that you log on using user name SUPPORT and password TOUCHM. It will provide access to all of Windows 95.

      This level uses custom folders for it’s desktop and menu configuration. The policy file specifies that the path to the Programs, Desktop, Startup, Network Neighborhood and Start Menu folders is: Windows…..

Setup

To setup a Windows 95 PC as a Cat 100 CPU follow these steps:

NOTE: Until you get to step # 9 it does not matter what name you use to log on, you can just click the Cancel button.

  1. Change CMOS Settings:
        1. Boot the PC and go into CMOS.
        2. Select Advanced Setup and modify the boot sequence in from A,C to C,A.
        3. Select Peripheral Setup and change the parallel port mode for the LPT port you are using for the HASP to EPP. (This is essential for reliable HASP communications.)
        4. Define the Supervisor password for CMOS as “TOUCHM”
        5. Save CMOS settings and exit. The PC will reboot, be prepared to press F8 when you see the message: “Starting Windows 95…”.
  2. After the PC reboots, press F8 to bring up the Windows 95 start up menu.  Select “Command Prompt only.” Modify MSDOS.SYS to disable ability to press F8 on boot up by following these steps:
        1. attrib msdos.sys -s -h -r
        2. edit msdos.sys
        3. add this line to the end of the file: BootKeys=0
        4. save file
        5. attrib msdos.sys +s +h +r
  3. Setup the network components needed to log on to the in-house network. (If you are not at the Touch Menus shop, skip ahead to step #5)
        1. Access Network properties. You can do this one of two ways:
              1. Open Control Panel and double click the Network icon OR
              2. Right click on the Network Neighborhood icon and select Properties.
        2. If the IPX/SPX network protocol exist in the Installed Nework Components list, remove them. At this point you should have ONLY four network components installed:
              1. Client for Microsoft Networks
              2. NE2000 Compatible (or equivalent network card)
              3. NetBEUI
              4. File and Printer sharing for Microsoft Networks
        3. Click on the Identification tab and type Support in the Workgroup field.
        4. Save your new settings by clicking the Ok button on the network properties dialog.
        5. This will ask you to restart the PC, do so and then logon with your user name and password.
  4. Finalize network settings.
        1. Go to Network Properties control panel by right clicking the Network Neighborhood icon and select Properties from the menu.
        2. In the Primary Logon field, set the Primary logon to: Windows Logon
        3. Click the Ok button.
        4. Select the indentification tab
            a. Computer Name=Cat##### where ##### is the TMCU Touch Menus Id number
            b. Workgroup= Showbooth or ?
            c. Computer Description=Touch Menus Cat#### or ?

      After making these changes, the PC will prompt you to restart, do so. Upon restart:
  5. Install System Policy Editor.
        1. Go to Add/Remove programs
        2. Click Windows Setup button
        3. Click Have Disk button
        4. Click the Browse button, this will open a dialog titled Open.
        5. Click the Network button and map drive N to {\maind}
        6. Navigate to {N:Touchm~1poledit}, you will see two inf files in the File Name list box appear. The file grouppol.inf will be selected.
        7. Click the Ok button
        8. Click the Ok button again
        9. Click on the check box next to System Policy Editor
        10. Click the Install button. The policy edit will be installed.
        11. Click the Ok button to exit the Windows Setup dialog.
  6. Install the Touch Menus Windows 95 Policies.
        1. Click the Start button and then select Run from the menu.
        2. [b:110huhau]{down load instructions ….} This file was not obtained from Touchmenus and is not available[/b:110huhau]
        3. Next you will be prompted to continue with the installation.

            After the install is performed, you will be notified with a message that reads something like this: “In order for the changes to take effect, you must restart your computer”. There is only an “OK” button for the response, so click “OK”.
  7. . Enable System policies.
        1. Click the Start button, then select Programs, then select Accessories, then select System Tools, then Policy Editor
        2. Click Options from the top menu bar.
        3. Click Template
        4. Click the Open button
        5. Type {C:WINDOWSTM.ADM} in the file name field
        6. Click the Open button
        7. Click the Close button
        8. Click File from the top menu bar
        9. Click Open Registry
        10. Click Local Computer icon
        11. Click Network branch
        12. Click Update
        13. Click Remote Update
        14. Click Update mode – set to manual
        15. Type {C:WINDOWSTMCAT100.POL} in the Path for manual update field
        16. Scroll down to turn on the Display errors option
        17. Click the Ok button
        18. Click File from the top menu bar
        19. Click Save
        20. Close Policy Editor
  8. . Restart computer. Log on as anything (click cancel if you want).
      Note: Steps 9 – 14 are very important that you do exactly as instructed!
  9. . Click Start,Shutdown,Close all programs and log on as new user.
  10. . Log on as TMCustomer, Windows should now prompt you with a similar message:
      “You have not logged on to this computer before, retain settings?”
      Respond “YES” to this question.
      NOTE: If you do NOT receive this message, repeat steps 13 and 14!
  11. . Click Start,Shutdown,Close all programs and log on as new user.
  12. . Log on as Support and type in the password “touchm”, respond “YES” when asked to retain settings.
  13. . Click Start,Shutdown,Close all programs and log on as new user.
  14. . Log on as Blah and respond “NO” when asked to retain settings.
  15. . Click Start,Shutdown,Close all programs and log on as new user.
  16. . Log on as Support
  17. . Copy the latest Fastouch executables and tools
  18. . Modify the shortcuts in the “Touch Menus” folder for TMCustomer to use the proper application directory (working directory) and delete unused. This folder is located at: WindowsProfilesTMCustomerStart MenuPrograms
  19. . Copy the “Touch Menus” folder from WindowsProfilesTMCustomerStart MenuPrograms to WindowsStart MenuPrograms. (This step duplicates step #17 for the support user profile.)
  20. . Use Device Manager to disable auto insert notification for the CDROM.
  21. . Disable Windows Power Management:
        1. Open the Control Panel and click on the “Power” icon
        2. Uncheck the – “Allow Windows to manage power for this computer” box.
        3. Click on the “Disk Drives” tab, and uncheck the box that say’s “When powered by AC”.
        4. Save changes.

Revisions