Touch Menus Windows 95 File Server/Net HASP License Manager Specification

(This specification was last updated: 12/15/03 08:18 AM)

When we configure a Windows 95 PC to be a the TouchPRO File Server and HASP license manager we need the machine to be as secure as possible to ensure system stability. Therefore we do not allow users access to most of the PC’s usual resources. We use a policy file named TMSERVER.POL to achieve this. Once the policy file is enforced, the customer will not have access to drives, devices or ability to install any new programs.

NOTE: If you plan on allowing user access to Windows programs like Word, Excel or any other programs they will be printing from.

The security levels will be set up as follows:

  1. Level 1 (Minimum)

      This level is accessible to anyone who logs on to the computer without a valid user name or password. No programs are available to run, no icons are visible on the desktop. Lantastic Server is running (it is a virtual device driver and is always running) and Net HASP license manager is running.

      This level uses custom folders for it’s desktop and menu configuration. The policy file specifies that the path to the Programs, Desktop, Startup, Network Neighborhood and Start Menu folders is: WindowsProfilesDefault…..
  2. Level 2 (TMCustomer)

      This level of access is designed for our customer. It requires that you log on as username: TMCustomer. The password is definable by the customer, we will setup the PC with no password initially. It will provide access to ONLY the programs that Touch Menus has sold the customer. All other programs are removed or otherwise inaccessible. There are no desktop icons.Password and Time/Date settings are available through ‘Settings’ on the Start Menu. Lantastic Server is running (it is a virtual device driver and is always running) and Net HASP license manager is running. The user will have access to the C: drive through any Touch Menus ancillary programs. (like Word, Excel, etc)

      This level uses custom folders for it’s desktop and menu configuration. The policy file specifies that the path to the Programs, Desktop, Startup, Network Neighborhood and Start Menu folders is: WindowsProfilesTMCustomer…..
  3. Level 3 (Support)

      This level is for support technicians ONLY. It requires that you log on using user name SUPPORT and password TOUCHM. It will provide access to all of Windows 95.

      This level uses custom folders for it’s desktop and menu configuration. The policy file specifies that the path to the Programs, Desktop, Startup, Network Neighborhood and Start Menu folders is: Windows…..

Setup

To setup a Windows 95 PC as a File Server and HASP license manager follow these steps:

NOTE: Until you get to step # 9 it does not matter what name you use to log on, you can just click the Cancel button.

  1. Change CMOS Settings:
        1. Boot the PC and go into CMOS by hitting the Delete key when it is booting up.
        2. Select Advanced Setup and modify the boot sequence in from A,C to C,A.
        3. Select Peripheral Setup and change the parallel port mode for the LPT port you are using for the HASP to EPP. (This is essential for reliable HASP communications.)
        4. Define the Supervisor password for CMOS as “TOUCHM”
        5. Save CMOS settings and exit. The PC will reboot, be prepared to press F8 when you see the message: “Starting Windows 95…”.
  2. After the PC reboots, press F8 to bring up the Windows 95 start up menu.  Select “Command Prompt only.” Modify MSDOS.SYS to disable ability to press F8 on boot up by following these steps:
        1. attrib msdos.sys -s -h -r
        2. edit msdos.sys
        3. add this line to the end of the file: BootKeys=0
        4. save and exit the file
        5. attrib msdos.sys +s +h +r

      Now let’s modify the Autoexec.BAT file:
        1. edit autoexec.bat
        2. add the line: PATH=%PATH%;C:TOUCHNET;C:TOOLS;C:PLUGINS;C:UTILITY
        3. Save and exit the file

Reboot the PC and proceed with a normal boot to Step 3.

  1. Setup the network components needed to log on to the in-house network. (If you are not at the Touch Menus shop, skip ahead to step #5)
        1. Access Network properties. You can do this one of two ways:
              1. Open Control Panel and double click the Network icon OR
              2. Right click on the Network Neighborhood icon and select Properties.
        2. If the IPX/SPX network protocol exist in the Installed Network Components list, remove them. At this point you should have ONLY three network components installed:
              1. Client for Microsoft Networks
              2. NE2000 Compatible (or equivalent network card)
              3. NetBEUI
        3. Click on the Identification tab and type Support in the Workgroup field.
        4. Click on the  Identification tab and type Touch Menus Control Unit in the Computer Description filed.
        5. Click on the  Identification tab and type Mainsetup in the Computer Name Field.
        6. Save your new settings by clicking the Ok button on the network properties dialog.
        7. This will ask you to restart the PC, do so and then logon with your user name and password.
  2. Install Lantastic from Touch Menus in house server MAIN.
        1. Double click on the Network Neighborhood icon.
        2. Select MAIN and double click it’s icon. If you can not browse the network, here are a few things to check:
              1. Check network cable
              2. Check network card setup. Use it’s DOS based setup utility to determine which IRQ and memory base have been assigned to it and then make sure Windows is reporting the same.
        3. Navigate to {\maindTouch Menus File Server setup filesLantastic 8 install files} using whatever method suits you.
        4. From there, launch Setup. The Lantastic install will start now.

      (See Lantastic 8 Network Software for detailed instructions.)

      Questions asked during setup:
        1. Serial Number: 67010012184
        2. Verification Key: 1F90-0A99-430A
        3. Computer Name: MAINSETUP (will change this later once you have disconnected from the shop net)
        4. Share files and printers: YES
        5. Install Modem Share: NO
        6. Install Internet Gateway: NO
        7. Install Services: NO

      After the necessary files are copied, the setup program will force the PC to restart. Upon restart you will be asked to log on, remember that it does not matter what name you use, you can just click the Cancel button.
  3. Finalize network settings.
        1. Go to Network Properties control panel by right clicking the Network Neighborhood icon and select Properties from the menu.
        2. Remove any components other than the following:
              1. Client for Lantastic
              2. NE2000 (network card driver which can vary from system to system)
              3. Artisoft NetBIOS
              4. File and Printer sharing for Lantastic Networks
        3. In the Primary Logon field, set the Primary logon to: Windows Logon
        4. Click the Ok button.

      After making these changes, the PC will prompt you to restart, do so. Upon restart:
  4. Fine tune Lantastic
      Note: You will be asked for a user name and password to configure the server. Use the following settings:
      User name: supervisor
      Password: supervisor
        1. Click the Lantastic icon on the desktop.
        2. At this point Lantastic will ask you to setup up shares, answer NO.
        3. Set up shares.
              1. Click the Manage Server tab.
              2. Click the Share Drives and Printers button. This will bring up a window where you will select a server.
              3. Select This Server.
              4. Click the Ok button and enter the above user name and password. Next a window will come up showing the current shared resources.
              5. Click the Add button to add a share. This will bring up the Add Resource window. This window has fields much like the DOS version of Lantastic.
              6. Fill in the necessary fields for the shared resource:

                  for example:

                  Name:C-DRIVE
                  Description:C drive on MAIN
                  Path:C:
              7. Click the Create button after filling in those fields.
              8. Repeat steps 5 – 6 as necessary.
              9. Click the Close button. This will take you back to the Lantastic Control Panel.
              10. Click the Server Control Panel button.
              11. Slide the performance bar to Server fastest.
              12. Click the Close button.
  5. Install the Communications software as per the work order.
  6. Install Mcafee Virus Scanner
          a. Right click on the Network Neighborhood icon
          b. Click on Map Network Drive
          c. Choose drive N and set the Path {\maind}
          d. Click the Start button and then select Run from the menu
          e. Type {“N:Touch Menus Setup FilesMcafee Install FilesVscanWin95Setup.exe”}
          f.  Select all of the defaults
          g. Choose Typical install
          h. When it asks you to create an emerengcy startup disk choose cancel
       
          After the install is performed, you will be notified with a message that reads something like this: “In order
          for the changes to take effect, you must restart your computer”.    Choose no it will not force you to
          restart the computer.
  7. Install System Policy Editor.
        1. Go to Add/Remove programs
        2. Click Windows Setup button
        3. Click Have Disk button
        4. Click the Browse button, this will open a dialog titled Open.
        5. Click the Network button and map drive N to {\maind}
        6. Navigate to {N:Touchm~1poledit}, you will see two inf. files in the File Name list box appear. The file grouppol.inf will be selected.
        7. Click the Ok button
        8. Click the Ok button again
        9. Click on the check box next to System Policy Editor
        10. Click the Install button. The policy edit will be installed.
        11. Click the Ok button to exit the Windows Setup dialog.
  8. Install the Touch Menus Windows 95 Policies.
        1. Click the Start button and then select Run from the menu.
        2. Type {“\MainTouch Menus Setup FilesTouch Menus Windows 95 File Server.exe”}
        3. Next you will be prompted to continue with the installation.

            Click OK.  The self-extracting zip will install Touch Menus groups, shortcuts and Aladdin’s HASP License Manager.

            After the install is performed, you will be notified with a message that reads something like this: “In order for the changes to take effect, you must restart your computer”. There is only an “OK” button for the response, so click “OK”, but do not restart. (It will not force a restart)
  9. . Enable System policies.
        1. Click the Start button, then select Programs, then select Accessories, then select System Tools, then Policy Editor
        2. Click Options from the top menu bar.
        3. Click Template
        4. Click the Open button
        5. Type {C:WINDOWSTM.ADM} in the file name field
        6. Click the Open button
        7. Click the Close button
        8. Click File from the top menu bar
        9. Click Open Registry
        10. Click Local Computer icon
        11. Click Network branch
        12. Click Update
        13. Click Remote Update
        14. Click Update mode – set to manual
        15. Type {C:WINDOWSTMSERVER.POL} in the Path for manual update field
        16. Scroll down to turn on the Display errors option
        17. Click the Ok button
        18. Click File from the top menu bar
        19. Click Save
        20. Close Policy Editor
  10. . Restart computer. Log on as anything (click cancel if you want).
      Note: Steps 13 – 18 are very important that you do exactly as instructed!
  11. . Click Start,Shutdown,Close all programs and log on as new user.
  12. . Log on as TMCustomer, Windows should now prompt you with a similar message:
      “You have not logged on to this computer before, retain settings?”
      Respond “YES” to this question.
      NOTE: If you do NOT receive this message, repeat steps 13 and 14!
  13. . Click Start,Shutdown,Close all programs and log on as new user.
  14. . Log on as Support and type in the password “touchm”, respond “YES” when asked to retain settings.
  15. . Click Start,Shutdown,Close all programs and log on as new user.
  16. . Log on as Blah and respond “NO” when asked to retain settings.
  17. . Click Start,Shutdown,Close all programs and log on as new user.
  18. . Log on as Support
  19. . Copy the latest TouchPRO executables and tools
  20. . Create a directory for the customer’s application under the TOUCHNET directory
  21. . Copy the customer’s TouchPRO application to the directory created in step 22
  22. . Copy the latest executables,tools and utilities to their proper directories (Touchnet, Tools, Utilities)
  23. . Modify the shortcuts in the “Touch Menus” folder for TMCustomer to use the proper application directory (working directory) and delete unused. This folder is located at: WindowsProfilesTMCustomerStart MenuPrograms
  24. . Copy the “Touch Menus” folder from WindowsProfilesTMCustomerStart MenuPrograms to WindowsStart MenuPrograms. (This step duplicates step #17 for the support user profile.)
  25. . Use Device Manager to disable auto insert notification for the CD-ROM.
  26. . Disable Windows Power Management:
        1. Open the Control Panel and click on the “Power” icon
        2. Uncheck the – “Allow Windows to manage power for this computer” box.
        3. Click on the “Disk Drives” tab, and uncheck the box that say’s “When powered by AC”.
        4. Save changes.
  27. . Install a automatic backup utility:
          1. InstantOn with TMCOPY “see K-Base documentation”
          2. Or Install Laplink
  28. . Installing Laplink globally
          1. Navigate to \maindv0reltmcu backupLaplink
          2. Copy the Laplink folder onto your local drive
          3. Open the Laplink folder and double click on setup.exe
          4. When installing just go with the defaults.
          5. The security key passcode is LTK USRT 124021-20A
          6. Choose no when it asks you if you want to share your printers.
          7. It will ask you to reboot the computer when it is all done. So reboot the computer
          8. If you have any questions refer to the LAPLINK MANUAL.

Revisions

01/16/97

  1. Corrected MAXDays syntax.
  2. Added instructions to disable Power Management.

08/29/97

  1. Changed order of steps a little bit.
  2. Added instructions for new Lantastic setup from network instead of floppies.
  3. Updated documentation to include proper instruction for new HASP files.
  4. Fixed references to incorrect password “Pocatello”.
  5. Updated the Touch Menus Windows95 policies file to include version 6.0 hasp server.

12/19/97

  1. Included more detail in most steps
  2. Changed location of in house file server related setup files and documented that here

06/17/98

  1. You no longer log on with user name Setup to access the internal network in order to install Lantastic.  Instead, use your own user name and password.

07/29/98

  1. The self extracting zip (Touch Menus file server.exe) automatically unzips it’s contents and installs the HASP now.  You no longer have to type HINSTALL.EXE -I.  Documentation was updated to reflect this.
  2. The TMServer policy incorrectly disabled printer settings from the TMCustomer profile.  Fixed.

08/11/98

  1. Changed instructions for MAXDAYS which reference a REPBACK directory to referencing a directory named OLDSALES.

04/22/99

  1. Updated the document to include current standards.