Updates to LockIt95 v2.3 (rev.98):

Kenn's
Tech
Notes

19980901: Updates to LockIt95 v2.3 (rev.98):

September/1998
Tech Note #1

If your copy of the LockIt95 v2.3 (rev.98) disk set is older than October 9, 1998, your disks are out of date. You require this version [981009] or later for all routines mentioned here.

a. Run LockIt95(rev.98) Update 9810: Here are the issues addressed by this update:

- Screen resolution set too high for monitors - It has been discovered in a number of schools that the icon on the taskbar which allows the user to change screen modes can actually be set to a higher resolution than the monitor supports. Once this has been done, the screen is so scrambled, it is often impossible to see the icon, much less select the desired resolution.

To fix a workstation that this has happened to, boot into safe mode (see below) and pick the desired resolution.

To prevent this from happening on workstations, run "LockIt95(rev.98) Update 9810".

- Slow response time in MSIE4 - Many teachers have noticed that the response time for web browsing seems quite slow on the new Pentium 166s, when using Microsoft Internet Explorer 4. The reason for this is we had inadvertently left the HTTP 1.1 Through Proxy setting enabled. This was a mistake.

To fix this problem, run "LockIt95(rev.98) Update 9810".

- New proxy settings in MSIE4 and Netscape 4 - Information Systems has requested that all division technicians change the proxy settings for web browsers from 206.45.100.195 to proxy.wsd1.org. The port number remains 8080.

To make this change on systems with the Summer/98 software package, run "LockIt95(rev.98) Update 9810".

- Fixing a hole in LockIt95 v2.3 (rev.98) - Okay, everybody who found the security hole in LockIt95 v2.3 (rev.98), raise your hands. Well, nobody told me, so, as far as I know, I'm the only one who's discovered it. Nevertheless, you can be certain that, even if you didn't find it, one of the students in your school will, so run "LockIt95(rev.98) Update 9810". It fixes it.

- Multiple Left-Handed Users - This update also contains an updated policy file which will allow schools to have any number of different left-handed user accounts locked up. For more information, see Tech Note #2.

To run "LockIt95(rev.98) Update 9810" (in the COMMAND folder of LockIt disk 2), log on to the workstation as Student, use Teacher Applications to unlock the session, and run this routine from Windows Explorer. After you have run the routine, use the Users applet in Control Panel to delete StudentL (and any other locked user profiles). Recreate the delete profile(s) by copying Student.

IMPORTANT NOTE: The OCT98FIX file already distributed to lab facilitators as a quick fix is not the same thing! It had only a partial fix for the maximum resolution problem, changed only the MSIE4 proxy settings (not Netscape), and did not include the updated policy file. In other words, the LockIt Update does everything OCT98FIX did, and more.

The OCT98FIX was a quick fix solution distributed to lab facilitators who had a real need to address the browser speed and monitor resolution issues as quickly as possible. However, I urge all technicians to make it a priority to run the LockIt95(rev.98) Update 9810 routine on all systems that have LockIt95 v2.3 (rev.98) and the version 4 web browsers.

b. How to run safe mode on locked workstations: Run "Safe" - Boot from LockIt disk 2 and run SAFE if you need to set the system to boot in safe mode. Once in Windows 95, choose Run... from the Start Menu and run UNDOSAFE, when you're ready to disable safe mode again.

c. How to run locked workstations off the network: Run "Home" - Boot from LockIt disk 2 and run HOME if you need to lock the system for stand-alone use. This setting is not as secure as the standard network locking strategy. Takes effect after second logon or reboot. Once in Windows 95, choose Run... from the Start Menu in an unlocked session, and run RELOCK95, when you're ready to lock the workstation up for network use again.

Please note! In order for the "home" locking strategy to be most effective, you must do the following things after running HOME:
- log on once each as Teacher, Sysop, and Tech with secure passwords, saving your settings. This is necessary to ensure the home user cannot access an unlocked profile by creating their own password for one of these accounts; and
- log on to the"default profile" (ie. logon with a new account and answer "NO" to the dialog asking if you wish to save settings). This is necessary to ensure the home user will still be locked if they press <Esc> to bypass the logon dialog.

d. How to undo an unknown Teacher Applications password: Run "Set LockIt Password To Standard 1998 Tech Password" (in the COMMAND folder of LockIt disk 2) - If you can't unlock Teacher Applications because you've forgotten the password or someone's changed it to something they shouldn't have, logon with an unlocked account, double-click this registry file, and the password will be reset to the standard 97/98 Tech password.

e. How to change the system policy: "L95REV98.ADM" - For the adventurous, the template for System Policy Editor is included (in the COMMAND folder of LockIt disk 2). Please note: You don't need to use this. Any member of Domain Admins is fully unlocked. Any member of Domain Sysops, Domain Office Users, or Domain Teachers is mostly unlocked. Any member of Domain Lefties is locked up with left-handed mouse settings. Any other user is locked up with right-handed mouse settings. You can have any number of users you want locked or unlocked at any desired "level". All you have to do is put their accounts in the appropriate global group in your Windows NT domain. If you change any of these policy files, I assume you are a fully qualified Windows 95 policy expert, and you don't need any help from me! You're on your own!

f. How to uninstall LockIt95 v2.3 (rev.98): There is no uninstaller for LockIt95 v2.3 at this time. However, if you want to unlock the workstation more or less completely, boot from LockIt disk 2 and run UNLOCK95. Takes effect after second logon or reboot. Once in Windows 95, choose Run... from the Start Menu and run RELOCK95, when you're ready to lock the workstation up again.

g. How to change Netscape settings on locked systems: A number of lab facilitators and technicians have noticed on workstations locked up with LockIt95 v2.3 (rev.98) any changes made to the settings in Netscape 4 do not hold for subsequent sessions. This is by design. If you need to change settings in Netscape 4, unlock the system, and change the file attributes on C:\Program Files\Netscape\Users\default\prefs.js. It is automatically set to read-only every time you logon; simply clear that attribute, make the desired changes to Netscape settings, and log off. Don't do any surfing while Netscape is unlocked.

DISCLAIMER: This document is intended for the reference of computer support personnel within Winnipeg School Division No. 1. There is no warranty or liability if procedures recommended here have an adverse affect on any systems. Use them at your own risk. Any trademarks mentioned are the property of their owners, none of whom have certified any information provided here. Opinions expressed here are personal only and do not represent the policy of Winnipeg School Division No. 1 or any other organization anywhere.

Got a Tech Note to share? Submissions are most welcome! [Click here.]	To return to the Tech Notes home page, click here.	To download a copy of all the September/1998 Tech Notes in Rich Text Format, click here.
Click here to visit the Information "Super-Cul-De-Sac".		This page was updated 2001 June 9

This page hosted by Get your own Free Homepage Check out my neighbours here in Silicon Valley Peaks by clicking here.