NT Update (the "team leader" diskette) is New and Improved:

Kenn's
Tech
Notes

19980902: NT Update (the "team leader" diskette) is New and Improved:

September/1998
Tech Note #2

This diskette has been updated to fix a couple of small problems, and to allow for more flexibility in its use. Here is a rundown of the changes, as well as a summary of most of the tasks it performs automatically.

a. SETUP - Place the disk in drive a: of your NT server, and run A:\SETUP. Any servers which were not done during the summer should definitely still be done, and anyone wishing to fix the problems noted below will want to rerun this utility. Former team leaders note: the routine runs differently now! You are not forced to install software into the SUMMER98 share, although that remains an option.

- Workstations that stayed unlocked: Deon W. and Steve B.-M. have both noticed a problem on some of their Windows 95 workstations in the wake of the Summer 98 work crews. Whenever one logs on as Student, a prompt appears stating, "My Computer successfully activated and files unlocked"

This is a direct result of the original routines run by the team leaders on the NT servers this summer. The routines were written with the Summer 97 labs in mind, for which the summer 98 crews installed the new version of LockIt95 v2.3 (rev.98).

The team leader routine created a new policy file on the server which unlocked the student account on the Summer 97 workstations. You can tell it's unlocked by the message noted above. When locked up with the new version, that message disappears.

What we didn't take into account was the fact that there were some machines other than the Summer 97 vintage which were locked up with last year's LockIt. If the new version of LockIt95 wasn't installed on those systems, they never got locked up again.

There are three ways to remedy this oversight:

i. Download the latest version of the NT Update disk and run SETUP and the Signoff routine on the server(s). This bug has been fixed.

ii. Look in the WINNT35\SYSTEM32\REPL\IMPORT\SCRIPTS\SECURITY directory in File Manager on the server. You should see two files there: CONFIG.POL and CONFIG.S98. Delete CONFIG.POL. Rename CONFIG.S98 CONFIG.POL.

iii. Download the latest version of LockIt95 v2.3 (rev.98) and install it on the workstation.

- Adding more left-handed users: The way LockIt95 v2.3 (rev.98) was originally installed, the only locked-up left-handed user was StudentL. If your school has the need for more than one locked-up left-handed user account you need to do two things: First, run "LockIt95(rev.98) Update 9810" (see Tech Note #1 above) on the workstations. Second, run SETUP from the NT Update disk on the server. The new version of NT Update includes a section that creates a new set of user groups, called "Domain Lefties" (global) and "Lefties" (local). Once in place, any workstation which has the LockIt Update run on it will have a new policy file installed which sets not only StudentL, but also the Domain Lefties group, to left-handed. In order to make use of this for any given user, simply add their user account to the membership of Domain Lefties.

- Much, much more! Because it was all automatic, technicians who ran the team leader diskette this past summer were not fully aware of all the changes which were made to the server and domain by this routine. Here is a brief summary of the latest version of the routine:

i. Automatic section: this stuff happens as soon as you enter A:\SETUP -

• if policy files are found in the NETLOGON share or the POLICY$ share, they are backed up as config.s98 and replaced by unlocked policy files;
  
• if a user account named SUMMER96, SUMMER97, or SUMMER98 is found, it is deleted;
  
• creates the standard icons for common Main, Administrative Tools, and Games groups, and the personal Staff Programs group;
  
• installs a customized version of the Emergency Repair Disk utility, one that actually backs up the current user database;
  
• installs an updated Customized Backup script (CUSTOMBK.NEW) - to activate it on systems which are running the Automated Weekly Backup, simply rename it CUSTOMBK.CMD and edit it to desired functionality;
  
• ensures the Schedule service is running;
  
• installs the GUI interface for Command Scheduler (WINAT.EXE);
  
• ensures the License Logging service is disabled; and
  
• disables opportunistic file locking.
  

• schedules weekly reboot;
  
• sets up division standard user accounts;
  
• sets up Domain Lefties group for multiple locked-up left-handed users;
  
• installs the Time Service, which synchronizes the server's clock with an Internet time source twice daily; and
  
• creates the Summer 98 share; if run, the UTILS directory from the NT Update is copied into the new share, and you are given the opportunity to optionally copy the Summer 98 Routines disk to the share, as well.
  

DISCLAIMER: This document is intended for the reference of computer support personnel within Winnipeg School Division No. 1. There is no warranty or liability if procedures recommended here have an adverse affect on any systems. Use them at your own risk. Any trademarks mentioned are the property of their owners, none of whom have certified any information provided here. Opinions expressed here are personal only and do not represent the policy of Winnipeg School Division No. 1 or any other organization anywhere.

Got a Tech Note to share? Submissions are most welcome! [Click here.]	To return to the Tech Notes home page, click here.	To download a copy of all the September/1998 Tech Notes in Rich Text Format, click here.
Click here to visit the Information "Super-Cul-De-Sac".		This page was updated 2001 June 9

This page hosted by Get your own Free Homepage Check out my neighbours here in Silicon Valley Peaks by clicking here.