McAfee MANAGEMENT EDITION 2.5 Administrator'S Manual Download Page 8

Page: 8 / 338

Table of Contents

viii

Management Edition

Installing components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .258

Diagnosing installation problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .258

Submitting batch updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

Installing anti-virus components to different directories . . . . . . . . . . .261

Customizing installation options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .263

Removing the Management Edition program . . . . . . . . . . . . . . . . . . . .264

Changing machine configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .266

Making machines non-standard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .266

Making non-standard machines standard . . . . . . . . . . . . . . . . . . . . . . .268

Recovering deleted items . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268

Recovering deleted machines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268

Recovering the Name Provider database . . . . . . . . . . . . . . . . . . . . . . .269

Appendix A. Using the AUTOINST Utility . . . . . . . . . . . . . . . . . . . . . . . 271

Appendix B. Using MCScript to Update Your Script Files . . . . . . . . . . 273

Determining when to edit your MCSCRIPT.INI files . . . . . . . . . . . . . . . . . . . .273

Defining MCScript files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273

Specifying [ID] keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275

Specifying [Inclusions] keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277

Specifying [ExcludedComponents] keys . . . . . . . . . . . . . . . . . . . . . . . .277

Specifying [ParentComponents] keys . . . . . . . . . . . . . . . . . . . . . . . . . .278

Specifying [ExtensionDLLs] keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278

Specifying [Commands] keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279

Editing MCScript files for versions or languages . . . . . . . . . . . . . . . . . . . . .281

Understanding MCScript commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282

File system commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282

Program Manager commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .284

Private profile commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .286

Miscellaneous commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

Registry commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293

Service control commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .295

Flow control statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .296

NetWare file manipulation commands . . . . . . . . . . . . . . . . . . . . . . . . . .297

NetWare operating system commands . . . . . . . . . . . . . . . . . . . . . . . . .298

NetWare miscellaneous commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .298

Summary of Contents for MANAGEMENT EDITION 2.5

Page 1: ...Management Edition Administrator s Guide Version 2 5...

Page 2: ...Pretty Good Privacy PrimeSupport RecoverKey RecoverKey International ReportMagic RingFence Router PM Safe Sound SalesMagic SecureCast Service Level Manager ServiceMagic Site Meter Sniffer SniffMaster...

Page 3: ...contact Network Associates 19 Customer service 19 Technical support 19 Network Associates training 20 Comments and feedback 20 Reporting new items for anti virus data file updates 21 International co...

Page 4: ...95 or Windows 98 machines 79 Automating setup via NetWare login scripts 81 Preparing NetWare servers 83 SECURE CONSOLE command 83 AUTOEXEC NCF 83 Installation method 84 Checking rights for Microsoft...

Page 5: ...dates and ZIP files 129 Installing script extension DLL or setup file updates 132 Forcing updates of invalid external mirrors 133 Changing anti virus software versions 134 Changing the version for all...

Page 6: ...ork message 183 Sending an alert to a DMI console 186 Launching a program on alert 188 Sending an alert as an audible WAV file 190 Logging alerts 192 Chapter 7 Configuring Complex Domains 195 Designin...

Page 7: ...tories 237 Linking repositories 238 Listing the Repository contents 239 Filtering the report 239 Formatting the Repository report 241 Reporting on the installation 242 Formatting the Installation Log...

Page 8: ...y 271 Appendix B Using MCScript to Update Your Script Files 273 Determining when to edit your MCSCRIPT INI files 273 Defining MCScript files 273 Specifying ID keys 275 Specifying Inclusions keys 277 S...

Page 9: ...ed scripts 302 Appendix C Network Associates Support Services 303 Adding value to your Network Associates product 303 PrimeSupport options for corporate customers 303 Ordering a corporate PrimeSupport...

Page 10: ...Table of Contents x Management Edition...

Page 11: ...rting of detected attacks It reduces the time you must spend installing and managing anti virus software particularly on large networks ensuring uninterrupted network security The Management Edition s...

Page 12: ...and Chapter 5 Updating Your Anti virus Software Management Server Use the Management Server to coordinate the scheduling of scans receive alerts and generate reports for the entire anti virus domain F...

Page 13: ...scan and sends virus alerts from on demand and on access scans back to the Management Server Scheduler This component lets you schedule an on demand scan to occur at a specific time It then sends a c...

Page 14: ...es recommends using Acrobat Reader 4 0 Reader version 3 0 1 has difficulty correctly printing graphics included in the PDF file An online help file This file gives you quick access to hints and tips a...

Page 15: ...g Interface MAPI It can also filter out hostile Java classes and ActiveX controls by comparing those that it encounters with a database of classes and controls known to cause harm When it detects a ma...

Page 16: ...mmand line options VirusScan uses BOOTSCAN EXE on its Emergency Disk in order to provide you with a virus free boot environment When you run the Emergency Disk creation wizard VirusScan copies BOOTSCA...

Page 17: ...gement Agent provides client installers for Windows 95 and Windows NT machines that have peer networking disabled or removed so that you can add them to the network without need for file sharing The d...

Page 18: ...e Chapter 6 Using the Alert Manager for details At a glance scan status via the anti virus domain view reveals whether a machine is all clear infected or overdue for a scan Scans can be scheduled for...

Page 19: ...d Wide Web a valuable resource for answers to technical support issues We encourage you to make this your first stop for answers to frequently asked questions for updates to Network Associates softwar...

Page 20: ...r AUTOEXEC BAT CONFIG SYS and system LOGIN script Specific steps to reproduce the problem Network Associates training For information about scheduling on site training for any Network Associates produ...

Page 21: ...ny obligations whatsoever Send your questions or virus samples to To report items to our European research office use these e mail addresses To report items to our Asia Pacific research office or our...

Page 22: ...es Belgique Phone 0032 2 478 10 29 Fax 0032 2 478 66 21 Network Associates do Brasil Rua Geraldo Flausino Gomez 78 Cj 51 Brooklin Novo S o Paulo SP 04575 060 Brasil Phone 55 11 5505 1009 Fax 55 11 550...

Page 23: ...rezionale Summit Palazzo D 1 Via Brescia 28 20063 Cernusco sul Naviglio MI Italy Phone 39 02 92 65 01 Fax 39 02 92 14 16 44 Network Associates Japan Inc Toranomon 33 Mori Bldg 3 8 21 Toranomon Minato...

Page 24: ...65 220 7255 Network Associates Spain Orense 4 4a Planta Edificio Trieste 28020 Madrid Spain Phone 34 9141 88 500 Fax 34 9155 61 404 Network Associates Sweden Datav gen 3A Box 596 S 175 26 J rf lla Swe...

Page 25: ...e hard disk space for the Repository which increases as you add more anti virus software NOTE In order to optimize performance Network Associates recommends that you not install the Management Console...

Page 26: ...ure of the Microsoft network domains you ve already set up The Management Console allows you to create one or more anti virus domains based on how you want to group machines on the network You can the...

Page 27: ...local machine or a Windows NT Server referred to as server Some installation options are more viable than others We discuss them in the next section Option 1 Local machine server one anti virus domai...

Page 28: ...onsole user on the same machine but restricts its usage to a single machine unless the local installation directory is shared by that user This may be useful when one person has primary responsibility...

Page 29: ...machines or fewer This option although similar to the previous one does not rely on the local workstation being continuously powered on As long as the server is continuously powered on on access aler...

Page 30: ...remove previous versions of the Management Edition program be sure to preserve your anti virus domain structure by using the Import Domain command on the File menu The Management Console for version...

Page 31: ...through the installation process and then the first Welcome dialog box appears Figure 2 1 Figure 2 1 Welcome dialog box 6 Click Next A second Welcome dialog box appears Figure 2 2 Figure 2 2 Welcome 2...

Page 32: ...appears Figure 2 3 Figure 2 3 User Information dialog box 9 Enter your name and company both details are required in the text boxes and then click Next to continue the installation The Choose Destina...

Page 33: ...by clicking Browse The Browse for Folder dialog box appears Figure 2 5 Figure 2 5 Browse for Folder dialog box Select a folder and click OK NOTE If the Management Edition program is installed on a se...

Page 34: ...To add program icons to a folder you can accept the default or you can specify a different program folder than the one shown in the Program Folder text box either by typing its name in the text box or...

Page 35: ...xt If you click Next the Setup Complete dialog box appears Figure 2 8 Figure 2 8 Setup Complete dialog box 15 Once the installation is complete you can do one of the following Select Yes launch the pr...

Page 36: ...ess to it Updates to member machines can be scheduled to occur at any time NOTE The master repository must be permanently available to allow software updates to occur and must be located on a Windows...

Page 37: ...Setup dialog box appears Figure 2 9 Figure 2 9 Repository Setup dialog box 2 Enter the server name in the Machine box or Click the browse button next to the Machine box to select a different server in...

Page 38: ...ocation for the master repository C Program Files Network Associates Management Console Disks on the local machine in the Repository Path box or Click the browse button to select a different path in t...

Page 39: ...ur version of the Management Edition program and add more Management Edition components and if you want to keep more than one version of anti virus software in the Repository Use Windows Explorer or F...

Page 40: ...chine in the anti virus domain It is automatically installed on every Management Edition machine Scheduler Helps you schedule on demand scans for specific times no icon Update Manager Runs on the Mana...

Page 41: ...s usually the CD ROM drive or the A drive b To install from CD ROM select the relevant folder and click OK To install from diskette select the relevant drive letter and click OK The anti virus compone...

Page 42: ...install the anti virus software into the Repository Follow these steps to install anti virus components in the Repository 1 In the Management Console s main menu click Tools and then click Repository...

Page 43: ...XTRA DRV that are sent to you by an AVERT lab Dat Update Click this to install the periodic DAT updates that are posted to the Network Associates FTP site Zipped Click this to install a ZIP file conta...

Page 44: ...drive letter and click OK The anti virus software files are copied into the Repository as shown in the Repository dialog box on the Maintenance page Figure 2 19 Figure 2 19 Repository dialog box Maint...

Page 45: ...ository dialog box Products page 7 If you have member machines running Windows for Workgroups 3 11 Windows 95 Windows 98 and Windows NT you must install anti virus software into the Repository for eac...

Page 46: ...Management Console s Tool menu to launch the NetShield Console NetShield NetWare This is the server component of the NetShield program that you must install to the NetWare servers In order to import t...

Page 47: ...S user object is to be created is also required If you are rolling out to NetWare 3 x servers or you know that the NetShield user object has already been created you can turn off this option ME Config...

Page 48: ...Customizing the NetShield program install options and on access scanner settings on NetWare servers After the initial installation of the NetShield program to the NetWare server the NetShield NetWare...

Page 49: ...that your server remains protected 7 Locate the NetShield Netware product directory containing the NETSHLD REG and PASSWORD PWD files in the Repository or mirror that you will be using for the NetWar...

Page 50: ...ext you must use a different Setup mode to install an identical VirusScan configuration on each target system Setup will use the SETUP ISS file you create in the first step to guide each subsequent in...

Page 51: ...this initial installation to respond to any questions that appear in the wizard panels and to follow the installation steps in the sequence presented or the silent installation you run later will abor...

Page 52: ...o create the SETUP ISS file You can run a silent installation in a variety of ways and with different levels of interaction with network users You can for example create a script for your users that r...

Page 53: ...fault Setup restarts the workstation when it has finished installing files If you do not want Setup to reboot each target workstation you must edit the SETUP ISS file you created during your recorded...

Page 54: ...Console You can consult the following sections for details about the main areas of the Management Console Figure 2 22 Menu bar on page 55 Toolbar on page 57 Font bar on page 58 Left pane on page 58 Ri...

Page 55: ...xit Click this to exit the Management Edition Console Edit Find Machine Click this to locate machines in a large network View Large Toolbar Click this to view the toolbar with large buttons containing...

Page 56: ...as been performed Batch Install Click this to enable background installation of software Recommended for simultaneous upgrading of 100 or more member machines However Batch Install cannot be used to p...

Page 57: ...he Management Console Follow these steps to display or hide the toolbar 1 Click View on the Management Console s main menu 2 Do one of the following To display the default small toolbar choose Small T...

Page 58: ...status of the latest virus scan or the status of the updates to the anti virus software Click Command To New Create a new anti virus domain Apply Configuration Apply the configuration to all machines...

Page 59: ...s tab to view a list of machines in your network Properties Click this tab to view platform and domain information for the selected domain Scan Results Click this tab to view historical results of pre...

Page 60: ...nstallation Log Click this tab to view the history and status of component installation on the selected machine Scan Report Click this tab to view historical results of previous virus scans for the se...

Page 61: ...Scan Results Click this tab to view historical results of previous virus scans for machines in the selected Members group within an anti virus domain Domain Log Click this tab to view the status of m...

Page 62: ...see Installing the Management Console on page 26 IMPORTANT If you are upgrading from version 2 0 to version 2 5 of the Management Edition program you must install your new version to the same folder a...

Page 63: ...see Chapter 7 Configuring Complex Domains Preparing member machines To enable the Management Console to manage your machines easily you must install a Management Agent on each machine Next you must cr...

Page 64: ...f client installer files the same set of files used for the Name Provider Install onto this standard machine but don t run them Then when you create the new machine and start the machine running chang...

Page 65: ...Administrator s Guide 65 Creating Anti virus Domains Figure 3 1 Management Edition Install Options Flowchart...

Page 66: ...ag the machine into a domain and apply the configuration If you don t do this updates won t occur NP Override Install NP Override Install is used for machines that wouldn t normally require the use of...

Page 67: ...mpatible Network icon in the network view It requires Microsoft s Client Services for NetWare or Novell s Client 32 to be installed on the Management Console machine OS platform Microsoft Windows Clie...

Page 68: ...Preparing machines with peer networking In this section you ll learn how to prepare machines that use peer networking Windows NT machines trust relationships on this page Windows 95 and Windows 98 mac...

Page 69: ...use trust relationships to specify trusting and trusted domains A trusting domain trusts network security to a trusted domain A trusting domain is the resource domain It allows the users of a trusted...

Page 70: ...Step 1 through Step 5 for the trusting domain The first time you use the trust relationship the password used for setting up the relationship is verified and then changed Windows 95 and Windows 98 ma...

Page 71: ...OK 4 In the Network dialog box click the Access Control tab The Access Control page appears Figure 3 5 Figure 3 5 Network dialog box Access Control page 5 Select the User level access control option...

Page 72: ...e Administrators list box make sure Admin is present Windows 95 and Windows 98 machines share level access On Windows 95 and Windows 98 machines you can keep backward compatibility with Windows for Wo...

Page 73: ...each shared resource 4 Click OK and reboot the machine for share level access to take effect 5 Start Control Panel again 6 Double click the Network icon then select the Configuration tab 7 Click File...

Page 74: ...ord on all machines in the anti virus domain 12 Click OK Windows for Workgroups 3 11 machines Follow these steps to enable filesharing in Windows for Workgroups 3 11 1 Start File Manager Select the Wi...

Page 75: ...11 Windows 95 Windows 98 and Windows NT machines are assigned a computer name when the network administrator installs the operating system However Windows 3 1 machines do not support peer networking...

Page 76: ...requests a computer name from a Name Provider This is a Windows NT service which resides on every Management Server Each Management Server manages a single anti virus domain You need to provide the Ma...

Page 77: ...OMAIN NP_PARTIAL can be used to allocate a given prefix to new computers that need the services of the name provider The text entered will prefix a number generated by the name provider e g SALES_0000...

Page 78: ...This will reduce network traffic and is useful when installing to a large number of new machines because it will prevent a broadcast storm By default the Name Provider generates a name of the form Do...

Page 79: ...machines setup can become a time consuming task Continue with Adding member machines to an anti virus domain on page 87 Windows NT Windows 95 or Windows 98 machines Normally to manage Windows NT Wind...

Page 80: ...decimal notation a b c d or IPX network node where network is the IPX network segment address that the machine resides on and node is the machine s IPX node address NP_ADDR1 IP 192 168 1 2 NP_ADDR2 I...

Page 81: ...ing software to large numbers of machines that have no peer networking such as Windows 3 1 machines soon becomes a labor intensive task Automating this process with a NetWare login script reduces the...

Page 82: ...ions copy the AUTOINST EXE utility to the same directory to simplify the automated installation procedure Once the installer SETUP EXE has installed the Management Agent on the machine it removes its...

Page 83: ...ecause the Management Agent is loaded from SYS SYSTEM NTME NAIAV NCF and adds a server search mapping to this directory so that we can still load the agent after SECURE CONSOLE has been issued However...

Page 84: ...t network domain members You can verify your network configuration and the privileges of your account from the Management Console Follow these steps to check rights 1 Log on as a Domain Administrator...

Page 85: ...us domain Runs the Management Agent Update Manager and Name Provider The Management Server must therefore be a Windows NT server that is running continuously Choose a server with spare capacity so tha...

Page 86: ...continuously To check the machine s operating system right click the machine and choose Discover 2 Drag the machine onto the Management Server Unassigned icon in the anti virus domain view Otherwise...

Page 87: ...and scan They can send alerts back to the Management Server when on demand or on access scans find viruses In addition to the Management Server Windows NT member machines can also generate e mail page...

Page 88: ...ouble click the icon for the item you want to view the Microsoft Windows Network domain the NetWare or compatible network the Name Provider or one of the Imported Browse List items The container expan...

Page 89: ...g hold the mouse pointer over a machine and wait for the ToolTip help Using the Discover method Follow these steps to add a single machine to its anti virus domain 1 In the Management Console click th...

Page 90: ...etwork view you refresh all databases When you select the Management Server you refresh only the database stored on that Management Server Follow these steps to identify new machines that still need t...

Page 91: ...ght click Anti Virus Domain s an anti virus domain a Members group or an individual machine and choose Add Remove Components If you choose Anti Virus Domain s the Global Components dialog box appears...

Page 92: ...must select which anti virus components are to be installed onto machines within your anti virus domain Remember the following when selecting which machines will have the anti virus components instal...

Page 93: ...ts in either list to move them to the opposite list select the components and click Add or Remove or click and drag them to the other list 3 Click OK to set the components required for every machine i...

Page 94: ...ialog box appears prompting you to enter a different user name and password Figure 3 18 Enter one that has sufficient rights to access the machine using its Administration share Figure 3 18 Network Lo...

Page 95: ...Domain s affects all domains except their Management Servers Follow these steps to add or remove components for non standard machines 1 Right click the machine you want to configure point to Manage Co...

Page 96: ...t affecting the rest of the anti virus domain Similarly the settings for the anti virus domain no longer affect it The machine is now considered non standard 5 To identify all non standard machines me...

Page 97: ...settings determine the format for the dates and times that you enter for the scans and their format in any log file To change the format use the Regional settings in the Control Panel Scheduling scan...

Page 98: ...virus domain In the Window Type box you can select whether the on demand scanner window opens as normal size maximized or minimized as an icon on users machines when the scan starts 5 Select a Write...

Page 99: ...the Execute Event section select At Regular Intervals to regulate the cycle for the scan event that you re creating 9 In the Periodic section use the up down buttons and the drop down lists to set ho...

Page 100: ...4 Figure 4 4 New Event dialog box Targets page 12 Select the machines that you want to scan for viruses The left hand box shows the target machines for the scan It is initially empty The right hand bo...

Page 101: ...on the list they may have been added after this event was created Therefore manually selecting all machines in the anti virus domain or members group as targets is not the same as Scan Entire Domain...

Page 102: ...n a machine Scan Report tab checkbox For example for a server you may only want to scan a specific user s home directory In the Additional command line options text box you can specify the drive and d...

Page 103: ...ines at a particular time of day You may also want to scan the same machines with the same settings at a different time of day Follow these steps to schedule scans to occur more than once 1 Under the...

Page 104: ...ppears Figure 4 7 Figure 4 7 Change event name dialog box 4 Enter a new name for the event you re creating All settings are the same only the name is changed 5 To change the settings for this newly na...

Page 105: ...e machines to scan All Machines Select this option to scan all machines in the selected domain or group Unknown Warnings and Alerts Select this option to scan only machines in the selected domain or g...

Page 106: ...ese steps to run an on demand scan on an individual machine 1 In the Management Console s anti virus domain view under Members select a machine that you want to scan The machine must have the VirusSca...

Page 107: ...e in the anti virus domain view 2 Click the Scan Results tab in the right pane to view a report The Scan Results page shows the contents of the report file If this is the first time you have scanned t...

Page 108: ...member machines and domains You can choose to save a copy of your scan results for archival or printing purposes Follow these steps to save a text record of affected machines 1 Select the affected an...

Page 109: ...chine select the machine in the anti virus domain view and then click the Scan Results tab in the right pane to view a report For more details see Viewing results of on demand scans on page 107 Acknow...

Page 110: ...the selected domain or group that have warnings and alerts Unknown Only Select this option to acknowledge only machines in the selected domain or group that have an unknown status Warnings Only Selec...

Page 111: ...ings and alerts Unknown Only Select this option to acknowledge only machines in the selected domain or group that have an unknown status Warnings Only Select this option to acknowledge only machines i...

Page 112: ...e right click and point to Show Scan Results For All Historical Data Select this to view a full report of all scans that have ever taken place Data Today Data This Week Data This Month or Data This Ye...

Page 113: ...is colored for further effect For example machines that have had any virus alerts may appear in red You can right click in the report area and print the report or save it as an RTF file to edit the c...

Page 114: ...Select a different font in the Font list Select a different font size in the Size list Click Reset to reestablish the default format settings Select the Make these the default settings for all report...

Page 115: ...play will only refresh when you right click a machine or group and choose Scan or Update Scan Status Follow these steps to change the refresh settings 1 On the Management Console main menu click Tools...

Page 116: ...ges page appears Figure 4 13 Figure 4 13 Options dialog box Tracking Changes page 3 Select the Enable update of scan status checkbox 4 Enter the number of seconds for the frequency that you want the s...

Page 117: ...eriod If a machine has not been scanned for a longer period its status changes from OK to Warning 1 On the Management Console main menu click Tools and then click Options The Options dialog box appear...

Page 118: ...tor dialog box appears with the Event page showing 3 Select a Write to Log option The log file lets you keep a list of all attempted scans that may occur when you are not present Always Select this op...

Page 119: ...is filter type to view all three types of information 5 After you view the filtered log results you can delete the entire scheduled scan result log Right click in the Scheduler Log page and choose Del...

Page 120: ...box appears Figure 4 15 Figure 4 15 Refresh Frequency dialog box 1 Enter the number of seconds apart that you want the log to refresh 2 Click OK Saving the log Follow these steps to save the contents...

Page 121: ...118 2 Click the Scheduler Log tab in the right pane The Scheduler Log page appears Figure 4 6 on page 103 3 Right click on the Scheduler Log page and choose Arrange Columns to revert back to the defau...

Page 122: ...Creating Schedules 122 Management Edition...

Page 123: ...our anti virus domain s you must install them into the Repository see Installing DAT and program file updates on this page and then change the domain version see Changing anti virus software versions...

Page 124: ...each remaining disk in your set until the installation of anti virus update files is complete 3 On the Management Console main menu click Tools and then click Repository The Repository dialog box app...

Page 125: ...r mirror repositories Click OK to close the dialog box 8 You can now change your anti virus software version Follow the procedure in the section Changing anti virus software versions on page 134 Insta...

Page 126: ...llow these steps to install interim anti virus file updates to the Repository 1 On the Management Console main menu click Tools and then click Repository The Repository dialog box appears with the Pro...

Page 127: ...ools and then click Repository The Repository dialog box appears with the Products page showing Figure 5 2 on page 124 2 Use Windows Explorer Windows NT 4 0 or File Manager Windows NT 3 51 to browse f...

Page 128: ...nless we have supplied an updated extra DAT with the same name as a previous version for example to update a quick fix or recognize new variants you have added the same extra DAT s two or more times T...

Page 129: ...name of the virus it detects are at the end of the file For example the following text shows that the DAT is v7 87 version 7 87 and detects the Marburg virus 158 54 141 243 13 126 215 180 41347 256 V7...

Page 130: ...rm Language Filter dialog box Select the platforms and languages of the software you want from the zipped file and then click Zipped The Open dialog box appears Figure 5 9 Figure 5 9 Open dialog box 4...

Page 131: ...page 124 2 Use Windows Explorer Windows NT 4 0 or File Manager Windows NT 3 51 to browse for the DAT update or other ZIP item Select the file and drag it onto the Products page The files are copied an...

Page 132: ...stall DAT updates or other ZIP items to one machine 1 Select the DAT update or other ZIP item under the Repository 2 Drag it onto the required machine in the Management Console s anti virus domain vie...

Page 133: ...nd click OK The selected files are updated If any of the selected files are not part of the product a warning message appears and the update is terminated Forcing updates of invalid external mirrors I...

Page 134: ...oth the new and old versions To complete installing the new anti virus software onto machines with overridden configuration settings you need to apply the configuration at the individual machine level...

Page 135: ...to Manage Components and choose Add Remove Components The Components dialog box appears Figure 5 6 on page 128 2 Select the product version in the pull down Version list in the left hand pane and cli...

Page 136: ...etails see Listing the Repository contents on page 239 If you ve just completed installing new components see also Reporting on the installation on page 242 Follow these steps to view the properties o...

Page 137: ...member machines Remove the component or version from the Repository and add it from your disks or CD ROM If the problem continues contact our Technical Support staff Removing old versions from the Re...

Page 138: ...ces instead of services running as named accounts The Task Manager cannot copy DAT files from a normal share for a local system to access a share you must mark the share as a null session share Simila...

Page 139: ...For more details see Installing anti virus components in the Repository on page 42 Using the Push On Install When installing or upgrading a member machine Push On Install copies the management and an...

Page 140: ...er machines On Windows NT machines the Management Console will start the components remotely 7 If you install the on access scanner you must reboot the target machine 8 If you install to a Windows 95...

Page 141: ...also copies a configuration file listing all the files you ve selected for installation on the member machine The Management Agent starts on the member machine reads the configuration file and finds o...

Page 142: ...nd Pull Off Install methods update member machines sequentially However Batch Install has many more features It can do the following Update many machines simultaneously Delay the start time for the up...

Page 143: ...yet the user continues working uninterrupted Normally the Update Manager prompts the user to accept the update The user accepts and the machine is updated with a copy of the new anti virus software Th...

Page 144: ...uccessful 8 To let users delay updates click Postpone Otherwise go to Step 15 The Postpone options dialog box appears Figure 5 14 Figure 5 14 Postpone options dialog box 9 Select Allow user to postpon...

Page 145: ...tes for a specific domain or members group right click the domain name point to Manage Components and then choose Component Configuration Select the Upgrade box and then click the Upgrade tab Machines...

Page 146: ...te sent and agent started successfully and is no longer considered active The viewer keeps count of the number of active updates in its status bar If the Update Agent does not write the results of the...

Page 147: ...atus of updates that have already been completed or failed after the requested number of retries To delete the list of completed or failed updates right click within the Completed Updates report and t...

Page 148: ...lled by the user while queued cog Cancelled by user while retrying The update was cancelled by the user while retrying red cross Ran out of retries sending update The Update Manager did not send the u...

Page 149: ...d Waiting for request from login script Update send failed retrying Update sent successfully Cancelled by user while pending Waiting for request from login script Queued Update send failed retrying Up...

Page 150: ...ethod you must click the Management Server and choose Apply Configuration otherwise the installation will fail Windows NT Windows 95 and Windows 98 machines To prepare Windows NT Windows 95 and Window...

Page 151: ...indows 3 1 machine so that the Update Requester MEUPRQ16 EXE runs automatically the next time Windows is started AUTOINST EXE is in the 16 Utils directory within your Management Console s installation...

Page 152: ...force its reuse For example MAP ROOT F SYS PUBLIC ME_CLNT AUTOINST C WINDOWS F SETUP EXE MAP ROOT I SERVER SYS PUBLIC REQUESTR AUTOINST C WINDOWS I MEUPRQ16 EXE FORCE For details see Automating setup...

Page 153: ...l if you don t mind leaving the Management Console running for a long time and if you expect some updates to fail initially probably because the machines have not been turned on With Batch Install ins...

Page 154: ...Options dialog box appears Figure 5 18 Figure 5 18 Reboot Options dialog box 3 Select the Prompt user if reboot is required checkbox 4 If you only want to prompt users to reboot select the Do not for...

Page 155: ...nent Configuration In the dialog box select the Upgrade settings checkbox and then click the Upgrade tab You can then change the parameters for the domain as described Configuring custom update messag...

Page 156: ...te Agent 5 In the Message text box type the body for the custom message that appears before the update begins 6 Select the Display this message to users after the update checkbox to display your custo...

Page 157: ...the Management Console s Tools menu e g to launch specific applications or utilities from the console The following steps show how to add a NetWare Server Remote Console a tool that you can set up to...

Page 158: ...be the last item that was added to the selection Selected AV Domain Machine AVMACHINE The name of the selected machine in the domain view Domain of Selected Domain View Item AVDOMAIN The name of the d...

Page 159: ...into the path in the Parameters text box The same parameters are available as in Step 4 10 If the custom tool you specified uses substitution parameters and requires the Management Console to connect...

Page 160: ...m Tools dialog box 14 Click Add to enter your tool details in the Menu Contents list on the right side of the dialog box To edit an existing entry click on the tool name in the Menu Contents list and...

Page 161: ...ling centralized alerting is a two part process You must configure Alert Properties for both the NetShield and VirusScan programs Enabling centralized alerting for the NetShield program First you will...

Page 162: ...alerting for the VirusScan program Next you must configure VirusScan alerting However remember that the VirusScan program must first be installed in the Management Edition Repository Follow these step...

Page 163: ...kbox and enter the UNC path to the share you created in Step 5 of the initial task The format is Machine Share e g SERVER ALERT Follow these steps to enable centralized alerting for the VirusScan prog...

Page 164: ...box appears 2 Click Configure The Alert Manager Properties dialog box appears 3 Click the Alert tab Select the Send network alert checkbox and enter a drive letter that is mapped to the shared direct...

Page 165: ...k the tab corresponding to the anti virus product for which you want to configure alerting 3 Click Configure The Alert Manager Properties dialog box appears with the Summary page showing Figure 6 1 on...

Page 166: ...rts to a printer and a pager If you have not yet configured Alert Manager the Summary page will contain two default alerts Event Log and Network Message Click next to each listed alert method to displ...

Page 167: ...es across network domains or to construct a hierarchical arrangement for passing and consolidating alert messages Follow these steps to forward an alert to another computer 1 Open the Alert Manager Pr...

Page 168: ...ocate the computer on the network To choose additional options continue with Step 4 To change configuration options select one of the destination computers in the list then click Properties Alert Mana...

Page 169: ...o the Forward Properties dialog box 6 Click Test to send the destination computer a test message The message appears instantly on the destination computer s screen and the recipient must click OK to a...

Page 170: ...ation computers running Windows NT must have the Messenger service running to receive alert messages Those running Windows 95 or Windows 3 1x must also be running the WinPopup utility to receive netwo...

Page 171: ...work NOTE If the specified name is both a valid username and computer the alert message will be sent to the username Also to send local alerts to the local computer you must add the MACHINENAME macro...

Page 172: ...ages Next click OK to save your changes and return to the Network Message Properties dialog box 5 Click Test to send the destination computer a test message The message appears instantly on the destin...

Page 173: ...hat your recipient sees the alert in time to take appropriate action Follow these steps to send an alert as an SMTP e mail message 1 Open the Alert Manager Properties dialog box 2 Click the E Mail tab...

Page 174: ...ddresses in the list then click Properties Alert Manager opens the E Mail Properties dialog box Figure 6 8 Change any of the information that you want to change in the boxes shown then continue with S...

Page 175: ...me as an Internet Protocol IP address as a name your local domain name server can recognize or in Universal Naming Convention UNC notation Click OK to save your changes and return to the E Mail Proper...

Page 176: ...you might need to write a custom script to dial and select the correct menu options before Alert Manager can deliver its message Follow these steps to send an alert to a pager 1 Open the Alert Manage...

Page 177: ...uses a numeric pager enter the pager number and the numeric message you want to send in the boxes provided Next enter in the Delay box the number of seconds Alert Manager should wait before transmitt...

Page 178: ...ngs to configure your modem to send pager messages In the dialog box that appears Figure 6 12 on page 179 select the type of modem connected to your server from the Modem list the COM port it uses fro...

Page 179: ...your recipient uses a numeric pager Alert Manager sends the telephone number or other message that you specified in the Pager Properties dialog box 7 Click OK to return to the Pager page 8 To configur...

Page 180: ...steps to send an alert to a network printer 1 Open the Alert Manager Properties dialog box 2 Click the Printer tab The Printer page appears with a list of all of the network printers you have chosen...

Page 181: ...perties Alert Manager opens the Printer Properties dialog box Figure 6 14 Change any of the information you want to change in the Printer box then continue with Step 4 to choose new or different confi...

Page 182: ...rint as a simple unformatted line of text 6 Click OK to return to the Printer page 7 To configure other notification options click a different tab To save your configuration options and close the Aler...

Page 183: ...d with an SNMP viewer such as Hewlett Packard s OpenView To learn how to set up and configure your SNMP management system see the documentation for your SNMP viewer software Follow these steps to send...

Page 184: ...ate the Windows NT SNMP service on the same machine that runs Alert Manager Follow these steps to configure the Windows NT SNMP service 1 Click Configure SNMP The Windows NT Network control panel dial...

Page 185: ...ssage To see the message you sent start your SNMP viewer software 5 To configure other notification options click a different tab To save your configuration options and close the Alert Manager Propert...

Page 186: ...alert the DMI management console instantly of a virus When a virus is detected DMI immediately generates an alert message for Alert Manager to display on the DMI management console To generate DMI al...

Page 187: ...t to send the destination computer more network messages including lower priority messages Next click OK to save your changes and return to the DMI page 5 Click Test to generate a test message The tes...

Page 188: ...on alert For example if your company is using cc Mail or a special mail package that is not recognized by Alert Manager you can write a batch file to send notifications to your mail package Follow the...

Page 189: ...y Level to specify which types of alert messages the destination computer will receive 7 In the Priority Level dialog box see Figure 6 4 on page 169 drag the slider to the right to send the destinatio...

Page 190: ...dible WAV file 1 Open the Alert Manager Properties dialog box 2 Click the Sound tab The Sound page appears Figure 6 19 Figure 6 19 Alert Manager Properties dialog box Sound page 3 Click the Enable Aud...

Page 191: ...nation computer fewer but higher priority messages Drag the slider to the left to send the destination computer more network messages including lower priority messages Next click OK to save your chang...

Page 192: ...of alerts 1 Open the Alert Manager Properties dialog box 2 Click the Logging tab The Logging page appears Figure 6 20 The Recipient list displays all of the computers you have chosen to receive alert...

Page 193: ...service open the Windows NT Services from the Control Panel and select Event Log Click Startup and select Automatic to start the Event Log service every time the system starts To choose additional opt...

Page 194: ...ty messages Next click OK to save your changes and return to the Logging Properties dialog box 5 Click Test to send the destination computer a test message The message appears instantly on the destina...

Page 195: ...ware and for virus alerts The anti virus domain may span over several sites machines may be on different networks in different cities You can create one anti virus domain or have separate anti virus d...

Page 196: ...ch is the same as your network domain Figure 7 1 Figure 7 1 One anti virus domain one network domain Multiple office one site If your network spans several different departments but all are at the sam...

Page 197: ...Two anti virus domains two network domains In order for local staff in each office to respond to virus alerts you can create an anti virus domain for each office including a mirrored repository For m...

Page 198: ...us Domain s and choose New Domain The New Domain dialog box appears Figure 7 4 Figure 7 4 New Domain dialog box 2 Enter the name of the new anti virus domain and click OK The tree structure under the...

Page 199: ...main 1 Select a machine in one anti virus domain and drag it to the new anti virus domain 2 Right click the anti virus domain and choose Apply Configuration If the only components are the on demand sc...

Page 200: ...us domain view back across to the network view To remove a group of machines right click the Members group containing the machines and choose Remove 2 Click Yes to confirm the action The Removing mach...

Page 201: ...and it can generate alerts back to the Management Server The Management Console administrator cannot update anti virus components change component configuration schedule scans or access the machine r...

Page 202: ...k Yes to confirm the deletion The Removing machines dialog box appears Figure 7 5 on page 200 3 Select the actions to be carried out on the machines within the domain By default the Management Console...

Page 203: ...e within an anti virus domain needs to know the name of its domain If you change the domain name you must reapply the configuration so that the information can be distributed to the domain members 4 R...

Page 204: ...your Network Neighborhood view If the machine is not visible in your Network Neighborhood the machine or the network has been incorrectly configured and the Management Console cannot find the machine...

Page 205: ...the list 4 Click Check Access to determine whether you have sufficient rights to manage this machine 5 Click Login to access the machine if your current administrative account does not have sufficien...

Page 206: ...this manner Keep the imported browse list in the same directory that the Management Console uses with the anti virus components This ensures that you can always access the list If the list is on anot...

Page 207: ...ptional and are ignored White spaces in domain names machine names or machine comments are not ignored For example MY MAC is not the same as MYMAC Blank lines are ignored All entries except machine co...

Page 208: ...that the VirusScan program for Windows NT installs properly on Windows NT workstations only installation to Windows NT servers will fail The NetShield program for Windows NT runs on both workstations...

Page 209: ...Simple machine entry no domain Type 1 Examples CCC DOMAINAREA MARKET5 CCC DOMAINAREA MARKET6 NT CCC DOMAINAREA MARKET7 NT Fisher L CCC DOMAINAREA MARKET8 Fisher B Multiple machine entry for single dom...

Page 210: ...e file with a text editor and try again Then in the network view right click the filename and choose Refresh to re read it The network view now shows the hidden machines that you have added Any machin...

Page 211: ...When you rename like this it does not rename the actual file only the displayed name To view the original pathname turn on machine comments Choose View and then choose Machine Comments from the main...

Page 212: ...anti virus domain view right click the domain name where you want to create the additional group 2 Choose New Members Group The New Members Group dialog box appears 3 Enter a unique descriptive name...

Page 213: ...sion of anti virus components The Update Manager then copies the new files from the Repository to the member machines Creating mirror repositories If you have two anti virus domains separated by a WAN...

Page 214: ...rror will be updated from the master repository by an external process or method This update process or method is independent of the Management Edition system and the user is free to choose any produc...

Page 215: ...tall a mirror repository on a Windows NT server the necessary directories and shares are set up automatically as a part of the installation process 1 In the Management Console s main menu click Tools...

Page 216: ...tion The Mirrors page appears Figure 8 3 Figure 8 3 Repository dialog box Mirrors page 3 Right click the machine shown as the master repository and choose Add Mirror The Repository Setup dialog box ap...

Page 217: ...ing the mirror repository If the directory is not empty you will be prompted to delete its contents 6 If the share directory is to be hidden select the Hide Shares checkbox 7 Click the Update mirror e...

Page 218: ...r groups or a combination of both By default the group for designated Administrators of the target domain is selected 10 Hold down the Control key and click the users and groups that you want to give...

Page 219: ...mirror repository so that you can add software to the mirror repository Clients require read only access to the mirror repository This user ID should be a single user ID for all clients that need to...

Page 220: ...the mirror repository 8 From the Management Console s main menu click Tools and then click Repository The Repository dialog box appears with the Products page showing Figure 8 2 on page 215 9 Click t...

Page 221: ...need to indicate which repository is used by which domain group or machine Assigning different repositories Follow these steps to assign a different repository 1 Right click the domains groups or mach...

Page 222: ...tem and the user is free to choose any product or method to accomplish the update operation To update a mirror the directory structure of the master repository must be copied to the mirror repository...

Page 223: ...n dialog box appears Figure 8 7 Figure 8 7 Repository Configuration dialog box 4 Type a description of the mirror repository in the Description box 5 Click OK Configuring NetWare mirrors The procedure...

Page 224: ...y on NetWare 3 servers for ease of maintenance 2 If you need a NetWare 3 x server to update its software from a NetWare 4 x server set a bindery context on the NetWare 4 x server by placing the follow...

Page 225: ...box as follows 1 Enter the NDS tree name that contains the server in the Domain Tree box For example ABC_CORP The specified user ID must match that given full access to the REPO directory If any of y...

Page 226: ...exit the Repository dialog box IMPORTANT If you want to update Windows NT machines from a mirror repository on a NetWare 4 x server the client user ID must be a member of a user group named NTGATEWAY...

Page 227: ...uration dialog box 7 Click Close to exit the Repository dialog box IMPORTANT If you want to update Windows NT machines from a mirror repository on a NetWare 3 x server the client user ID must be a mem...

Page 228: ...ikely cause are displayed The most likely reasons that you can t login are either an incorrect user ID or conflicting credentials which indicates that you are already logged into the server under a di...

Page 229: ...aster repository changes to Old master repository Granting access rights Configuring access to Windows NT mirrors Access rights must be properly configured for Windows 95 and Windows 98 client machine...

Page 230: ...ngs to keep in mind After the user logs on Windows will use the currently logged in username to connect to the repository and you must do one of the following a Ensure the Guest account on the server...

Page 231: ...essful update refers to whether the update was successful Yes or the update failed No 1 This scenario works when the local account matches an account on the server holding the repository and when the...

Page 232: ...achine because there isn t one The following table identifies scenarios of successful and failed updates for Windows 95 and Windows 98 machines that do log on to a Windows NT domain User logged on ref...

Page 233: ...ogged on to a Windows NT domain If you use the Batch Install method with the Update from login script option selected you can ensure that the client machines are logged on to the Windows NT domain whe...

Page 234: ...pdate method including the ability to let users postpone updates a specified number of times and the ability to specify a time before which the update should not run Configuring access to NetWare mirr...

Page 235: ...th of time that the link is active To minimize the traffic across WAN links you can set up anti virus domains that do not pass out of LAN boundaries or you can create mirror repositories Follow these...

Page 236: ...he same location not one that is across the WAN link from the other machines 9 Right click the Members group point to Manage Components and then click Component Configuration The Component Configurati...

Page 237: ...program installed on the same network When each installation adds new software to the individual repositories each administrator must have access to the anti virus software CD or a copy of its files s...

Page 238: ...it starts The Management Console prompts the administrator to copy the new software The administrator can postpone the copy but will be reminded every time Management Console starts until the new sof...

Page 239: ...nts of the parent repository to the newly linked child repository Listing the Repository contents The Repository holds all the anti virus software and it might include several versions Follow these st...

Page 240: ...port Filter dialog box Platform Language Version page 2 Select the type of information you want in each list box To select all choices check the All boxes below the list boxes 3 Select the Installed M...

Page 241: ...censes Follow these steps to change the line formatting of the Repository report 1 Right click the report area and then click Format The Change Report Formatting dialog box appears Figure 8 11 Figure...

Page 242: ...l the machines in the selected group and includes the following information anti virus software version number installation directories components if you selected the top level domain the names of dom...

Page 243: ...matting of the Repository report 1 Right click the report area and then click Format The Change Report Formatting dialog box appears Figure 8 11 on page 241 2 You can only adjust the appearance of set...

Page 244: ...Using Mirror and Linked Repositories 244 Management Edition...

Page 245: ...ains For details see Chapter 3 Creating Anti virus Domains A trust relationship set up between all domains and the administrator s domain lets your Domain Administrator account access machines in othe...

Page 246: ...nnection to the target machine and your username and password on the non trusted domain are different than those on your Management Console machine you must break the connection and reconnect to the r...

Page 247: ...f the Name Provider s database it prompts you to make a copy before removing the Management Server 3 If the server is available click Yes This lets the up to date database be moved to the replacement...

Page 248: ...to enable access to the Management Console 1 Start Windows NT Explorer NT 4 0 or File Manager NT 3 51 Right click the folder where the Management Console is stored and choose Sharing The Properties di...

Page 249: ...le session Changing the password for an existing domain Follow these steps to specify a domain password for an existing domain 1 Right click the anti virus domain and choose Change Password The Change...

Page 250: ...nfirm Password boxes The password appears as asterisks 4 Click OK The password is applied to the domain 5 Click OK to confirm the creation of a new domain The domain is created with a key icon to the...

Page 251: ...dialog box Figure 9 4 Figure 9 4 Authentication dialog box Enter the password and click OK The lock to the left of the domain name disappears Removing an anti virus domain password 1 Right click the...

Page 252: ...tains a large amount of information it is compressed to occupy less space The data is MIME encoded which means that it is like text and therefore can be handled by most e mail systems If you have any...

Page 253: ...ecks whether the machine is managed by another copy of the Management Console If you want to add a machine to an anti virus domain Discover also checks whether you have the relevant rights You may the...

Page 254: ...h the network view and the anti virus domain view after the machine name and enclosed in square brackets To turn off the display repeat the step Adding names for Windows 3 1 machines Windows 3 1 names...

Page 255: ...rd to determine which of these machines are currently in an anti virus domain The names of the machines that are currently managed can be temporarily removed from the Management Console s network view...

Page 256: ...he default Search Anti Virus Domain option to search the anti virus domain view or To search the network view select the default Search Network View option If you want to search the entire network vie...

Page 257: ...utton in the top left corner Refreshing the Name Provider view At program start up the Management Console reads the database of each Name Provider of which it is aware in other words the database stor...

Page 258: ...ine This provides ToolTip help to explain the event which will be one of the following An update is in progress The machine needs to be rebooted to complete the update An error has occurred All update...

Page 259: ...that remain marked as Created If you ve submitted an update that remains marked as Created when you view batch updates it means that the Update Manager has not read or cannot see the domain UPGRADE CF...

Page 260: ...starts it will check for other more recent Update Managers with the same domain name c Watch the output Successfulupdatelatermarkedasincompleteduetoinaccessible mirror If you ve submitted an update th...

Page 261: ...t Server passes the time on the Management Console machine when the update was submitted If it was scheduled the Update Manager uses the time on the Management Server to determine if the update is due...

Page 262: ...s Domain s you are prompted to confirm that you are overriding the global defaults Click Yes Alternative directory locations for the Management Console can use system environment variables or fully sp...

Page 263: ...ther than the main Anti virus Domain s you are prompted to confirm that you want to use the global defaults Click Yes 3 Click Apply and then click OK The anti virus components are moved to the default...

Page 264: ...ppears Figure 9 6 Figure 9 6 Removing machines dialog box 3 Select the Remove Anti Virus Components and Remove Management Components checkboxes and then click OK 4 In the Management Console s main men...

Page 265: ...ll of the anti virus domains displayed in the anti virus domain view Right click each anti virus domain name and choose Delete Domain 10 Close the Management Console If you are running Windows NT 3 51...

Page 266: ...rations Making machines non standard You normally configure a large number of machines at the group domain or Anti Virus Domain s level However you might have some machines that you do not want to use...

Page 267: ...table contains an explanation of some frequently used right click menu commands Icon Right click this item Affected machines Anti Virus Domain s All machines in all domains except Management Servers...

Page 268: ...2 Click Yes to confirm For details on the effect of choosing Reset All Settings at different levels in the anti virus domain view see Restricting machine updates on page 267 Recovering deleted items R...

Page 269: ...ement Console will not display all of your Windows 3 1 workstations and will only be accurate after all Windows 3 1 machines are restarted If the database is lost and you do not intend to add any new...

Page 270: ...ng 270 Management Edition NOTE Both options only refer to the machines in or destined for the domain that has lost its database not to all domains The process is easier if you configure a larger numbe...

Page 271: ...ecified in program path to run when Windows starts Usage AUTOINST Windows directory Setup program path FORCE This command appends to the RUN line in Windows to ensure that the client installer setup p...

Page 272: ...tional FORCE parameter will add to the RUN key regardless of whether the AUTOINST program has been run before So to run the Update Requester you need something like this example MAP ROOT I SERVER SYS...

Page 273: ...e an expert work with you to develop scripts for your Management Edition software See Getting support for customized scripts for details Defining MCScript files MCSCRIPT INI files contain all of the i...

Page 274: ...e0 Include1 File1 Commands ServerOnlyFlag FALSE WorkStationOnly FALSE HasAVScanner TRUE Unique Yes Macro0 CLASSID 5D26E881 5015 11cf 8406 00C0A808723C Macro1 REGKEY SOFTWARE ACME Anti Virus PreInst0 S...

Page 275: ...lpha characters should follow numeric characters For example 4 567a 56b 789cdf is valid but 67a45 67d 56h is invalid because 67a45 contains numeric characters after the alpha characters The numeric pa...

Page 276: ...s VirusScan relates to the InstallDir key SortOrder The SortOrder key gives the console a numeric value on which a group of products can be sorted When a number of products are being installed on a ma...

Page 277: ...Inclusions keys The Inclusions section lists the files in the product set as they appear on the original media If this section is missing the console will assume all the files on the media should be i...

Page 278: ...version or range of versions of a product Example ParentComponents Component0 Mother Component1 Father FatherStartVersion 1 00 FatherEndVersion 2 00 Specifying ExtensionDLLs keys The ExtensionDLLs sec...

Page 279: ...llation and version upgrade scenarios General non indexed keys ScriptVersion The ScriptVersion key specifies the version number of the script associated with the product and helps you determine whethe...

Page 280: ...cursive i e contains its own name in the value is not a good idea Example Macro0 INSTALLDIR BASEDIR WG Macro1 BASEDIR C NTMEAPPS Macro2 KEY System CurrentControlSet Services VxD WinGuard Indexed insta...

Page 281: ...it the existing MCSCRIPT INI files for those products to reflect the changes Version changes Edit the Version key in the ID section of the MCSCRIPT INI file You can embed words like beta e g 4 0 3 bet...

Page 282: ...Command name Min params Usage examples and comments COPY 2 COPY LIST IFNEW REBOOT FORCEONREBOOT SRC DST LIST SRC and DST are directories the file list in Includes is copied from SRC to DST IFNEW Only...

Page 283: ...RUE FALSE Use command name in IF statement to test result Example FILEEXISTS INSTALLDIR IF FILEEXISTS FALSE REMDIR INSTALLDIR FILEWRITEACCESS 1 FILEWRITEACCESS LIST FILE_DIR_PATH TIMEOUT Tests for wri...

Page 284: ...HOWGROUP 1 PMSHOWGROUP GROUP_NAME Example PMSHOWGROUP PMGroup PMADDITEM 3 PMADDITEM COMMAND CAPTION WORKDIR ICON_PATH ICON_INDEX Adds a Program Manager item to a group Example PMADDITEM INSTALLDIR vei...

Page 285: ...EMEXISTS 2 PMITEMEXISTS GROUP_NAME ITEM_NAME Tests whether item exists in a group Sets the function result to TRUE FALSE PMGROUPISEMPTY 1 PMGROUPISEMPTY GROUP_NAME Tests whether group is empty Sets th...

Page 286: ...r INSTALLDIR WFINDV32 EXE CLEARPRIVATE 3 CLEARPRIVATE ALL FILE_NAME SECTION KEY KEY_VALUE Clears a profile entry ALL All instances of a key in the section are removed With this switch KEY_VALUE can be...

Page 287: ...Tests whether the key exists or whether it exists with the optional VALUE_STR Sets the function result to TRUE FALSE FILE_NAME Use WIN INI READPRIVATE 5 READPRIVATE FILE_NAME SECTION KEY DEFAULT MACR...

Page 288: ...al some of the files will be locked open COUNTER 2 COUNTER INTEGER_VALUE Adjusts internal variable COUNTER using the indicated operator and integer value Example COUNTER 42 WRITEERROR 2 WRITEERROR SEV...

Page 289: ...st sets internal flag KILLWINDOW 1 KILLWINDOW WND_CLASS WND_NAME Kills windows with a given class and optional name This can kill more than one window if only the class is specified Example KILLWINDOW...

Page 290: ...DE Runs hidden Example CREATEPROCESS INSTALLDIR AFILE EXE INSTALLDIR CREATEPROCESS_EX 2 CREATEPROCESS_EX EXECUTABLE WORKING_DIRECTORY PARAM_1 PARAM_2 PARAM_N WAIT_ON_PROCESS HIDE_PROCESS Starts the pr...

Page 291: ...GINAVAR OLDGINAVAR MSGINA DLL DOWINFRMCOMPAT 1 DOWINFRMCOMPAT DRIVER_NAME Used to enable compatibility between Dr Solomon s WinGuard and Citrix Winframe MAKESHORTPATH 2 MAKESHORTPATH MACRO1 MACRO2 Con...

Page 292: ...TMESSAGE MESSAGE_NAME WPARAM LPARAM Registers a windows message and broadcasts to all top level windows NAI_ISFILEENCRYPTED 1 NAI_ISFILEENCRYPTED FILE Determines whether a VirusScan VSH file is encryp...

Page 293: ...E BASE_KEY LOCAL_KEY VAL_TYPE VAL_DATA REGCTRERASE 3 REGCTRERASE BASE_KEY LOCAL_KEY VAL_DATA REGDELVAL 3 REGDELVAL BASE_KEY LOCAL_KEY VAL_NAME REGVALEXISTS 3 REGVALEXISTS BASE_KEY LOCAL_KEY VAL_NAME V...

Page 294: ..._KEY VAL_NAME VAL_TYPE DEFAULT MACRO Gets registry value and stores it in MACRO Example REGGETVAL LOCAL SCAN_SETTINGS OldGina SZ MSGINA DLL OLDGINAVAR APPLYREGFILE 1 APPLYREGFILE REGEDIT_V4_FILE Impor...

Page 295: ...SERVICE_NAME TIMEOUT_SECS DEPENDENT DEPENDENT Stops dependent services TIMEOUT_SECS Time to wait for service to start CREATESERVICE 5 CREATESERVICE NAME DISPLAY_NAME TYPE START_TYPE EXE_NAME ACCOUNT_...

Page 296: ...rred until a user logs into the machine Windows NT only IF 1 IF CONDITIONAL_CLAUSE Next statement is executed if conditional evaluates 0 CONDITIONAL_CLAUSE COUNTER VERSION COMMAND_NAME OPERATOR VALUE...

Page 297: ...KEY NEW FILE SECTION KEY VALUE CLEARCONFIGKEY 3 CLEARCONFIGKEY ALL FILE SECTION KEY VALUE ADDTOCONFIGKEY 4 ADDTOCONFIGKEY ALL FILE SECTION KEY VALUE REMOVEFROMCONFIGKEY 4 REMOVEFROMCONFIGKEY ALL FILE...

Page 298: ...NETSHLD NLM ISNLMLOADED 1 ISNLMLOADED NLM_NAME WAITFORUNLOAD 1 WAITFORUNLOAD NLM_NAME Example WAITFORUNLOAD NETSHLD NLM Command name Min params Usage examples and comments CONSOLEMESSAGE 1 WRITECONSO...

Page 299: ...NNT SYSTEM32 WINDIR The Windows directory e g WINNT C The root drive on which Windows is installed CURDIR The directory where the Management Agent is installed on this machine Macro name Description I...

Page 300: ...e prefixed by Cmd nn Example AutoRepoInstall Cmd00 MKDIR TEMPDIR NSH403 NLMFILES Cmd10 RUNWAIT INSTALLPATH SETUP EXE WMEDECOMP TEMPDIR NSH403 NLMFILES s SMS Cmd20 COPY INSTALLPATH MCNWSCRI INI TEMPDIR...

Page 301: ...ny RUN COMMAND LINE Runs the command line does not wait for the process to terminate RUNWAIT Many RUNWAIT COMMAND LINE Runs the command line waits for the process to terminate ADDINSTALLPATH 1 ADDINST...

Page 302: ...onal assistance with your custom scripts by a Global Professional Services or PrimeSupport engineer In North America contact your regional Network Associates sales office or call Network Associates at...

Page 303: ...port under the Network Associates Corporate PrimeSupport program If you are a home user you can choose a plan geared toward your needs from the Home User PrimeSupport program PrimeSupport options for...

Page 304: ...meSupport Connect plan gives you telephone access to essential product assistance from experienced technical support staff members With this plan you get In North America unlimited toll free telephone...

Page 305: ...atin America unlimited telephone access to technical support at standard long distance or international rates Monday through Friday from 9 00 a m to 5 00 p m Central Time Priority access to technical...

Page 306: ...vals you designate Committed response times from your support engineer who will respond to pages within half an hour to voice mail within one hour and to e mail within four hours Assignable customer c...

Page 307: ...CT Europe Middle East Africa 9am 6pm local time Asia Pacific 8 a m 6 p m AEST Latin America 9 a m 5 p m CT Monday Friday after hours emergency access North America 8 a m 8 p m CT Europe Middle East A...

Page 308: ...ad upgrade login asp Free 24 hour per day seven days per week access to online or electronic support through the Network Associates voice and fax system the Network Associates website and through such...

Page 309: ...red to the technical support team within minutes Your cost will be 35 per incident Pay Per Minute Plan This plan gives you support only when you need it You get 900 number access to technical support...

Page 310: ...Care at 972 855 7044 In international locations contact the Network Associates retail technical support center closest to your location for more information Some support options may not be available...

Page 311: ...for network performance Network Associates consultants also develop and deliver custom solutions to help accomplish your project goals from lengthy large scale implementations to brief problem solvin...

Page 312: ...vices introduction default asp Total Education Services Network Associates Total Education Services builds and enhances the skills of all network professionals through practical hands on instruction T...

Page 313: ...twork domain A Microsoft network domain has security policies at login An anti virus domain can span several sites machines may be on different networks in different cities You can create one complete...

Page 314: ...s the WAN link once Then when the member machines on the remote site update themselves they access their local linked or mirror repository without using the WAN link There are no restrictions to the n...

Page 315: ...machines It also sends commands to them to perform scans at user determined times The Management Server must therefore be a Windows NT server Choose a server with spare capacity so that it is not ove...

Page 316: ...nks Name Provider The Name Provider is a Windows NT service used by Windows 3 1 machines and Windows 95 and Windows 98 machines that have no peer networking when they run the Management Agent for the...

Page 317: ...who to alert and how to alert them using the Alert Manager Scheduler One of the Management components the Scheduler lets you schedule an on demand scan to occur at a specific time It then sends a comm...

Page 318: ...member machines It can retry updates to machines that are powered off You can configure the number of retries and specify the maximum number of machines to simultaneously update using traffic limitat...

Page 319: ...th drag and drop method 88 multiple hidden machines 206 newly installed machines 90 scheduled updates to Repository 123 Alert Manager as integrated service 12 audible alerting 190 configuring 12 165 d...

Page 320: ...mponents 93 removing passwords 251 renaming 203 restoring lost machines 253 securing 249 single office 196 size limit 26 unlocking with passwords 251 viewing 41 anti virus software changing versions 1...

Page 321: ...rogram 161 for VirusScan program 162 problem 138 Change Component Configuration button 58 changing all domain versions 134 domains 199 individual domain versions 135 individual machine versions 135 la...

Page 322: ...dows 98 share level access 72 Windows 98 user level access 70 Windows for Workgroups 3 11 filesharing 74 Windows NT trust relationships 68 with the Apply Configuration command 153 consulting services...

Page 323: ...g rights 84 installing Management Agent 64 new passwords for 249 NT trust relationships 68 trusted 69 trusting 69 Windows NT 245 DOS error levels 272 drag and drop adding machines 88 extra DAT files 1...

Page 324: ...AMEPROV INI 77 79 to 81 269 NETSHLD REG 48 to 49 NSHINST NLM 47 PASSWORD PWD 48 SETUP EXE 17 132 SETUP ISS 17 132 WHATSNEW 16 WIN INI 81 151 271 Filter command 119 filtering log 119 ports 237 Reposito...

Page 325: ...11 type 1 207 to 208 type 2 207 209 type 3 207 209 with large networks 206 importing browse lists 210 installation silent 50 to 53 after initial one 141 anti virus software 139 Batch 141 customizing t...

Page 326: ...06 adding to anti virus domains 87 automatically add to anti virus domains 90 changing versions for 135 discovering operating systems 253 discovering the anti virus domain 253 finding 66 255 hidden 20...

Page 327: ...nning from a remote workstation 248 understanding the left pane 58 understanding the right pane 59 Management Edition program anti virus software supported 11 components included with 13 to 14 descrip...

Page 328: ...le system commands 282 flow control statements 296 ID keys 275 to 277 Description 276 IconFile 277 ImageNo 277 InstallDir 276 281 Language 276 281 Platform 275 Product 275 SortOrder 276 Version 275 28...

Page 329: ...ition 316 externally updated 16 133 214 217 220 222 226 to 227 236 incomplete components and mirrors 125 NetWare 219 promoting 229 reducing WAN traffic 235 updating member machines 139 Windows NT 215...

Page 330: ...MEMORY command 83 SECURE CONSOLE command 83 server updating from Windows NT repository 234 user ID 234 NetWare miscellaneous commands MCScript 298 NetWare program extracting file set from NetShield pa...

Page 331: ...3 options alerting 165 configuring custom postpone messages 144 configuring custom update messages 17 155 scanning 268 P PASSWORD PWD 48 passwords changing 48 249 creating 249 for new domains 249 PASS...

Page 332: ...options 153 icon 258 265 recovering deleted machines 268 Name Provider database 269 red cross icon 99 265 refreshing log 119 Name Provider view 257 REGISTER MEMORY command 83 registry commands MCScrip...

Page 333: ...VirusScan program to 50 rollout of VirusScan program over networks to 53 S saving log 120 scan options configuration 268 scanning on demand 97 105 scans scheduling 97 viewing results 107 Scheduler 97...

Page 334: ...ter repository 39 SNMP alert notification 183 software requirements 25 software updates and upgrades website address for obtaining 308 software choosing 91 statements flow control 296 status bar viewi...

Page 335: ...g changes setting a warning period 117 training for Network Associates products 20 311 scheduling 20 troubleshooting accessing remote machines 201 adding machine names in Windows 3 1 254 changing comp...

Page 336: ...6 to 147 configuring custom message options 17 155 configuring custom postpone message options 144 emergency 126 forcing of invalid external mirrors 16 133 installing to member machines 139 interim 12...

Page 337: ...rties 136 scan results 107 schedules 118 small toolbar 57 tabbed pages 59 the left pane 58 the right pane 59 virus scan report 111 virus infections emergency updates 126 virus scan acknowledging statu...

Page 338: ...n anti virus domains 79 login scripts 149 Name Provider 79 share level access 72 user level access 70 Windows NT access for machines not logged on to the domain 230 to 231 configuring mirror access ri...

Search results

Summary of Contents for MANAGEMENT EDITION 2.5

Reviews:

Related manuals for MANAGEMENT EDITION 2.5

Brands by name

Popular brands

McAfee MANAGEMENT EDITION 2.5, Administrator'S Manual

Search results

Summary of Contents for MANAGEMENT EDITION 2.5

Reviews:

Related manuals for MANAGEMENT EDITION 2.5

Brands by name

Popular brands