00197214_IM_SupportMediaV1.15_EN.pdf - 第25页
Support Media V1.15 10/2013 Edition 25 If you seem to have ge neral problems with .HTA f iles (e.g. security warnings or un known file extension), you m ay try to use the HTAFix reg istry file provided on D VD1. 4.7 Kno …
Support Media V1.15 10/2013 Edition
24
4.5 Support of Firewall
Starting with SuP50 release products, firewall configurations are supported.
Each product will create a set of Microsoft Windows Firewall Rules for the supported operating
systems so that the communication of the SIPLACE Product only will be enabled.
The Support Media will disable the Microsoft Windows Firewall for all SIPLACE Line software
versions before Release SuP50.
The Support Media will maintain in the prerequisites profile the information, if the SIPLACE
Line Product will support the configuration of the Microsoft Windows Firewall
The Support Media will create Firewall Rules for the basic OS feature like Microsoft SQL
Server; NetBIOS name resolution, MSMQ and others. It is required to run the Support Media to
create a complete required set of firewall rules for a computer system. Only OS features will be
configured which are installed with the Support Media. When OS Features like IIS are installed
manually, the firewall rules will not be activated.
The Support Media will create a required set of firewall rules for a preinstalled SQL Server
2008 R2 and higher, to allow remote access.
The Support Media will not actively activate the Firewall.
The firewall rules will only configure the inbound network traffic.
The firewall rules will be activated for all network location awareness profiles in Microsoft
Windows Vista and above.
Configuration is only supported for Microsoft Windows Firewall. Other Firewalls have to be
configured manually.
All firewall rules are listed in the appendix of this document. All documented rules are listing the
ports for informational purpose. These are not part of the firewall rules which will be created,
except the rules which are marked with “Port” in the first column.
CAUTION
Firewall rules installed by SIPLACE can be overridden in customer domain
The customer group policies in the Windows domain can influence the by
SIPLACE installed firewall rules.
4.6 Critical Usage Notes
CAUTION
Installing Support Media from a network drive/local folder
Do not use Support Media from a network drive/local folder, as this causes
following problems:
Problems with Internet Explorer security not allowing certain scripts.
Problems with pathnames of files from Prerequisites larger than 256
characters.
It is strongly recommended to use a DVD / mapped ISO file instead.
Support Media contains the freeware ISO mapping tool WinCDEmu which also supports creating
ISO files from inserted DVDs. You can find it in the Tools subdirectory.
Support Media V1.15 10/2013 Edition
25
If you seem to have general problems with .HTA files (e.g. security warnings or unknown file
extension), you may try to use the HTAFix registry file provided on DVD1.
4.7 Known Issues
Removed "outdated" Installation packages (since V1.11):
Some Installation packages (like Microsoft SQL 2008 SP 1 Express - see above section "New DVD
content") have been removed from the DVDs to save space for easier distribution of Support
Media.
Prerequisite Analyzer will detect, if required Prerequisites are missing on the DVD and show you
options how to retrieve the missing packages.
Microsoft SQL Server/Express 64 Bit:
If you installed a 32 Bit Microsoft SQL Edition on your 64 Bit OS and want to use the 64 Bit Edition,
you have to uninstall the Edition before.
Microsoft SQL Server:
If you plan to install Microsoft SQL Server Edition, please see the Navigation Guide documents
regarding manual SQL installation to ensure you use the correct installation options.
Analyzer now also includes Profiles (in "SIPLACE Net") helping to prepare your computer for
Microsoft SQL Server installations.
After installation, you may (re-)run Prerequisite Analyzer to apply possibly required updates and
install all other required Prerequisites. Additionally, Analyzer will warn you if it finds known
conflicting settings.
OS Setting - Language for Non-Unicode programs
This Support Media build *should* work independent of the setting "Language for Non-Unicode
programs" (this setting may cause problems on Chinese systems).
Now, all Script files (*.VBS;*.HTA;*.HTML;*.HTM;*.CSS) are converted to Unicode during Support
Media build (directories "Scripts" and "SIPLACE Net" on DVD1) and written log files use ANSI
characters.
However, there might be still cases, where problems occur - if you encounter problems please use
the language setting "English (United States)" for Non-Unicode programs.
Microsoft Windows Server 2008 support
In some cases, it is required to reboot the computer before Microsoft Windows Server 2008 -
related customizing scripts succeed. This is especially the case when Microsoft .Net Framework
has been installed.
Net Framework 3.5 SP 1 and Windows Installer 4.5 require a reboot on VistaSP1/W2008SP1
before proceeding
New with Support Media V1.13: Analyzer will be restarted automatically after reboot and login
with same account.
Newer Operating System versions don't require a reboot anymore (they already have a newer
Windows Installer version integrated).
Support Media V1.15 10/2013 Edition
26
Net Framework 4.0 may require a reboot before proceeding
New with Support Media V1.13: Analyzer will be restarted automatically after reboot and login
with same account.
Choose Password policy
You have to select, if you want to apply previous (simple) passwords or more complex passwords
to created accounts to meet possible existing password policy restrictions.
New with Support Media V1.13
If SIPLACE Accounts with certain policy already exist, the appropriate option will be pre-selected
automatically. Additionally, policy selection page now allows taking over the setting from a remote
computer (which already has SIPLACE accounts). Important: Passwords of already existing
accounts won't be modified.
If Analyzer detects a conflict between the remote and the local computer it will warn you.
In specific configurations, Analyzer may detect Windows Firewall being active although it is
currently not
This may happen when Microsoft Windows Firewall is configured by Group Policies to be disabled
in some situations instead of using the Control Panel settings.
Since Group Policies are most likely to be applied in Domain environments only and Prerequisite
Analyzer automatically deselects the "Windows Firewall Disable" Script in domain environments
and hints the user to check for proper configuration, this shouldn't be a problem.
Furthermore, if the user explicitly selects the "Windows Firewall Disable" Script to be executed, the
Microsoft Firewall will be disabled for all conditions (=network locations) ensuring proper function of
SIPLACE Products (Although this is not recommended in domain environments for security
reasons).
4.8 Frequently Asked Questions (FAQ)
What is it?
Support Media assists you in preparing your computer for the use with SIPLACE Line Software.
Why so many DVDs? Do I need them all?
This depends on your needs.
Normally, the first media will fit all your needs. DVD two is very similar to the first media with a
reduced size. It only contains software which you won't find on the internet and will require the
download and installation of some files manually in some cases. For SIPLACE internal use, there’s
also a Support Media variant which includes certain installation packages (like Microsoft SQL
Server Updates) which we are not allowed to distribute to customers directly.
So, can I save download time using DVD two only?
With Support Media V1.13, a download mechanism of missing software packages has been
integrated. So, as long as you have access to the internet, you may use the DVD two to prepare
your computer. But note: there are some cases, where automatic download of certain missing
packages isn’t possible. (For example, there are packages we had to modify for automatic
installation) Then you will have to use the offered link for manual download and installation.