Symantec 14541094 - pcAnywhere Host & Remote Service manual

Symantec pcAnywhere™
Administrator's Guide

Symantec pcAnywhere™ Administrator's Guide
The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.
Documentation version 12.0
Legal Notice
Copyright © 2006 Symantec Corporation.
All rights reserved.
Federal acquisitions: Commercial Software - Government Users Subject to Standard License
Terms and Conditions.
Symantec, the Symantec Logo, Symantec pcAnywhere, Symantec Packager, ColorScale,
SpeedSend, and LiveUpdate are trademarks or registered trademarks of Symantec
Corporation or its affiliates in the U.S. and other countries.
Apple and Mac OS are registered trademarks of Apple Computer, Inc. Java is a trademark
of Sun Microsystems, Inc. in the United States and other countries. Microsoft, Windows,
Windows NT, MS-DOS, and the Windows logo are registered trademarks of Microsoft
Corporation in the United States and other countries. Linux is a registered trademark of
Linus Torvalds. SUSE and its logo are registered trademarks of SUSE AG. The Red Hat
trademark and logo are trademarks of Red Hat, Inc. in the United States and other countries.
SSH and Secure Shell are trademarks of SSH Communications Security, Inc. Additional
company and product names may be trademarks or registered trademarks of the individual
companies and are respectfully acknowledged.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING PERFORMANCE,
OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS
DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be "commercial computer software"
and "commercial computer software documentation" as defined in FAR Sections 12.212 and
DFARS Section 227.7202.
Symantec Corporation 20330 Stevens Creek Blvd. Cupertino, CA 95014 USA
http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product feature and
function, installation, and configuration. The Technical Support group also authors
content for our online Knowledge Base. The Technical Support group works
collaboratively with the other functional areas within Symantec to answer your
questions in a timely fashion. For example, the Technical Support group works
with Product Engineering and Symantec Security Response to provide alerting
services and virus definition updates.
Symantec’s maintenance offerings include the following:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■A telephone and web-based support that provides rapid response and
up-to-the-minute information
■Upgrade insurance that delivers automatic software upgrade protection
■Global support that is available 24 hours a day, 7 days a week worldwide.
Support is provided in a variety of languages for those customers that are
enrolled in the Platinum Support program
■Advanced features, including Technical Account Management
For information about Symantec’s Maintenance Programs, you can visit our Web
site at the following URL:
www.symantec.com/techsupp/ent/enterprise.html
Select your country or language under Global Support. The specific features that
are available may vary based on the level of maintenance that was purchased and
the specific product that you are using.
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/techsupp/ent/enterprise.html
Select your region or language under Global Support, and then select the Licensing
and Registration page.
Customer service
Customer service information is available at the following URL:
www.symantec.com/techsupp/ent/enterprise.html

Select your country or language under Global Support.
Customer Service is available to assist with the following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information about product updates and upgrades
■Information about upgrade insurance and maintenance contracts
■Information about the Symantec Value License Program
■Advice about Symantec's technical support options
■Nontechnical presales questions
■Issues that are related to CD-ROMs or manuals
Maintenance agreement resources
If you want to contact Symantec regarding an existing maintenance agreement,
please contact the maintenance agreement administration team for your region
as follows:
■Asia-Pacific and Japan: [e-mail]
■Europe, Middle-East, and Africa: [e-mail]
■North America and Latin America: [e-mail]
Additional Enterprise services
Symantec offers a comprehensive set of services that allow you to maximize your
investment in Symantec products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
These solutions provide early warning of cyber
attacks, comprehensive threat analysis, and
countermeasures to prevent attacks before they occur.
Symantec Early Warning Solutions
These services remove the burden of managing and
monitoring security devices and events, ensuring
rapid response to real threats.
Managed Security Services

Symantec Consulting Services provide on-site
technical expertise from Symantec and its trusted
partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include
assessment, design, implementation, monitoring and
management capabilities, each focused on establishing
and maintaining the integrity and availability of your
IT resources.
Consulting Services
Educational Services provide a full array of technical
training, security education, security certification,
and awareness communication programs.
Educational Services
To access more information about Enterprise services, please visit our Web site
at the following URL:
www.symantec.com
Select your country or language from the site index.

Technical Support
Chapter 1 Planning a migration and upgrade strategy
About migrations and upgrades ...................................................... 11
Migrating from pcAnywhere 11.x in Windows NT/2000/2003
Server/XP ....................................................................... 13
Migrating from pcAnywhere 10.x in Windows NT/2000/ 2003
Server/XP ....................................................................... 13
Migrating from pcAnywhere 10.x in Windows 98/Me .................... 13
Upgrading from pcAnywhere 9.2.x in Windows NT/2000/XP ........... 14
Upgrading from pcAnywhere 9.2.x in Windows 98/Me ................... 14
Using Symantec Packager to streamline migrations and upgrades ......... 14
Chapter 2 Creating custom installation packages
About Symantec Packager .............................................................. 17
What you can do with Symantec Packager ......................................... 18
How Symantec Packager works ....................................................... 18
Importing a product module ........................................................... 20
Customizing product settings ......................................................... 21
Selecting product features ....................................................... 22
Including configuration files .................................................... 24
Integrity stamping a product configuration ................................. 26
Serializing a pcAnywhere installation ........................................ 27
Managing configuration settings globally ................................... 30
Setting product installation options ........................................... 32
Creating a custom command ........................................................... 38
Creating installation packages ........................................................ 39
Adding products and commands to a package definition ................ 40
Building product installations and packages ...................................... 40
Building a product configuration file .......................................... 41
Building a package .................................................................. 41
Testing packages .......................................................................... 42
Contents

Chapter 3 Deploying Symantec pcAnywhere custom installations
About deployment ........................................................................ 43
About package installation file locations ........................................... 44
Deploying installation packages using Web-based deployment .............. 45
About Web-based deployment requirements ................................ 45
Setting up the installation Web server ........................................ 46
Customizing the deployment files ............................................. 49
Testing the installation on the Web server .................................. 53
Notifying users of the download location .................................... 53
Deploying pcAnywhere using SMS 2.0 .............................................. 54
Minimum requirements for SMS deployment .............................. 55
Deploying with SMS ............................................................... 55
Using Windows NT/2000/2003 Server/XP logon scripts ....................... 58
Setting up the Windows server .................................................. 58
Writing the Windows logon script ............................................. 58
Testing the Windows logon script .............................................. 60
Using NetWare logon scripts .......................................................... 60
Setting up the Novell NetWare server ......................................... 60
Writing the NetWare logon script .............................................. 61
Testing the NetWare logon script ............................................... 62
Chapter 4 Performing centralized management
About centralized management ...................................................... 63
Managing pcAnywhere hosts remotely ............................................. 63
Installing the pcAnywhere Host Administrator tool ...................... 64
Adding the Host Administrator snap-in to MMC ........................... 65
Creating a configuration group ................................................. 65
Adding computers to a configuration group ................................. 66
Configuring administrator host and remote connection
items ............................................................................. 66
Configuring a host item in pcAnywhere Host Administrator ........... 69
Distributing pcAnywhere configuration files ............................... 69
Managing hosts in a configuration group .................................... 70
Integrating with Microsoft Systems Management Server ..................... 71
Importing the package definition file into SMS ............................ 71
About the Microsoft Distributed Component Object Model
(DCOM) ................................................................................ 71
Implementing DCOM in Windows NT/2000/2003 Server/XP ........... 72
Implementing DCOM in Windows 98/Me .................................... 72
Modifying DCOM settings ........................................................ 72
About AwShim ....................................................................... 73
About centralized logging .............................................................. 74
Contents8

Monitoring performance using SNMP traps ................................. 74
About the pcAnywhere MIB file ................................................. 75
Chapter 5 Integrating pcAnywhere with directory services
About directory services ................................................................ 77
Using directory services with pcAnywhere ........................................ 77
Configuring the directory servers .................................................... 78
Configuring the LDAP server .................................................... 78
Configuring Netscape Directory Server 3.1 .................................. 78
Configuring Netscape Directory Server 4.0 .................................. 79
Configuring Novell v5.0 server .................................................. 80
Configuring Windows Active Directory ....................................... 84
Configuring pcAnywhere to use directory services .............................. 88
Setting up directory services in pcAnywhere ............................... 88
Setting up the host computer to use directory services .................. 89
Setting up the remote computer to use directory services ............... 90
Chapter 6 Managing security in Symantec pcAnywhere
Controlling access to pcAnywhere hosts ........................................... 91
Limiting connections to specific computer names or IP
addresses ........................................................................ 92
Leveraging centralized authentication in pcAnywhere ................... 93
Protecting session security ............................................................. 97
Maintaining audit trails ................................................................. 99
Implementing policy-based administration ....................................... 99
Implementing Group Policy in Windows 2000/2003
Server/XP ....................................................................... 99
Implementing system policy in Windows 98/Me/NT4 .................. 100
Importing the pcAnywhere administrative template .................... 100
Managing user policies .......................................................... 101
Index
9Contents

Contents10

Planning a migration and
upgrade strategy
This chapter includes the following topics:
■About migrations and upgrades
■Using Symantec Packager to streamline migrations and upgrades
About migrations and upgrades
Symantec pcAnywhere supports migration from versions 10.x to version 12.0 on
Windows 98/Me/NT/2000/2003 Server/XP. During a migration, pcAnywhere lets
you install over the previous version of the product and preserve user-defined
settings.
Symantec pcAnywhere supports upgrades from version 9.2.x to version 12.0 on
Windows 98/Me/NT/2000/2003 Server/XP. An upgrade lets you install over the
previous version of the product; however, user-defined settings are not
automatically preserved.
A system restart for migrations and upgrades is required only if system files need
to be updated. Symantec pcAnywhere requires a system restart if you are migrating
or upgrading to the new version in Windows 98/Me.
Symantec Packager helps you simplify the process of uninstalling previous versions
or distributing preconfigured settings to multiple users.
See “Using Symantec Packager to streamline migrations and upgrades” on page 14.
Table 1-1 includes information that you can use as a reference in planning your
migration and upgrade strategy.
1
Chapter

Table 1-1 Migration and upgrade strategy matrix
Data preserved
automatically
Restart requiredOperating
system
Symantec
pcAnywhere
version
Host items
Caller items
Remote items
Option sets
Registry settings
AutoTransfer files (must be
converted)
Serial ID sets
NoWindows
NT/2000/2003
Server/XP
11.x
Host items
Caller items
Remote items
Option sets
Registry settings
AutoTransfer files (must be
converted)
NoWindows
NT/2000/XP
10.x
Host items
Caller items
Remote items
Option sets
Registry settings
AutoTransfer files (must be
converted)
YesWindows 98/Me10.x
NoneNo
Uninstalls
previous version
Windows
NT/2000/XP
9.2.x
NoneYes
Uninstalls
previous version
Windows 98/Me9.2.x
Planning a migration and upgrade strategy
About migrations and upgrades
12

Migrating from pcAnywhere 11.x in Windows NT/2000/2003 Server/XP
Symantec pcAnywhere supports full migration of the full product version and
host-only version of pcAnywhere 11.x to version 12.0 in Windows
NT/2000/2000/2003 Server/XP.
During the installation, you are prompted to preserve existing configuration
settings. This data includes settings for host, remote, and caller items, as well as
option sets.
Migration of remote-only packages and integrity-checked packages is not
supported.
Migrating from pcAnywhere 10.x in Windows NT/2000/ 2003 Server/XP
Symantec pcAnywhere supports full migration of the full product version and
host-only version of pcAnywhere 10.x to 12.0 in Windows NT/2000/2003
Server/XP.
During the installation, you are prompted to preserve existing configuration
settings. This data includes settings for host, remote, and caller items, as well as
option sets.
AutoTransfer files (.atf) that were created in earlier versions of pcAnywhere are
preserved. However, to use the .atf files in this version of pcAnywhere, you must
convert the .atf files to command queue files.
Migration of remote-only packages and integrity-checked packages is not
supported.
Migrating from pcAnywhere 10.x in Windows 98/Me
Symantec pcAnywhere supports full migration of the full product version and
host-only version of pcAnywhere 10.x to pcAnywhere 12.0 in Windows 98/Me.
During the installation, you are prompted to preserve existing configuration
settings. This data includes settings for host, remote, and caller items, as well as
option sets.
This migration requires a system restart to remove older pcAnywhere system
files. You can use Symantec Packager to streamline the migration process.
See “Using Symantec Packager to streamline migrations and upgrades” on page 14.
Migration of remote-only packages and integrity-checked packages is not
supported.
13Planning a migration and upgrade strategy
About migrations and upgrades

Upgrading from pcAnywhere 9.2.x in Windows NT/2000/XP
Symantec pcAnywhere supports upgrades of the full product and host-only
versions of pcAnywhere 9.2.x to version 12.0 in Windows NT/2000/XP.
The upgrade process does not automatically preserve user-defined data. If you
need to upgrade pcAnywhere on multiple computers, you can use Symantec
Packager to create a custom installation package that contains preconfigured
data files.
See “Using Symantec Packager to streamline migrations and upgrades” on page 14.
Upgrading from pcAnywhere 9.2.x in Windows 98/Me
If you are installing pcAnywhere version 12.0 on a Windows 98/Me computer that
has version 9.2.x installed, pcAnywhere prompts you to uninstall the program.
This is required to ensure proper functionality.
To automate this process, you can use Symantec Packager to create a custom
installation package to handle the uninstallation and installation process. You
can also include preconfigured data files in the package and deploy it to other
users.
See “Using Symantec Packager to streamline migrations and upgrades” on page 14.
Using Symantec Packager to streamline migrations
and upgrades
Symantec Packager is an administrator tool that lets you create, modify, and build
custom installation packages that you distribute to target systems. Symantec
Packager is available as an installation option on the pcAnywhere installation
CD.
Symantec Packager helps you streamline the process of migrating or upgrading
from earlier versions of pcAnywhere in the following ways:
Create a custom installation package that
includes a custom command to silently
uninstall the previous version before
installing the product.
The product installation requires you to
manually uninstall a previous version of the
product.
Create a custom installation package for the
product installation and configure the
package to install in passive or silent mode.
The product installation requires you to
restart the computer to complete the
installation process.
Planning a migration and upgrade strategy
Using Symantec Packager to streamline migrations and upgrades
14

Create a custom installation package that
includes preconfigured data files that
contain the settings that you need.
The product installation does not support
preservation of preconfigured product
settings.
See “Using Symantec Packager to streamline migrations and upgrades” on page 14.
15Planning a migration and upgrade strategy
Using Symantec Packager to streamline migrations and upgrades

Planning a migration and upgrade strategy
Using Symantec Packager to streamline migrations and upgrades
16

Creating custom
installation packages
This chapter includes the following topics:
■About Symantec Packager
■What you can do with Symantec Packager
■How Symantec Packager works
■Importing a product module
■Customizing product settings
■Creating a custom command
■Creating installation packages
■Building product installations and packages
■Testing packages
About Symantec Packager
Symantec Packager lets you create, modify, and build custom installation packages
that you can distribute to target systems. You can use Symantec Packager to tailor
installations to fit your corporate environment by building packages that contain
only the features and settings that your users need.
Symantec products included in installation packages are protected by copyright
law and the Symantec license agreement. Distribution of packages requires a
license for each user who installs the package.
2
Chapter

Note: Symantec Packager runs on Windows NT/2000/2003 Server/XP Professional
platforms only. However, installation packages that are created with Symantec
Packager can be installed on all Microsoft 32-bit platforms except for Windows
95/NT 3.51.
What you can do with Symantec Packager
Symantec Packager lets you do the following:
■Tailor products to adhere to your security policy, giving users full access to
all features, or limiting access where appropriate
■Reduce deployment bandwidth and application footprint by creating a custom
installation package that contains only the features that your users need
■Reduce installation complexity by including preconfigured data files
■Minimize deployment costs and complexity by installing multiple products at
once
■Simplify application deployment and migration by including custom commands
with product installations
How Symantec Packager works
Symantec Packager uses a phased approach for creating custom installation
packages. Each phase depends on the output of the previous phase.
Figure 2-1 shows the process for creating custom installation packages with
Symantec Packager.
Figure 2-1 Overview of Symantec Packager phases
Import Products Configure Products Configure Packages
Configure Commands
Deploy Packages
Table 2-1 outlines the process for creating packages.
Creating custom installation packages
What you can do with Symantec Packager
18

Table 2-1 Package creation process
ReferenceDescriptionTask
See “Importing a product
module” on page 20.
Product modules contain the
installation binary and
product template files that
are needed to create a custom
installation of the product.
Import product modules into
Symantec Packager.
See “Customizing product
settings” on page 21.
You can select the features
that you want your users to
have, add preconfigured data
and configuration files, and
set default installation
options for each product.
Configure products.
See “Creating a custom
command” on page 38.
Custom commands let you
add additional functionality
that is not supported in the
product templates, such as
including a third-party
program or batch file.
Configure commands that
you want to include in a
package.
See “Creating installation
packages” on page 39.
You can bundle one or more
product configurations and
custom commands in a
package. You can further
customize the package by
setting package installation
options, product installation
order, and other settings.
Configure packages.
See “Building product
installations and packages”
on page 40.
When you build a package,
Symantec Packager creates
an installation file that
incorporates the product,
command, and package
options that you specified.
Alternatively, Symantec
Packager lets you build a
product configuration file,
which creates a Microsoft
Installer (.msi) file for a
single product installation.
Build custom products or
packages.
19Creating custom installation packages
How Symantec Packager works

Table 2-1 Package creation process (continued)
ReferenceDescriptionTask
See “Testing packages”
on page 42.
You should test packages
before deploying them to end
users to ensure proper
functionality.
Test the package.
See “About deployment”
on page 43.
The Deploy Packages tab
holds the packages that you
create, which you can deploy
to your users. Symantec
provides a Package
Deployment tool in Symantec
Packager and a Web-based
deployment tool on the
pcAnywhere CD. You can also
use your current deployment
tools.
Deploy the package.
Importing a product module
Product modules are the building blocks for creating packages. Symantec Packager
extracts the product installation binary files and the product template from the
product module. The product template details the feature requirements and
conflicts, making it possible to create custom installations of the product. During
installation, Symantec Packager automatically checks the Packager/Products
folder for product module files and imports them automatically.
Symantec pcAnywhere provides a product module file (Symantec pcAnywhere
<version>.PMI) on the installation CD. If you install Symantec Packager from the
pcAnywhere installation CD, Symantec Packager automatically imports this
product module file.
If no products appear on the Import Products tab when you open Symantec
Packager, you must import the product module manually.
To import a product module
1Open Symantec Packager.
2In the Symantec Packager window, on the Import Products tab, on the File
menu, click Import New Product.
Creating custom installation packages
Importing a product module
20