Symantec 14541094 - pcAnywhere Host & Remote Service manual

Symantec pcAnywhere™
Administrator's Guide

Symantec pcAnywhere™ Administrator's Guide
The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.
Documentation version 12.0
Legal Notice
Copyright © 2006 Symantec Corporation.
All rights reserved.
Federal acquisitions: Commercial Software - Government Users Subject to Standard License
Terms and Conditions.
Symantec, the Symantec Logo, Symantec pcAnywhere, Symantec Packager, ColorScale,
SpeedSend, and LiveUpdate are trademarks or registered trademarks of Symantec
Corporation or its affiliates in the U.S. and other countries.
Apple and Mac OS are registered trademarks of Apple Computer, Inc. Java is a trademark
of Sun Microsystems, Inc. in the United States and other countries. Microsoft, Windows,
Windows NT, MS-DOS, and the Windows logo are registered trademarks of Microsoft
Corporation in the United States and other countries. Linux is a registered trademark of
Linus Torvalds. SUSE and its logo are registered trademarks of SUSE AG. The Red Hat
trademark and logo are trademarks of Red Hat, Inc. in the United States and other countries.
SSH and Secure Shell are trademarks of SSH Communications Security, Inc. Additional
company and product names may be trademarks or registered trademarks of the individual
companies and are respectfully acknowledged.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING PERFORMANCE,
OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS
DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be "commercial computer software"
and "commercial computer software documentation" as defined in FAR Sections 12.212 and
DFARS Section 227.7202.
Symantec Corporation 20330 Stevens Creek Blvd. Cupertino, CA 95014 USA
http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product feature and
function, installation, and configuration. The Technical Support group also authors
content for our online Knowledge Base. The Technical Support group works
collaboratively with the other functional areas within Symantec to answer your
questions in a timely fashion. For example, the Technical Support group works
with Product Engineering and Symantec Security Response to provide alerting
services and virus definition updates.
Symantec’s maintenance offerings include the following:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■A telephone and web-based support that provides rapid response and
up-to-the-minute information
■Upgrade insurance that delivers automatic software upgrade protection
■Global support that is available 24 hours a day, 7 days a week worldwide.
Support is provided in a variety of languages for those customers that are
enrolled in the Platinum Support program
■Advanced features, including Technical Account Management
For information about Symantec’s Maintenance Programs, you can visit our Web
site at the following URL:
www.symantec.com/techsupp/ent/enterprise.html
Select your country or language under Global Support. The specific features that
are available may vary based on the level of maintenance that was purchased and
the specific product that you are using.
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/techsupp/ent/enterprise.html
Select your region or language under Global Support, and then select the Licensing
and Registration page.
Customer service
Customer service information is available at the following URL:
www.symantec.com/techsupp/ent/enterprise.html

Select your country or language under Global Support.
Customer Service is available to assist with the following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information about product updates and upgrades
■Information about upgrade insurance and maintenance contracts
■Information about the Symantec Value License Program
■Advice about Symantec's technical support options
■Nontechnical presales questions
■Issues that are related to CD-ROMs or manuals
Maintenance agreement resources
If you want to contact Symantec regarding an existing maintenance agreement,
please contact the maintenance agreement administration team for your region
as follows:
■Asia-Pacific and Japan: [e-mail]
■Europe, Middle-East, and Africa: [e-mail]
■North America and Latin America: [e-mail]
Additional Enterprise services
Symantec offers a comprehensive set of services that allow you to maximize your
investment in Symantec products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
These solutions provide early warning of cyber
attacks, comprehensive threat analysis, and
countermeasures to prevent attacks before they occur.
Symantec Early Warning Solutions
These services remove the burden of managing and
monitoring security devices and events, ensuring
rapid response to real threats.
Managed Security Services

Symantec Consulting Services provide on-site
technical expertise from Symantec and its trusted
partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include
assessment, design, implementation, monitoring and
management capabilities, each focused on establishing
and maintaining the integrity and availability of your
IT resources.
Consulting Services
Educational Services provide a full array of technical
training, security education, security certification,
and awareness communication programs.
Educational Services
To access more information about Enterprise services, please visit our Web site
at the following URL:
www.symantec.com
Select your country or language from the site index.

Technical Support
Chapter 1 Planning a migration and upgrade strategy
About migrations and upgrades ...................................................... 11
Migrating from pcAnywhere 11.x in Windows NT/2000/2003
Server/XP ....................................................................... 13
Migrating from pcAnywhere 10.x in Windows NT/2000/ 2003
Server/XP ....................................................................... 13
Migrating from pcAnywhere 10.x in Windows 98/Me .................... 13
Upgrading from pcAnywhere 9.2.x in Windows NT/2000/XP ........... 14
Upgrading from pcAnywhere 9.2.x in Windows 98/Me ................... 14
Using Symantec Packager to streamline migrations and upgrades ......... 14
Chapter 2 Creating custom installation packages
About Symantec Packager .............................................................. 17
What you can do with Symantec Packager ......................................... 18
How Symantec Packager works ....................................................... 18
Importing a product module ........................................................... 20
Customizing product settings ......................................................... 21
Selecting product features ....................................................... 22
Including configuration files .................................................... 24
Integrity stamping a product configuration ................................. 26
Serializing a pcAnywhere installation ........................................ 27
Managing configuration settings globally ................................... 30
Setting product installation options ........................................... 32
Creating a custom command ........................................................... 38
Creating installation packages ........................................................ 39
Adding products and commands to a package definition ................ 40
Building product installations and packages ...................................... 40
Building a product configuration file .......................................... 41
Building a package .................................................................. 41
Testing packages .......................................................................... 42
Contents

Chapter 3 Deploying Symantec pcAnywhere custom installations
About deployment ........................................................................ 43
About package installation file locations ........................................... 44
Deploying installation packages using Web-based deployment .............. 45
About Web-based deployment requirements ................................ 45
Setting up the installation Web server ........................................ 46
Customizing the deployment files ............................................. 49
Testing the installation on the Web server .................................. 53
Notifying users of the download location .................................... 53
Deploying pcAnywhere using SMS 2.0 .............................................. 54
Minimum requirements for SMS deployment .............................. 55
Deploying with SMS ............................................................... 55
Using Windows NT/2000/2003 Server/XP logon scripts ....................... 58
Setting up the Windows server .................................................. 58
Writing the Windows logon script ............................................. 58
Testing the Windows logon script .............................................. 60
Using NetWare logon scripts .......................................................... 60
Setting up the Novell NetWare server ......................................... 60
Writing the NetWare logon script .............................................. 61
Testing the NetWare logon script ............................................... 62
Chapter 4 Performing centralized management
About centralized management ...................................................... 63
Managing pcAnywhere hosts remotely ............................................. 63
Installing the pcAnywhere Host Administrator tool ...................... 64
Adding the Host Administrator snap-in to MMC ........................... 65
Creating a configuration group ................................................. 65
Adding computers to a configuration group ................................. 66
Configuring administrator host and remote connection
items ............................................................................. 66
Configuring a host item in pcAnywhere Host Administrator ........... 69
Distributing pcAnywhere configuration files ............................... 69
Managing hosts in a configuration group .................................... 70
Integrating with Microsoft Systems Management Server ..................... 71
Importing the package definition file into SMS ............................ 71
About the Microsoft Distributed Component Object Model
(DCOM) ................................................................................ 71
Implementing DCOM in Windows NT/2000/2003 Server/XP ........... 72
Implementing DCOM in Windows 98/Me .................................... 72
Modifying DCOM settings ........................................................ 72
About AwShim ....................................................................... 73
About centralized logging .............................................................. 74
Contents8

Monitoring performance using SNMP traps ................................. 74
About the pcAnywhere MIB file ................................................. 75
Chapter 5 Integrating pcAnywhere with directory services
About directory services ................................................................ 77
Using directory services with pcAnywhere ........................................ 77
Configuring the directory servers .................................................... 78
Configuring the LDAP server .................................................... 78
Configuring Netscape Directory Server 3.1 .................................. 78
Configuring Netscape Directory Server 4.0 .................................. 79
Configuring Novell v5.0 server .................................................. 80
Configuring Windows Active Directory ....................................... 84
Configuring pcAnywhere to use directory services .............................. 88
Setting up directory services in pcAnywhere ............................... 88
Setting up the host computer to use directory services .................. 89
Setting up the remote computer to use directory services ............... 90
Chapter 6 Managing security in Symantec pcAnywhere
Controlling access to pcAnywhere hosts ........................................... 91
Limiting connections to specific computer names or IP
addresses ........................................................................ 92
Leveraging centralized authentication in pcAnywhere ................... 93
Protecting session security ............................................................. 97
Maintaining audit trails ................................................................. 99
Implementing policy-based administration ....................................... 99
Implementing Group Policy in Windows 2000/2003
Server/XP ....................................................................... 99
Implementing system policy in Windows 98/Me/NT4 .................. 100
Importing the pcAnywhere administrative template .................... 100
Managing user policies .......................................................... 101
Index
9Contents

Contents10