Symantec PCANYWHERE - V12.5 Service manual

Symantec pcAnywhere™
Administrator's Guide

Symantec pcAnywhere™Administrator's Guide
The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.
Documentation version 12.5
Legal Notice
Copyright © 2008 Symantec Corporation.
All rights reserved.
Federal acquisitions: Commercial Software - Government Users Subject to Standard License
Terms and Conditions.
Symantec, the Symantec Logo, Symantec pcAnywhere, Symantec Packager, ColorScale,
SpeedSend, LiveUpdate, Virtually Anywhere and Work Virtually Anywhere are trademarks
or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other
countries. Other names may be trademarks of their respective owners.
Apple and Mac OS are registered trademarks of Apple Computer, Inc. Java is a trademark
of Sun Microsystems, Inc. in the United States and other countries. Microsoft, Windows,
Windows NT, Windows Vista, MS-DOS, and the Windows logo are registered trademarks of
Microsoft Corporation in the United States and other countries. Linux is a registered
trademark of Linus Torvalds. SUSE and its logo are registered trademarks of SUSE AG. The
Red Hat trademark and logo are trademarks of Red Hat, Inc. in the United States and other
countries. SSH and Secure Shell are trademarks of SSH Communications Security, Inc.
Additional company and product names may be trademarks or registered trademarks of the
individual companies and are respectfully acknowledged.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING PERFORMANCE,
OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS
DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be "commercial computer software"
and "commercial computer software documentation" as defined in FAR Sections 12.212 and
DFARS Section 227.7202.
Symantec Corporation 20330 Stevens Creek Blvd. Cupertino, CA 95014 USA
http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our online
Knowledge Base. The Technical Support group works collaboratively with the
other functional areas within Symantec to answer your questions in a timely
fashion. For example, the Technical Support group works with Product Engineering
and Symantec Security Response to provide alerting services and virus definition
updates.
Symantec’s maintenance offerings include the following:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■Telephone and Web-based support that provides rapid response and
up-to-the-minute information
■Upgrade assurance that delivers automatic software upgrade protection
■Global support that is available 24 hours a day, 7 days a week
■Advanced features, including Account Management Services
For information about Symantec’s Maintenance Programs, you can visit our Web
site at the following URL:
www.symantec.com/techsupp/
Contacting Technical Support
Customers with a current maintenance agreement may access Technical Support
information at the following URL:
www.symantec.com/techsupp/
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be
at the computer on which the problem occurred, in case it is necessary to replicate
the problem.
When you contact Technical Support, please have the following information
available:
■Product release level
■Hardware information
■Available memory, disk space, and NIC information
■Operating system

■Version and patch level
■Network topology
■Router, gateway, and IP address information
■Problem description:
■Error messages and log files
■Troubleshooting that was performed before contacting Symantec
■Recent software configuration changes and network changes
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/techsupp/
Customer service
Customer service information is available at the following URL:
www.symantec.com/techsupp/
Customer Service is available to assist with the following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates, such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information about product updates and upgrades
■Information about upgrade assurance and maintenance contracts
■Information about the Symantec Buying Programs
■Advice about Symantec's technical support options
■Nontechnical presales questions
■Issues that are related to CD-ROMs or manuals

Maintenance agreement resources
If you want to contact Symantec regarding an existing maintenance agreement,
please contact the maintenance agreement administration team for your region
as follows:
[email protected]Asia-Pacific and Japan
[email protected]Europe, Middle-East, and Africa
[email protected]North America and Latin America
Additional enterprise services
Symantec offers a comprehensive set of services that allow you to maximize your
investment in Symantec products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
These solutions provide early warning of cyber attacks, comprehensive threat
analysis, and countermeasures to prevent attacks before they occur.
Symantec Early Warning Solutions
These services remove the burden of managing and monitoring security devices
and events, ensuring rapid response to real threats.
Managed Security Services
Symantec Consulting Services provide on-site technical expertise from
Symantec and its trusted partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include assessment, design,
implementation, monitoring, and management capabilities. Each is focused on
establishing and maintaining the integrity and availability of your IT resources.
Consulting Services
Educational Services provide a full array of technical training, security
education, security certification, and awareness communication programs.
Educational Services
To access more information about Enterprise services, please visit our Web site
at the following URL:
www.symantec.com
Select your country or language from the site index.

Technical Support ............................................................................................... 3
Chapter 1 Planning a migration and upgrade strategy .................. 11
About migrations and upgrades ...................................................... 11
Migrating from pcAnywhere 12.1 to 12.5 in Windows
2000/2003/2008 Server/XP to ( ) ......................................... 13
Migrating from pcAnywhere 12.0.2 in Windows 2000/2003
Server/XP to Vista ............................................................ 13
Using Symantec Packager to streamline migrations and upgrades ........ 13
Chapter 2 Creating custom installation packages .......................... 15
About Symantec Packager ............................................................. 15
What you can do with Symantec Packager ........................................ 16
How Symantec Packager works ....................................................... 16
Importing a product module ........................................................... 18
Customizing product settings ......................................................... 18
Selecting product features ....................................................... 19
Including configuration files .................................................... 21
Integrity stamping a product configuration ................................ 23
Serializing a pcAnywhere installation ........................................ 25
Managing configuration settings globally ................................... 27
Setting product installation options .......................................... 29
Creating a custom command .......................................................... 34
Creating installation packages ........................................................ 35
Adding products and commands to a package definition ................ 36
Building product installations and packages ...................................... 37
Building a product configuration file ......................................... 37
Building a package ................................................................. 38
Testing packages ......................................................................... 38
Chapter 3 Deploying Symantec pcAnywhere custom
installations .................................................................... 41
About deployment ........................................................................ 41
About package installation file locations .......................................... 42
Contents

Deploying installation packages using Web-based deployment ............. 43
About Web-based deployment requirements ............................... 43
Setting up the installation Web server ....................................... 44
Customizing the deployment files ............................................. 47
Testing the installation on the Web server .................................. 51
Notifying users of the download location .................................... 51
Deploying pcAnywhere using SMS 2.0 ............................................. 52
Minimum requirements for SMS deployment .............................. 53
Deploying with SMS ............................................................... 53
Using Windows 2000/2003/2008 Server/XP/Vista logon scripts ........... 56
Setting up the Windows server ................................................. 56
Writing the Windows logon script ............................................. 56
Testing the Windows logon script ............................................. 58
Using NetWare logon scripts .......................................................... 58
Setting up the Novell NetWare server ........................................ 58
Writing the NetWare logon script ............................................. 59
Testing the NetWare logon script .............................................. 60
Chapter 4 Performing centralized management ............................. 61
About centralized management ...................................................... 61
Managing pcAnywhere hosts remotely ............................................. 61
Installing the pcAnywhere Host Administrator tool ...................... 62
Adding the Host Administrator snap-in to MMC .......................... 63
Creating a configuration group ................................................. 63
Adding computers to a configuration group ................................ 64
Configuring administrator host and remote connection
items ............................................................................. 64
Configuring a host item in pcAnywhere Host Administrator .......... 67
Distributing pcAnywhere configuration files ............................... 67
Managing hosts in a configuration group .................................... 68
Integrating with Microsoft Systems Management Server ..................... 69
Importing the package definition file into SMS ............................ 69
About the Microsoft Distributed Component Object Model
(DCOM) ................................................................................ 69
Implementing DCOM in Windows 2000/2003/2008
Server/XP/Vista ............................................................... 70
Modifying DCOM settings ........................................................ 70
About AwShim ...................................................................... 71
About centralized logging .............................................................. 72
Monitoring performance using SNMP traps ................................ 72
About the pcAnywhere MIB file ................................................ 73
Contents8

Chapter 5 Integrating pcAnywhere with directory services .......... 75
About directory services ................................................................ 75
Using directory services with pcAnywhere ........................................ 75
Configuring the directory servers .................................................... 76
Configuring the LDAP server .................................................... 76
Configuring Windows Active Directory ...................................... 76
Configuring pcAnywhere to use directory services ............................. 80
Setting up directory services in pcAnywhere ............................... 80
Setting up the host computer to use directory services .................. 81
Setting up the remote computer to use directory services .............. 82
Chapter 6 Managing security in Symantec pcAnywhere ............... 83
Controlling access to pcAnywhere hosts ........................................... 83
Limiting connections to specific computer names or IP
addresses ....................................................................... 84
Leveraging centralized authentication in pcAnywhere .................. 85
Protecting session security ............................................................ 88
Configuring pcAnywhere to use public-key encryption on
Windows Vista/2008 Server ............................................... 90
Maintaining audit trails ................................................................. 91
Implementing policy-based administration ....................................... 91
Implementing Group Policy in Windows 2000/2003/2008
Server/XP/Vista ............................................................... 91
Importing the pcAnywhere administrative template ..................... 92
Managing user policies ............................................................ 92
Index .................................................................................................................... 97
9Contents

Contents10