Roaming Computing System (RCS) ============================== To-Do List, Issues, Notes ========================= http://thegoldenear.org/rcs/windows/todo.txt Date: 3 January 2012 ================================================================================================================== RCS 4.0 ================================================================================================================== This is to be a staged upgrade. Stage 1 will focus on workstation software. See tags [*TODO*], [TODO], [TEST], [TODOCUMENT], [WARNING] WORKSTATION ----------- 7zip 4.65 -> 9.20 adblock plus 1.2.1 -> 2.0.2 bluegriffon 1.3.1 - replaces KompoZer Uninstall works?: yes Added tweak-unattended-bluegriffon-system-config-disable-updates ccleaner (slim) 2.2.6 -> 3.13.1600 Added TWEAK Unattended ccleaner-system-config.bat to disable updates Added WPKG tweak-unattended-ccleaner-system-config to disable updates Document new download location www.piriform.com/ccleaner/download/slim enigmail 1.1.2 -> 1.3.4 [TEST] GnuPG not found, required pressing 'Reset' in Enigmail prefs Eraser 5.86a -> 5.8.8 From http://sourceforge.net/projects/eraser/files/Eraser%205/5.8.8/ 6.x series (6.0.8 currently) doesn't have silent install yet Changed from /S to /SILENT /NORESTART Added WPKG and TWEAK Unattended 'Eraser system config' Added an allowed error code for uninstalling old one if it's not there Install of new version gives: "Setup has detected that Eraser is currently running". But after a reboot it installs on the second go OK. "Uninstall has detected that Eraser is currently running" so we delete HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\Eraser check wpkg log, that reg key has gone, that log file created FileZilla 3.3.0.1 -> 3.5.2 Firefox 3.6.18 -> 9.0.1 (Firefox 8 sometimes wants to reboot after uninstall (what about after install?), depending if some files are open. I saw talk about this somewhere) Firefox 4+ does away with the Plugins directory. The Windows Media Player plug-in re-creates it though. Added new TWEAK Unattended config, run by WPKG, so that add-ons we install in the %PROGRAMFILES% directory aren't recommended to each person to be disabled, only their own add-ons receive such attention. ('Add-ons installed by third party programs are now disabled by default' - http://blog.mozilla.com/addons/2011/08/11/strengthening-user-control-of-add-ons/) [TODOCUMENT] https://wiki.mozilla.org/Releases#Thunderbird_8 Firefox 9 compatabilities Extensions / add-ons Adblock Plus - compatible Zotero - compatible Zotero OpenOffice.org Integration - compatible - the updated version re-installed into LibreOffice Plugins Flash Player - compatible JRE - compatible (console isn't compatible, and prompts when first start Firefox) Windows Media Player plugin - ? Firefox En GB dictionary 1.19.1 - NEW Needed change to maxVersion from 4.0b8pre to 8.0.*. Not sure why Thunderbird doesn't require same because its maxVersion is 3.3a2pre [TODOCUMENT] created new package firefox-spellcheck-dictionary-en-gb Flash Player plugin 10.x -> 11.1.102.55 http://blogs.adobe.com/asset/2011/09/flash-player-11-privacy-and-security-updates.html Got rid of uninstall_flash_player.exe as we don't use it, not sure when we last did [TODOCUMENT] Instead of getting it from Filehippo because it was hard to get a proper installer from Adobe, it's now easy to get it from Adobe at http://www.adobe.com/special/products/flashplayer/fp_distribution3.html so we do that - install_flash_player_11_plugin_32bit.exe rather than install_flash_player_32bit.exe Foxit Reader 3.x -> Foxit Enterprise Reader 5.1.4.1124 - [TODOCUMENT] Foxit Reader security updates: http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php - [TODOCUMENT] Multi-language Translation System - http://languages.foxitsoftware.com/index.php?proid=14 - [TODOCUMENT] we now disable the welcome dialog - I don't think Foxit Enterprise Reader nags about updates - 'Display PDF In Browser' - Tools -> Preferences -> File Associations -> Display PDF in Browser - on by default. This option responds only to administrator accounts (not sure about Power Users), other users can alter it but doing so will make no difference, with it reverting on next startup. Foxit acts upon the option set by an administrator, for all users. With ths deselected, when a PDF is selected on the web, Firefox will say: 'What should Firefox do with this file?' and people can select Open With -> FoxitReader.Document (default) to view the PDF file. This is better than having the PDF display in Foxit Reader embedded in Firefox as it uses less memory and so doesn't slow the workstation down as much. [TODO] Unless this option can be programatically altered, we will need to login as an admin on each workstation and change this. - WAITING TO HEAR BACK FROM FOXIT SOFTWARE - http://forums.foxitsoftware.com/archive/index.php/t-27030.html - msiexec /i "Foxit Reader.msi" /quiet ADDLOCAL="FX_PDFVIEWER, FX_FIREFOXPLUGIN" FX_PDFVIEWER - Foxit PDF Viewer and its components; FX_FIREFOXPLUGIN - Plugin which is used for opening PDF files in Mozilla Firefox, Opera, Safari, and Chrome browsers. This feature requires FX_PDFVIEWER feature to be installed. MAKEDEFAULT Default value of "1", Foxit Reader will be set as default application for PDF files. VIEW_IN_BROWSER Default value of "1", Foxit Reader will be configured to open PDF files inside browsers. DESKTOP_SHORTCUT Default value of "1", installer will place shortcut for installed application on Desktop. STARTMENU_SHORTCUT Default value of "1", installer will create program menu group for installed application and their components. - HKLM\Software\Foxit Software\Foxit Update\Foxit Reader\. Looks like it lists available updates, possibly like HKCU\Software\Foxit Software\Foxit Reader\Updates, see http://forums.foxitsoftware.com/showthread.php?17154-check-for-updates-non-Admin - [WARNING] Seeing this error AGAIN in Firefox when trying to load a PDF: "FoxitReaderOCX.ocx failed to load.". All that had changed was Firefox was updated. What have I done previously to fix this? packages.xml has this commented out in case it's required: install cmd='regsvr32.exe /s "%PROGRAMFILES%\Foxit Software\Foxit Reader\plugins\FoxitReaderOCX.ocx"'. We didn't see this issue on our test upgrade Ghostscript 8.63 -> 9.04 No longer requires you to unzip to extract setupgs.exe which can be used silently, straight-up downloaded installer works with /S, as does the uninstaller GIMP 2.6.10 -> 2.6.11 gnupg 1.4.9 -> 1.4.11 InfraRecorder 0.5.0 - > 0.5.2 Inkscape 0.47-3 -> 0.48.1-2 irfanview 4.25 -> 4.32 irfanview plugins 4.25 -> 4.32 K-Lite Codec Pack (standard) 7.00 -> 7.9.0 Changed the pre-config options, resulting in new .ini file, also changed name of .ini to klcp_standard_unattended.ini [TODOCUMENT] klite-settings.ini changed to klcp_standard_unattended.ini Lightning 1.0 beta 2 -> 1.1 Download from http://releases.mozilla.org/pub/mozilla.org/calendar/lightning/releases/1.1/win32/ LibreOffice 3.4.4 replaces OpenOffice [TODOCUMENT] We've stopped including a transform file [TODOCUMENT] Renamed libreoffice-help-pack to libreoffice-help-pack-en-gb, including changing directory name http://lodahl.blogspot.com/2011/02/silent-installation-of-libreoffice-on.html http://webgnuru.com/networking/libreoffice_msi.php http://ausnerd.blogspot.com/2011/02/using-libreoffice-and-openoffice-33-in.html OpenOffice 3.2 uninstaller appeared to run, but it's still there Help is installed but still opens in web browser can TWEAK Unattended config be rolled into just the one .bat file? When did we save memory cache values in TWEAK? as some people may not have gotten that, as we may not have forced it through the logon script DOC this in openoffice.html - graphics cache's memory per object: 20MB; total graphics cache to use: 128MB **** Even worse than OpenOffice installing into an 'OpenOffice 3' program files directory, LibreOffice installs into 'LibreOffice 3.4' Document this for OpenOffice - http://wiki.services.openoffice.org/wiki/Documentation/How_Tos/Automatic_Installation_on_Windows#MSI_Properties Thunderbird mime types broken C:\Documents and Settings\winuser\Application Data\Thunderbird\Profiles\dyq6borp.default\mimeTypes.rdf /home/samba/profiles/siamak/Application Data/Thunderbird/Profiles/906l2s4r.default/mimeTypes.rdf [TODO] Can we even deploy it if people won't accept its slowness? [TODO] Turn on startup in background? swriter.exe - This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem. People say it's because it needs Microsoft Visual C++ Redistributable 2008. If I install this it works OK. MS VC 2005 is already installed on my test w/s, though this didn't come from go-oo, it runs fine without it. Microsoft Visual C++ 2008 Redistributable: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=29 LibreOffice includes Microsoft Visual C++ 2008 Redistributable in its 'redist' directory but isn't installing it http://user.services.openoffice.org/en/forum/viewtopic.php?f=15&t=33272 - "The version of the Visual C++ 2008 Redistributable required by OOo is included in the OOo installation package and should have been installed automatically in the WinSxS folder prior to the installation of OOo itself." - we shouldn't see it in Add/Remove Programs then? When LO installs the Visual C++ redist., should I always see an entry for it in Windows' Add/Remove Programs? or does it just quietly go into the WinSxS directory? I've seen it reported that OO.o 3.3 installs it such that it shows up there. LO probably incldues version 9.0.30729.4148 Mail Redirect 0.7.4-RCS-3 -> 0.7.6.8 Download from http://downloads.mozdev.org/mailredirect/ MyDefrag 4.3.1 - New MyODBC Connector 3.51.26 -> 3.51.28 Removed 5.1 uninstall lines Notepad++ 5.6.6 -> 5.9.6 Picasa 3.6.95 -> 3.9.135 (3.9.0 Build 135.80) Added taskkill on upgrade and install as Picasa opens when upgrade or install. [TODOCUMENT] Document this: Google Updater service HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe Added TWEAK Unattended google-updater-system-config.bat Added WPKG tweak-unattended-google-updater-system-config Added TWEAK picasa-user-config.bat Added Picasa to user-config-rcs-if-not-already-done.bat Pidgin 2.6.6 -> 2.10.1 offline installer Putty 0.60 -> 0.61 Recuva (Slim) 1.42.544 - new http://www.piriform.com/recuva/download/slim Added recuva-system-config.bat to disable updates Added tweak-unattended-recuva-system-config to disable updates Scribus 1.3.6 -> 1.4.0 Made Scribus depend on Ghostscript so that it definitely finds it ? Skype 5.5.0.124 / 5.5.32.124 - new Added: TWEAK Unattended skype-system-config.bat skype-user-config.bat profiles.xml tweak-unattended-skype-system-config packages.xml tweak-unattended-skype-system-config sun-jre 6.0 u26 -> 6.0 u30 Thunderbird 3.1.11 -> 9.0.1 Added new TWEAK Unattended config, run by WPKG, so that add-ons we install in the %PROGRAMFILES% directory aren't recommended to each person to be disabled, only their own add-ons receive such attention. ('Add-ons installed by third party programs are now disabled by default' - http://blog.mozilla.com/addons/2011/08/11/strengthening-user-control-of-add-ons/) [TODOCUMENT] https://wiki.mozilla.org/Releases#Thunderbird_8 Thunderbird 9 add-on compatabilities Enigmail - compatible Lightning - compatible Mail Redirect - compatible Dictionary - compatible Thunderbird En GB dictionary 1.19.1 [TODOCUMENT] Thunderbird doesn't come with any dictionary by default [TODOCUMENT] rename WPKG directory from thunderbird-dictionaries to thunderbird-and-firefox-dictionaries TightVNC 2.0.4 - TightVNC replaces UltraVNC [TODOCUMENT] document the copying of config file with correct password to %SOFTWARE%\tightvnc How can I hide the tray icon of my TightVNC Server? - Answer for TightVNC versions 1.x: To disable the tray icon, you should start the "regedit" utility from the command line, go to the HKEY_LOCAL_MACHINE\Software\ORL\WinVNC3\ folder, and create a DWORD parameter with the name "DisableTrayIcon" and the value "1". Then, after restarting TightVNC Server, the icon will not be shown anymore. But please note that hiding the icon is usually not a good idea. For example, if you want to restrict users from changing the server Properties, it might be better to use the AllowProperties setting. For more information, see the description of "AllowProperties", "AllowShutdown" and "AllowEditClients" options in the VNC documentation. How can I hide the tray icon of my TightVNC Server? - Answer for TightVNC versions 2.x: Open TightVNC configuration, choose Server tab, uncheck "Show icon in the notification area", press Ok. To show the icon again, use one of Control Interface or Offline Configuration shortcuts found under the TightVNC group under Start\All Programs. HKEY_LOCAL_MACHINE\Software\ORL\WinVNC3 HKEY_CURRENT_USER\Software\ORL\WinVNC3 Windows Firewall - it's already configured, per-machine, using TWEAK, for generic VNC Servers so doesn't need any attention now Installation choices - don't install TightVNC Viewer. With UltraVNC we do this using a .inf file %SOFTWARE%\tightvnc\SETTINGS.REG - password - disable tray MSE SETTINGS Added TWEAK Unattended mse-whitelist-tightvnc.bat Added WPKG tweak-unattended-mse-whitelist-tightvnc microsoft-security-essentials - changed dependency to tweak-unattended-mse-whitelist-tightvnc TWEAK 0.9.4.2 - New - [TODOCUMENT] Change RCS documentation to say to use TWEAK from %PROGRAMFILES%\TWEAK rather than from D: or E: Windows Media Player Firefox Plugin - just a packages.xml update Doesn't remove files so have added manual removal of files Changed to check for npdsplay.dll rather than 'WMP Firefox Plugin RelNotes.txt' [TODOCUMENT] This is the 'newer' plug-in Comes as wmpfirefoxplugin.exe which you unpack as /Q doesn't silently install http://kb.mozillazine.org/Windows_Media_Player Windows Media Player test page - http://hg.mozilla.org/qa/litmus-data/raw-file/tip/firefox/plugins/mediaplayer.html np-mswmp.dll Plugin-ins and files: Microsoft Windows Media Player Firefox Plugin 1.0.0.8 - np-mswmp.dll - this is what we install Windows Media Player Plug-in Dynamic Link Library 3.2.2.629 - npdsplay.dll - this is provided by Windows Media Player - %PROGRAMFILES%\\Windows Media Player\ Microsoft® DRM (File name: npdrmv2.dll and File name: npwmsdrm.dll) http://blogs.technet.com/b/port25/archive/2007/04/16/windows-media-player-plug-in-for-firefox.aspx http://www.interoperabilitybridges.com/windows-media-player-firefox-plugin-download Doesn't show up in Add/Remove Programs WinSCP 4.1.9 -> 4.3.6 WPKG Client 1.3.9 -> 1.3.14 RELEASE NOTES: Now picks up settings.xml from WPKG directory, so that file will need to contain correct settings zotero 1.0.10 -> 2.1.10 Zotero OpenOffice Plugin 3.0a7 -> 3.5b2 Zotero prompts for OpenOffice installation directory when first fire up firefox, using a dialog that doesn't see C: SERVER ------ TWEAK Unattended 0.9.7 WPKG 1.1.2 -> 1.3.0 [TODOCUMENT] netlogon.txt addition to netlogon.bat - RCS 4.0 logon script addition to do any newly required user config. Any clients who've had this for testing will need %USERPROFILE%\RCS4-CONFIG-DONE deleting in advance. :: RCS 4.0 :: Delete this user's shortcuts then re-create them :: (though this will be run anyway as we've changed the .log filename) if not exist "%USERPROFILE%\RCS4-CONFIG-DONE" del "%USERPROFILE%\tweak-log\shortcuts-refresh-user-suite.log" :: Foxit Reader user config - additionally 'disable the welcome dialog' and re-do 'disable auto updates' for 5.0/5.1 (though I don't think Foxit Enterprise Reader nags anyway) if not exist "%USERPROFILE%\RCS4-CONFIG-DONE" del "%USERPROFILE%\tweak-log\foxit-reader-user-config.log" :: Create an RCS4 indicator directory so that this config isn't performed again if not exist "%USERPROFILE%\RCS4-CONFIG-DONE" mkdir "%USERPROFILE%\RCS4-CONFIG-DONE" [TODO] Server upgrade to Debian Squeeze. A major server upgrade has always accompanied major RCS upgrades (RCS 1, Windows NT4) -> RCS 2, Debian Sarge -> 3, Debian Etch) [TODO] Mail server major upgrade FIREWALL -------- - pfSense 2.0, major upgrade - can be upgraded, though we'll be doing new installs - import CA from TinyCA OTHER ----- - Renamed remove-per-machine-shortcuts to shortcuts-remove-system-wide. Incl. changed log file name to shortcuts-remove-system-wide.log - Renamed refresh-user-shortcuts.bat to shortcuts-refresh-user-suite.bat Incl. changed log file name to shortcuts-refresh-user-suite.log - Added tweak-unattended-windows-config-domain -> windows-config-domain.bat - Added removal of Windows profile when people logout, via tweak-unattended-windows-config-domain - Added tweak-unattended-firefox-system-config - Removed tweak-unattended-thunderbird-system-config-disable-updates and tweak-unattended-thunderbird-system-config-disable-sync as merged with main Thunderbird config DOCUMENTATION ------------- - No longer need to disable JRE updater using TWEAK: B → J → B so remove that from the documentation [WARNING] - for packages.xml changelog: Priorities - instead standardise on a more extensible system: 0 f-prot (defunct, legacy) 1 tweak-unattended-remove-per-machine-shortcuts 5 wpkg-client 10 tweak-unattended-zotero-system-config 20 DEFAULT FOR ALL APPS 30 tightvnc 40 sun-jre - ClearType will never work if we set flat panel monitor resolution to anything but native: http://en.wikipedia.org/wiki/ClearType#Display_requirements Final RCS 3.6.x tidyup before RCS 4.0 ------------------------------------- ? Issues upgrading in-production 3.6 -> 4.0 [TODO] ----------------------------------------- - OpenOffice -> LibreOffice help pack fails on first run, goes in on second - file type assoc are hosed - no LibreOffice in suggested apps other than Calc TESTING [TODO] ------- - test uninstalling apps Pidgin OTR - Are you sure you want to completely remove ... and all of its components? Putty still talks about removing certs or something oggcodecs we know about Picasa - Could not process (remove) Picasa. Package still installed. uninstall.exe ran OK - test apps ================================================================================================================== RCS 4.0.1 and 4.1 ================================================================================================================== - Skype - from WPKG page: "When using the MSI installer, you will get an MSI error 1638 [Another version of this product is already installed. Installation of this version cannot continue] when doing a minor version upgrade (say from 5.0.152 to 5.0.156)". If this does still happen and we encounter it with the next upgrade then we can alter our packaging accordingly to uninstall the existing version beforehand, see WPKG page - Foxit Reader Add-ons - There are addons required to display PDFs with some features, that Reader downloads from the web server, and instead you can pre-equip yours with all of them, otherwise Foxit prompts you to install them when a PDF requires them. http://www.foxitsoftware.com/Secure_PDF_Reader/addons.php - JPEG2000/JBIG Decoder, Eastern Asian Language Support, JavaScript Support, Foxit Toolbar for browser, Firefox Plugins, Spell Checker) Are these located in %PROGRAMFILES%\Foxit Software\Foxit Reader\plugins? There's no UI for displaying installed addons Installed addons appear to be described in Updaterinfo.xml in the program files directory, where I can see Spell checker 2.0.0.0501 where as the Addons page lists 2.0.0.0502; and Firefox plugin 2.1.1.720 where as the Addons page lists version 2.0.0.0524. How can the .fzip files be installed into Foxit Enterprise Reader as it doesn't have 'Help > Install Updates > browse' and I don;t know how to unzip them manually. Does the JavaScript addon expand the security vulnerability vector? - [TODO] - JavaScript Support (more like _additional_ JavaScript support) - javascript_xxx.fzip - when try to install it you get 2 dialogs from Windows saying "You are attempting to open a file of type 'Application Extension' (.dll)" and Foxit Reader in the background saying "Process Finished, please press 'Done' button to close the window.". If you choose 'Open with...' on the Windows dialog, you get "Windows cannot open this file: File: Foxit_JS_ExObjects.dll"; If I choose 'Use the web service to find the appropriate program" it offers to download Foxit Reader! If you "Select the program from a list" and choose Foxit Reader then it goes away, but there's no mention of javascript in UpdaterInfo.xml and I can't see any added files - Eastern Asian Language Support - fpdfcjk_xxx.fzip - it's already installed in Foxit Reader (fpdfcjk.bin in Foxit Reader directory and it's mentioned in UpdaterInfo.xml) so you're only installing it for an upgrade or downgrade). Installs OK into 'lex' subdirectory, which is a different location to the bundled version - same issue as JavaScript add-on - JPEG2000/JBIG Decoder - ImageDecoder_xxx.fzip - supposedly the DLL is called fxdecod1.dll - appears to install OK, but to where? No sight of it; no mention of it in UpdaterInfo.xml. Next time I run it it behaves the same as the JavaScript add-on - Firefox - removing one of the prefs for add-on updates - https://bugzilla.mozilla.org/show_bug.cgi?id=701987 - MyDefrag - add scheduled scans. When it tries to add schedules for daily and weekly: "The task will be created under current logged-on user name ("OPENPLANIT\OPENPLANIT-1"). Please enter the run as password for OPENPLANIT\OPENPLANIT-1:" "Administrators can create tasks from the commandline with the Windows "schtasks" command." schtasks /Create /RU "SYSTEM" ... - oggcodecs 0.71.0946 -> 0.85.17777 [TODO-4.1] NOT CURRENTLY INCLUDED Directshow Filters for Ogg Vorbis, Speex, Theora, FLAC, and WebM http://www.xiph.org/dshow/ Changelog: http://www.xiph.org/dshow/news/ "Before installation follow these steps: Uninstall any previous version of these filters. (This is important!)" Fixed installer for previous version (/s rather than /silent) but it still isn't silent I think we still need this as the list of what it covers at isn't all covered by the list for K-Lite at http://www.codecs.com/download/K_Lite_Codec_Pack.htm [TODO-4.1] we need to find a way to uninstall this so we can install the updated version The newer version installs to Xiph.org/Open Codecs/ with uninst.exe - gnupg / gpg4win 2.0 We would have changed to gpg4win 2.1.0.1641 but: Error: StartService: ec=1-56 Reboots. Even the GUI installer does an immediate unprompted reboot after installation. The uninstaller gives you a choice about rebooting now or later. I'm waiting on a reply at http://wald.intevation.org/forum/forum.php?forum_id=21 - gimp help 2 2.6.0 - we already have this version installed "Note: GIMP 2.6 on Windows does not include the Help Browser plug-in, instead your web browser is used to display the help. You may need to go to GIMP's Preferences, click on "Help System" and select "Web browser" under "Help Browser". " TWEAK - remove Browser Choice shortcut - file type association - .ogg - 'Edit in Audacity' is the default treatment - need to set 'Open in Windows Media Player' (done on **** workstation manually using an edited TWEAK) - remove Ogg Codec Pack - new version is so different it NEEDS previous version uninstalling first, but we can't remove it silently I thought I'd found it covers some Ogg format(s) that aren't covered by other software, which is why it's worth keeping, but still we'd want to upgrade it - Thunderbird - should we use lockPref? - ? Thunderbird mailing list manager? - https://addons.mozilla.org/en-US/thunderbird/addon/125953/ - ? Malwarebytes Anti-Malware? - ? add Ext2read (http://ext2read.blogspot.com/) or Ext2IFS (http://www.fs-driver.org/)? - ? add SyncKolab for syncing contacts? - ? Add Foxit Reader Eastern Asian Language Support add-on? - http://www.foxitsoftware.com/Secure_PDF_Reader/addons.php - audio / My Music, images / My Pictures and video / My Videos both exist on H: - From RCS3.6 - Zotero system config goes in when run on its own but not when chained from within WPKG, despite success in the log 'tweak unattended zotero system config' runs because its check file isn't there, and fails because zotero not there 'zotero' runs and it says it's installing chained packages but doesn't run 'tweak unattended zotero system config' (is this anything to do with already having tried it? if so, is that a bug in WPKG?). If I leave in the 'tweak unattended zotero system config' check file and so it runs sucessfully, 'zotero' still doesn't run it. instead of chaining, we could have them each run but with 'tweak unattended zotero system config' having a lower priority. Just changing 'tweak unattended zotero system config' priority to 2, lower, changes nothing - so what controls when it runs? In order to get it to work I had to do this workaround: 'tweak unattended zotero system config' - revision 9 - changed priority of 'tweak unattended zotero system config' to 2 so lower than 'zotero' 'zotero' - revision 8 - removed chain on 'tweak unattended zotero system config' - JRE deployment.config - http://www.google.co.uk/search?q=deployment.config Default system cache is wrong location, and system apps and resources cannot be deleted - http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6880411 ? incorporate Matt's new fixes for TWEAK and TWEAK unattended - without copying binaries package the binaries with WPKG make aliases / shortcuts to the binaries in each user's Zotero directory http://forums.zotero.org/discussion/7756/manually-installing-pdf-indexing-binaries/ http://msdn.microsoft.com/en-us/library/ms682057%28v=vs.85%29.aspx http://www.pctools.com/guides/registry/detail/111/ - all system-wide config currently manually applied using TWEAK, move to WPKG using TWEAK (Unattended) A - System file clean-up B - Use D: for temp system files, prepare E: for data C - Configure Windows system behaviour and interface D - Tighten security E - Replace boot loader O - Add branding P → * O - Domain / Roaming Computing System (RCS) settings * O2 - Domain / Roaming Computing System (RCS) settings Windows Firewall configuration: TWEAK: K → A (Allow ICMP echo request (ping)) Enigmail - TWEAK: B → T → E FileZilla - TWEAK: B → FZ → A Firefox - TWEAK: B → F → A2, B, F Flash Player - TWEAK: B → FP → A Irfanview - TWEAK: B → I → A Thunderbird - TWEAK: B → T → A, B ? File Type Associations - TWEAK: I → * OOO - Office suite files Open in OpenOffice * WEM - Web files Edit in KompoZer * IEG - Image files Edit in The GIMP 2.6 * AEAU - Audio files Edit in Audacity * PON - plain text files open in Notepad++ * PEN - plain text files to Edit in Notepad++ (those you wouldn't Open) * AO7 - Archive files (i.e. .Zip) Open in 7-Zip and ISO Edit in 7-Zip * IOIR - ISO disc images to open in InfraRecorder for writing to disc Default Programs - TWEAK: G → * A - Set Firefox as default web browser / web protocol handler for this machine * B - Set Thunderbird as default mail client / mail handler for this machine ================================================================================================================== MISC TODO ITEMS - SORT THESE AT SOME POINT INTO OTHER SECTIONS BELOW ================================================================================================================== Exactly. There has been quite some discussion about this feature in the past and it can be disabled with /noUpgradeBeforeRemove. The rationale behind this feature is that this way the admin gets a chance to fix e.g. broken remove commands by bumping the revision which ensures the package is up to date locally before running its remove commands. In fact, to only fix removal, you could publish an upgraded revision with no upgrade commands at all, so the upgrade will merely feed the updated removal instructions into the client's local database. - an upgrade to Squirrelmail web mail http://roundcube.net/ http://www.horde.org/ - ? add SyncKolab 1.5.1 for Thunderbird shared address books, mailing lists, calendar and tasks (requires minimum of Debian Etch on server) - From RCS3.6 - check on MSE whitelisting after upgrade - http://wpkg.org/Package_dependencies implies the package will run despite it already being installed, where as if it's installed it's skipped. My check is on %SYSTEMDRIVE%\tweak-log\mse-whitelist-ultravnc.log rather than checking the registry key which I might have to do instead. I'll set it to 'registry' and come back to why the chain isnt compulsary, but that needs a new batch file creating as 'registry' can't use '\'. - Add my Zotero OpenOffice plugin documentation to http://www.zotero.org/support/word_processor_plugin_troubleshooting#incompatible_plugin and http://www.youtube.com/watch?v=u32dNT3j9OM - TWEAK Unattended - inkscape QL shortcuts fixed - what put it there? - documentation update - workstation install guide - printing to those on print servers, incl. those with their own built-in print server - ADDITIONALLY, instead of right-clicking and choosing connect, use add printer wizard as administrator, choose network printer, connect to this printer \\colour-laser\... - Thunderbird - mailnews.offline_sync_mail? - checkout Active Setup - http://en.wikipedia.org/wiki/Active_Setup - system restore points cleanmgr - Click on the More Options tab and look at the bottom button in the System Restore area. You can delete all but the most recent System Restore point there. - there is a "clean up" button on the "more options" tab to remove all but the newest restore point. - Control Panel/System/System Restore tab, go to settings and reduce the amount of space allotted to System Restore. This will remove older restore points, how many depends on how much space you require for a point, and how much space you leave. - XP will dedicate 10-12% of the disk's size to restore points and with newer hard drives so large, most folks knock this amount down. - Use Disk Cleanup (Start> Accessories> Disk Cleanup) to remove all but the most current restore point. - You can (and probably should) dedicate less space to Restore points than the default of 12% of your drive, but *don't* periodically delete them. - http://wpkg.org/Printer_drivers If you need to add a Printer using an IP Port you have to create the Port first. I did it under WinXP with the build in prnport.vbs. Create a Batch file and run this, to install a Brother HL-2150N connected to the Port ExamplePortName behind the IP ExampleIP (RAW Mode Port 9100). cscript %WINDIR%\system32\prnport.vbs -a -r ExamplePortName -h ExampleIP -o raw -n 9100 rundll32 PrintUI.dll,PrintUIEntry /if /b "Brother HL-2150N" /f "%SOFTWARE%\BrotherHL2150N\BROHL07A.INF" /m "Brother HL-2150N series" /r "ExamplePortName" - "%USERPROFILE%\tweak-log\openoffice3-backup-profile.log" - create a WPKG package for tweak-unattended? Or de-couple logon script command from tweak-unattended and create a WPKG package for that, plus a new package for each RCS as required? - clamav in lenny segfaults after freshclam update - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525483 - videodownloadhelper's prefs-dwhelper.js - not in Windows format - should Zotero WPKG check item be on the log file or zotero-custom.js? - http://kb.mozillazine.org/Windows_Media_Player - Add to 'Zotero PDF indexing' page: manually installing PDF indexing binaries: http://forums.zotero.org/discussion/7756/manually-installing-pdf-indexing-binaries/#Comment_35221 - Note that if Firefox is updated from within the app, 3.5 to 3.5.1, then in Add/Remove Programs it remains 3.5. Where as a fresh install over the top leaves us with just 3.5.1 in Add/Remove Programs. - Note that WPKG does an install rather than an upgrade if it's checking for Firefox 3.5.1 and Firefox 3.5 is installed. The next WPKG will fix this. - For RCS 3.4 chagelog / release notes: - Changes so that we don't need to go round each machine or login as each user for the upgrade, making upgrades vastly more efficient TWEAK WPKG package(s): - Windows Config - test this before continuing. Does ver work? - Windows Config - RCS settings - App Config - one package for all apps? a package for each app? - a general package for all TWEAK config, or a (perhaps introductory) RCS 3.4-specific config? - newly installed apps' shortcuts / shortcut removal - consider VB etc logon script: - openoffice shortcuts replaced - gimp shortcuts replaced - renaming %USERPROFILE%\My Documents - any new openoffice config - check JRE installing OK - it isn't on LR upgrade "Invalid Patch File 'C:\PROGRA~1\Java\JRE16~1.0_0\..\patch-1.6.0_07-b06.rtp" - we were in fact installing pidgin 2.4.3 not 2.4.1 - RCS 3.2? - Documentation update for Workstation Setup guide: - ext2 IFS - WAU reboot fix - ultraVNC password - Windows arabic and other language support - defragment - RCS 3.4 ISSUES - add to rel notes that windows update reboot suppression has not been working - TWEAK 0.9.4.2 - WAU no reboot - tweak-unattended 0.9.4.2 - Microsoft Update and Windows Genuine Advantage - WGA 1.9.0040.0 / 1.9.40.0 - it seems to have changed so we now have to take WGA rather than first being allowed to install updates thru Microsoft Update http://en.wikipedia.org/wiki/Talk:Windows_Genuine_Advantage http://blogs.msdn.com/wga/archive/2009/03/24/update-to-wga-notifications-for-windows-xp-pro.aspx - worthwhile Thunderbird refs: http://kb.mozillazine.org/Configuration_utilities_for_administrators http://wpkg.org/Thunderbird#Using_thunderbird_autoconfig http://0daynews.org/2009/12/mozilla-thunderbird-3-meets-cantankerous-old-man/ http://kb.mozillazine.org/Profile_folder_-_Thunderbird - remove disabled accounts: SUPPORT_ [are these Windows accounts?] - Standardising files in \\server\windows-admin\tools - a place for tools for network admin - TWEAK - jkdefrag - some Sysinternals tools - recuva - Document files in \\server\windows-admin\wpkg\tools - a place for tools for WPKG - unzip - though if we standardise our XPI mechanism we may not need unzip.exe - dependent files for Windows Configuration - where are they gonna go? if they're run from server (%SOFTWARE%\tools\dtreg.exe) there might be issues when running executables (tho maybe not) from there if run locally, we'll put them in %PROGRAMFILES%\utils, is it an issue that we can't run our WPKG system then in a computer that hasn't had the corresponding TWEAK setting to add that directory to the path? An advantage of running them from the path is that TWEAK is more easily ported because the .exes don't need prepending with the server location - WPKG package or packages to copy tools to wpkg\tools. Include TWEAK .exe's Associate.exe dtreg.exe perl.exe SetACL.exe SetEnv.exe - flash config needs - what's its context, for copying from a directory?

OpenOffice Extensions

  • Sun PDF import 0.3.2
  • Professional Template Pack I - English 1.0
  • Professional Template Pack II - English 1.0
- TWEAK 0.9.4's Picasa 2 disable auto update - how does it work with Picasa 3? - did we change thunderbird dictionaries from original upstream version to Mozilla repackaged version? - where should we call TWEAK per-user config from? currently \\server\windows-admin\tweak-unattended \\server\windows-admin\tweak\user-config? \\server\windows-admin\tweak\machine-config? - change CMD to %COMSPEC% - Picasa 2 still in Add/Remove Programs - error when removing manually, saying it's likely uninstalled anyway - Scribus 1.3.3.11 still in Add/Remove Programs - matrices of file type associations - add - Windows Configuration - 'L' and 'P -> P' - leaving the My Documents directory in the user's profile when we change its location is confusing because if the user goes to %USERPROFILE% they see this My Documents directory that isn't their My Documents directory. Some apps mistakenly open their file open/save dialog in %USERPROFILE% rather than ?????%MYDOCUMENTS%????? (current version of Inkscape), presenting this very situation - WPKG script setting Firefox and Thunderbird as defaults (can be done per-machine), also file type associations for any programs that needs us to set it - what do our current file type associations look like? - ooSetupInstCompleted defines whether or not the OpenOffice profile gets created or not. It doesn't inspire a UI dialog, that's FirstStartWizardCompleted - JRE - does this still work: Disable JRE updater [1.5.0u6/9? - 1.6 / 6.0 series] - Update - [] Check for Updates Automatically is turned _ON_ - what does it normally say on an RCS 3.3 workstation? JRE - How does winadmin's EnableAutoUpdateCheck work? is it never going to prompt unless you're an admin user, because this setting only exists for the person who installed it? JRE - Has the install string changed? We currently use jre-6u7-windows-i586-p.exe /s IEXPLORER=1 MOZILLA=1 ADDLOCAL=ALL REBOOT=Suppress JAVAUPDATE=0 JU=0 AUTOUPDATECHECK=0 JRE - Document that Limited users don't get to see the JRE Control Panel 'Update' tab. JRE - JRE 6 adds the Java Quick Starter Firefox add-on. It can be changed using Control Panel - Java - Advancved - Miscellaneous - [] Java Quick Starter - broken uninstallers: OpenOffice Picasa gives does uninstall but gives a "non-successful value: undefined" Java uninstaller F-prot - JRE - tell WPKG page it removes old versions Frequently Asked Questions (FAQ) http://java.sun.com/javase/6/6u10faq.jsp Introducing Java SE 6 update 10 http://java.sun.com/developer/technicalArticles/javase/java6u10/ Update Release Notes http://java.sun.com/javase/6/webnotes/6u10.html wpkg page has an additional registry setting to TWEAK WPKG page claims 'SELECT_WORD=1 SELECT_EXCEL=1 SELECT_POWERPOINT=1' doesn't work with 3.0 - RCS 3.4 Release Notes - ooo3 reconfig from us will wipe out user config - or does it? - does our openoffice 2 pre complete start wizard not work for 2.4.1? - ccleaner Options → Settings → [] Add "Run CCleaner" option to Recycle Bin context menu [] Automatically check for updates to CCleaner (is this a Release Notes issue for prior RCS versions?) - instructions or code to turn off auto update - eraser - doesn't respect 'eraser' being removed from HKLM/Run - shorten server name in smb.conf - Windows Media Player - turn off visualisations - file type associations aren't set for ogg and theora, despite: - ran as admin asks what media types to open with it, need to select all to get some worthwhile types - scribus defaults to opening from profile directory not My documents. You then go into My Documents and it's not the right My Documents. For now recommend people use H:. We've made this less severe by TWEAK 0.9.4 renaming that old My Documents directory. It's set in File - Preferences - General - Paths - Documents - C:/Documents and Settings/ - AddBlock Plus 1.0 - upgrade from 0.7 didn't say the upgrade had happened and ask to re-subscribe - should we use the official firefox.exe install machanism? - if you drag & drop from the desktop to My Documents it copies, not moves - the recycle bin right-click menu is overloaded with eraser options (not an RCS issue) - Windows explorer directory view not updated automatically after changes - 'target' shortcut, not from S:, but if you navigate to network places by other means - TWEAK creates D:infrarecorder, netlogon.bat creates D:nero. what does infrarecorder use? Windows' temp? - GIMP Help missing (fails checking for 1.png) - fixed. should we fix for earlier versions? - now when running Firefox it mentions new add-ons 'adblock plus'? and 'Java Quick Starter' ================================================================================================================== ================================================================================================================== RCS WORKSTATION ISSUES AND IDEAS ================================================================================================================== - WAU - prevent reboot - Look here, there's an 'updatesdisablenotify': HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center - an NTP server chosen and firewall rules set accordingly - picasa auto update prompt issue - disable per-person? - Display Properties -> Desktop -> Customize Desktop - [] Run Desktop Cleanup Wizard every 60 days - user guide addition - resolutions are fixed on monitors so instead change text and icon sizes - menu text - Windows - toolbar icons - openoffice - ? - firefox - ? - tweak-unattended is split into two directories in packages.xml 1.5.0 yet tweak-unattended.zip download doesn't mention this how easy is it to change packages.xml? '%SOFTWARE%\tweak-wpkg' to '\\server\windows-admin\tweak-unattended\' - picasa - shared folder: http://www.paraesthesia.com/archive/2008/01/04/multi-user-picasa.aspx - picasa defaults to auto update. if you run it as an admin then it auto updates before you can even reach the 'no updates' option! - jre - at least when logged in as winadmin, prompts for update to update 13 - JavaFX EULA - Accept -> Yahoo! Toolbar for Firefox/Mozilla. it shouldn't be prompting; it shouldn't be offering Yahoo! toolbar; WPKG then re-installs the previous version - should we not be turning off JRE updater now that it's better than it was? dtreg -quiet -Set REG_DWORD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy\EnableAutoUpdateCheck" = "0" dtreg -quiet -Set REG_DWORD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy\NotifyInstall" = "0" dtreg -quiet -Set REG_DWORD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy\UpdateSchedule" = "0" :: Note that these are reset to '1' when the Java Control Panel applet is run dtreg -quiet -Set REG_DWORD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy\Frequency" = "0" dtreg -quiet -Set REG_DWORD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy\NotifyDownload" = "0" - netlogon.bat - can this be replaced by a while/for so IF NOT EXIST only called once? - Delete old Startup/OpenOffice shortcuts - Note that extension prefs in Firefox directory over-ride those in extension directory, so we put ours there so they're not lost on extension upgrade - timetabled workstation admin - ccleaner - windows update file removal - defrag - Enable/Disable ClearType - http://wpkg.org/Enable/Disable_ClearType - disable guest account: net user Guest /active:no' /> net user Support_388945a0 /active:no' /> net user Pomocnik /active:no' /> - set a user password: net user administrator password - netsh firewall set service fileandprint enable - netsh firewall set service remoteadmin disable - Printer configuration - http://wpkg.org/Printer_configuration - remove Irfanview in favour of just having Picasa. Consult with users first. - we still have a SoundMax folder in start menu - Matt - start - programs - documentation - link to Open Plan IT RCS Admin/user guides? - Matt - 7-Zip - Also when saving from Firefox. Save or Open [Compressed folder] - should this not open in 7-zip file manager - shouldn't 7-zip be doing this itself? - Matt - 7-Zip - Should we change the send to -> compressed folder to point to 7zip or just delete it? - shouldn't 7-zip be doing this itself? - Matt - Frog Aspi http://www.frogaspi.org/download.htm#frogrights - Mozilla Wiki http://wiki.mozilla.org/Main_Page - Add logging to package installers ultravnc /log misexec: /log C:\log.txt How to enable Windows Installer logging - http://support.microsoft.com/kb/223300 - Running this line will remove messenger: RunDll32 advpack.dll,LaunchINFSection %windir%\inf\msmsgs.inf,BLC.Remove - add video editing software?: http://en.wikipedia.org/wiki/List_of_video_editing_software#Free_.2F_Open_Source_Software - Windows firewall possibly blocks FileZilla - thunderbird -install-global-extension - IT DOESN'T UPGRADE! gives me {}--trash with an empty \chrome %PROGRAMFILES%\thunderbird.exe -install-global-extension - %SOFTWARE%\lightning\lightning.xpi - add flashblock? - RCS 3.3 Release Notes - workstations - "Windows XP SP3 - you possibly have to login again after SP3, as an administrator, for some of the installation to finish" - RCS - we should always setup printers DHCP - Windows Automatic Updates are causing workstations to reboot again, this is supposed to be suppressed, did anything change in Windows XP SP3? - http://mozbackup.jasnapaka.com/ - Windows recovery console installer is broken. i386\winnt32.exe doesn;t exist on the CD I have. - archive RCS's with clonezilla so can do upgrade tests - rather than lower admin's IE security for ms update, script the adding of their sites to trusted zone - add GCALDaemon? - sun-jre - add 5.0 update 10 uninstall and any other RCS JREs we've installed - RCS 3.1 to 3.2 issue - Pidgin's GTK+ upgrade isn't silent, complains about overwriting older version. Fixed in forthcoming Pidgin 2.5 - it's not tho is it? - Ext2 Installable File System For Windows? http://www.fs-driver.org/relnotes.html - TWEAK up to 0.9.0 RC7 is good for RCS 3.0/3.1 but the Irfanview/GIMP setting won't work from 0.9.0 onwards Where-as RCS 3.2/3.2 are broken WRT Irfanview/GIMP - we turn off updates of firefox and thunderbird 'Installed Extensions and Themes' and 'Search Engines'. But Debian doesn't. This is good for system-wide Add-ons but bad for user-installed Add-ons. We have a collision there between those we've installed and those the user might've installed. - how do we stop filezilla and notepad++ from auto update checking PER MACHINE? - Filezilla bugs you about updating the program when you run it. Solution: Edit → Settings → Update Check → Enable automatic update check - off. In future we need to turn this off automatically in %APPDATA%\FileZilla\filezilla.xml, changing 1 to 0, or do so in a per-machine fashion if possible - Notepad++ bugs you about updating the program when you run it. Solution: for each user choose Settings → Preferences... → MISC → 'Enable Notepad++ auto-updater' - off. Or do so in a per-machine fashion if possible - add this to the workstation installation guide - maybe we should start documenting what goes in the tools directory - note somewhere that thunderbird UK dictionary doesn't show up in Add-ons -> Languages also note for RCS 3.2 how to sort it out - Adobe Reader - RCS3.2 one of the 3 things we were manually changing isn't coming in thru automated config, tho the other 2 now are when they weren't in RCS 3.2 - we'll need to add netlogon.bat removal of Adobe Reader shortcut - Firefox - adds a QuickLaunch shortcut - WPKG Execute once / always - http://wpkg.org/Execute_once_/_always - kompozer - why does 'install' do 'cmd /c "xcopy /e /y /q %SOFTWARE%\kompozer\0710 "%PROGRAMFILES%\KompoZer""' where upgrade does 'cmd /c "%SOFTWARE%\kompozer\kompozer.bat"'? - ccleaner 2.0.9 [packages.xml says /204'] is actually a part of RCS 3.2 but there's no shortcuts for it and no mention in index.html - flash player - install - doesn't prevent it from working, but: "installed but checks failed. reinstalling." - note that picasa install directory is version specific - do we know that filezilla requires a restart? - OOo custom spellcheck - http://user.services.openoffice.org/en/forum/viewtopic.php?f=74&t=67 - maybe we shouldn't remove shortcuts thru app installers, saving it for a batch file we always run, so that we can use our WPKG for other situations. - are there any issues with older OpenOffice versions reading newer ODF files? ODF 1.0 - OpenOffice 1.0 - 2.3 ODF 1.1 - OpenOffice 2.4 ODF 1.2 - OpenOffice 3.0 - gimp-2.4.exe, gimp-2.2.exe - GNOME Bug 545260 - Join microsoft Update at www.update.microsoft.com/microsoftupdate/ Needs ActiveX scripting enabled Thunderbird config - per-account - Composition & Addressing - Compose messages in HTML format - off Windows Explorer - View - Details - View - Use simple file sharing - off. You can turn it off as a regular user but it won't be remembered, instead you have to do it with elevated priviligies per-machine. why isn't WINS working for VPN? (or is it Linux in general WINS isn't working for?) - OpenOfice auto update - may want to document it. its off by default - Tools - Options - OpenOffice.org - Online Update WHAT REQUIRES CSCRIPT: WPKG; RefsBase (wscript or cscript?) are thunderbird addons visible or not to normal users? yes find psshutdown script sun jre update 5 XPI issue Obsolete XPIs and replace them with new jinstall.exe to cover Java Stat's xpi and jxpi metrics. http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6637304 thunderbird local folder mbox format to our server's maildir: http://nic-nac-project.de/~kaosmos/mboximport-en.html THIS EXPORTS TO MAILDIR! need toi instead consider mbox to maildir script thunderbird won't drag sub-folders from Local Folders to SERVER but Outlook will scribus - choose save - "Error - Could not read directory - C:/Documents and Settings/winadmin.OPENPLANIT" - this directory doesn't exist - is this an issue for regular users? TWEAK used to do this, which we might still want to do on occasion: del "%ALLUSERSPROFILE%\Start Menu\New Office Document.lnk" del "%ALLUSERSPROFILE%\Start Menu\Open Office Document.lnk" -* Create cache location in NETLOGON.BAT for GIMP for everyone and documentation need to configure GIMP tp use it - OOo should be using H:\templates and S:\templates "The Template Management system, incidentally, is another quirk. It's a virtual directory created from the paths set in Tools -> Options -> OpenOffice.org -> Paths -> Templates. The default paths include a general path for a single- or multiple-user installation, plus a path for the individual user. You can navigate the virtual directory freely, but you cannot move outside it while inside the Template Management window. If you want a directory for sharing templates on a multiple-user system, either change the permissions on the general path so all users can write to it or add a public directory to the paths." * when run adobe reader says 'Accessibility Setup Assistant' First, we would like to know what assistive technology you are using. This will let us tailor the following options. - Set options for screen readers - Set options for screen magnifiers - Set all accessibility options 'Use recommended settings and skip setup' -> Next * Adobe Reader 8.1.1 -> You must restart your system for the configuration changes made to Adobe Reader 8.1. to take effect. Click Yes to restart now or No if you plan to restart later. -> No Open Plan IT RCS should have its own oeminfo.ini, oemlogo.bmp issue on Matt's but not mine: remove workstation from existing domain turn off domain controller join new domain when try to choose domain get popup window with '...' only dioepellable with ctrl+alt+del we pulled pagedefrag because it crashes WPKG - RCS bug fix - should we set thunderbird's Local Folders to H:\mail as a precaution? user_pref("mail.server.server1.directory", "/home/p/.mozilla-thunderbird/t8wc1xzz.default/Mail/Local Folders"); user_pref("mail.server.server1.directory", "H:\\Mail\\Local Folders"); user_pref("mail.server.server1.directory-rel", "[ProfD]Mail/Local Folders"); Windows version has ../../../../../../../../E:/p/mail - disable Windows XP remote assistance Firewall hole? - Filezilla saves settings by default to somewhere can't save, but they're remembered whilst logged in - when "ugrading scribus" second command windows opens "C:\Program Files\Scribus\uninst.exe /S". Only when I close this window am I able to proceed, with the uninstallation - is this now fixed? - InfraRecorder - whole range of issues; cache location [I think it sets the cache automatically to the correct location, %TEMP%] - is JRE updater being turned off automatically or do we need to do it manually? - add file type associations for Infrarecorder, Irfanview - do we need to add printers on a per machine basis as well as per user? in case no users have added one on this worksttion, cos this is a per-machine setting that users can make - .NET configured in IE? - can we set thunderbird SMTP with a pref() setting for all users? and plain text emails, for additional accounts - Quickbooks claims it requires Internet and local intranet security levels reducing - Possible rethinking of Start -> programs, to improve discoverability. - Junk mail settings in Thunderbird - WPKG log: D:\windows\wpkg-.log - winscp compared with filezilla - do we want both or is that confusing? WinSCP has use of private key file, can't see this in Filezilla WinSCP has a better interface winscp has synchronisation WinSCP has PuTTY integration - 'open in putty' winscp allows to create a new file and edit it filezilla has you choose a port number rather than a service description like 'SSH' WinSCP has setuid/setguid and octal whereas filezill has just octal winscp has 'send to' context menu integration - What if someone sends me an Access db? get them to save it in a different form, such as can be read with the MS Access Snapshot Viewer: Here's how: http://office.microsoft.com/en-us/access/HA102063201033.aspx Viewer downloadable from: http://www.microsoft.com/downloads/details.aspx?FamilyID=b73df33f-6d74-423d-8274-8b7e6313edfb&displaylang=en (I think when people send such things in email they should be more considerate and first ask what format you can handle, or send in the least common denominator that solves what they want to achieve) ----------------------------------------------------------------------------------------- Thunderbird complains about text not encoded in UTF-8 ----------------------------------------------------------------------------------------- Thunderbird says this because characters that aren't readable by everyone you might send to are being used. For example curley quotes rather than straight quotes. This is fair enough when you've written the email yourself and can just choose not to use such characters, but Thunderbird hassles you when someone else has used them and you're replying to their message; or if you've got them in your signature. Tools -> Options -> Display -> Formatting -> Fonts & Encodings -> Fonts -> Character Encodings - Outgoing Mail - change 'Western (ISO-8859-1)' to 'Unicode (UTF-8)' - Incoming Mail - change 'Western (ISO-8859-1)' to 'Unicode (UTF-8)' replies are sent in the same encoding as what you're replying to: ? mailnews.reply_in_default_charset (default=false to reply in the same as the sender) Then you can set up a fallback charset of UTF-8 so that, if you happen to use a character outside of the chosen charset, it will automatically switch to UTF-8 without prompting. You do this by adding a (string) preference such as intl.fallbackCharsetList.ISO-8859-1 = UTF-8 I'd guess that the issue is likely that, although the page gives ISO-8859-1 as the charset, it's using CP-1252 decimal entities that exist in a block that is given over to control characters in ISO-8859-1 (/e.g./, ‘ rather than ’ or ’). It's not actually random. It's thunderbird doing a background save into your drafts folder, and deciding that anything that would happen on an actual send needs to happen anyway. Like I said, hateful. The character coding determines how non-ASCII characters are represented in messages. iso-8859-1 is a good choice for most Western European languages, but you might need to pick something else if you'll be writing text that requires letters or symbols out of this range. UTF-8 can encode the entire Unicode range, but not all mail readers support it; they may show garbage where special characters are intended. * Character encodings ("Tools -> Options -> Display -> Formatting -> Fonts..."): o "Outoing Mail" pulldown menu: although this is listed in the "Display" dialog, it's actually not a message display setting. Instead, it applies to messages that you send (see the "Message sending" section below). o "Incoming Mail" pulldown menu: Thunderbird will normally use each message's stored character encoding, or auto-detect it, but you can set a default character encoding for message display by using this pulldown. o "Apply the default character encoding to all incoming messages": For normal use, do not check this box. It forces the selected character encoding on all messages, even if it is the wrong character encoding, making some messages unreadable. o "Use the default character encoding in replies": For normal use, do not check this box. It is sometimes useful if you often receive messages in one language but you reply in a different language, but it might mean that the person you reply to cannot read your reply. ----------------------------------------------------------------------------------------- Flash player updater ----------------------------------------------------------------------------------------- %WINDIR%\System32\Macromed\Flash\NPSWF32_FlashUtil.exe %WINDIR%\System32\Macromed\Flash\uninstall_plugin.exe I ran updater, it claimed didn't have latest version but I do. I ran it and gained I think the IE version, I gained uninstall_activeX.exe and Flash9Util9f.exe and possible a .ocx file. Keep running it and it keeps saying there's a newer version available. - infrarecorder settings required - set ISO file type associations; menus - firefox - debian - enable UK spell check: Preferences -> Composition -> Spelling -> Language - United Kingdom ----------------------------------------------------------------------------------------- VNC ----------------------------------------------------------------------------------------- add to our doc that if custom registry settings aren't being picked up, password not being set, so service not running. I didn;t test it because we didn't think it was working anyway. net start vnccom From the driver subdir run install.bat Install does an update/install of the driver or/and install the service. There is also a log create with some debug info (in the directory it was ran from, as long as the directory location isn't beyond a certain length) - if run settings shortcuts it says 'No existing instances of WinVNC could be contacted', you have to run winvnc.exe - display driver test: the driver is present the communication service is NOT present the driver is NOT active "The drivers are only active when a vnc connection is established. So try to connect then check if the driver is active..." - services - vnccom - Start: 2 (automatic) (http://windowsitpro.com/article/articleid/71649/jsi-tip-0324---registry-entries-for-services.html) - vncdrv - ""DependOnService" need to be vncdrv" - Start: 3 (manual) - UltraVNC command-line options: http://www.uvnc.com/install/cmdline.html ================================================================================================================== RCS SERVER ISSUES AND IDEAS ================================================================================================================== Read Samba 2.2 doc and see whats missing. Samba testing tools / Useful administration utilities / Hoarding other administrative software Add this to printer section: hplip.sourceforge.net/install/step4/cups/net.html Remove a user mailbox: mysql -u root -p -D provider --exec="DELETE FROM 'users' WHERE 'email' = '@' LIMIT 1)" - doesn't work, gives error how do I export mail server database and import into new system? use phpmyadmin, backup database. I should be doing this periodically or as a service we offer - this isn't working for us: For mail.server to work you also need to register it with your DNS server: Host IP address: 10.0.0.10 Hostname: mail Domain name: server smb.conf for Samba client netbios name? mail for fetchmail redirected to a different address on our mail servers Non-Postfix mailbox store: separate domains, non-UNIX accounts http://www.postfix.org/VIRTUAL_README.html /etc/postfix/virtual: postmaster@example.com postmaster Or do we need to do it in the database for virtual mail? Does postmaster -> mail@openplanit.co.uk not work? - goldfish doesn't have a web interface does it? "To configure autoresponders for specific email addresses, simply insert a record into the goldfish table. I think the fields are really self explained." - postmaster for our mail server is defined in /etc/dovecot/dovecot.conf: dovecot.conf protocol lda { postmaster_address = postmaster@example.com what should we set this to for a site with multiple domains? should the Mail Manager's mailmaster@domain account instead be postmaster@domain? if it's a site with an admin for each particular domain in addition to mailadmin@ then we should use postmaster@ accounts - Need to test our server works with UPS - no need for flip, nano on Etch saves in DOS format! - our server shouldn't be called 'samba primary domain controller' - "'printer admin' - this parameter has been marked deprecated in favor of using the SePrintOperatorPrivilege and individual print security descriptors. It will be removed in a future release." I think we're covered for this so could potentially remove it, should test that removal to make sure. - 'printing/pcap.c:pcap_cache_reload(159) Unable to open printcap file /etc/printcap for read!' appearing in logs [global] printing = cups printcap name = cups - We're getting 'printing/pcap.c:pcap_cache_reload(159) Unable to open printcap file /etc/printcap for read!' in the error log. This is on servers that aren't acting as print servers so we haven't defined 'printcap name'. If omitted then Samba defaults to using /etc/printcap which doesn't exist on our system. This is what I thought was causing the error. How do we solve this in smb.conf for PDC without print serving so we don't get the error? or should we note in a doc to ignore the error? * why does http://server/ go to squirrelmail? * Should we be using this in netlogon.bat: rem Make connections to any printer(s) rem net use LPT1: "If you want them to be a print administrator: adduser lpadmin" - this is only if print thru print server; printing direct people will likely need to have Windows permissions set - have we been doing this for EC people? - twix doesn't do this Twix - "Enter the group representing your organisation they belong to" - should allow you not to enter one and indicate those people don't have access to SHARED (read access to /usr/windows-admin/wpkg/ drwxrwsr-x 4 root samba-domain-admins 4.0K 2008-03-05 17:38 wpkg) What's the Mail Manager password policy? for barabara I chose 12345678 - maybe the rule is 8 chars min Need a web splash page and to add Mail Manager to it add winadmin to -staff? - When viewing files on server from workstation they don't update until F5 is pressed - is this fixed with Etch's Samba? - logwatch isn't working on the server - check what the real name of the IMAP Sent directory is - I looked in courier config files but couldn't find it ================================================================================================================== RCS DOCUMENTATION TODO ================================================================================================================== There is useful info for many apps here: http://www.appdeploy.com/software/browse.asp ---------------------------------------------------------------------------------------------------------------------------- Adding extra language support to Windows - First check if you have installed Language package for displaying Asian language: Start -> Settings -> Control Panel -> Regional and Language Options -> Languages -> Details - either or both: - [] Install files for complex script and right-to-left languages (including Thai) - [] Install files for East Asian languages -> You chose to install the Chinese, Japanese and Korean languages. This will require 230MB or more of available disk space. The files will be installed after you click OK or Apply on the Regional and Language Options dialog box" -> OK | Apply -> Insert Disk - "Please insert the Compact Disc labeled 'Windows XP Professional Service Pack 3 CD' into your CD-ROM drive (F:) and then click OK. You can also click OK if you want files to be copied from an alternate location, such as a floppy disk or a network server." You then get a dialog, you can insert a CD or point it to the files. We've installed the files in /usr/windows-admin/windows-xp-sp3 AKA \\windows-admin\windows-xp-sp3. When asked, choose not to overwrite newer files with 'No to all'. When asked for kbdpash.dll point it to the LANG sub-directory. Web pages available only in these type of languages will now display properly. For web pages that have a choice of multiple languages available, the browser is currently set to display the English version, if available. If instead people want one or more other languages to be displayed, rather than English, each person needs to add each language and sort them in their prefered order using the following method in Firefox: Tools -> Options -> Content -> Languages -> Choose -> Select a language to add... -> select a language, i.e. Chinese/China [zh-cn] -> Add In order to write in languages other than English, using the keyboard, in Windows programs, each person needs to do the following: Control Panel -> Regional and Language Options -> Languages -> Details... -> Settings -> Installed services -> Add... -> - Input Language: choose the language you want - Keyboard layout/IME: choose the layout you want Default input language - choose the language you want Preferences -> - Language Bar... - there may be options people want in here - Key Settings... - there may be options people want in here To add support for these languages into OpenOffice, each person has the following options available: Language Settings -> Languages -> - Enhanced language support - [] Enabled for Asian languages - [] Enabled for complex text layout (CTL) - Default languages for documents -> - Asian - choose a language - CTL - choose a language Various additional options and menu entries will then be available for these areas. Spellcheck dictionaries... These come as extensions. They can be installed by an individual into their OpenOffice profile (using Tools -> Language -> More Dictionaries Online...) or by the system administrator. If you require additional spellcheck dictionaries installing then let us know. These can be installed by each person into their own OpenOffice profile but we would prefer if they were installed by us so that each computer had just the one spellcheck dictionary installed. The full list of those available is at http://extensions.services.openoffice.org/dictionary. Though there are a minimal number of fonts already available with glyphs for these languages, you may want more installing. ---------------------------------------------------------------------------------------------------------------------------- - documentation: when assigning extra drive letters, don't use F: or G: as we need enough room before H: that when removable media is attached before logging on H: isn't used up and thus there's a clash with the networked home directory H: - documentation: roundup of server and other guides' 'noteworthy changes', either: - in specific RCS release notes - in a ...rcs/windows/updates.html, describing which RCSs it's applicable for - openoffice config - locale is set to en-US in the config in TWEAK likethis: en-US If you change it manually in Language settings -> Languages 'User interface' only has the option of 'Default' or 'English (USA). You can change 'Locale setting' to 'English (UK)' instead of 'Default, and 'Default currency' to 'GBP £ English (UK)' and get the following in the config file: en-US GBP-en-GB en-GB I think if you don't change it manually it uses system settings which are OK. Is this true? OpenOffice's UI doesn't seem to have been translated into En-GB. - user guide or admin guide? OpenOffice Base files cannot be shared by more than one person at once. http://www.oooforum.org/forum/viewtopic.phtml?t=59106 If you want to share it you'll have to use a 'proper' database server / RDBMS, on your server (the server already has one installed, called MySQL, which handles your email accounts). I recommended this at the start of the database development process, it isn't a big deal to setup and is a much more scalable and - how to see who the owner of a file or folder is - digital camera software and hardware - list of RCS supporting software - when setting up Windows Media Player, if you're admin, before the store question, it also asks you to configure file type assoc - "All persistent tdb files should be regularly backed up. Use the tdbbackup utility to backup the tdb files. All persistent tdb files must be preserved during machine migrations, updates and upgrades." - Adobe Flash Player update - I should link to the web settings page - I ran the TWEAK option to disable but in the General Notifications Settings panel it doesn't say it's disabled - admin doc - add how to create sub-groups uncomment R: netlogon.bat smb.conf Twix (RCS 3.0-3.2 only) create the group: R -> F add user to group: R -> O remove a user from a group: R -> P - rcs 3.2 release notes - remove various apps left over - RCS3.1 -> 3.3 - software duplicated in add/remove programs: GTK+ 2.10.6-1 and 2.12.8 rev a (uninstalled 2.10 and said some couldn't be removed but could be manually, possibly because got GIMP open). The GIMP we're replacing used a stand-alone GTK+; Pidgin installer claims to remove it but it doesn't seem to have. GIMP includes its own GTK+ but uses the system-wide one if it's available, in favour of its own. This is problematic between GIMP 2.4.6 (GTK+ 2.12.9) and Pidgin 2.4.3 (GTK+ 2.12.8 rev. a) where the GTK versions aren't the same, resulting in a hundred or something prompts related to libglib2-0-0.dll when loading GIMP. - winuser - release notes - no instructions for people who already have Samba server, either - add section for Samba doc updates as well as TWEAK updates; also Server updates need covering specific instructions or samba doc says to recurse the chmod - Disable administrator account (local users and groups); create 'claptrap' - should we be doing this with the Windows CD? - Our current Widnows disc asks for a user acct to be created - this isn't in the workstation doc - or should we amend the windows CD? - doc update - configure admin - or use winadmin? - what to delete to free up space /home deleted email junk email browser cache - release notes should say to keep checking back - do we create a new doc for this... 'RCS 3.1 updates after-the-fact' or 'ongoing / legacy thoughts'? combine issues.html with this new doc? USING A MORE UP-TO-DATE TWEAK THAN CAME WITH YOUR RCS RCS 3.1 users, when creating user accounts, can use TWEAK 0.9.0 (rather than the TWEAK 0.9.0 beta 7 that came with that system) if they follow the RCS 3.2 guide to setting up a user account instead of their RCS 3.1 guide. The following caveats apply: - GIMP / image editor desktop, Start Menu and Quick Launch toolbar shortcuts will be broken. You can fix the shortcuts by right-clicking on, choosing properties and changing gimp-2.4.exe to gimp-2.2.exe - FileZilla / FTP Start Menu shortcut will be broken - fix it by right-clicking on the shortcut, choosing properties and changing the program directory from 'filezilla ftp client' to 'filezilla' Workstation installation? - For per-machine tweak 0.9.0 over beta 7 need to deal with: - IrfanView Configuration - fixed external viewer / editor setting pointing to GIMP 2.2 binary when it should point to GIMP 2.4 binary ('ExternalViewer=C:\Program Files\gimp\bin\gimp-2.4.exe') - user guide: thunderbird and Firefox add-ons can be disabled per-user - account creation & user guides - issues with ClearType: http://en.wikipedia.org/wiki/ClearType#Display_requirements - changelog: TWEAK D -> E no longer is org specific - RCS - admin guide - if have too many disks attached then H: won't work - publish a copy of RCS3.1's packages.xml - release notes should keep track of programs removed - RCS3.1 - GTK - user guide - standby / hibernate - user guide - multiple logins, last one logged out overwrites others - create user accounts - note to say advise users to change their password - create user accounts - remove IE shortcut from Quicklanuch (if it's there) RCS workstation setup - when installing printer drivers laptops might have more bcos they roam. our RCS can't have a user called same name as org else /home/<> clash rcs3 user acct doc: net rpc user add ratha -S server -U - doesn't give username at the end - doesn't work as winadmin, says no such user - document Windows domain account for quickbooks etcetera - turn off file and print sharing - don't allow remote assistance invitations - check monitor refresh - 70Hz if possible - put minimise shortcut on far left hand side - per user - openoffice isn't running on startup by default - doc printer setup DHCP and name instead - doc that winadmin Windows acct should be minimally configured - i.e. Windows and shortcuts; rouge desktop background winscp installation instructions custom installation don't create start menu folder don't run auto updater don't create Desktop shortcut Document what we add to DNS: - firewall - should be registered automatically cos firewall is our DNS server - server - mail.server - we use this for squirrelmail config but if we also used it for SMTP we'd allow ourselves the ability to add a separate mail server with only a DNS change - upgrading from previous version document or doc section - RCS (Windows Edition) notes / alerts / something page/feed - server upgrade - enhancements mailserver auto responder web interface RCS 3.2 doc explaining briefly each app: the-software-applications / software-applications-roundup / list-of-software-apps / software-apps-summary / summary-of-software-apps / software-apps-summary / software-apps-user-guide / intro-to-software-apps / software-apps-intro / software-apps-description RCS3.2 doc server postfix, dovecot, etcetera samba firewall this module that module etcetera workstations ... ... ... - RCS admin guide - Groups are done using Unix groups so can be administered using Webmin: System -> Users and Groups -> Local Groups -> choose group -> Group Details -> Members -> ... -> click on username in left pane of popup window under 'All Users' - RCS admin guide Outlook address book -> Lightning: http://www.mozilla.org/projects/calendar/faq.html#outlook http://jeremy.zawodny.com/blog/archives/006634.html https://bugzilla.mozilla.org/show_bug.cgi?id=167102 - new document: RCS roadmap - RCS 3.0 used TWEAK beta 39 - RCS user guide: enigmail instructions - RCS docs: webmin 1.420. document in RCS, I think 1.400 - you could have a designated computer that you put other software on - add mozillazine link for people to search for stuff for thunderbird and Firefox - RCS 3.2 things it bought us not yet documented - WPKG Client auto updating so can now roll out more automatedly and remotely - we now support people using Enigmail - RCS - note that adobe reader needs installing manually more clearly Etch over Sarge - Samba 3.0.23d / 3.0.14a - CUPS 1.2.7 / 1.1.23 - PostFix 2.3.6 / 2.1.5 - to a lesser extent MySQL 5.0.32 / 4.0.24 - to a lesser extent PHP 5.2.0 / 4.3.10 - document how f-prot update works for restricted users - w/s setup doc doesn't say to login as local administrative user or winadmin - there should be a note to remove Outlook shortcut from desktop, possibly - add to brief changelog that many adverts on the web now blocked and copy changelog synopsis to changelog - does RCS w/s installation doc save to image do it wrong, maybe it should not add product key and activate before save image - WPKG - updates have to be managed solely thru revisions, if you remove the reference from wpkg.xml it looks to see if the 'check' item is there and just updates wpkg.xml, not the app itself =========================================================================================