Additional settings
•If the workstations are inside a domain and the domain administrative account is used for the installation, you must turn on file and printer sharing on workstations. See the table for the location of this option for different Windows OS versions.
•If the remote stations are outside a domain, or if the local account is used during the installation, then for some of Windows OS, the extra configuration of the remote stations is required.
Extra Configuration for Remote Installation to a Station outside a Domain or Using the Local Account
|
Specified options can reduce remote station security. It is strongly recommended to examine functions of these options before editing the system settings or do not use remote installation and install Dr.Web Agent manually.
After you configure remote workstation, it is recommended to return all changed settings to the values set before editing to not violate the basic policy of operating system security. |
To install Dr.Web Agent to a remote workstation outside a domain, or/and using the local account, do the following on the computer where you want to install Dr.Web Agent:
Configuration |
||
|---|---|---|
Windows XP |
Setup the mode of access to shared files |
Modern view: Start → Settings → Control Panel → Appearance and Themes → Folder Properties → the View tab → clear the Use Simple Sharing (recommended) flag. |
Classical view: Start → Settings → Control Panel → Folder Properties → the View tab → clear the Use Simple Sharing (recommended) flag. |
||
Set the mode of network authentication model in the local policies |
Modern view: Start → Settings → Control Panel → Performance and Maintenance → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Options → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
|
Classical view: Start → Settings → Control Panel → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Settings → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
||
Disable the Windows Firewall on the station before remote installation. |
||
Windows Server 2003 |
Disable the Windows Firewall on the station before remote installation. |
|
Windows Vista Windows Server 2008 |
Enable the File sharing option |
Modern view: Start → Settings → Control Panel → Network and Internet → Network and Sharing Center → Sharing and discovery → File Sharing → Enable. |
Classical view: Start → Settings → Control Panel → Network and Sharing Center → Sharing and discovery → File Sharing → Enable. |
||
Set the mode of network authentication model in the local policies |
Modern view: Start → Settings → Control Panel → System and Maintenance → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Options → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
|
Classical view: Start → Control Panel → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Settings → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
||
Add the LocalAccountTokenFilterPolicy key: a)In the registry editor, open the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System branch. If the LocalAccountTokenFilterPolicy record does not exist, in the Edit menu, select Add and specify the DWORD value. Enter the LocalAccountTokenFilterPolicy value and press ENTER. b)In the LocalAccountTokenFilterPolicy item context menu, select Change. c)In the Value field, set the 1 value and click OK. Reboot is not required. |
||
Windows 7 Windows Server 2008 R2 |
Turn on file and printer sharing |
Modern view: Start → Control Panel → Network and Internet → Network and Sharing Center → Change advanced sharing settings → File and Printer Sharing → Turn on file and printer sharing. |
Classical view: Start → Control Panel → Network and Sharing Center → Change advanced sharing settings → File and Printer Sharing → Turn on file and printer sharing. |
||
Set the mode of network authentication model in the local policies |
Modern view: Start → Control Panel → System and Security → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Options → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
|
Classical view: Start → Control Panel → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Settings → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
||
Add the LocalAccountTokenFilterPolicy key: a)In the registry editor, open the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System branch. If the LocalAccountTokenFilterPolicy record does not exist, in the Edit menu, select Add and specify the DWORD value. Enter the LocalAccountTokenFilterPolicy value and press ENTER. b)In the LocalAccountTokenFilterPolicy item context menu, select Change. c)In the Value field, set the 1 value and click OK. Reboot is not required. |
||
Windows 8 Windows 8.1 Windows Server 2012 Windows Server 2012 R2 Windows 10 |
Turn on file and printer sharing |
Modern view: Settings → Control Panel → Network and Internet → Network and Sharing Center → Change advanced sharing settings → File and Printer Sharing → Turn on file and printer sharing. |
Classical view: Settings → Control Panel → Network and Sharing Center → Change advanced sharing settings → File and Printer Sharing → Turn on file and printer sharing. |
||
Set the mode of network authentication model in the local policies |
Modern view: Settings → Control Panel → System and Security → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Options → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
|
Classical view: Settings → Control Panel → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Options → Network Access: Sharing and security model → Classic - local users authenticate as themselves. |
||
Add the LocalAccountTokenFilterPolicy key: a)In the registry editor, open the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System branch. If the LocalAccountTokenFilterPolicy record does not exist, in the Edit menu, select Add and specify the DWORD value. Enter the LocalAccountTokenFilterPolicy value and press ENTER. b)In the LocalAccountTokenFilterPolicy item context menu, select Change. c)In the Value field, set the 1 value and click OK. Reboot is not required. |
||
If user account at the remote computer has the empty password, set the access policy with empty password in local policies: Control Panel → Administrative Tools → Local Security Policy → Security Settings → Local Policies → Security Options → Accounts: Limit local account use of blank passwords to console logon only → Disabled.