This section explains the considerations for installing Systemwalker Desktop Keeper.
For considerations relating to each particular function, please refer to "Systemwalker Desktop Keeper User's Guide for Administrator".
Please use the following protocols to communicate:
[Management Server/Master Management Server] - [Management Server/Master Management Server]: HTTP
[Management Server/Master Management Server] - [Management Console]: HTTP
[Management Server/Master Management Server] - [Client (CT)]: TCP/IP Socket communications
[Management Server/Master Management Server] - [Log Analyzer Server]: TCP/IP Socket communications
[Management Server/Master Management Server] - [Web Console]: HTTP
[Log Analyzer Server] - [Report Output Tool]: TCP/IP Socket communications
In [Management Server/Master Management Server] - [Client (CT)], or [Management Server/Master Management Server] - [Management Server/Master Management Server], when the communication data packet is restricted by the firewall, the server must be configured in a place where communication with the client (CT) can be performed. At this time, it will be closed within the domain area available for communication, and multiple independent systems that are not linked will start working.
When communication between segments is restricted due to the use of VLAN, servers that can communicate directly must be set in each domain, which means that multiple Systemwalker Desktop Keeper servers need to be set.
When performing the following communications, ports 137-139 and port 445 must be opened.
When the printing logs of printing jobs performed on the printer server are not obtained, it is unnecessary to open these ports.
Communications between Master Management Server and Management Servers
Communications between Master Management Server and client (CT)
Communications between Management Server and client (CT)
The environment constructed by NAT (Network Address Translation) cannot be used between server and client (CT).
When connecting the Management Server/Master Management Server with the CT through a VPN connection, the operations of Systemwalker Desktop Keeper, such as the collection of E-mail sending logs, may be affected. It is recommended to confirm the operations in advance when operating under such environment.
It cannot run under the Ipv6 environment. Please use it under the Ipv4 operating environment.
When using a firewall in the Log Analyzer Server, please open the port to be used by the Log Analyzer Server. For information regarding the port used by the Log Analyzer Server, please refer to “Port Numbers and Services” of “Systemwalker Desktop Keeper Reference Manual”.
Virtual Environment
In the provisioning environment, based on settings, use data may be discarded during shutdown of the virtual PC. When it is set to save the log saving folder to a disk on the virtual PC, the saved operation logs or violation logs may be discarded. Please take any of the following measures to prevent logs from being discarded:
In the settings of the virtual environment, set to not discard user data on the virtual PC.
In the settings of the provisioning environment, set an area in which user data will not be discarded and save the log saving folder in this area.
In case of a dirty shutdown of the virtual PC (cut off the power of the virtual PC by force, etc.), and in case of a dirty shutdown of the running terminal of the virtual PC (cut off the power of the physical PC or Hypervisor, etc.), operation logs and violation logs may not be saved. Please be sure to shut down the virtual PC and physical PC by normal procedure.
For a clone PC, since it is not managed on the Management Server, CT policy and user policy cannot be applied immediately. Please apply user policy after logging off and then logging on again.
Considerations for using UNICODE characters
When the ID for logon to Windows is a user ID that contains UNICODE specific characters, an error will occur in all installers during the installation process and installation will be interrupted.
If a Windows firewall is enabled in any of the following OS, after the product has been installed, register the port number used in the product as “Exception” in the firewall and open the port.
Windows® 7
Windows Vista®
Windows® XP
Windows Server® 2003
Windows Server® 2008
Management Server/Master Management Server
Please do not make significant changes to the system time of the Management Server and Master Management Server. When the system time is modified, the Management Server and Master Management Server may not run normally.
When the system time is modified significantly, please restart the Management Server and Master Management Server.
The logon information in the Server Settings Tool and the execution information of the Active Directory Linkage will be output to the event log (application).
The Web Console of Systemwalker Desktop Keeper is provided as a 32-bit application. Therefore, during the installation of the Management Server/Master Management Server, IIS will be set automatically in the same way as when creating work processes of a 32-bit application. Thus, a 64-bit application cannot be used IIS.
When the log data aggregation results and the number of target items exceeds 2GB and the available disk space is not enough, aggregation processing and result display or report output will not run normally and an error will occur.
About character data
Please do not use characters apart from ASCII (UNICODE characters that include JIS 2004 and do not include supported code of ASCII). In addition, please also do not use characters apart from ASCII when using Log Analyzer (Windows account for logon to Windows).
After a character apart from ASCII has been entered, it will be converted to another character or an error will occur and it will not run normally.
However, in the [Keyword] column of [Aggregate by Objective] of Log Analyzer (Web Console), and in the [Keyword] column of [Screening Condition Settings] of the [Configuration Management] window, UNICODE characters including JIS 2004 can be entered.
In a 3-level system structure, if the Management Console is set by the Management Server/Master Management Server, when policy is set through multiple Management Consoles, the policy set finally will be updated to the client (CT).
When applications similar to Systemwalker Desktop Keeper control, such as the filter driver control that restricts writing in devices and hook control (when installing products like INSTANT COPY), exist at the same time, operation will not be guaranteed.
Hook control refers to the control that intercepts and views required content from the data transferred through a particular interface, and returns to the original processing flow after processing.
After upgrading an OS with the client (CT) installed, the client (CT) may not run normally. (For example: upgrading from Windows® XP to Windows Vista®)
When upgrading the OS, please perform the upgrade after uninstalling the client (CT), and then install the client (CT) again. When installing again, in order to bound and register the CT in the same way as before, please modify “OS Type” in the CT judgment condition that is the same as CT registration to “Not use”.
When a new CD/DVD device is connected for the first time, please restart once. Without restarting, the newly connected CD/DVD device will not work properly.
When playing a DVD-ROM (DVD-Video) in the case that an export prohibition for the CD/DVD has been set, it is likely that the DVD-ROM cannot be played through the DVD play software. Please remove the export prohibition for the CD/DVD temporarily, or use another DVD play software like Windows Media Player to play.
The CT cannot coexist with “Net screen Remote” of Juniper Corporation. At this time, it can be run by uninstalling the Virtual Adapter function of “Net screen Remote”.
In addition, when VPN software (Net screen Remote) exists simultaneously, communication may fail.
If a capture product exists at the same time, the function of each may not run normally.
When the client (CT) is installed on the computer with Virus Buster 2007 installed, the "Network connection environment has been changed" dialog box of Virus Buster 2007 may appear, but this is okay.
When the OS of the client (CT) is Windows Vista®, Windows Server 2008® or Windows® 7, and authority promotion is allowed and operation can be continued in UAC, the following logs cannot be collected:
The printing log oriented for network printer
The structure change log of network driver
Under the environment with TC Plink installed, after the PrintScreen key has been pressed, the network printer may print two pieces of paper.
At this time, please modify the settings of this network printer from [Lan Manager Printer Port] to [Standard TCP/IP Port].
In an environment using an Intel LAN adapter under Windows Vista® (No Service Pack), when using the “Receiving scaling” function of the LAN adapter, E-mail may not be sent. Please use Windows Vista® Service Pack 1 or later.
When Shutting down or Restarting Computer
When shutting down or restarting the Management Server and Master Management Server, it is necessary to follow the steps below.
Note
How to stop server correctly
In order to prevent loss of previous logs of the client (CT) saved in the database, please be sure to follow the steps below.
When the Windows Services window is displayed in the Management Server or Master Management Server, select the following services, and select "Stop" from the "Action" menu. It may take about 30 seconds to 1 minute to stop. In addition, after starting SWServerService or during date change (12am), confirmation of available database capacity will be performed. In the 15 minutes till the confirmation operation has completed, service may not be able to be stopped, please confirm later.
SWLevelControlService
SWServerService
SymfoWARE RDB SWDTK
Shun down or restart the Management Server/Master Management Server.
Restrictions of Remote Operation
Under the following environments, operations such as “Remote Desktop Connection” of Windows cannot be performed remotely through the Windows Terminal Service. It is the same when the session of a remote connection remains. If remote connection has been performed, please make sure to log out.
When shifting command is used to perform a version upgrade of Systemwalker Desktop Keeper V13.0.0/V13.2.0/V13.2.1
An environment with the following database products installed:
Symfoware Server Enterprise Edition V8.0 for Windows
Symfoware Server Enterprise Edition V7.0 for Windows
Symfoware Server Enterprise Edition V6.0 for Windows
An environment in which a version prior to V13.2 of the following products that share a database with Systemwalker Desktop Keeper is installed before Systemwalker Desktop Keeper:
Systemwalker Centric Manager
Systemwalker Desktop Patrol
Systemwalker Desktop Rights Master
When the system backup software is used in the Management Server/Master Management Server/Log Analyzer Server for system backup, it is necessary to pay attention to the following points:
During the installation of the Management Server/Master Management Server/Log Analyzer Server, even if the drive that is not the system drive is specified as the installation drive, part of Systemwalker Desktop Keeper programs will be installed on the system drive.
Therefore, during backup and restoration, please target both the system drive and the drive specified during installation.
It is required to stop the service during backup. Please perform backup according to the following procedure:
[In case of Management Server/Master Management Server]
When the Windows Services window is displayed in the Management Server or Master Management Server, select the services in the following order, and select "Stop" from the "Action" menu. It may take about 30 seconds to 1 minute to stop. In addition, after starting SWServerService or during date change (12am), confirmation of available database capacity will be performed. In the 15 minutes till the confirmation operation has completed, service may not be able to be stopped, please confirm later.
SWLevelControlService
SWServerService
SymfoWARE RDB SWDTK
After system backup has completed, please start the stopped serviced in the following order:
SymfoWARE RDB SWDTK
SWServerService
SWLevelControlService
[In case of Log Analyzer Server]
Please confirm the Log Analyzer functions that are not used.
When the Windows Services window is displayed in the Management Server or Master Management Server, select the services in the following order, and select "Stop" from the "Action" menu. It may take about 30 seconds to 1 minute to stop.
SymfoWARE RDB SWDTLA
After system backup has completed, please start the stopped services in the following order:
SymfoWARE RDB SWDTLA
