home *** CD-ROM | disk | FTP | other *** search
-
- WATCHDOG 7.0.1 README.DOC
-
- Latest revision: March 4, 1993
-
- By Fischer International Systems Corporation
-
-
- Included in this document file: Page
-
- DOS Versions Supported 1
-
- Upgrading to MS-DOS 5.0 2 1
-
- Upgrading Previous Versions of Watchdog 2
-
- New Version of Watchdog Armor Included 2
-
- Security Checks on Boot Process 2
-
- Backing Up Security Files 2
-
- Control Diskette Booting Backups 3
-
- Installing Watchdog on Hard Disks other than C: 3
-
- Transparent Interface 3
-
- Network Single Sign-on 3
-
- Network Encryption 3
-
- Watchdog Keylock and Screensavers 4
-
- Super User Mode 4
-
- WDRIGHTS 4
-
-
-
- DOS VERSIONS SUPPORTED
-
- THIS COPY OF WATCHDOG 7.0.1 SUPPORTS DOS VERSIONS FROM 3.0 THROUGH
- 5.0x.
-
- This copy of Watchdog 7.0.1 will not run on versions of DOS higher
- than 5.0x. This restriction has been set to prevent security
- exposures from being introduced by new DOS facilities not yet
- available at the time that this copy was distributed. As new
- releases of DOS become available, Watchdog will be enhanced to
- support them.
-
- IF YOU HAVE A LATER VERSION OF DOS, CONTACT FISCHER INTERNATIONAL
- SYSTEMS CORP. ABOUT SUPPORT FOR THAT VERSION OF DOS.
-
- * You should remove Diskette Booting prior to changing DOS
- versions on a PC that already has Watchdog installed.
-
-
- Page 2
-
- UPGRADING TO DOS 5.0
-
- If you plan to upgrade your machine to MS-DOS 5.0:
- - upgrade the machine to Watchdog 7.0.1,
- - remove diskette booting,
- - boot to A:
- - and run the DOS SETUP from there.
- When you reboot on C: after SETUP, run the SA program and
- restrict diskette booting again.
-
-
- UPGRADING PREVIOUS VERSIONS OF WATCHDOG
-
- Watchdog 7.0.1 will not upgrade or replace Watchdog versions
- prior to 5.x. If you have a Watchdog version prior to 5.x,
- first deinstall that version, then install Watchdog 7.0.1.
-
-
- NEW VERSION OF WATCHDOG ARMOR INCLUDED
-
- Due to changes in handling configuration environments such as
- colors and menu titles, Watchdog Armor has been upgraded. The code
- loaded on the Armor Card is still current, but if you have a old
- copy of WDARMOR.EXE and WDARMOR.HLP you should replace it with the
- version on the Supplemental Disk. The easiest way is to copy the
- contents of the Armor diskette into the System Administration
- directory and then copy the two files from the Supplemental Disk
- into SYSADM on top of the old versions. You can then run WDARMOR
- from the System Administration Area on the hard disk instead of
- from the diskette.
-
-
- SECURITY CHECKS ON BOOT PROCESS
-
- Watchdog version 7.0.1 provides additional checks on the
- boot process. If you subsequently upgrade your version
- of DOS, you could get a warning message about the boot
- process. To correct this situation, run replace to update
- the Watchdog files and security checks on the boot process.
-
- If you should get this warning message, and you have NOT
- upgraded your DOS version, call Watchdog Technical Support.
-
-
- BACKING UP SECURITY FILES
-
- The Watchdog System Administration (SA) files contain all the
- information pertaining to your PC's security environment. Once you
- have installed the product, you should log onto Watchdog, run WDSA
- (either from the System Administration Area that was created, or
- from the SA diskette), and backup your SA files. This is very
- important and will provide you with an additional layer of
- protection against hard disk failures. ANY CHANGES TO WATCHDOG
- SECURITY INFORMATION, INCLUDING RANDOM ENCRYPTION KEYS, COULD BE
- LOST IF BACKUPS ARE NOT MADE.
-
-
- Page 3
-
- CONTROL DISKETTE BOOTING BACKUPS
-
- Control Diskette Booting processing now requires a backup step. You
- will use this backup if the hard disk ever has a hard failure that
- prevents Watchdog's normal error recovery process from accessing
- information on the hard disk while Diskette Booting is restricted.
- When restricting Diskette Booting, it is important that you make
- and keep this backup in a safe place.
-
-
- INSTALLING WATCHDOG ON HARD DISKS OTHER THAN C:
-
- Watchdog program and data files may be installed to any hard disk
- on the PC. Hard disks containing Watchdog must, however, be
- accessible when CONFIG.SYS is referenced during the boot process.
- If a disk is defined to the PC later in the AUTOEXEC.BAT (by
- ASGNPART for example) or when a network program is first run, then
- Watchdog files referenced in CONFIG.SYS will not be available when
- CONFIG.SYS is processed.
-
- If you install Watchdog on a disk other than drive C:, make sure
- that drive is available to CONFIG.SYS during the boot process.
-
-
- TRANSPARENT INTERFACE
-
- If you are upgrading or replacing a previous Watchdog version,
- Watchdog will not automatically activate the transparent interface.
- You must manually activate the transparent interface by enabling
- the System Permission "Automatically Add All Areas at Login".
-
-
- NETWORK SINGLE SIGN-ON
-
- On a new install, Watchdog automatically copies WDNET.* files to
- \SYSLIB. If you are upgrading or replacing a previous Watchdog
- version, you must manually copy the appropriate WDNET file to \SYSLIB.
- If you are using Novell, copy WDNET.NOV to \SYSLIB\WDNET.BAT. If
- you are using OS\2 Lan Manager, copy WDNET.MAN to \SYSLIB\WDNET.BAT.
-
- You will need to customize the WDNET.BAT file to automatically log
- users onto your server, pass Watchdog user IDs and passwords, and
- synchronize the network to Watchdog whenever a password changes.
- Refer to your Watchdog Setup Guide for complete instructions on
- network setup.
-
-
- NETWORK ENCRYPTION
-
- When you setup a network directory as a new Watchdog area, make sure
- that directory does not already contain data.
-
- Before you copy data into the network area, make sure you are logged
- into the network area. If you are using Novell, make sure you also
- load WDEMUL /NET.
-
- If you want to unprotect a network area, be sure to log into the area
- and copy any data it contains to an external directory, before you
- unprotect the network area.
- Page 4
-
- WATCHDOG KEYLOCK AND SCREENSAVERS
-
- If Watchdog Keylock conflicts with an existing screensaver, turn off
- the screensaver and use the Watchdog Keylock to blank your screen and
- lock the keyboard.
-
-
- SUPER USER MODE
-
- A Super User has unrestricted access to the entire hard disk and can
- delete any file or directory, reformat the hard disk, or run any DOS
- command. We recommend the SA assign only himself or herself as a
- Super User, under a separate user ID.
-
- If you login as a Super User and get a warning that Watchdog cannot
- add all areas, do the following:
- - run the SA program and at the Change System Configuration menu,
- - select F5 (Change Encryption Key Memory Usage).
- - Select F3 (Auto), or Select F2 (Set) and enter a higher number.
- For most situations, AUTO is the correct choice.
-
- * Don't write to any encrypted areas that Watchdog was unable to add.
-
-
- WDRIGHTS
-
- WDRIGHTS is a utility command that displays permission rights for the
- current user. You can specify any legal path after the WDRIGHTS
- command and Watchdog will show you the access permissions for the
- specified directories (Execute, Read, Write, Create/Delete).
-