How-to & Workload

Rico Scanner Login
Type in the code:1802

Windows Update won't update
If you would like to run Windows Update and it sais ''“Windows update cannot currently check for updates because the service is not running. You may need to restart your computer” a restart often don't help.''
 * 1) Check if service Windows Update is running (Services)
 * 2) If it doesn't helped go to "C:\Windows" - folder and delete the folder "SoftwareDistribution"
 * 3) Reboot! Just restarting the service won't help.
 * 4) Now run Windows Update again. It should work now.
 * 5) If not look here for more: https://www.wintips.org/windows-update-cannot-check-for-updates-windows-8-7-or-vista-solved/

Order a new computer

 * 1) You need 3 offers, one that we want to accept and two settlement offers (which should have a higher price than the one we accept); decide based on institute criteria (see below)


 * 2) Use formular on "S:\inst_iuw\admin stuff" for the order (for orientation use "Bestellung (aktuell)")


 * 3) Ask Steven Gronau for permission


 * 4) Do the order (the formular can be faxed in Mrs. Nause's office. Simply Predial 01 followed by the complete fax number). If you ordered on www.notebooksbillger.de and want to check whether the fax was successfully sent, call this number: 033173099298. Or send an Email to: imarquardt@notebooksbilliger.de


 * 5) Hand out the formular and the 3 offers to Mrs. Lanka


 * Criteria for laptops:
 * Must have:

      Should have:       Nice to have:
 * A price under 700€ (or a good reason for a higher price)
 * A decent processor (right now at least i5 or comparable AMD)
 * At least 8GB RAM
 * At least 13.3" and at most 16"
 * VGA graphics port (not just HDMI)
 * CD/DVD drive
 * lightweight
 * Touch doesn't matter
 * SSD drive



Installing and activating Windows
0. First check what kind of data or files have to be saved if you  (one example: Thunderbird profile:Type in "%appdata%" in Windows Start search and open the roaming file. Then copy the                Thunderbird file/profile and paste it into the new installed computer) Need Help? https://www.luis.uni-hannover.de/kms.html
 * 1) use windows 7 enterprise 64bit DVD OR the black "Spaceloop" USB-Stick
 * 2) run this DVD/USB-Stick by changing boot order (and pay attention to that order during installation if problems appear)
 * 3) ​During installation choose as computername:pcROOMNUMBERNamenskürzel Bsp: pc166nd. If it is a laptop nbROOMNUMBERNamenskürzel Bsp: nb166sg
 * 4) Name according to Desktop PCs & Notebooks list
 * 5) After finisching installation run command prompt as an admin (Right click -> Run as Administrator) for windows activation (connection to the university network is necessary)
 * 6) Type: slmgr -skms kms.uni-hannover.de:1688
 * 7) Type: slmgr -ipk FJ82H-XT6CR-J8D7P-XQJJ2-GPDD4
 * 8) Type: slmgr –ato
 * 9) Now Windows 7 schould be activated

Creating Accounts

 * 1) Create the local "security account" -> User Name: worldtrade   ; Password in HiWi map

Introducing Client to the Domain

 * Go on step by step:


 * 1) Computer
 * 2) Properties
 * 3) Computer name, domain, and network group settings --> Change settings
 * 4) Change... (beneath Network ID...)
 * 5) Type in "ifgb2.intern" as domain, confirm with your admin account (keep in mind that the DNS address has to be set to 130.75.44.13 -> Elnino Server. Use 130.75.44.08 as the alternative DNS address -> OEKO8 server)

Install the following software

 * 1) ​Sophos (This only works if Windows is activated)
 * 2) ​​http://www.rrzn.uni-hannover.de/antiviren.html
 * 3) Use LUH-SophosAutoUpdate “managed” Installer
 * 4) ​​ Firefox
 * 5) Java, Flashplayer
 * 6) Thunderbird
 * 7) Microsoft Office 2010 (also install German language package and spellchecker and add entry here on how to do it)
 * 8) After installation run e.g. Word or Excel
 * 9) Go to File-> Help -> change product key (take a look at gray folder in the hiwi desk for the license)
 * 10) Adobe Reader
 * 11) 7-Zip
 * 12) Zotero Addon for Firefox
 * 13) Zotero Standalone
 * 14) LibreOffice
 * 15) Chrome
 * 16) Skype
 * 17) Dropbox
 * R
 * 1) Tinn-R
 * 2) Uni Hannover font Rotis Sans Serif
 * 3) Either install the uni fonts with the cd from the Hiwi CD-Box(black) OR
 * 4) go to: S:\Admin\Uni Font  and just double click the different fonts to install them.
 * 5) PDF Creator
 * 6) VLC-Player
 * 7) Notepad++

Prepare laptops for a field trip
When preparing laptops for a field trip make sure that all the standard software is installed on the mobile clients. Additionally talk to the employee in charge of the field trip and find out what kind of additional software and hardware is needed! After the preparation, check together with the employee if everything is alright.

Preparing USB-stick to be bootable for Windows 7 installation

 * 1) Use the black USB stick "Spaceloop by CnMemory" which contains a bootable Windows 7 Enterprise version (17.05.13), if it is used for a different purpose do the following
 * 2) Download ImgBurn and create an ISO-Image from our Windows 7 Enterprise DVD. You can find the DVD in our CD box set OR if still available use the ISO-Image from the server which can be found here:            S:\Admin\Win7enterprise ISO for USB
 * 3) Download and install Windows 7 USB/DVD Tool
 * 4) Unfortunately this tool will not suffice to copy Windows 7 onto the USB-Stick, as it will not accept our Windows 7 version. That is why you will need to download and extract this AVDP-Tool into the same folder as the ISO-Image. This file can also be found in: S:\Admin\Win7enterprise ISO for USB
 * 5) Run the Command Prompt with administrative privileges and change the directory in the command prompt to the folder which contains the ISO-Image and the AVDP-Tool
 * 6) Type in the following command: isoavdpcopy.exe , you should see the message "Copy successful" in the command prompt
 * 7) Now plug in the USB-Stick and start Windows 7 USB/DVD Tool and follow on screen instructions

Booting from USB device for Windows 7 installation

 * 1) When starting the computer press the on screen key to get to the Boot menu (most likely del or F8 or something alike)
 * 2) Change tab to Startup and change the boot priority so that the USB device is the first priority
 * 3) Save and Exit, the Windows Setup should boot from the USB device now
 * 4) After the setup has finished and the pc restarts enter the boot menu again and change the boot priority back to the standard

SAP Installation
When installing SAP on a Computer many things have to be regarded. All the guides and necessary information can be found in the Hiwi-File. You have to follow the instructions precisely, otherwise the installation might be incorrect.

The download section can be found under: http://sap2ref1.univ.uni-hannover.de:19896/Downloads

Only computers with a static ip-address are to be used! Keep in mind that only computers with registered ip-addresses have access to the download section. Ms. Lanka's IP-address has access.

SAP can only be installed on an extra account that is only used to work with SAP.

Data restore from the server with bacula
When files are lost from the server, there is an easy way to recover them. A detailed instruction can be found here: bacule restore rrzn. In most cases you will have to use Option 6: (Select backup for a client before a specified time) when using the restore command. All employees can work on in the directory which will be restored. The restore and the network location work indepently. The restored data will be saved under C:\temp\bacula-restores and you will manually have to paste the data where it is needed. The process itself should not take too long (2GB ~ less than one minute).

Updating important programs periodically
In order to keep all the computers running smoothly, we need to install updates on the clients for certain programs: These programs are most important. Since asking an employee if it is OK to install updates while he is working is inefficient, you should either make an appointment or in case one employee is not in, use the opportunity and install those updates during his or her absence.
 * 1) Firefox/Chrome...
 * 2) Thunderbird
 * 3) Adobe Reader
 * 4) Adobe Flash Player
 * 5) Java Script
 * 6) Open Office

Moreover during the installation of these programs you should always check the box for "autoupdate only" if it is possible (e.g. Adobe Reader, Flash Player...). After installing updates on a client simply note the date in the PC Liste in the last column.

Issue and redemption of laptops/Ausgabe und Rücknahme von Laptops
If a laptop is loaned it must be marked in two lists:

1. Physical list

- in the closet is an folder ( the dark grey one) with the print "Notebook" on it. Look for the required laptop sheet (every laptop got a sheet) => fill all fields (Lender; recover, etc.).

The most important is the sign of the person who loaned the laptop!!!!!! One sign before and one after the loan!!!!

2. Online-list

Look in the wiki for ""IUW2014"-list =>Map: "Laptop-Liste"=> Look for the laptop that you wan't to loan=> Under "Ist im Moment bei:" type the name of the person who loaned the device. The red colored field will be colored if the name in "Lagerplatz" and "Ist im Moment bei" will mismatch. Under "Anmerkungen"/Remarks all softwarechanges and other particularities should be named.

Installing Thunderbird (Email)
Download newest Version fromhttp://www.mozillamessaging.com/de/thunderbird/.

When manually registrating an Email-Account for an employee, Thunderbird should recognise all necessary preferences and set them automatically according to these settings:

-Install using an administrator account (or in Win7 start from user account and approve as administrator).Enter account name as appropriate (e.g. grote@iuw.uni-hannover.de)

-E nter mail.uni-hannover.de as In-Box-Server (Maileingangsserver), Port 993, Verschlüsselung SSL/TLS and Authentification Mode: Password, normal.

-Enter smtp.uni-hannover.de as Out-Box-Server (Mailausgangsserver). Port: 587; Verschlüsselung: Starttls; Authentification Mode: Password, normal.

When you ask the user for the password, make sure that you ask for the e-mail-password and not for the network-password or any password

Installation
SPSS is available throught the university-network:    ftp://spssuser@softdis.rrzn.uni-hannover.de                        password: in the grey Hiwi folder

1) Start the setup-file in the destinated folder. (In normal situation the setup recognize if the system is x64 or x86).

2) Select single license in setup.

3) Select the license in that way, that one pc and one laptop share one license. (Use license distribution from license-list.)

Setup
Download SPSS here: ftp://spssuder@softdis.rrzn.uni-hannover.de

1) Start setup (normally the system identifies whether it is a x64 or x86 system).

2) During the installation choose "single position licence".

3) Use one licence only for 1 Computer and 1 Laptop. (Look for arragement in the licence list)

Order
Use the following: http://www.rrzn.uni-hannover.de/fileadmin/softwaredistribution/Ueberlassung/Vereinbarung/spss.pdf

ArcGis installation
-Download ArcGis here: ftp://esri@softdis.uni-hannover.de   (User and password inside the grey hiwi binder)

-Take ArcGis Desktop 10 (newest version) as download file.

-Use Deamon Tools or Virtual Clone Drive to integrate the .iso File.

-Open the .iso File and use the ArcGis_Desktop_10 Application for installation.

-After installation

Step1: Select a product. Choose ArcView and Concurrent Use.

Step2: Define a License Manager for Concurrent Use. (arcgis-lic.rrzn.uni-hannover.de)

Creat a server account
Log in to the server--> Start --> Active Directory Users and Computers --> choose institute --> right click regular user --> copy user --> change name etc --> during creation choose "Password never expires" or "Password must be changed at next logon".

Password must be at least 6 characters long and must contain three of the following 4 attributes:
 * 1) Capital letter
 * 2) Lower case letter
 * 3) A Sign:  !%&_.     etc
 * 4) A number

Create Server network location and asign users to it
Step 1: Data(H) -> Projekte -> "neues Projekt")
 * Remote Desktop Connection to the new server
 * Open Explorer and browse to the location in which the network location will be saved, create folder (e.g.

Step 2: Step 3: and under Sicherheit assign the Sicherheitsgruppe "neues Projekt" to the folder with Vollzugriff
 * Go to Active Directory Users and Computers -> IFGB -> IUW
 * Right Click "IUW" -> neu -> Freigegebener Ordner -> Name like this "neues Projekt_L" and add network location -> \\elnino\"neues Projekt" (to check the network path go to the file -> right click -> Eigenschaften -> Freigabe -> Netzwerkpfad
 * Right click IUW -> neu -> Gruppe -> Name "neues Projekt" -> OK
 * Right click created Sicherheitsgruppe -> Eigenschaften -> Mitglieder -> add any amount of users that will be using that network location or are part of the project
 * Go to Gruppenrichtlinienverwaltung -> Gruppenrichtlinienobjekte -> neu -> add according to "neues Projekt"
 * Click on new Gruppenrichtlinienobjekt -> Bereich -> Sicherheitsfilterung -> remove "Authentifizierte Benutzer" ->Hinzufügen -> add the created Sicherheitsgruppe "neues Projekt"
 * Right click Gruppenrichtlinienobjet -> bearbeiten -> Benutzerkonfiguration -> Einstellungen -> Windows-Einstellungen -> Right Click Laufwerkzuordnung -> neu -> Zugeordnetes Laufwerk
 * "Aktion" choose "Ersetzen"
 * "Speicherort" add network location -> \\elnino\"neues Projekt"
 * "Beschriften als" choose the name which will be displayed for the regular user as a network location e.g. "neues Projekt"
 * "Laufwerkbuchstabe" -> Verwenden -> choose a letter most likely between P and T, if you are not sure ask Sabine which letters are not in use already
 * OK
 * Click and drag the edited Gruppenrichtlinie to -> IFGB -> IUW/IEA (or both if both institutes are working on the project or will be using the network location) -> The Gruppenrichtlinienobjekt will be asigned to the institute but remains in Gruppenrichtlinienobjekte
 * Refresh Gruppenrichtlinienverwaltung and check if the asigned users can see the network location, if not open the command prompt on the user's and try "gpupdate /force" -> y -> relogin
 * Lastly in the Explorer right click the the folder "neues Projekt" -> Freigabe -> share the folder,

Administrating WebDAV
WebDAV basically works like an online network drive. For protection every user needs credentials. Our WebDAV (originally for the international office) is called intoff and can be found under https://webdav.rrzn.uni-hannover.de/intoff/. The network drive has to be created for every user on every single computer manually (much like dropbox):
 * 1) Go to computer and right-click computer or network in the left sidebar
 * 2) Click "connect network drive" ("Netzlaufwerk verbinden...") and choose a letter for the drive (convenient to choose W here)
 * 3) Enter the address https://webdav.rrzn.uni-hannover.de/intoff/ as the folder
 * 4) Enter the user credentials and mark the "save login data" box

The user for this network drive should be the user of that account under which the network drive is installed, not the admin.

If the network folder works incredibly slow (speed like a 56k modem rather than a local harddrive), follow the steps described here.

IUW-Printer installation on clients (for Guests)

 * 1)       Control Panel -> Hardware and Sound -> Devices and Printers -> Add a Printer -> Add a network, wireless or Bluetooth printer
 * 2)       Choose HP4015x on Server Oeko8
 * 3)       Set printer as default
 * 4)       If the printer is not found automatically, search for it manually by searching for its ip adress: 130.75.44.103

Cleaning Adware/Malware
Sometimes it can be difficult to delete all parts, this link covers all possibilties where these parts are hided and how to clean it.

https://forums.malwarebytes.org/index.php?/topic/85715-faq-malwarebytes-anti-malware-wont-run-or-failed-to-resolve-my-issues/#entry903065

Create Avira Antivir Rescue System Boot-CD/DVD
If there is still a Antivir Rescue CD in the Hiwi-CD-Folder and the PC you want to scan is connected to the LAN via cable, you shouldn't have to burn a new CD. Just take the old one and wait for the update of virus definitions the CD will do by itself once booted. Otherwise:


 * 1) Go to http://www.avira.com/en/downloads#tools
 * 2) Choose tab "Utilities"
 * 3) Choose Antivir Rescue System
 * 4) Click "more versions"
 * 5) download the ISO file
 * 6) After download, double click on ISO file and burn image on CD or DVD
 * 7) Now you can boot from CD/DVD to run Antivir scan
 * 8) For further information check out Chip-Forum

Merge local Acoounts with Serveraccounts
 Create user on server (see XX), log in once, log out after the user account has been copied

 from the server to the local station. Download user profile Wizard from

 “ http://www.forensit.com/downloads.html ”, unzip, start as administrator (XP: Switch to

 admin-account; Win7: Simply start and verify being admin) and follow on-screen instructions.

 Log out, log in again.



Map network Drives
 -Go to Computer and right-click, choose map network drive

 -Enter \\Elnino\home\user-iuw (e.g. Gronau) to reconnect a user drive (Network location (U:))

-or  \\Elnino\IUW\project name (e.g. GlobE) to reconnect a project drive



 Auf Ubuntu-Linux : Places->Connect to Server. Choose Windows. Enter server (e.g. Elnino ), folder (e.g. /home/user-iuw ),

 username (e.g. user-iuw ), domain (e.g. IFGB ). Connect. Enter Password.

<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;">

<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;">

Printer installation on Server
<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;"> System Panel->Devices and Printers->Add Device->Follow On-Screen Steps At the last

<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;"> step, print test page Right-click on printer->Properties->Panel “Security/Sicherheit”->Add...

<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;"> and add either IUW or IEA or both. Then select "printer sharing"/ “Freigabe” and also check “Im Verzeichnis

<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;"> anzeigen”. Each printer needs at least 3 drivers: Win7 x64(installed automatically on

<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;"> server), Win7 x86 (32bit) and XP x86 (32bit) Drivers additional to the one on the server are

<p style="margin-left:36pt;text-indent:-18pt;margin-top:0pt;margin-bottom:0pt;"> installed as follows: (wusste nur Bernd)


 * Drucker automatisch bereitstellen (funktioniert noch nicht so ganz):
 * Druckerverwaltung->Druckerserver->[server wählen]->Print->Rechtsklick Drucker->Mit Gruppenrichtlinie bereitstellen->hinzufügen->Gruppe auswählen
 * dann in der Konsole “gpupdate” eingeben

Assigning software to the client computers automatically through the server

 * 1. Prepare .MSI file and put in under all(S:) Software (use orca-tool)


 * 2. Within GPMC (Group Policy Management Console) select existing GPO (Software Update or Software installieren) open the Editor by right click à Computer configuration à Policies à Software settings à Software Installation à right clickà new Package à select the .MSI file


 * 3. Assign GPO to respective computers by adding or removing under security filtering, you can create a new computer-group and name it according to assigned software. Apply WMI Filtering if necessary.

Sharing a folder with other institue members
To share a folder for a certain person from another institute, just logg on to the server, right click on the folder properties -> Security -> Edit ->and add the user.

Resize/change partitions
The easiest way to change partitions is to use Windows instead of other programs (Gparted). Go to Computerverwaltung -> Datenspeicher -> Datenträgerverwaltung and change...

Gparted also works:

In order to resize or change partitions without needing to install Windows 7, you can use the Gparted Boot-CD from our CD-folder. Before you do so backup all the important data from the computer, since working with Gparted can cause data loss!
 * Start the computer booting the Gparted-CD
 * You will be guided through a special boot menu in which you can choose the keyboard layout. Choose the first option and then german

Creating images and using them
boot-cd (should be in the CD-folder) einlegen

im bios auf "Boot from CD" oä umstellen

von CD booten lassen

im bootmenü der CD Option 5 ("graphical environment") wählen

externes laufwerk einstecken, auf der die image datei ist bzw. auf das die image-datei abgelegt werden soll

im terminal "fdisk -l" eingeben, um die laufwerksbezeichnung für das ext. laufwerk festzustellen (für gewöhnlich "/dev/sdb1", auf jeden Fall aber das unterste laufwerk)

- wenn hier allerdings schon steht, dass das Filesystem NTFS ist, dann kann man schon aufgeben, da die Rescue-CD NTFS noch nicht erkennt, glaube ich

verzeichnis für das laufwerk erstellen mit "mkdir /mnt/external"

das laufwerk in das erstellte verzeichnis einhängen ("mounten") mit "mount /dev/sdb1 /mnt/external"

Creating an image:
 * 1) Boot from Acronis 13 DVD
 * 2) Select: True Image => Back Up => My Disks
 * 3) Select partition or folder you want to back up
 * 4) Create new partition/folder
 * 5) Browse backup location
 * 6) Location has to be different from the partition or folder you are going to back up
 * 7) Image file will be *.tib
 * 8) Proceed and wait until backup has finished (backup of a partition can take approx. 1 hour)
 * 9) For the case you want to recover an image via network you have to go on as follows:
 * 10) Create a local user on client that contains the image
 * 11) Control panel => User Accounts => User Accounts => Manage User Accounts
 * 12) New Window: Ladder "Advanced" => Advanced
 * 13) New Window: Left-click on "Users" on the left side => ladder "Actions" => New Users...
 * 14) Create a new user e.g. Image_User, set password  and checkmarks at "password never expires" and "User cannot change password"
 * 15) Click create
 * 16) Log off from client an log in with the newly created account
 * 17) Because the new account is a local user you have to type client name in front of the user name when you want to log in
 * 18) Example: User name: IUW10-02-PC\Image_User
 * 19) Once you are logged in, you can log out and log in with your own account
 * 20) Go to folder containing the image file *.tib
 * 21) Right click in folder => share with => specific people => drop down box => Find people...
 * 22) New window: Locations => Select the client e.g. IUW10-02
 * 23) Advanced...
 * 24) Find now => Select the newly created Account (e.g. Image_User) =>
 * 25) Give user permissions to Read/Write => Share
 * 26) Now you are finished and you can use the image via network

Using an image:


 * 1) Boot from Acronis 13 DVD
 * 2) Select: True Image => Recover => My disks
 * 3) Browse path:
 * 4) If Image is on an external HDD just select the image file *.tib on the ext. HDD
 * 5) If Image is placed on a local client in the network, select:
 * 6) Computer Near Me => Ifgb => Client xy
 * 7) Now you have to log in with the local account you created one step before (e.g. Image_User, password: ...)
 * 8) Next => Recover whole disks and partitions
 * 9) Choose the whole "Disk1" => Next => Proceed

Installing Khmer Unicode

 * 1) Go to "S:\Admin" (you have to be logged in as an admin to see this folder)
 * 2) Install application Khmer Unicode 2.0.1

Restoring deleted Data from Harddisks or Flash Devices

 * 1) Go to the Admin Network drive and search for Ontrack Easy Recovery in Software
 * 2) Run the Program as needed.

Outlook Backup anlegen: Datendateien exportieren
Um ein Backup von Outlook durchzuführen und persönliche Ordner-Dateien auf der Festplatte zu speichern, geht ihr wie folgt vor:

1. Startet Outlook 2013 und geht über Datei > Öffnen und Exportieren > Importieren und Exportieren

Unter Outlook 2010 findet ihr die Option unter Datei > Optionen > Erweitert > Exportieren

Bei älteren Outlook-Versionen als 2010 findet Ihr die Option unter Datei > Importieren/ Exportieren

2. Wählt nun Datei exportieren

3. Bestimmt als Endformat Outlook-Datendatei (.pst)

4. Wählt Outlook-Datendatei aus und aktiviert Unterordner einbeziehen

5. Bestimmt einen Speicherort für die exportierten Daten

6. Schließt den Export ab

Die Datendateien sollten, wenn möglich, nicht auf der selben Festplatte gespeichert werden wie Outlook selbst, sondern am besten immer auf einem externen Speichermedium aufbewahrt werden.

Outlook Backup wiederherstellen: Datendateien importieren

Wollt ihr einen alten Zustand eures Mail-Clients wiederherstellen, könnt ihr die zuvor exportierten Daten einfach wieder importieren. Wir erklären euch, wie das geht:

1. Startet Outlook 2013 und geht über Datei > Öffnen und Exportieren > Importiere/Exportieren

Unter Outlook 2010: Datei > Optionen > Erweitert > Exportieren (lasst Euch nicht täuschen)

Ältere als Outlook 2010: Datei > Importiere/Exportieren

2. Wählt Aus anderen Programmen und Dateien importieren

3. Wählt Outlook-Datendatei (.pst)

4. Bestimmt den Ordner, den ihr importieren wollt und wählt auch die Unterordner mit aus