System Info:

• Motherboard: Intel Corporation DG33BU
• Intel Xeon E5620 2.4GHz quad core
• 16 GB memory
• Intel SRCSASLS4I raid controller
• 2 x Western Digital RE4 WD2003FYYS 2TB 7200rpm 64MB Cache SATA 3.0Gb/s 3.5" internal hard disk
• On board network card: Intel(R) 82566DC-2 Gigabit Network Card (MAC Address: 00:1e:67:0e:2c:c8)
• Intel Slimline DVDRW AXX SATA DVDRW ROM
• Purchased from varsity on September 5, 2011 (2 years limited warranty)
• OS: Windows Server 2008 R2

Currently Installed Services:

Shared Folders:

DBA Manufacturing: scubaDBA group has full control
Solidworks VaultData: Solidworks VaultAdmin group has full control

Configure two MATLAB licenses on the server & Restrict access to the license

1. Get the new license file and installation keys from mathworks.com
2. License_538961.lic is for acoustics lab computers, saved under \\batta\software\matlab\license file\dozzy\
3. License_898068.lic is for henn205 lab computers, saved under \\batta\software\matlab\license file\dozzy
4. Merge above two license files into one license.lic file
5. Add server information in the license file and name it license.dat, which will be used for the license server

   DAEMON MLM "C:\Program Files\MATLAB\R2013a\etc\win64\mlm.exe" options="C:\Program Files\MATLAB\R2013a\etc\win64\mlm.opt"
   # BEGIN--------------BEGIN--------------BEGIN
   # MathWorks license passcode file.
   # LicenseNo: 538961   HostID: 001E670E2CC8
   #
   # R2013a
   #
   INCREMENT MATLAB MLM 29 01-jan-0000 10 4EB2942D4B4B4933F225 \
   	VENDOR_STRING=vi=0:at=200:ae=1:lu=200:lo=CN:ei=992814:classroom=1: \
   	DUP_GROUP=UH asset_info=538961 ISSUED=13-Mar-2013 \
   	NOTICE=product=MATLAB SN=538961
   INCREMENT Data_Acq_Toolbox MLM 29 01-jan-0000 10 2E32F4AD51E33939A9D8 \
   	VENDOR_STRING=vi=0:at=200:ae=1:lu=200:lo=CN:ei=992814:classroom=1: \
   	DUP_GROUP=UH asset_info=538961 ISSUED=13-Mar-2013 \
   	NOTICE="product=Data Acquisition Toolbox" SN=538961
   INCREMENT Image_Acquisition_Toolbox MLM 29 01-jan-0000 10 \
   	BE82243D4B6E6BEC7FD8 \
   	VENDOR_STRING=vi=0:at=200:ae=1:lu=200:lo=CN:ei=992814:classroom=1: \
   	DUP_GROUP=UH asset_info=538961 ISSUED=13-Mar-2013 \
   	NOTICE="product=Image Acquisition Toolbox" SN=538961
   INCREMENT Image_Toolbox MLM 29 01-jan-0000 10 2EE2D4ED80F6574C3DD2 \
   	VENDOR_STRING=vi=0:at=200:ae=1:lu=200:lo=CN:ei=992814:classroom=1: \
   	DUP_GROUP=UH asset_info=538961 ISSUED=13-Mar-2013 \
   	NOTICE="product=Image Processing Toolbox" SN=538961
   # MathWorks license passcode file.
   # LicenseNo: 898068   HostID: 001E670E2CC8
   #
   # R2013a
   #
   INCREMENT MATLAB MLM 29 01-jan-0000 60 4E527B8A4C1223B5CFCA \
   	VENDOR_STRING=vi=0:at=200:ae=1:lu=200:lo=CN:ei=1552038:classroom=1: \
   	DUP_GROUP=UH asset_info=898068 ISSUED=26-Jun-2013 \
   	NOTICE=product=MATLAB SN=898068
   INCREMENT Curve_Fitting_Toolbox MLM 29 01-jan-0000 60 \
   	5E422B1AAE93D1280D9E \
   	VENDOR_STRING=vi=0:at=200:ae=1:lu=200:lo=CN:ei=1552038:classroom=1: \
   	DUP_GROUP=UH asset_info=898068 ISSUED=26-Jun-2013 \
   	NOTICE="product=Curve Fitting Toolbox" SN=898068
   # END-----------------END-----------------END

6. Create a mlm.opt file under C:\Program Files\MATLAB\R2013a\etc\win64\mlm.opt, which is used to specify which hosts can use which license.

   # Options file for use with MATLAB
   #
   # Computers use 10 seats license 538961
   #
   HOST_GROUP hebb_computers acoustics1 acoustics2 acoustics3 acoustics4 acoustics5 acoustics6 acoustics7 acoustics8 acoustics9 acoustics0 optics7 optics8 optics9 optics10 optics11 optics12 VM-Software tau.phas.ubc.ca hyper
   #
   # Computers use 60 seats license 898068
   #
   HOST_GROUP henn205_computers audi barracuda bentley benz bmw boxster bugatti cadillac chevrolet citroen cooper cord corvette countach daimler datsun daytona dodge duesenberg enzo ferrari fiat fiero firebird ford galaxy hornet hudson impala javelin maserati cobra
   HOST_GROUP henn203_computers jeep lotus mercedes pontiac viper aston carrera cayman diablo gto stingray 
   #
   # Include the group computers for license 538961
   INCLUDE "MATLAB:asset_info=538961" HOST_GROUP hebb_computers
   INCLUDE "MATLAB:asset_info=538961" HOST_GROUP henn203_computers
   #
   # Include the group computers for license 898068
   #
   INCLUDE "MATLAB:asset_info=898068" HOST_GROUP henn205_computers
   INCLUDE "MATLAB:asset_info=898068" HOST_GROUP henn203_computers

7. Open LMTool, go to Start/Stop/Reread tab, reread the license file and then restart the license server.

Reference: http://www.mathworks.com/support/solutions/en/data/1-4IYKZ9/?solution=1-4IYKZ9

Add GPO: Software - Adobe Reader XI 11.0

Reference: http://blog.stealthpuppy.com/deployment/adobe-reader-xi-deployment/

Upgrade Solidworks License Server to 2012

1. Open SolidNetWork License Manager, make sure there is no borrowing licenses
2. On Server Administration tab, Stop the license server
3. On Server Administration tab, click on Modify button, then choose Transfer a software license
4. Open Services, stop SolidNetWork Licnese Manager & SolidWorks Workgroup PDM Server
5. Uninstall SolidWorks SolidNetWork License Manager and SolidWorks Workgroup PDM Server 2011
6. Install Solidworks 2012 Server products
7. Open SolidNetWork License Manager, activate license over the Internet
8. Open Services, make sure both SolidNetWork Licnese Manager & SolidWorks Workgroup PDM Server are started

Changed User Profiles path

1. Shared D:\PHAS\Profiles folder to be accessible by all users
2. Changed profiles alias on DNS server to point to dozzy
3. Create User Profiles replica group on Dozzy DFS management console, replicate d:\phas\profiles from dozzy to batta

Created Group Policy Objects to centrally deploy software

• Software - Acrobat Reader X 10.1.4

======== Extract *.msi file from *.exe file ======== 
1. Downloaded Adobe Reader Enterprise Distribution version from ftp://ftp.adobe.com/pub/adobe/reader/win/10.x/10.1.4/en_US/
2. Choose Start > Run
3. Type in: "%UserProfile%\Downloads\AdbeRdr1014_en_US.exe" - nos_ne, and click OK
4. When the Adobe Reader Setup screen appears, Choose Start > Run
5. Type in: "%ProgramData%\Adobe\Setup", and then click OK
6. Copy everything in that folder to C:\Temp\AcroRead

======== Slipstreem the patch into the 10.0 MSI ======== 
1. Open Command prompt, and then go to C:\Temp\AcroRead directory
2. Type: msiexec.exe /a AcroRead.msi /p AdbeRdrUpd1014.msp
3. Click Next on "Adobe Reader X (10.1.4) - Setup" window
4. Network location, enter: \\batta.phas.ubc.ca\PHAS\Deploy\AcroRead
5. When finish, click on Finish button

======== Customize Installation ======== 
1. Download and install free Adobe Customization Wizard 10 from ftp://ftp.adobe.com/pub/adobe/acrobat/win/10.x/10.0.0/misc/
2. Run Adobe Customization Wizard X > Open Package > Select \\batta.phas.ubc.ca\PHAS\Deploy\AcroRead\AcroRead.msi
3. Follow instructions on this page with settings: http://blog.stealthpuppy.com/deployment/deploying-adobe-reader-x/
      

• Software - Adobe Flash Player 11.4

======== Download *.msi file from Adobe ========
1. Adobe Flash Player Enterprise Distribution version can be downloaded from the following website:
  http://www.adobe.com/products/flashplayer/distribution3.html
  We'll need to download both MSI installers for Internet Explorer & Plugin-based browsers
2. Copy downloaded files to \\batta.phas.ubc.ca\PHAS\Deploy\AdobeFlash\ folder

======== Create Group Policy Object ========
1. Open Group Policy Management Console
2. Right click on PHAS Computers container, choose Create a GPO in this domain, and Link it here...
3. On New GPO window, enter the following information:
   Name: Software - Adobe Flash Player 11.4
   Source Starter GPO: (none)
4. Right click on the new GPO, then choose Edit
5. Go to Computer Configuration > Policies > Software Settings > Software Installation
6. On the right side pane, right click and then choose New > Package...
7. Locate the installer file and open
8. Select deployment method: Advanced
9. Deployment tab:
   Deployment type: Assigned
   Deployment options: check Uninstall this application when it falls out of the scope of managment
   Click Advanced button, check the following options:
   Ignore language when deploying this package
   Make this 32-bit X86 application available to Win64 machines.
10. Repeat 6 - 9, and add the second package
11. Close Group Policy Management Editor
12. On Scope tab, Security Filtering window, remove Authenticated Users, add VM-WIN7 computer for testing purpose.

========= Test GPO =========
1. Go to VM-WIN7 computer, run gpupdate /force and then reboot
2. If the software installed as expected, open Group Policy Management Console, change the scope back to Authenticated Users
  

• Software - Java 7u7

======== Obtain Java offline installer ======== 
1. Go to Java Website to download the updated JRE installer
2. Make sure to download both the 32bit and 64bit offline versions of the JRE:
   32bit: http://download.oracle.com/otn-pub/java/jdk/7u7-b11/jre-7u7-windows-i586.exe
   64bit: http://download.oracle.com/otn-pub/java/jdk/7u7-b11/jre-7u7-windows-x64.exe

======== Extract the MSI ========
1. Run the *.exe file and leave the installation window open
2. Go the the following location:
   %username%\AppData\LocalLow\Sun\Java\jre1.7.0_07
   %username%\AppData\LocalLow\Sun\Java\jre1.7.0_07_x64
3. Copy the files to the corresponding folder on the server:
   32bit: \\batta.phas.ubc.ca\PHAS\Deply\Java\jre1.7.0_07\
   64bit: \\batta.phas.ubc.ca\PHAS\Deply\Java\jre1.7.0_07_x64\
   
======== Generate the Transform (MST) file to customize the install ========
We will need to make chages to the MSI to configure Java with settings appropriate to the enterprise environment.


  

  
Table
Property
Original Value
New Value
Description
  
Property
JAVAUPDATE
1
0
Disable auto update
  
Property
AUTOUPDATECHECK
1
0
Disable auto update
  
Property
JU
1
0
Disable auto update
  
Property
IEXPLORER
0
1
Activates IE plugin
  
Property
MOZILLA
0
1
Activates Mozilla plugin
  
Property
RebootYesNo
Yes
No
Suppress the need for a reboot
  
Property
EULA
0
1
Accept the EULA for all users
  

1. Open the MSI file in Orca (A tool provided by Microsoft)
2. Click Transform > New Transform
3. Scroll down the left hand tables window and click the "Property" Table
4. In the right hand window, edit the values for the properties to match with above table
5. When finished making the changes, go to Transform > Generate Transform
6. Save the transform file in \\batta.phas.ubc.ca\PHAS\Deply\Java\ folder
7. Close Orca

======== Add the Package and Transform to Group Policy ========
1. Open Group Policy Management Console
2. Right click on PHAS Computers container, choose Create a GPO in this domain, and Link it here...
3. On New GPO window, enter the following information:
   Name: Software - Java 7u7
   Source Starter GPO: (none)
4. Right click on the new GPO, then choose Edit
5. Go to Computer Configuration > Policies > Software Settings > Software Installation
6. On the right side pane, right click and then choose New > Package...
7. Locate the installer file and open
8. Select deployment method: Advanced
9. Deployment tab:
    Deployment type: Assigned
    Deployment options: check Uninstall this application when it falls out of the scope of managment
    Click Advanced button, check the following options:
      Ignore language when deploying this package
    Make this 32-bit X86 application available to Win64 machines.
  Upgrades tab:
    Packages that this package will upgrade:
      Include any previously deployed group policy, so this new package will replace the old one
  Modifications tab:
    Include the *.mst file previously created by Orca
10. Repeat 6 - 9, and add the second package
11. Close Group Policy Management Editor
12. On Scope tab, Security Filtering window, remove Authenticated Users, add VM-WIN7 computer for testing purpose.

========= Test GPO =========
1. Go to VM-WIN7 computer, run gpupdate /force and then reboot
2. If the software installed as expected, open Group Policy Management Console, change the scope back to Authenticated Users

Reference: http://adminadventure.wordpress.com/2012/06/12/java-jre-deployment-via-group-policy/

Installed Maple Network License Manager

• Run \\batta\software\Maple\Maple 16\Network version License Managers\NetworkToolsInstaller_WindowsX86_64.exe, when prompt, change default port to 54000
• Allow C:\Program Files\Maple Network Tools\FLEXlm\11.7\windows\lmgrd.exe & maplelmg.exe program through firewall
• Allow TCP 54000 port through firewall
• Run LMTools11.7, Go to Config ServicesTab, and create a new service for Maple as following and then save it:

  Service Name: Maple License Server
  Path to the lmgrd.exe file: C:\Program Files\Maple Network Tools\FLEXlm\11.7\windows\lmgrd.exe
  Path to the license file: C:\Program Files\Maple Network Tools\activate\Maple16.lic
  Path to the debug log file: C:\Program Files\Maple Network Tools\FLEXlm\11.7\windows\log.txt
  Enable: Start server at Power Up & Use Services

• Edit C:\Program Files\Maple Network Tools\activate\Maple16.lic file, modify the following line to include port number:
  VENDOR maplelmg port=1824

Deployed SolidWorks Workgroup PDM Backup

• Created a PowerShell backup script and saved it under D:\Scripts\BackupSW.ps1
• Created a scheduled task to run the script at 3am everyday

Create a group policy to restrict user login to a CBM desktop (Theresa's computer)

• In Active Directory Users and Computers:
  1. Create a new group call CBM Desktops, add SIGG (Theresa's computer) into the group
  2. Create a new group call CBM Users, add theresa into the group
• Open Group Policy Management Console
  1. Create a new group policy (CBM Desktop Login Restriction) under \PHAS COmputers\Admin Office container
  2. On Scope tabe, add CBM Desktops group to the Security Filtering section, and remove default Authenticated Users group
  3. Edit this group policy: Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> Allow log on locally
  4. Add Administrators, CBM Users, Domain Admins group to the list
• In the future, if we need to change the computer or the allowed users, only need to update the memebers in CBM Desktops and CBM Users groups

Installed DBA Manufacturing Updates

• Downloaded Update392-21.exe from DBA website
• Backup DBA Manufacturing folder to D:\Backup\DBA Manufacturing.20120130
• Installed the update
• Opened DBA Main Company program, tested

Installed Solidworks Workgroup PDM

• Run \\batta\Software\SolidWorks\2011-2012\Win64\pdmwserver\setup.exe file to install Solidworks Workgroup PDM Server
• VaultData is saved under D:\PHAS\VaultData
• Installed Solidworks Workgroup PDM VaultAdmin and Solidworks Explorer
• Opened the following ports on the firewall: 20000(VaultAdmin), 30000(Data), 40000(Request)

Enabled MasterCAM License Server

• Run C:\mcamx\NhaspX.exe file to update license code
• Choose Network and Local options
• Choose the license code for 2012: c:\mcamx\University of British Columbia [C-171-089] Sim #N04957 Permanent Sim Code.nhcode
• Click on Update button to update the license code on the usb dongle

Installed IDL License Server

• Run \\batta\Software\IDL\IDL81LicServer_setup32.exewith default settings
• Allow C:\Program Files (x86)\ITT\IDL\IDL81\bin\bin.x86\idl_lmgrd.exe program through firewall
• Allow TCP 1700 port through firewall

Installed DBA Manufacturing

• Run \\batta\Software\DBA Manufacturing\DBANextGen391-50.exe with default settings
• Share C:\Program Files (x86)\DBA Manufacturing folder with advanced sharing, grant PHAS\scubaDBA group full control permission, remove everyone from permision list
• Allow C:\Program Files(x86)\DBA Manufacturing\ejsme.exe program through firewall
• Allow TCP 3050 port for Firebird Database through firewall
• Created a daily DBABackup job on hatta server to copy database file EJDB.FDB from batta to dozzy every morning at 2:00am
• Copy \\batta\DBA Manufacturing\Experimental Cosmology Lab folder to C:\Program Files (x86)\DBA Manufacturing folder
• Run \\batta\Software\DBA Manufacturing\392 Update\Update392.exe to install the build 392 updates
• Run \\batta\Software\DBA Manufacturing\392 Update\Training392-11.exe to install the training company
• Allow C:\Program Files (x86)\DBA Software\DBA Manufacturing (Beta)\ejsme.exe program through firewall for training company
• On client computer, map a network drive (for example Y:) to \\dba\DBA Manufacturing
• On client computer, install client software from Y:\Client\setup.exe
• On client computer, Control Panel -> User Accounts -> Change User Account Control Settings: slide down to "Never Notify"
• Put the user into PHAS\scubaDBA group

Configure an Authoritative Time Server

• Run \\batta\software\Microsoft\Fix for NTP configuration on 2008 Server\MicrosoftFixit50395.msi
• Enter ntp2.ubc.ca and ntp.ubc.ca as the NTP server to synchronize with

Configured DFS to replicate user profiles from batta as profile backup

Installed Bacula Client software

• Reference settings under \\hatta\c$\Program Files\bacula\bacula-fd.conf

Installed freeSSHd 1.2.6

• Once finished installation, copy configuration files from \\hatta\c$\Program Files (x86)\freeSSHd\ to C:\Program Files(x86)\freeSSHd\

Installed MasterCAM License Server

• Run \\batta\Software\MasterCAM\Aladdin\mastercam-licensemanager.exe to install HASP License Manager Server
• Run \\batta\Software\MasterCAM\Aladdin\mastercam-monitor.exe to install AKS Monitor

Installed IRONCAD License Server

• Run \\batta\Software\IRONCAD\ICLicenseServer.exe to install IRONCAD Concurrent License Server
• Once the license server is installed, run Hardware ID Tool to get the server's Disk ID code & Ethernet Address code, then send the code to support@ironcad.com to request for a new license file
• Run License Server Admin to add licenses: Subnet Servers -> right click on the server -> Add Feature -> From a File -> To Server and its File, open the license file
• If use the usb dangle, on client computer, edit <IRONCAD FOLDER>\bin\e4ncli.ini file to pointing to the right license server IP address (*host name won't work, has to be IP address)
• If use non-dangle license server, on client computer:
  Right click on <IRONCAD FOLDER>\bin\IsConfigClient.exe and choose Run as administrator, add the server's hostname: ironcad.phas.ubc.ca
  Move <IRONCAD FOLDER>\bin\e4ncli.ini file to <IRONCAD FOLER>.
  

Installed MATLAB License Manager

• - Run \\batta\Software\MATLAB\R2011b\Win64\matlab_R2011b_win64_installer.exe
• Choose the option to "Install without using the Internet" and click Next
• When prompted of the File Installation Key, enter the the File Installation Key in "\\batta\software\MATLAB\License File\dozzy\MathWorks License File  R2011b File Installation key for license 538961.txt" file
• When prompted, choose Custom install to install License Manager 11.9 only
• License file is under \\batta\software\MATLAB\License File\dozzy\license.lic
• Allow TCP port 27000 through firewall
• Allow C:\Program Files\MATLAB\R2011a\etc\win64\mlm.exe through firewall
• Allow C:\Program Files\MATLAB\R2011a\etc\win64\lmgrd.exe through firewall
• Open Service, start MATLAB License Server service.

Installed SolidNetWork License Manager

• Run \\batta\Software\SolidWorks\2011-2012\Win64\setup.exe
• Choose to install Server Product -> SolidNetWork License Manager
• Enter the serial number (\\batta\Software\SolidWorks\2010-2011\SN.txt)
• Allow TCP port 25734 & 25735 through firewall
• SolidWorks license has to be deactivated on current license server before it can be activated on the backup server
• When installing SolidWorks on the client computer, DO NOT download newer version, the education license doesnot support the new version

Installed Altium Designer Private License Server

• Run \\batta\Software\AltiumDesignerPrivateLicenseServer-Build9.0.0.17655\Private License Server Setup\setup.exe
• After the installation, stop Altium Designer Private License Server service
• Create a desktop shortcut for C:\Program Files (x86)\Altium Designer\DXPSecurityService.exe, open the shortcut properties, add /APP parameter at the end of Target
• Run the desktop shortcut for DXPSecurityService.exe, the Altium icon will show up at the bottom right
• Right click on the icon, choose Pause security
• Right click on the icon, choose Settings, chose Primary Server as Type
• Add all licenses under \\batta\Software\AltiumDesignerPrivateLicenseServer-Build9.0.0.17655\LicenseFileBackups\ folder
• Click on Configure button, add users as shown in \\batta\Software\AltiumDesignerPrivateLicenseServer-Build9.0.0.17655\configure.txt file
• Right click on the icon, choose Exit
• Start Altium Designer Private License Server service
• Allow TCP port 21001 through firewall

• Installed Sophos Endpoint Security and Control
• Installed Active Directory Domain Services on the server.
• Run dcpromo on dozzy to add an additional domain controller (Instructions on installing an additional domain controller)
• Reimported netlogon.dns into our DNS server, run dcdiag to test connectivity between two domain controllers.

• Installed the server on the server rack

• Created RAID1 array with two partitions, 200GB for OS, 1.8TB for Data
• Installed Windows 2008 Server R2 on the OS partition with computer name dozzy, and IP address 142.103.236.18
• Installed all critical Windows Updates
• Enabled Remote Desktop Access

For more assistance contact sysadmin@phas.ubc.ca ( Sysadmin )
 

webmaster@phas.ubc.ca

[Dept. Home Page]

last updated: