Setting up the Security Proxy Server as a User-Defined Service in Windows NT Server 4.0 or Windows 2000 Server

Technical Note

Applies To:

OutsideViewWEB and AppView version 1.0 or higher
Microsoft Windows NT Server version 4.0
Microsoft Windows 2000 Server

Summary:

In its default state, the OutsideViewWEB security proxy server must be started from a command line each time the Windows server on which it runs is started. For convenience, you can configure the security proxy server as a user-defined service, so that it will start automatically when the Windows server is started. This technical note details the procedure to set up the OutsideViewWEB security proxy server as a user-defined service in Windows NT Server 4.0 or Windows 2000 Server.

What You Need Before You Start:

Before you start, the following items must be present on your Windows server:

• The OutsideViewWEB security proxy server should be installed and working properly. For information on installing and configuring security see the technical note "Configuring Security Proxy with OutsideViewWEB", as well as the System Administrator Guide, which is available at: ovweb_installguide.htm
• Install the Windows Resource Kit appropriate for your operating system, if it is not already installed. Make note of the path to the files Srvany.exe and Instsrv.exe. You should find them in the root of the directory where the resource kit is installed.
• Install either the latest Microsoft SDK for Java, or Sun JDK 1.1, if neither is already installed. Note: Once you have chosen a development kit, use only that kit for all interactions with the security proxy server.

  You can download the Microsoft SDK and Sun JDK from the following locations.

  Microsoft SDK: http://www.microsoft.com/java/SDK

  Sun JDK: http://www.java.sun.com/products/jdk/1.1

Configuring the Security Proxy Server as an NT Service:

There are four parts to setting up the security proxy server as an NT service:

I. Enable the Security Proxy Server to run as a Service

The following step utilizes the files Instsrv.exe and Srvany.exe from the Windows Resource Kit to enable the security proxy server to run as a service:

1. Click Start, click Run, and then type CMD in the Open field to open a command window.
2. At the command prompt, enter the following command, where <Path> indicates the directory path to the Windows Resource Kit.

Example: C:\NTReskit\Instsrv.exe OVWebProxy C:\NTReskit\Srvany.exe

3. Close the command window after the following message is displayed:

The service was successfully added!

II. Edit the Windows Registry to Configure the OVWebProxy Service

To configure the OVWebProxy service, follow the five steps below.

Warning: Proceed with extreme caution when editing the Windows Registry. For full warning information regarding editing the Windows Registry, see Microsoft Article Q256986:

http://support.microsoft.com/support/kb/articles/Q256/9/86.ASP

Step 1: Make a backup copy of the registry

Use the Registry Editor (regedit.exe or regedt32.exe) or a full backup program to back up the Windows Registry. Also, run Rdisk.exe to update the system's Emengency Repair Disk.

Note: It is critical to back up the Registry before you proceed. For information on backing up the Registry, see the section titled "Saving and Restoring Keys" in the following Microsoft TechNet article: http://www.microsoft.com/TechNet/winnt/Winntas/Tips/24_reged.asp

Step 2: Create a Parameters key

1. Click Start, click Run, and then type Regedt32 in the Open field.
2. In the Registry Editor, navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OVWebProxy

Click the OVWebProxy key to select it.

3. On the Edit menu, click Add Key.
4. In the Key Name field, type Parameters
5. Leave the Class field blank. Click OK.

Step 3: Add an Application value to the Parameters key

1. Click the Parameters key to select it.
2. On the Edit menu, click Add Value.
3. In the Value Name field, type Application
4. In the Data Type field, select REG_SZ (Default).
5. Click OK to open the String Editor dialog box.
6. In the String field, enter the directory path to the Java Virtual Machine in your Java development kit. For example,

If you are using the Microsoft SDK:

C:\Program Files\Microsoft SDK for Java 4.0\Bin\Jview.exe

If you are using the Sun JDK:

C:\JDK1.1.8\Bin\Java.exe

7. Click OK.

Step 4: Add an AppParameters value to the Parameters key

1. Select the Parameters key again.
2. On the Edit menu, click Add Value.
3. In the Value Name field, type AppParameters
4. In the Data Type field, select REG_SZ (Default).
5. Click OK to open the String Editor dialog box.
6. In the String field, enter the following command to define parameters for the security proxy server:

<cp switch> <directory path>\SecureProxyJ.jar com.Crystal Point.secureproxy.SecureProxy <directory path>\server.properties

For example,

If you are using the Microsoft SDK:

/cp d:\OVWeb\proxy\lib\SecureProxyJ.jar com.crystalpoint.secureproxy.SecureProxy d:\OVWeb\proxy\conf\server.properties

If you are using the Sun JDK:

-cp d:\OVWeb\proxy\lib\SecureProxyJ.jar com.Crystal Point.secureproxy.SecureProxy d:\OVWeb\proxy\conf\server.properties

7. Click OK.

Step 5: Add an AppDirectory value to the Parameters key

1. Select the Parameters key again.
   
2. On the Edit menu, click Add Value.
   
3. In the Value Name field, type AppDirectory
   
4. In the Data Type field, select REG_SZ (Default).
5. Click OK to open the String Editor dialog box.
6. In the String field, type the path to the directory where the Java Virtual Machine in your Java Development Kit resides. For example,

If you are using the Microsoft SDK:

C:\Program Files\Microsoft SDK for Java 4.0\bin

If you are using the Sun JDK:

C:\JDK1.1.8\bin

7. Click OK, and then close the Registry Editor.

III. (Optional) Configure Administrative Access to the OVWebProxy Service

Follow the steps specific to your operating system to configure a user or group whom you wish to give administrative access to the OVWebProxy service. By default, any user who has Administrator rights on the server will have administrative access to the service.

Windows NT

1. Click Start, point to Settings, and then click Control Panel. In the Control Panel, double-click the Services icon.
2. In the Services dialog box, double-click the OVWebProxy line item to open the Service dialog box for the OVWebProxy service.
3. In the Log On As area, select This Account to choose a user or group that will have administrative access to the OVWebProxy service.
4. Click the … button to select from available domains and users. Once you have selected the user or group you wish to have administrative access to the service, click OK.

Windows 2000

1. Click Start, point to Programs, Administrative Tools, and then click Services.
2. In the Services window, double-click the OVWebProxy line item to open the Properties dialog box.
3. On the Log On tab, select This Account to choose a user or group that will have administrative access to the OVWebProxy service.
4. Click the Browse button to select from available domains and users. Once you have selected the user or group you wish to have administrative access to the service, click OK.

IV. Start the Service

Follow the steps specific to your operating system to start the OVWebProxy service for the first time.

Windows NT

1. Click Start, point to Settings, and then click Control Panel. In the Control Panel, double-click the Services icon.
2. In the Services dialog box, locate the OVWebProxy line item. Verify that the value "Automatic" appears in the Startup column for the OVWebProxy service. This means that the service is configured to start automatically each time the server is started.

If the value "Automatic" does not appear in the Startup column or if you wish to select a different startup type, double-click the OVWebProxy line item. In the Service dialog box, select a startup type from the options in the Startup Type area.

3. Either reboot the server or start the service manually. To start the service manually, click the OVWebProxy line item to highlight it, and then click the Start button. The service should start automatically upon subsequent reboots of the server.

Windows 2000

1. Click Start, point to Programs, Administrative Tools, and then click Services.
2. In the Services window, locate the OVWebProxy line item. Verify that the value "Automatic" appears in the Startup column for the OVWebProxy service. This means that the service is configured to start automatically each time the server is started.

If the value "Automatic" does not appear in the Startup column or if you wish to select a different startup type, double-click the OVWebProxy line item. In the Properties dialog box, select a startup type from the Startup Type drop-down menu.

3. Either reboot the server or start the service manually. To start the service manually, double-click the OVWebProxy line item to open the Properties dialog box. On the General tab, click the Start button. In the Description field, enter a description for the service if you wish. The service should start automatically upon subsequent reboots of the server.