Cram Session on IEAK 4.0 (070-79)
By: Gary Noack
Thanks and credit to:
Suresh Kumar (suresh.kumar@mailexcite.com)
Thomas Leuthard (Leuthard@WebShuttle.ch)
Brian Talbert (wtalbert@cais.net)
Installing IE 4.0
To install the IE 4.0 the user must run IE4Setup.exe. To uninstall IE 4.0 you use the
add/remove option in Control Panel. For a emergency uninstall you can run IERemove.exe.
To install Internet Explorer 4.0 you must have Administrator rights on Windows NT 4.0.
On Windows 95 anyone can install IE 4.0
To make a *.cab file from your custom Components you use the Iexpress.exe utility.
Installation progresses are recorded in \windows\log.txt, which is renamed for successive
re-installs as \windows\log.bak.
Configure the Windows Desktop Update component (Stage4 in IEAK Wizard) to auto update the
web content and to give a web-like interface to folders, but NOT to subscribe.
To remove Windows Desktop Update component select uninstall IE4.0 then select WDC in the
next succeeding window.
User Profile Assistant can be used to store personal information (name, address, salary
range, email, etc.) to automatically present to web sites that request it.
User Agent Strings can be used to track site statistics, such as how many times your
content
is accessed and by which types of Web browsers and which Operating System they use.
Temporary Internet folder and History folder cannot be deleted. To recover disk space
adjust
the size of the Temporary Internet folder on the general tab of Internet Options window.
Requirements
Processor: 486/66
RAM: IE 4.0 on Windows 95 needs 8 MB (and 16 MB with Active Desktop)
IE 4.0 on Windows NT needs 16 MB (and 24 MB with Active Desktop)
Disk Space: Standard 43 MB
Enhanced 50 MB
Full 59 MB
The MCIS Internet Locator Service (ILS) requires Windows NT Server 4.0 and Internet
Information
Server 3.0 or higher with Active Server Pages (ASP) enabled. (Microsoft Exchange or Proxy
server
is not required!)
Installation of a DNS server will enhance Netmeeting/ILS Server usage on the intranet.
Migrating from Internet Explorer 3.x
Internet Explorer 4.0 Setup installs over an installed version of Internet Explorer 3.0
and
imports proxy settings, favorites, and cookies from the previous version. However, you
must
reinstall any plug-ins that you want to keep. If Internet Explorer 3.x is already
installed on
the user's computer, the new version will be installed over the existing version. The
customized
browser will NOT be installed in the custom location entered in IEAK.
Note Users cannot have both Internet Explorer 3.0 and Internet Explorer 4.0 on the same
machine
unless they have created a dual-boot system, that is, a computer that can boot to either
Win95
or WinNT. With a dual-boot system, you can install Internet Explorer 3.0 under one
operating system,
and Internet Explorer 4.0 under the other.
Migrating from Netscape Navigator 3.x
Internet Explorer 4.0 Setup imports proxy settings, bookmarks, and cookies from Netscape
Navigator 3.0. However, you must reinstall plug-ins. If you want helper applications to
run when
called by Internet Explorer, add the applications' file extensions to the list of Windows
file
type extensions and specify the program that opens files with those extensions.
Note Internet Explorer 4.0 can coexist safely with Netscape Navigator on the same machine.
Using Previously Existing Internet E-Mail and News Programs
You can configure Internet Explorer 4.0 to work with your previously existing e-mail and
news
applications in two ways. If the e-mail application is already on users desktops,
simply choose
Internet Options from the View menu, and then click Programs. In the Programs tab, select
the
application you wish to use for e-mail from the drop-down box. If you would like to
introduce
another e-mail or news application in conjunction with Internet Explorer, you can do so by
including each application as a custom component when you build custom packages of
Internet Explorer,
and pre-configuring Internet Explorer to use each application.
You can also specify Outlook Express as your Internet e-mail and news program when you
build
custom packages of Internet Explorer. If Outlook Express is specified, Setup automatically
imports folders from existing e-mail packages such as Netscape Mail, Eudora Light, and
Eudora
Pro into Outlook Express. Settings from Microsoft® Exchange and Microsoft Outlook will
also be
imported into Outlook Express if appropriate for your configuration.
Language Versions
You must create and distribute a separate Internet Explorer 4.0 custom build for each
language
you want to deploy. If you install the Windows Desktop Update, the language must match the
language of your Windows or Windows NT shell. This limitation does not apply to the
browser. If
users attempt to install the browser and shell in a different language, only the browser
will be
installed.
Channels & Subscriptions
The title of each Channel must be unique.
A HTML Page can contain any number of links to a *.CDF file.
ISP & ICP can only delete and add one channel using the IEAK Wizard. The Corporate
Administrator
is allowed to delete all of them.
.cdf files (a mapping file of the web site contents) allows webmasters to convert their
entire
web site into a channel and place it on the web server, help users for web casting and
preserving their time.
After Internet Explorer is initially installed, channels provide an effective way to
distribute
browser updates.
Full subscription allows users to do off line browsing.
Partial subscription notifies of web site content changes.
Less than hourly updates on a subscription schedule is not possible.
Custom Bitmaps
Create the following directory structure:
Folder Name Description
\CIE Parent root for all files
\CIE\Bitmaps Custom bitmap files (graphic files needed for your custom browser)
You have the option to customize the following bitmaps in your browser. Place the bitmaps
in the
\CIE\Bitmaps folder before you run the IEAK Wizard.
One background bitmap for the CD-ROM Autorun screen (if you create a compact disc
package).
Custom image for the CD-ROM buttons (if you create a compact disc package).
Custom 135-by-256 pixel bitmap for the Active Setup installation wizard that your users
will run
when they install the browser.
Custom toolbar bitmap (that displays as a background for the buttons and menus). This
bitmap
should be in a light color to still see the black text of the menubar.
The custom toolbar bitmap (specified in Stage 4) for Internet Explorer will be displayed
in
Microsoft Internet Explorer, my Computer, Control Panel and Windows NT Explorer. It will
NOT be
displayed in any Application like Outlook Express, Netmeeting or FrontPage Express.
It is NOT possible to change the window border style in installation screens using the
IEAK
Wizard.
IEAK Packages
You cant avoid IE4.0 while building a custom package.
Down load Site URL: Specify the HTTP or FTP URL for your server. IEAK appends the folder
Ie4site
to the URL after you run the wizard.
If the distribution server is a Unix server use lower case folder names and upper case
filenames.
IE4sites.dat file has to be updated to reflect the change if the user couldnt find
the
component down load server.
One custom built package can contain upto 10 separate configurations and 10 download
sites.
Using Install package silently you can specify only one custom download site.
For silent installation, package must reboot the users machine after the
installation using
both "auto reboot" & "do not prompt user before reboot".
Sync of all components occurs at Stage 2 of the IEAK Wizard, if Sync All is
selected.
IEAK License agreement with MS requires you to update them once in three months on how
many IE
installations/distributions you made using IEAK.
After IEAK installation and before running profile manager restart the system.
Advanced Version Synchronisation screen colous
Red: component missing.
Yellow: button shown AVS unsynced, Internet off-line, or older version.
Green: all latest version.
Use Synchronize button in AVS Screen to download the red buttoned components from MS site.
AVS can be disabled in IEAK.
Install.ins
The default location for saving the .ins file is the folder within the Ie4site folder that
contains the installation package. For English versions, the folder is \En.
To make two similar packages you create one package, make a new folder and copy the
Install.ins
file to this folder. When you create the second package you enter the path of the new
folder as
the destination. IEAK Wizard will take the install.ins from package 1 as a template and
you can
make the changes you need not having to create the whole package again. This can be
extended for
more packages as required.
The install.ins can be used to change the configuration of IE after installing. IEAK
Profile
Manager to open and edit .ins files which can be distributed with the logon script in
order to
centrally periodically manage and update the user browser settings whenever users logon.
(This
is how Profile Manager is used to centrally configure the user/group settings) The auto
proxy
files (.js .jvs .pac) can also be distributed in this way.
If you receive the "No Policy Files Found" error message when opening IEAK
Profile Manager, the
.ins file was not available.
IEAK Modes
Internet Explorer Administration Kit (IEAK) supports three different
licencing/distribution
modes: Corproate Administrator, Internet Service Provider, and Internet Content Provider.
Mode Customize
Corp Administrator Windows desktop update component, Security settings, & Proxy
settings.
Internet Service Provider Additional programs & scripts, dial-up settings, and
server-based
packages.
Internet Content Provider appearance of setup program, directs users to Internet/Internet
servers for downloads, language specific package, software
distribution channel, browser interface.
Internet Service Provider licence codes are significant in that they are a 10-digit code.
This
code is necessary to enable the creation of the Single floppy distribution which allows
customers to gain access to Internet, connect to the distribution server and download
distribution files.
When creating a single floppy distribution:
- users will require TCP/IP and RAS in order to connect to ISPs Server modem.
- a single .isp file will be used to direct to the sign-up server and a unique .ins file
will be
created dynamically for each user.
- the ISP's 10-digit licence code is used as the Licensing code when connecting via to the
internet.
Security
Zones Default Setting Add Sites
Local Intranet Zone Medium Yes
Trusted Sites Zone Low Yes
Internet Zone Medium No
Restricted Zone High Yes
The Internet Zone contains all Sites that are not in any other Zone. So this is the
setting for
the whole Internet. Internet Zone (Medium security) prompts the users before downloading
the
signed ActiveX, prompts the users before sending the non-encrypted data and prevents the
user from downloading the unsigned ActiveX controls.
Low Medium High
Signed ActiveX activate ask deactivate
Unsigned ActiveX ask deactivate deactivate
Secure for scripting activate activate activate
Not marked as secure ask ask deactivate
File Downloads deactivate activate activate
Medium level (default) security warns the users before downloading the ActiveX controls
and
potentially harmful content from untrusted sites.
.asp pages can be viewed only if Allow active scripting (default for medium security) is
enabled.
High Level security setting disables the file downloads and is given to untrusted sites.
Place
untrusted sites in the Restricted zones. Trusted sites are given Low level security.
In order of Precendence, User profile -> Group profile -> Default User profile.
Multiple groups are applied in order of group priority specified.
Security settings cannot block the user from accessing specific sites. This can be done at
the Proxy server.
Files to know
The function of the following DLLs should be known:
SHDOCVW.DLL Enables the Browser to navigate the Web, view HTML pages and link to favorites
WININET.DLL Processes ActiveX Controls
MSHTML.DLL This is the engine that renders HTML
URLMON.DLL Processes URLs to provide HTTP connectivity
The following Files must be digital signed:
Branding.cab
Desktop.cab
Ie40cif.cab
IE4setup.exe
Folder<n>.cab
Chl<xxxx>.cab
All *.cab and custom controls must be digitally signed for installation if they contain
Active X components.
The user starts only the IE4Setup.exe to launch the Setup. There are several Parameters
for
IE4Setup.exe:
/Q Installation with no User interaction
/I:[Y/N] Windows Desktop Update [Yes/No]
/M Installation Mode (0=Standard, 1=Enhanced, 3=Full)
/U Path where the *.CAB Files are located
/R:N No reboot after installation. If you want IE 4.0 to work properly the PC has to be
rebooted.
/D Download only Files for you current Operating System
/X Installs IE 4.0 without Shell, Symbols and Links
/L Replaces the URL of the IE4Sites.dat file.
Netmeeting
Netmeeting allows users to participate in an online conferences. Applications may be
shared with
other computers that do not have the applications loaded on them. A Netmeeting call can be
started using a computers network address, a computer name, an Email address, or a
modem
telephone number but NOT using a user name. Netmeeting supports both IPX/SPX and TCP/IP
protocols.
To restrict a user from receiving video, use "Netmeeting settings" in IEAK
Profile Manager.
"System policies and restrictions" in the IEAK Wizard using conf.adm can be used
to remove the
video tab in Netmeeting's tools menu, options.
Miscellaneous & Components
The Autocompletion functionallity requires the History folder. Therefore, clearing the
History
folder disables the option of Autocompletion in the URL address bar.
Netshow: ASF, RTP Live audio and RTP WAV audio formats can create Streaming audio.
MS Wallet can be used to store name, address, and credit card information. It supports
both
SSL and SET security standards.
MS Personal Web server component is not a choice available in IEAK.
Authenticode 2.0 supports time stamping and verifiees that a certificate is not revoked
and is
still valid for a particular site. Renew the certificate from Publishers and upgrade to
Authenticode 2.0 (From 1.0) in order to avoid warnings from a trusted site.
IEAK wizard can enable only one POP3 or IMAP Server address for clients. If more are
required
they must be added manually in Outlook Express.
Multicasting allows us to save bandwidth by sending only one copy to all users.
Unicasting sends individual copies of a single message to all the destined users.
Use custom welcome page - Select this option and specify appropriate URL.
Path of custom desktop wallpaper file - customize user desktop by specifying a .bmp, .gif,
or .htm file.
TCP/IP Troubleshooting
Ping 'localhost' or '127.0.0.1 in order to confirm that TCP/IP is properly installed
on a
given system.
If it is possible to ping a TCP/IP address but not the Fully Qualified Domain Name (FQDN)
then local DNS configuration is the most likely problem.
The Nslookup diagnostic utility can be used to troubleshoot TCP/IP address/Host name
resolution
problems.
To view TCP/IP configuration, use "winipcfg" under Win95 and "ipconfig
/all" under WinNT.
Network monitor can be used to view TCP/IP protocol statistics for a server from a
workstation
and also to capture and decode TCP/IP packets.