Beruflich Dokumente
Kultur Dokumente
PN 0NL-932
RM website: http://www.rm.com
Contents
Introduction iii
About this Manual................................................................................................iii
Using this Manual ............................................................................................... iv
Further Information.............................................................................................. v
Conventions ....................................................................................................... vi
Chapter 1 About RM EasyLink 1
Overview ............................................................................................................. 1
Benefits of Using RM EasyLink ........................................................................... 3
Important Considerations .................................................................................... 4
User requirements ........................................................................................... 4
Network security .............................................................................................. 4
Costs to your establishment ............................................................................ 6
Costs to users.................................................................................................. 8
Chapter 2 Installing RM EasyLink 11
Choose Your RM EasyLink Web Server ........................................................... 12
RM EasyLink IP Address and Website DNS Address Record .......................... 13
Before You Start ................................................................................................ 16
RM EasyLink Check List................................................................................ 16
Firewalls......................................................................................................... 19
Backup........................................................................................................... 19
Installation Overview ......................................................................................... 20
Installation Instructions ...................................................................................... 20
Step 1. Install RM EasyLink on your designated web server........................ 21
Step 2. Proxy servers ................................................................................... 21
Step 3. Configure Certificate Server ............................................................. 25
Step 4. Review the RM EasyLink WebFolder Manager settings .................. 36
Step 5. Make your intranet available via RM EasyLink (optional)................. 38
Step 6. Review your network security patches (mandatory) ........................ 41
Step 7. Change the 'ABC EasyLinkAdmin' user password (optional)........... 42
Step 8. Test access to the RM EasyLink website (optional)......................... 45
i
RM EasyLink System Administrator’s Guide
Glossary 69
Index 71
ii
Introduction
iii
RM EasyLink System Administrator’s Guide
iv
Introduction
Further Information
There are other sources of information that will be useful to you:
T The RM EasyLink User Guide. This guide is for students, parents and
teachers. It contains everything the user needs to know to get started with
RM EasyLink.
T The Microsoft Windows Server documentation. This gives the complete set
of information on using the Microsoft Windows Server network.
T The Microsoft Windows Resource Kit. This is a technical guide to help the
professional system administrator to get more from Windows. To order a
copy of this document, contact the RM Sales Desk.
For more information on your network you can also refer to:
T Training notes. The training notes from the training courses give valuable
information about your network. Refer to these notes for information on
starting to use RM EasyLink.
v
RM EasyLink System Administrator’s Guide
Conventions
The following conventions are used in this manual:
Convention Meaning
Indicates a procedure.
Note Mouse and keyboard actions may vary, depending on how Windows is
set up. Further guidelines are given in the Microsoft Windows
documentation.
vi
C H A P T E R 1
About RM EasyLink
Overview
RM EasyLink is a website that is hosted on one of your servers. This website
uses Web Folders technology to enable users to access files on your network
from a computer that is not managed by the RM Management Console. This
computer could be:
Folders that have been shared as Web Folders are available to the
RM EasyLink user via the Internet. The user logs on to your RM EasyLink
website by entering their usual network username and password, and is
presented with a window containing links to the network folders you have made
available to that user.
1
RM EasyLink System Administrator’s Guide
This window, similar to the one shown below, could include shortcuts to a user's
own home directory and Learning Resources, and your establishment's intranet.
The user is able to download a file from the network - for example, a Word
document, work on the document offline, and then synchronise the document
with the corresponding file on the network.
2
Chapter 1 About RM EasyLink
T A computer can easily be used to access RM EasyLink from home or via the
establishment’s local area network (LAN).
T Users have out-of-hours access to the network from any remote Windows
based computer with Internet access.
T High levels of security are maintained for both the user and your
establishment. As a system administrator, you manage user access to
network files. You can switch access to your RM EasyLink website on and
off as required.
T Your intranet can be made available to authorised users over the Internet.
T Users are able to access the most up-to-date versions of files. This will
result in improved collaboration and integration on projects.
T Users no longer need to copy documents onto floppy disks to transfer files
between home and your establishment.
3
RM EasyLink System Administrator’s Guide
Important Considerations
This section contains advice on issues you need to consider before using
RM EasyLink.
User requirements
The requirements for laptops/computers on which you intend to use
RM EasyLink are covered in full in the RM EasyLink User Guide. In summary,
to access their Web Folders over the Internet, a user’s computer should be
Internet ready - with a modem, an account with an Internet Service Provider
(ISP), and Internet Explorer (IE) 5.5 SP2/6 (or above) installed.
Network security
Any network connected to the Internet is open to possible abuse unless security
measures are in place. RM EasyLink uses the Secure Sockets Layer (SSL) to
provide a secure link between authorised users and your network. Access to
the network is via the user’s usual network username and password which is
encrypted at logon. All data transferred is also encrypted. This makes it almost
impossible to read any data that may be intercepted between the remote user
and the server. However, this does provide an overhead when transferring files
to/from the RM EasyLink server.
4
Chapter 1 About RM EasyLink
T Firewalls
A firewall separates your internal network from the Internet and is used to
prevent unauthorised access to your network. If you are using RM EasyLink,
your network can be accessed from outside your establishment.
If you don’t currently have a firewall, installing remote access is a good time
to review your network’s security. Contact your ISP for more information
about making your network more secure.
T Virus protection
T Passwords
5
RM EasyLink System Administrator’s Guide
T Access logs
Your server maintains an access log for the RM EasyLink site enabling you
to monitor user activity (for example, logon failures). Your Internet
Information Server (IIS) also maintains a log of requests on files. These files
can be audited using a third-party tool such as Microsoft Site Server
Express (as included in the Windows NT4 Option Pack) to provide graphical
statistics on the use of RM EasyLink at your establishment.
T Your Internet connection charges are fixed and independent of how much
you use it, making it easier to budget.
T When used with a web server, you can develop a permanent and visible
presence on the Internet.
T Remote users do not have to wait as long for a connection to your network
when they dial in because there are no DialBack delays.
You will also need a static, public facing IP address for your RM EasyLink web
server – please check that your broadband provider is able to supply this.
6
Chapter 1 About RM EasyLink
ISDN connection
A common way to connect a network to the Internet is with a router and ISDN
line. When a user accesses RM EasyLink, your establishment will incur the call
charges for the ISDN line for as long as the user is connected. The ISDN line
will be used when a user accesses the Internet remotely and may be used
when accessing your establishment's local area network (LAN). Because of
this, we are currently recommending that RM EasyLink/ISDN customers would
be best served by using the BT Schools’ Internet Caller (SIC) Evening and
Weekend tariffs in addition to the standard SIC. There is more detail on this
below.
T DialBack
RM EasyLink needs the connection on your ISDN line raised for a remote
user to connect to your network. To do this, RM EasyLink needs a router
capable of, and configured for, DialBack. With DialBack, the line stays up
only as long as the remote user is connected. Once the remote user
disconnects, your ISDN line will also disconnect, again ensuring that
charges incurred are kept to a minimum. Check your router specification to
make sure that it is capable of and configured for DialBack, and contact your
ISP or router provider to have this function enabled.
Note If IFL is your ISP, and you have a third-party router, then we cannot
support configuring DialBack on your router. Please contact the
RM Sales Desk.
7
RM EasyLink System Administrator’s Guide
Your ISDN line needs to have a function called Calling Line Identification
Protocol (CLIP) enabled on it, so that the router can identify who is
attempting to raise the ISDN line. You must ensure that this function is
enabled before installing the RM EasyLink network software. Your ISDN line
provider will enable this function.
If you use BT as the ISDN line provider then contact them to arrange for
CLIP to be enabled on your ISDN line. CLIP should appear as a separate
charge on your ISDN bill from BT.
T Tariffs
There are special tariffs available for educational use, for example BT
provides the Schools’ Internet Caller (SIC) tariff. As RM EasyLink potentially
allows users to access your Internet at any time of the day or night
(including weekends), we strongly recommend that you opt for the SIC
Evening and Weekend tariffs in addition to the standard SIC. This will
ensure that any Internet calls will be covered on a 24 hours, 7 days a week
basis, through the quarterly BT SIC tariff rather than through expensive call
charges.
For more information, including details on how to obtain the BT SIC Evening
and Weekend tariffs, please contact BT directly or visit their website at
www.bteducation.com.
Costs to users
Apart from telephone charges, there are no other costs to the user in using
RM EasyLink. Advice and information on costs to RM EasyLink users is
covered in full in the RM EasyLink User Guide.
8
Chapter 1 About RM EasyLink
RM EasyLink performance
The performance of RM EasyLink depends on the speed of your Internet
connection, and on the number of users who are using RM EasyLink at any one
time (concurrent users). RM EasyLink performance is also affected by the
amount of activity on your LAN (eg. backups, virus scans).
Simply logging onto RM EasyLink does not use much bandwidth, and even a
slow Internet connection can support a relatively high number of users logging
in. However when a number of concurrent users transfer files, the speed of the
file downloads will depend on how many other users are transferring files, and
the speed of your Internet connection.
The faster your establishment’s Internet connection is, the more users will be
able to download files concurrently.
9
RM EasyLink System Administrator’s Guide
In the diagram below, the area within the dotted ellipse shows your
establishment’s connection to the rest of the Internet.
WAN Telephone
ISP ISP
Link Link
Internet
Router Modem
All connection speeds outside your establishment will vary depending on the
following factors:
T The Internet connection speed between your establishment's ISP and the
Internet, and the amount of data going across it.
T The Internet connection speed between the user’s ISP and the Internet, and
the amount of data going across it.
T The Internet connection speed between the user's computer and their ISP.
10
C H A P T E R 2
Installing RM EasyLink
T How to choose your RM EasyLink web server and how to obtain your
RM EasyLink IP address and website DNS (Domain Name Service) address
record.
11
RM EasyLink System Administrator’s Guide
Note You should not run the set-up at any standalone in-line/ICS
proxy server or DAMS server. Also, neither of these servers can host
the RM EasyLink website. Thus, if you only have a single server on your
network (besides a DAMS and a proxy), then this server must be made
the RM EasyLink web server. This doesn't apply to servers with a proxy
installed simply as a cache.
Remember that, when accessing the website, all RM EasyLink users will
log-on-locally to this server to use the application, so select a server that will be
able to cope with this loading. Factors to consider include:
Note The new website will not affect your other sites (for example, your
intranet) on the chosen server. Remember that load balancing is
important in any multiserver network.
Make a note of the server that will host the RM EasyLink website, so that you
can identify it later on.
12
Chapter 2 Installing RM EasyLink
The URL to your RM EasyLink website will be https://DNS address record (for
example, https://folders.establishment.location.sch.uk).
Due to a limitation in IE, the total URL length to a user’s home directory
(including the https://) must be less than 100 characters long. Keep your
DNS address record as short as possible to avoid exceeding this length.
For more information, refer to the troubleshooting entry on page 67.
This website name must point to the public IP address of your RM EasyLink
web server, or, if you have a proxy server, the public IP address of the proxy.
In a proxy network, all servers and workstations behind this proxy are on private
IP addresses. The proxy server will usually have both a public and private IP
address, as it is the gateway to the Internet for these networks.
13
RM EasyLink System Administrator’s Guide
Note If you are part of a WAN, or have all private IP addresses at your site,
then you will need to contact your ISP to get a static, public IP address
for your RM EasyLink web server. This static, public IP address will then
need to be linked to your EasyLink web server's private IP address via
NAT (Network Address Translation) by your ISP.
1. On the desktop of your RM EasyLink web server (or proxy server if you
have one), right-click the My Network Places icon and choose Properties.
3. From the General page, double-click TCP/IP Protocol. The IP Address page
is displayed.
Note If you have a proxy server, you may have a public and private IP
address. The public IP address is the one that does not have one of the
following formats: 10.x.x.x, 172.16.x.x - 172.31.x.x or 192.168.x.x. These
formats are reserved for private IP addresses. If the IP address shown is
the private IP address (ie. one of the above formats), select the other
network card from the pull-down Adapter menu.
If your proxy is simply used as a cache, then it too may have a private IP
address. Contact your ISP to determine the public IP address that they
NAT (Network Address Translate) through to your RM EasyLink web
server.
14
Chapter 2 Installing RM EasyLink
T If you are using RM EasyLink for remote and LAN access (ie. users will be
able to access the network both remotely away from your establishment,
and over the LAN), you should now contact your ISP to assign a DNS
(Domain Name Service) address record for this IP address. This DNS
address record should be in the form folders.establishment.location.sch.uk
where establishment is the name of your establishment and location is the
location of your establishment. Remember to keep your DNS address record
as short as possible (see note on page 13 for more information).
T If you are using RM EasyLink as a LAN only solution, then use the URL
https://easylink. (This is set up in DNS by the RM EasyLink installation so
that users can use this over the LAN.)
Note All LAN usage of RM EasyLink must be done via the URL
https://easylink.
https://
15
RM EasyLink System Administrator’s Guide
4. Ability to raise the ISDN line remotely (if your establishment is not
permanently connected to the Internet).
Before installing RM EasyLink, you must make sure all these requirements
have been met by ticking each of the boxes in the following check list:
Important RM EasyLink will not function correctly (remotely) until ALL of these
are in place. If you intend to use RM EasyLink as a LAN only
solution, then you can ignore this check list.
16
Chapter 2 Installing RM EasyLink
All Users:
17
RM EasyLink System Administrator’s Guide
If you have a leased line or broadband connection to the Internet, you do not
need either CLIP or DialBack to be set up. However, your ISP will need to
provide a public facing IP address for the RM EasyLink website. They will also
need to provide a DNS address record for this public IP address and possibly
NAT (Network Address Translate) it through to the RM EasyLink web server.
18
Chapter 2 Installing RM EasyLink
Proxy considerations
If you have a proxy server, then this will need to be configured to allow access
into the RM EasyLink website. This manual describes the configuration required
for Microsoft Proxy 2 (this is used as the RM Proxy solution).
Firewalls
If you are using a firewall between the Internet and your establishment, it will
need to be opened to allow port 443 traffic inbound and outbound. You must
also set up a NAT rule through the firewall to translate the public IP address for
the RM EasyLink website through to the private IP address of the RM EasyLink
web server.
Backup
It is essential that you make separate full tape backups of all servers on the
network before and after carrying out the installation. Verify these backups and
store them in a safe place until you are completely satisfied that the installation
was successful. For more information on backing up your network, please refer
to your Reference Manual.
19
RM EasyLink System Administrator’s Guide
Installation Overview
Installation of RM EasyLink consists of several stages. It is important that you
install RM EasyLink in the following order:
Installation Instructions
Before performing the installation you must:
T Ensure that you have ticked all of the boxes in the RM EasyLink Check List
(starting on page 17).
Note The RM EasyLink installation time is short. Please allow 30-60 minutes
to complete the installation and configuration.
20
Chapter 2 Installing RM EasyLink
3. The Install Wizard starts. At the welcome screen, click Next, then click
Install.
4. The install runs silently and should take less than a minute. (You will see an
MS-DOS screen flash up during the installation.)
If you are using Microsoft Proxy 2.0 to translate private IP addresses (ie. your
proxy server is acting as a ‘gateway’ to the Internet – it has 2 network cards and
all servers behind it are allocated private IP addresses), follow the procedure
below to configure both the proxy server and the Winsock client to work with
RM EasyLink.
21
RM EasyLink System Administrator’s Guide
Follow the instructions in the release note Upgrading IIS3 to IIS4. If you
have not yet received this release note from RM, contact RM Support
Services to request it.
Other Proxies
If you are using a proxy server other than Microsoft Proxy 2.0 then you
will need to set up the proxy to forward all packets from its external
interface on the ports designated for the RM EasyLink website (by
default 8881 and 443). Refer to your proxy server documentation for
more information.
1. At the RM EasyLink web server check whether you have the Winsock client
installed. If you have a 'Wsp client' icon in the Control Panel, then the client
is installed, skip to step 4.
If the client is not installed, then you must map a drive and install it as
follows:
2. Run Windows Explorer. From the Tools menu choose Map Network Drive.
3. In Windows Explorer, browse to the drive letter you chose above, and run
setup.exe.
22
Chapter 2 Installing RM EasyLink
4. Once the Winsock client has been installed, at the RM EasyLink web server
run the easyprox.vbs script as follows: From the Start menu, choose Run
and type D:\RMNetwork\Server\Applications\RM EasyLink
\v1.x.0.0\Proxy\easyprox.vbs.
This completes the Winsock client configuration. You must now configure
Microsoft Proxy Server as described below.
4. Choose the Protocols tab and click the Add button. The Protocols page is
displayed:
T In the Protocol Name box, type HTTP Hosting 8881
T In the Port box, type 8881
T Under Type, leave the TCP option selected.
T Under Direction, select the Inbound option.
23
RM EasyLink System Administrator’s Guide
8. Choose the Permissions tab. On the Permissions page, note whether the
Enable Access Control box is selected (ticked).
Note If the box is ticked, follow steps 9 – 17 below, otherwise jump to step 18.
9. In the Protocol box, choose the HTTP Hosting 8881 option. Click the Edit
button, then the Add button.
10. From the List Names from box, select the first server name.
11. Click the Show Users button and select the user Easylinkuser.
13. In the Protocol box, choose the HTTPS Hosting 443 option.
15. From the List Names from box, select the first server name.
16. Click the Show Users button and select the user Easylinkuser.
17. Click the Add button, then the OK button three times.
You must now update the Winsock Proxy Client as described below.
24
Chapter 2 Installing RM EasyLink
This certificate will enable the SSL (Secure Sockets Layer) to be used when
clients access the RM EasyLink website. The https protocol works over SSL to
communicate with the RM EasyLink website. If you are familiar with
e-commerce websites (for example, www.amazon.co.uk), then you will have
used https when purchasing products. Over https, all data transfer is encrypted
(for example, your credit card details). E-commerce websites need a certificate
to operate. This certificate is issued by a Certificate Authority (CA) on an annual
basis. When you visit an https website using IE, it will check the provider of the
website's certificate against its list of trusted CAs. If IE cannot find the issuer, it
will warn you that you are visiting an un-trusted site.
25
RM EasyLink System Administrator’s Guide
One of your servers is made a Certificate Authority, and in this section you will
use that CA to issue yourself a certificate for RM EasyLink that will last for two
years. (An e-commerce CA will normally issue a certificate for one year with a
cost of approximately £400.) Follow the procedures below to delete your
existing Server Certificate and create a new one.
Note The Server Certificate that you create for the RM website has a finite life
of two years. You will need to manually recreate it. See your Reference
Manual for more information.
26
Chapter 2 Installing RM EasyLink
7. The Web Server Certificate Wizard screen is displayed. Click the Next
button.
27
RM EasyLink System Administrator’s Guide
8. Select the Remove the current certificate option and click the Next button.
9. Click the Next button to confirm the removal, click Next again and click
Finish. The certificate is now removed from the RM website.
28
Chapter 2 Installing RM EasyLink
3. Select the (default) Create a new certificate option and click the Next button.
29
RM EasyLink System Administrator’s Guide
30
Chapter 2 Installing RM EasyLink
5. Enter a name for the certificate (for example, RM) and ensure that the
bit length is set to 512 as shown below. Click the Next button.
31
RM EasyLink System Administrator’s Guide
6. Enter the details as shown below (or select relevant details to your
establishment – for example, you could enter your RM customer number
and establishment name in these boxes). Click the Next button.
32
Chapter 2 Installing RM EasyLink
7. You must now enter the DNS Address Record reserved for your EasyLink
site (as recorded on page 15) in the Common Name box. Omit the https://
here (as shown below). Click the Next button.
33
RM EasyLink System Administrator’s Guide
8. Enter the county and city/locality in which your establishment is located and
click the Next button.
34
Chapter 2 Installing RM EasyLink
9. Select the CA (Certification Authority) that you want to send the request to
(there should be only one in the list) and click the Next button.
35
RM EasyLink System Administrator’s Guide
10. A confirmation window will be displayed. Check that the details are correct
and click the Next button.
11. A Finish window is displayed. Click the Finish button to complete the
certificate creation. On the Properties window, click the OK button.
You will need to run the WebFolder Manager whenever you create or delete a
top level user folder on your servers. For example, if you add an additional
server to the network, and create a top level user folder on this for load
balancing purposes, then you must re-run the WebFolder Manager. (You do not
need to run WebFolder Manager if you are simply adding or deleting user
accounts.)
36
Chapter 2 Installing RM EasyLink
Note Ensure that all servers in the network are switched on before performing
this step. The WebFolder Manager will inspect your network for top level
user folders, and needs all servers to be available.
Ensure that all top level user folders that you wish to have RM EasyLink
access are ticked. Remove the tick from the top level user folders that you
do not want to be available through RM EasyLink (for example, you may
decide not to give RM EasyLink access to your Admin server, so remove the
tick against this server in the WebFolder Manager window). A Web Folder
will be created for each top level user folder that has a tick against it.
37
RM EasyLink System Administrator’s Guide
Note Creating a Web Folder for a top level user folder does not automatically
give all users under that folder RM EasyLink access. User access to
RM EasyLink is controlled from the RM Management Console Users
option (refer to the RM Management Console Users Help for more
information). However, a Web Folder must first be created for a top level
user folder if any users under that folder want RM EasyLink access.
5. The progress window informs you when all processing is complete, and
remains visible for a further three seconds.
Now continue to the section Step 5. Make your intranet available via
RM EasyLink (optional) below.
38
Chapter 2 Installing RM EasyLink
The RM EasyLink installation assumes that the default document name for your
intranet start page is either default.htm, default.html or default.asp. Follow the
procedure below to check this.
Note This does not need to be one of the servers in your current domain. For
example, you may wish to keep your intranet on your RM Connect 2.4
network if you are currently running both networks, and provide a link to
this from RM EasyLink.
2. From the Start menu, choose Run, type cmd and click the OK button.
Server Name:
7. Right-click the folder of the website that hosts the intranet (if you have
School Intranet Pack (SIP) installed on an RM Connect 2.4 server, this will
be the Default Web Site) and choose Properties.
8. Choose the Documents tab. On the Documents page, make a note of the
Default Document.
Default Document:
39
RM EasyLink System Administrator’s Guide
2. In Windows Explorer, locate the Local Path folder as recorded in the Local
Path box above.
4. Click the Shared As radio button, type in a Share Name of Intranet and click
the OK button.
Note If your intranet is already shared, then note down the name of this share.
Intranet share:
6. From the Start menu, choose Run, type cmd and click the OK button.
40
Chapter 2 Installing RM EasyLink
Note To check you have set up your intranet link successfully, open the IIS
manager, browse to the RM\Easylink\intranet folder, select it and verify
that your intranet content files and folders are displayed in the right-hand
pane.
1. On the RM EasyLink web server, from the Start menu, select Programs,
Administrative Tools, Internet Services Manager.
3. On the Documents page, select the Add button and type the name of your
default document (ie. the intranet start page) as recorded in the box on
page 39.
4. Click the OK button on the Properties window and close Internet Services
Manager.
Now continue to the section Step 6. Review your network security patches
(mandatory) below.
Non-Contract Holders
If you do not hold an RM Support Services contract, then you should review the
security patches available for your network on the Microsoft website
(http://www.microsoft.com/security).
41
RM EasyLink System Administrator’s Guide
Now continue to the section Step 7. Change the 'ABC EasyLinkAdmin' user
password (optional) below.
3. Browse to the level shown above (note that DEV in the example is the
3-letter site code for the establishment).
5. Add and confirm the new password. Click the OK button and exit the Active
Directory Users and Computers.
42
Chapter 2 Installing RM EasyLink
1. Start the Services Manager. From the Start menu, select Programs,
Administrative Tools, Services.
43
RM EasyLink System Administrator’s Guide
3. From the Properties window, select the Log On page and type the new
password for the 'ABC EasyLinkAdmin' user in the Password and Confirm
password boxes.
4. Click the OK button. A warning message is displayed informing you that the
ABC EasyLinkAdmin user has been granted the Log On As A Service right.
Click the OK button twice.
Note Should you need to change this user's password in the future, then
ensure that both parts of this step are repeated.
Now continue to the section Step 8. Test access to the RM EasyLink website
(optional) below.
44
Chapter 2 Installing RM EasyLink
1. Firstly you need to grant a user RM EasyLink access. Follow the procedure
as outlined in the RM Management Console Users Help.
Note This is the local DNS entry for EasyLink usage over the establishment's
LAN. From home (that is, remotely), you would use the DNS address
record as noted on page 15.
45
C H A P T E R 3
Setting Up RM EasyLink
This chapter covers the tasks you need to carry out in order to start using
RM EasyLink on your network. After a brief overview, you will find procedures
for:
Overview
Setting up RM EasyLink is straightforward. Once RM EasyLink is installed on
your server you can customise the RM EasyLink website for your
establishment's requirements. You then need to allow your network users to
access their home directory via your RM EasyLink website.
When you have finished setting up RM EasyLink, you should then instruct your
users on how to use RM EasyLink. We have provided a short manual
RM EasyLink User Guide, for you to distribute to your users.
47
RM EasyLink System Administrator’s Guide
Note All locations are given for the RM EasyLink installation path
D:\RMNetwork\RMManage\Web Components\EasyLink.
T Establishment logo
You can add your establishment’s logo or photograph to the top right-hand
corner of the RM EasyLink website. The file must be called logo.gif and
should be 185 x 60 pixels in size. The image file is located in
D:\RMNetwork\RMManage\Web Components\EasyLink\images\buttons
\logo.gif. Replace this file with your own.
48
Chapter 3 Setting Up RM EasyLink
T Establishment name
You can add your establishment’s name to the top of the RM EasyLink
website by editing the file D:\RMNetwork\RMManage\Web
Components\EasyLink\top.htm.
T Disclaimer
If you have implemented a security policy at your establishment, you can
display this at the bottom of the RM EasyLink website. To do this, edit the
file D:\RMNetwork\RMManage\Web Components\EasyLink\bottom.htm.
T Notices
You can add notices to the RM EasyLink website by editing the file
D:\RMNetwork\RMManage\Web Components\EasyLink\notices.htm.
T Links
You can add hyperlinks from the RM EasyLink website to other web pages.
To do this, edit the file D:\RMNetwork\RMManage\Web
Components\EasyLink\links.htm. Remember that you are working within a
frames page and any hyperlinks you create need to open a new IE window.
T Help
You can add your own help to the current help pages by editing the file
D:\RMNetwork\RMManage\Web Components\EasyLink\help.htm.
Note If you change any files in this area, be aware of the permissions that
should be present:
If you need to reset these permissions at any time, run the batch file
perms.bat in the D:\RMNetwork\RMManage\Web Components\EasyLink
folder on the RM EasyLink web server. 'ABC EasyLink' is the group that
controls RM EasyLink membership in your establishment's organisational
unit ('ABC' is the 3-letter site code for your establishment).
When you are testing the changes, ensure that you clear Internet
Explorer's cache between tests. This will ensure that Internet Explorer
always requests new pages when visiting the site. See Delete all Web
Folders on page 57 for more information.
49
RM EasyLink System Administrator’s Guide
To use this template web page you will first need to edit it. Open it in your
preferred web editing tool and change:
50
Chapter 3 Setting Up RM EasyLink
The presence of the CA certificate on this www site will speed up the logon time
for users when accessing RM EasyLink (see the RM EasyLink User Guide for
more information).
To use this sample web page, copy the edited version and your CA certificate
(stored in D:\RMNetwork\RMManage\Web Components\EasyLink
\certificate\certificate.crt) to your public website. Now provide a link on your
main page (or other suitable area) to this new RM EasyLink page.
Note You can grant multiple users RM EasyLink access at the same time.
However, if you grant RM EasyLink access to a folder of users, then the
current users will not pick up this setting. Only new users created
subsequently will be affected.
Once a user has been given access to RM EasyLink they will be given
log-on-locally rights to the server through a new group, EasyLink,
created during the RM EasyLink installation. (This is a requirement for
the authentication method used to access the RM EasyLink website.)
RM EasyLink users actually logging on at the server are assigned a
restricted desktop to prevent unauthorised tampering with the server.
If the user you select also has rights to use the RM Management
Console, then when they log in to the website they will be presented with
links to both the RM Management Console and RM EasyLink.
51
RM EasyLink System Administrator’s Guide
The RM EasyLink User Guide contains everything the user needs to know in
order to use RM EasyLink, including what they'll need to get started, how to log
on to the RM EasyLink website and work with Web Folders. It also contains
instructions on adding your establishment’s network as a trusted Certificate
Authority. You may want to advise your users to do this to prevent an unknown
Certificate Authority warning every time the user accesses the RM EasyLink
website and to speed up access. (See details of the example web page we
have provided on page 50 which you can use to instruct your users to do this.)
RM EasyLink comes with one printed copy of the RM EasyLink User Guide. We
have also provided a soft copy of the manual on the server in
D:\RMNetwork\Server\Applications\RM EasyLink\v1.x.0.0\Utilities so you can
print it out and photocopy it.
The RM EasyLink User Guide contains an information box in which you must
enter your establishment’s RM EasyLink website URL address. Fill in the box in
the RM EasyLink User Guide as follows:
You may choose to give users only the pages that are specific to their needs.
52
C H A P T E R 4
Managing RM EasyLink
This chapter covers the procedures used to carry out specific tasks in the
day-to-day management of RM EasyLink. You will find information on:
53
RM EasyLink System Administrator’s Guide
4. Right-click the RM website, and from the menu select Start or Stop
depending on whether you want to switch access to the website on or off.
The left-hand side of the window displays (Stopped) if the website has been
stopped, if nothing is displayed the website is running.
Note This will also disable access to the RM Management Console and
Learning Resources on this server, so use this facility with caution.
54
Chapter 4 Managing RM EasyLink
Sharing Computers
If users share computers to use RM EasyLink, we recommend that you advise
users to take the following security precautions.
If you share the computer with others (or log in from insecure locations (for
example, a CyberCafe)), for security reasons we recommend that you do not
tick the box Save this password in your password list.
55
RM EasyLink System Administrator’s Guide
1. From your browser, select Internet Options (usually from the Tools menu).
The General page is displayed.
2. Click the Delete Files button. At the Delete Files window, tick the Delete all
offline content box. Click the OK button.
56
Chapter 4 Managing RM EasyLink
57
C H A P T E R 5
59
RM EasyLink System Administrator’s Guide
Technical Information
This section covers:
T Uninstalling RM EasyLink.
Once this has been done, follow Step 2. Proxy servers on page 21 to configure
the proxy server.
T Ensure that your broadband provider can NAT (Network Address Translate)
the public IP address for the RM EasyLink web server, through to the
internal, private IP that the server will actually have.
T Ensure that your broadband provider can open port 443 inbound to this
server through their firewall.
60
Chapter 5 Technical Information & Troubleshooting
5. On the original RM EasyLink web server, you will need to recreate the IIS
certificate. Follow the instructions in Step 3. Configure Certificate Server
starting on page 25, but when adding the Common Name (described on
page 33) you must type rm-network.
61
RM EasyLink System Administrator’s Guide
Uninstalling RM EasyLink
To uninstall RM EasyLink, follow the procedure below:
To uninstall RM EasyLink
4. You will need to recreate the IIS certificate on your RM EasyLink web
server. Follow the instructions in Step 3. Configure Certificate Server
starting on page 25, but when adding the Common Name (described on
page 33) you must type rm-network.
62
Chapter 5 Technical Information & Troubleshooting
Troubleshooting
If, after referring to this section and other publications listed at the start of this
manual, you still experience problems, further troubleshooting information can
be found on the RM Support Services website:
http://www.rm.com/support/easylink
The public IP address registered against the RM EasyLink URL (for example,
folders.establishment.loc.sch.uk) needs to be changed by your ISP to the public
address of your new proxy server.
Once this has been done, follow the guidelines in this manual for the
configuration of the proxy server – Step 2. on page 21 (if it is Microsoft
Proxy 2.0).
Server / post-installation
I cannot access/edit my intranet via FrontPage 98 (HTTP Error 405 –
Method not allowed)
At the server on which you are hosting your intranet, start IIS manager (from the
Start menu, select Programs, Administrative Tools, Internet Services Manager),
and locate the Default Web Site. Right-click this and select Task, Check Server
Extensions. You will be asked a question similar to ‘Do you want FrontPage to
tighten security as much as possible?’. Select No.
63
RM EasyLink System Administrator’s Guide
User access
Users cannot log on to the RM EasyLink website
T Advise your users to check that their modem is switched on, the phone line
free, and their Internet connection is working properly by browsing to their
normal home page, for example, http://www.rm.com.
T Check the user has typed in the correct URL for your RM EasyLink website.
Remember that the first part of the URL needs to be https.
T Check that the user has been granted RM EasyLink access via the
RM Management Console. See page 51 for more information.
T Check if the RM EasyLink website has been stopped. If it has been stopped,
start it. See page 53 for more information.
T The user's account may be disabled. Use the Users option of the
RM Management Console to enable the user's account.
T If you use an ISDN connection to access the Internet, check that your router
is configured for DialBack access, and you have CLIP enabled. For more
information, refer to Costs to your establishment on page 6. One test that
can be done for this is to enter the following command from home in a
command prompt (tracert folders.establishment.location.sch.uk – where the
second part of the command is the DNS address record for your
RM EasyLink site). If this trace times-out at your ISP server (ie. never
reaches your EasyLink web server) and you are certain that your router is
not down at the time you run the trace, then it is either CLIP or DialBack that
is failing.
T If you have checked all of the above points and users are still having
problems, you may have entered an incorrect DNS address record when
setting up your RM EasyLink website. Contact your ISP to check that the
DNS address record assigned to your RM EasyLink IP address (as recorded
on page 15) is correct.
64
Chapter 5 Technical Information & Troubleshooting
T If the user is attempting to use RM EasyLink over the LAN, their computer
may not be able to lease an IP address from your server’s DHCP. All
RM servers have a set DHCP scope and the DHCP tool allocates an IP
address (which does not expire) to any device that attaches to it correctly. If
you have, for example, 100 IP addresses, 2 servers and 98 workstations
attached to your network, then all your IP addresses will be used up. Advise
the user to check whether or not their computer has been able to lease an
IP address from the DHCP pool as follows:
1. From the computer's Start menu, choose Run, type cmd and click the
OK button.
3. Check that all the entries for the Ethernet Adapter are filled in. If all of them
contain zeros (ie. 0.0.0.0) this means the computer has been unable to
lease an IP address.
If the computer was unable to lease an IP address, this means that your
server’s DHCP does not have sufficient IP addresses to assign. If you are using
internal IP addressing, you may be able to add more yourself. Otherwise,
contact your ISP to request an additional public IP range.
This message may be displayed when a user attempts to download any file.
2. On the Advanced tab, select the Do not save encrypted pages to disk box.
4. Select the Download Certificate link again from the RM EasyLink website.
65
RM EasyLink System Administrator’s Guide
Users may need to enter their username and password multiple times before
the document is opened in the web browser. This is a confirmed issue in
Microsoft Office.
A user with Office 2000 installed cannot work on their Web Folders offline
or synchronise Web Folders because these options do not appear in their
Web Folder properties
Ensure that the users have installed the Web Publishing feature. See the
RM EasyLink User Guide for more information.
T Ensure that you run backups and virus scans at appropriate times (for
example, midnight or in the early hours of the morning) so that they do not
affect users accessing RM EasyLink after hours. See the relevant
documentation for further information.
T The speed of your Internet connection will ultimately determine the number
of concurrent users that can access RM EasyLink, and the speed of access
for these users. See page 9 for more information.
A user gets the following error message in their browser window ‘You
have been given EasyLink access, but your Administrator needs to run
the RM EasyLink WebFolder Manager for you to see your home directory'
This error will be produced when a user has been given RM EasyLink access
through the RM Management Console, but the top level user folder that their
home directory is under has not been made a Web Folder in IIS. Run the
RM EasyLink WebFolder Manager as described on page 36.
In the Active Directory Users and Computers, ensure that this user does NOT
have the User must change password at next logon option set.
66
Chapter 5 Technical Information & Troubleshooting
Some users get the following error from IE when trying to open their
home directory ‘The web folder address supplied to Internet Explorer was
too long. Please use a shorter address’
Due to a limitation in IE, the total URL length to a user’s home directory must be
less than 100 characters (for example, the following must be less than 100
characters: https://folders.establishment.loc.sch.uk/wf.server.users/year2001/
userA/home directory).
If your users get this error message, then contact your ISP to get the DNS
address record folders.establishment.loc.sch.uk shortened.
When a large folder structure is copied from your network to a user's home
computer, certain files are missing or corrupted. A number of files may be
named:
Mydocument (1)
Mydocument (2)
Mydocument (3)
Etc.
This is a problem with Web Folders, and only occurs when downloading
complex folder structures from RM EasyLink.
Advise users to avoid downloading large folder structures from your network. If
they must download such information, advise them to ensure that the individual
folder names within the structure are kept to a minimum. We have found that
longer folder names (for example, mypicturesfolder) can cause this issue to
occur more readily.
When clicking on a link (home directory), some users may get the
following error from IE: ‘Internet Explorer cannot open <home directory>
as a Web Folder. Would you like to see its default view instead?’
This is a known client issue. Get the user to run the executable
noWebFolders.BAT (by double-clicking on it) on their computer. This can be
found in D:\RMNetwork\RMManage\Web Components\EasyLink\Utilities, or on
RM’s public website http://www.rm.com/support/easylink.
67
RM EasyLink System Administrator’s Guide
When clicking on their home directory link, a user cannot connect to the
required site but instead gets an ‘Install on Demand’ error, and is
prompted for the Windows Update CD
Instruct the user to click on the arrow on the prompt dialog and from the list box
select The Internet, then click the OK button and follow the prompts to
download the component.
68
Glossary
This glossary explains some of the terms used in this manual. The entries are
arranged in alphabetical order. Terms specific to other manuals you have
received are contained in their glossaries.
69
RM EasyLink System Administrator’s Guide
70
Index
B L
Broadband connection, 6, 18 Leased line connection, 6, 18
switching to a, 60 switching to a, 60
C N
Calling Line Identification Protocol Network security, 4
(CLIP), 8 reviewing patches, 41
Certificate Server, configuring, 25
Configuring P
Certificate Server, 25
Proxy servers, 21, 70
proxy servers, 21
adding after installing RM EasyLink,
RM EasyLink website, 48
60
Winsock client, 22
Conventions, vi R
Costs
to users, 8 RM EasyLink
to your establishment, 6 benefits of using, 3
Customising the RM EasyLink website, domain name, 13, 15
48 granting users access to, 51
installing, 11
D introduction to, 1
IP address, 13
DialBack, 7
link from a www site, 50
DNS address record, 13
moving to another server, 61
Domain name, 13
performance, 9
removing, 62
F
setting up, 47
Firewalls, 5, 19 switching access to website on/off,
53
G uninstalling, 62
web server, 12
Granting users RM EasyLink access,
WebFolder Manager, 36, 61
51
website DNS address record, 13
I RM EasyLink website
customising, 48
Installing RM EasyLink, 11 testing access to, 45
Intranet, making available via RM RM Management Console, 51
EasyLink, 38 RM Support Services, v
IP address, 13
ISDN connection, 7, 18
71
RM EasyLink System Administrator’s Guide
S
Secure Sockets Layer (SSL), 4
Security, 4
data encryption, 4
firewalls, 5
sharing computers, 55
virus protection, 5
Server certificate
configuring, 25
creating, 29
deleting, 26
Sharing computers, 55
T
Tariffs, 8
Technical Information, 60
Troubleshooting, 63
Microsoft Web Folders, 63
U
Uninstalling RM EasyLink, 62
User
granting RM EasyLink access to, 51
information, 52
requirements, 4
Usernames, length of, 4
V
Virus protection, 5
W
WAN centre users, 19
Web Folders, troubleshooting, 63
Web server, 12
WebFolder Manager, running, 36, 61
Website, testing access to, 45
Winsock
client, configuring, 22
Proxy client, updating, 25
www site, setting up a link to
RM EasyLink site, 50
72