TITLE
    Apple Network Administrator Toolkit 2.0: Read Me
Article ID:
Created:
Modified: 		30217
10/28/97
2/24/99
TOPIC

    This document contains important information about the Apple Network Administrator Toolkit (ANAT) version 2.0. Please read it carefully before installing or using the software.

    For more information on installing and using the Network Administrator Toolkit, please refer to the documentation for the product. For a description of the new features of the Apple Network Administrator Toolkit 2.0, see Chapter 3 of the Using Your Software manual.

DISCUSSION

    Installing Apple Network Administrator Toolkit

    Read this information about steps you may need to take before installing Apple Network Administrator Toolkit 2.0 components. When you are ready to install, follow the instructions in the Installing and Setting Up Your Software manual.


    Mac OS 8 Compatibility
    ANAT is compatible with Mac OS 8.


    AppleShare IP 5.0 servers
    For the latest information on AppleShare IP 5.0 support for Mac OS, see the AppleShare IP web site at http://www.apple.com/appleshareip/ .


    Installing Network Assistant 3.0
    If you are using Network Assistant 2.0, you can quickly upgrade your workstations to version 3.0 by following the instructions in Appendix C of the Installing and Setting Up Your Software manual.

    Note: The Apple Network Assistant is not compatible with the Macintosh Plus.


    Installing Open Transport 1.1.2
    You should use the latest version of Open Transport to ensure compatibility with the Apple Network Administrator Toolkit 2.0. Open Transport 1.1.2 is provided in the Extras folder on the ANAT 2.0 CD-ROM disc.


    Updating the eMate Classroom Exchange Server
    To use the eMate Classroom Exchange Server with At Ease 5.0, you need version 1.0.1 of the Classroom Exchange Server. You can use the Classroom Exchange Updater in the eMate Extras folder (in the Extras folder on the ANAT 2.0 CD-ROM disc) to update from version 1.0 to 1.0.1.


    Removing Older Versions of the At Ease Server System Extension
    If you have earlier versions of the At Ease Server system extension (version 4.x), you need to remove them before using the Server Installer included with ANAT 2.0. Follow these steps:
      1. Remove the file At Ease Server from your server's Extensions folder (inside the System Folder).
      2. Restart the server.

    T urning Off RAM Disk Software
    You cannot use RAM disks on At Ease workstations. You need to turn off any RAM disk software and restart the computer before using At Ease.


    Removing QuickDraw GX
    At Ease does not support QuickDraw GX. You need to remove QuickDraw GX from any At Ease workstations, using the Custom Remove feature of the Installer for QuickDraw GX or the system software package it came with.

    Turning On AppleTalk
    Before using Network Assistant on a workstation, make sure AppleTalk is turned on in the workstation¹s Chooser.


    Using Apple Network Assistant 3.0

    Resetting the Password

    If you forget the Network Assistant password, you can reset the password by deleting the Network Assistant Preferences file, located in the Preferences folder inside the System Folder.

    The next time you open Network Assistant, the password will be reset to XYZZY.

    Internet Security

    IMPORTANT: The Network Assistant supports TCP/IP, the protocol used by the Internet. Since Network Assistant can allow access to your workstations from the Internet, it is very important that you change the password from its default to maintain security and prevent unauthorized access to your workstations. If you don't have a good password, someone from inside your organization or someone on the Internet could potentially gain unauthorized access to your workstation.

    Network Assistant uses TCP/IP port number 3283 to communicate information. If you are using a firewall, and you want to be able to access your workstations from the Internet, or to access workstations at other sites, make sure you allow UDP packets with a port number of 3283 through the firewall. Conversely, if you want to prevent access to and from the Internet, you can block port number 3283.

    The Proxy/Masquerade feature of the Vicom Internet Gateway prohibits applications such as the Network Assistant and At Ease Internet client from communicating through the Gateway. This is the nature of a proxy/masquerade firewall. If the computers are on the same physical network, both At Ease and Network Assistant will communicate successfully. A Network Assistant administrator and At Ease web users can access workstations and the At Ease Web server remotely by using the PPP dial-in feature of the Vicom Internet Gateway.

    Improving Performance of the Share Screen and Observe Features
    Use the "Send all screen changes" option when you share screens. (This screen sharing method requires Ethernet.)

    The option "Only send changes made by QuickDraw" may not work with some programs that do not use QuickDraw or that use it in non-standard ways.

    When using the option "Only send changes made by QuickDraw", make sure the same fonts are installed on all the workstations. You can use the Network Assistant's Software Difference report to compare the fonts that are installed on different workstations and then use the Copy Items command to update any workstations missing fonts.

    For best performance, all the monitors should be displaying the same number of colors. (Screen sharing does not support the - millions of colors - option.)

    To share a screen with multiple workstations, or to observe multiple workstations, all the workstations must be using Ethernet. For best performance, share the screen with the entire group at once.

    If you share screens with a workstation that has a smaller monitor, the receiving computer will only display part of the screen. If you observe a workstation that has a larger monitor, you will only be able to observe part of the screen.

    The Network Assistant share screen, observe, and control functions do not support 68000 machines, such as the Macintosh Classic and the Macintosh SE.


    Using the Announce and Talk Features
    • The Announce and Talk features require an Ethernet network.
    • The Announce feature works with up to 50 workstations at a time.
    • Before using IRTalk, you need to make sure both sides of the connection are running with either classic networking or Open Transport networking.

    MacIP Not Compatible With Network Assistant
    If a workstation uses MacIP to obtain its TCP/IP address, Network Assistant will use AppleTalk to communicate with that workstation. For best performance, use DHCP or static IP addresses for workstations.


    Unavailable Workstations
    Some software programs, especially screen savers and games, may require greater attention from the workstation's processor. When running such a program, a workstation may appear unavailable, or you may get a communication error when trying to send a command to the workstation using Network Assistant.


    Turning on File Sharing
    Before using the Change Settings command to turn on file sharing, make sure the workstation has File Sharing software installed. If File Sharing is not installed, you will not see an error message, but file sharing will not work. Use the Software Version report to verify that File Sharing software is installed on other workstations.


    Using Internet Config
    The Change Internet Settings command supports Internet Config 1.2, included in the Extras folder on the ANAT 2.0 CD-ROM.


    Changing a Workstation or Server
    After changing a workstation's network connection or TCP/IP address, you need to restart the workstation so that Network Assistant can access it.

    You cannot rename an AppleShare or AppleShare IP server while the server is running.


    Network Assistant performance over LocalTalk bridges
    The Apple LocalTalk Bridge and routers can affect the performance of Network Assistant. Performance degrades when transferring data or sharing screens between workstations on a LocalTalk network and an Ethernet network.

    To improve performance, set up screen sharing and file copying to the LocalTalk bridge workstation (and any workstations connected via that bridge) separately from the rest of the workstations and use a computer connected to an Ethernet network to administer the LocalTalk computers, not vice versa.


    Using Apple Remote Access (ARA)
    You can use ARA to connect to a workstation running Network Assistant and use Network Assistant to administer other workstations. However, you cannot use Network Assistant to control a workstation connected through ARA.


    Using At Ease for Workgroups 5.0
    Changing the Name of an AppleTalk zone or AppleShare Server

    If you change the name of the AppleTalk zone that contains the At Ease server, or if you change the name of the At Ease server, you must restart the At Ease server. Otherwise workstations cannot log in correctly. If you changed the server name, you also need to use the At Ease Administration program to update the At Ease server information.


    Handling Earlier Versions of At Ease
    Earlier verisons of At Ease do not work with At Ease Administration 5.0. However, if you attempt to add workstations that are running version 4.x of At Ease, the administration program shows an ordinary icon instead of the dimmed icon that is supposed to indicate an older version of At Ease. To determine which workstations are running version 4.x, you need to check the version number at each individual workstation.


    Accessing AppleShare IP servers
    To connect via IP, the workstation must have version 3.7 or later of the AppleShare workstation software installed. At Ease connects to an AppleShare IP server via IP under any of the following conditions:
    • during initial login (while in the login screen)
    • when the workgroup data volume for the logged-in workgroup is the same as the At Ease volume, and the user logs in using the name and password set up in the Access To Volumes dialog box
    • when the user connects to a volume using the Chooser. ( Note: the user cannot connect to the workgroup data volume via the Chooser)
    • If a user connects to a server or shared disk (server volume) under any other conditions, At Ease will connect via AppleTalk.

    Using the Disk Security Feature of At Ease
    Before turning on the "Prevent users from bypassing the startup volume" disk security feature of At Ease, make sure the workstation's startup volume is using the latest disk driver. You can update the driver using Drive Setup 1.3.1 (in the Extras folder on the ANAT 2.0 CD-ROM disc).

    Note: If you install Mac OS 7.6, be sure to update the driver. Mac OS 7.6 installs an older version of the disk driver that may not be fully compatible with At Ease's security features.

    To determine whether disk security is installed on a workstation, open the Apple menu while the At Ease workstation is displaying the login dialog box. You will see a dimmed menu item indicating whether disk security is active.


    Password Security control panel
    You cannot use the Password Security feature when the At Ease disk security feature is turned on. If At Ease detects that that the Password Security control panel is installed, it will not install the At Ease security software. If the At Ease security software is already installed, At Ease will remove it.

    IMPORTANT: Do not attempt to use both the Password Security feature and the At Ease disk security feature on the same machine.


    Ensuring the Security of Documents and Applications in At Ease
    A user may be able to modify a document in a shared folder by using the Save command, even if the user does not have permission to save a document to the folder. To prevent this, you can lock the document using the Get Info from the File menu.

    When an At Ease user logs in, At Ease scans the workstation and creates a list of allowed applications, desk accessories, and control panels. (The user's documents folder is not included in the list.) The Administration program lets you specify which items a workgroup can access. In addition, At Ease allows access to the following items:
    • items in the Apple Menu Items folder (if the workgroup has access to it)
    • the Chooser (if the workgroup has access to it)
    • Print Monitor
    • items in the Startup Items folder (if the workgroup is allowed to launch items in this folder)
    • items in the Shutdown Items folder
    • items in the Control Panels folder (if the workgroup has access to it)
    • approved sublaunched programs
    Workgroup members may be able to open applications, documents, or aliases in any of these locations, even if they do not have explicit permission to do so. To prevent users from accessing items in these locations, you can either disallow access to the location, or remove the items from that location.

    If you allow access to Microsoft Word, you should remove the Find File tool from the Word Commands folder to prevent users from accessing files they don¹t have permission to see.


    Using the Restricted Finder Environment
    If you are using the option ³Make other items invisible² for a workgroup using the restricted Finder, you can speed up the login process by placing all At Ease items in one folder.

    In the restricted Finder, if a user switches to another workgroup or uses the "Go to At Ease" command, At Ease will attempt to quit the Finder. If the Finder is busy, the user will not be able to continue until the operation completes. The user may see several alert messages.

    At Ease does not allow you to manually rebuild the desktop while running the restricted Finder. If you attempt to do this, your computer may freeze. You can remotely rebuild the desktop using Network Assistant.


    Saving Documents Using At Ease and ClarisWorks for Kids
    ClarisWorks for Kids may not save documents in the user's document folder when At Ease is turned on. To solve this problem in the restricted Finder, use the Open Other button in ClarisWorks for Kids to open documents and use the Save As button to save. In the panel environment, the user can open a document by clicking on the saved document in the panel. In this case, make sure the user has access only to ClarisWorks for Kids, not to ClarisWorks.


    Using Printers and Printer/Disk Quotas
    Many of the printer-related features in At Ease, such as printer quotas or limiting the printers a user can access, work only with desktop printers. Some printers, such as the Color StyleWriter 4100 and 4500, do not support these features.

    Version 8.4 of the LaserWriter driver does not enforce printer quotas if a user prints multiple copies of a document. If you want this feature, you can use version 8.3 or version 8.5.1, shipping in late 1997, of the LaserWriter driver.

    The setting of the "Can bypass quotas" option does not apply to the administrator or workgroup administrator.

    If the "Save anywhere" option is turned on in the Locations panel of the Workgroup Setup dialog box, disk quotas will not be enabled.

    For information on how to obtain Apple Network Administrator Toolkit 2.0 please visit Apple's networking products page at:

    http://www.apple.com/networking/

Document Information
Product Area: Apple Software
Category: Apple Network Administrator Toolkit
Sub Category: General Topics
Keywords: kanat

Copyright © 2000 Apple Computer, Inc. All rights reserved.