Table of Contents
By providing fixed parameters for specified applications, this application will only run with the specified parameters. This is done to close a potential security hole. For instance, the setup client (SetupCli.exe) is used to call any command via the setup service (SetupSvc.exe), which is only required if, for example, you want to execute a certain command via a log-on script on the target system and the user does not have administration privileges. In this case, you would include the command in the SetupCli.exe file. The user could now also use the SetupCli.exe for this purpose. By creating an encoded application, you can include the fixed parameter, and the encoded application will not accept any other parameters. It may also include a fixed command line in the software depot (SwDepot.exe), if you want to install it on the target computer. The software depot will only work with the document you have created.
Password for Setup
Creates a secure, encoded application, which must be stored as a file. It is possible to save the file in the same location as the original application. You can always change parameters in the copy.
Setup Service
These settings will be handled by the agent distribution; here, they are only listed for downward compatibility reasons.
Creates the setup service SetupSvc.exe. You may define which user and which password shall be used for the service. The setup service is required for Windows Workstation and higher to install packages in case the current user does not have all write privileges. Normally, the setup service uses the local system account. From NetWare Client 4.30 upwards, it is, however, not permitted any more to additionally register in the NDS as service, if the workstation has been imported for ZEN. For this reason, another user must be selected. If this is not the local system account, it is created when SetupSvc.exe /I is launched, included in the group of administrators and granted the right to log on as service.
- Local user. Specifies that a local user account shall be used. This user account is created and added to the local Administrators group and is granted the right to log on as service.
- Domain user. Specifies that a domain user account shall be used. This user account is added to the local Administrators group and is granted the right to log on as service. The name “Domain/User” must be specified under User name.
- User name. Specifies the user name for the setup service. If this value is empty, the local system account will be used.
- Password. Specifies the password for the user name. If the system account is used, this value is ignored.
- Confirm Password. Is used to verify the password entered in the Password field.
- Random Password. Specifies whether a random password shall be created for a local user.
Setup Client
Creates the setup client (SetupCli.exe). You can define which command line shall be executed by the setup client and whether additional parameters shall be appended. The setup client can be used on a Windows workstation to launch any command via the setup service, for example calls via the log-on script or via a link in an e-mail. This means that it is possible to execute a fixed command, which, for instance, refers to a setup script on the server. The user cannot abuse the setup client to launch a different command, since the command line is fixed and encoded.
Edits the parameters of the setup client or software depot applications.
- Command line. Specifies the command line used for the application. This is a fixed command line saved within the application.
- Browse icon. Opens a dialog to search for a file name.
- Additional parameters can be appended. Is used to append additional parameters, for instance, to launch a fixed application via the command line definition; this application also accepts parameters that are passed by the setup client to the application.
Software Depot
These settings will be handled by the agent distribution; here, they are only listed for downward compatibility reasons.
Creates a software depot (SwDepot.exe). Similar to the setup client, a command line can be specified. Normally, SwDepot.exe would read the description of packages via the file that has been specified as parameter, e.g., SwDepot.exe Path\SwDepot.dds. To prevent users who know the syntax of SwDepot.dds from installing other software, the command line is “fixed” and encoded. For instance, the path of the parameter may refer to a server where the user has no write privileges; he can neither change the " SwDepot.dds" nor launch another SwDepot.dds with SwDepot.exe.
Password for Setup
From Setup.inf version 6.5 and upward, all passwords for the setup must be encoded.
Creates an encoded password for a setup script and puts it in the clipboard. Such an encoded password must be specified for the following cases (more details see description of setup): - When creating a service in the [Services] section – When creating a local user – When changing attributes of a local user. Although the setup service is a service, it is not necessary to enter the password in Setup.inf, if the setup service SetupSvc.exe has been encoded.
- Password. Enter the password to be encoded in plain text. The password will be copied into the clipboard in encoded form to be entered into a setup script where appropriate.
- Confirm Password. Is used to verify the password entered under Password.