LIABILITY NOTICE COPYRIGHT

Transcription

1 SYSTEM REQUIREMENTS

2 2 LIABILITY NOTICE Information provided in this manual may change at any given time and without prior notice. Its provision does not entail any kind of legal obligation at protected-networks.com s end. The usage of protected-networks.com s software 8MAN is outlined in an End User Licence Agreement (EULA). 8MAN must only be used in accordance with its stipulations. Without prior written consent from protected-networks.com this document must not be partially or entirely reproduced, transmitted or translated, be it by electronic, mechanical, manual or optical means. This document should be considered part of a framework consisting of protected-networks.com s Terms & Conditions, EULA and Privacy Statement to be found on their website. COPYRIGHT 8MAN is the registered trademark of a software solution and its related documents and is the intellectual property of protected-networks.com. Trademarks and brands with or without explicit display are the intellectual property of the respective brand owners.

3 3 SYSTEM REQUIREMENTS The following section describes the minimum and optimal system requirements for 8MAN. In order to run 8MAN you need a valid Licens. If you do not own a valid Licence, please contact protected-networks.com GmbH or your local distribution channel. AD Requirements The 8MAN Server Machine must have been registered in the Active Directory, eg. One Authenticated User has logged on to the Machine, while it was connected to the Domain Controller via network. Network Requirements 8MAN needs to network ports in order to communicate properly. The default values are and Please check as well all needed communication settings, the MS SQL Server needs. Minimum Hardware Requirements The needed requirements for running 8MAN are dependent on several parameters. They are regulated by amount of AD objects and amount and size of Fileservers 8MAN shall supervise. The minimal hardware requirements do support up to 500 User objects inside Active Directory 1 Fileserver with not more than 20,000 folders 8MAN Suite Component SQL Server 8MAN Server 8MAN Collektors 8MAN User Interface Requirement 15GB free HDD Space 1GB free HDD Space 4 GB RAM 4GB free HDD Space 3 GB RAM 40 GB free HDD Space 2 GB RAM 100 MBit/s NIC 100 MBit/s Etherne LAN Connection Screen Resolution: 1280x1024

4 4 Supported Operating Systems This 8MAN Suite was successfully tested on the following Windows systems in combination with the following SQL Server versions: Operating System Windows Server 2003 R2 Enterprise, 32 Bit Service Pack 2 Windows Server 2008 Standard, 64 Bit Service Pack 2 SQL-Server Microsoft SQL Server 2005 Microsoft SQL Server 2005 Express Microsoft SQL Server 2008 Microsoft SQL Server 2008 Express Windows Server 2008 R2 Standard Microsoft SQL Server 2008 Microsoft SQL Server 2008 Express Windows XP Professional Service Pack 3 Windows 7Professional, 32 Bit Windows 7Professional, 64 Bit Client UI only Client UI only Client UI only Recommended Hardware Requirements The needed requirements for running 8MAN are dependent on several parameters. They are regulated by amount of AD objects and amount and size of Fileservers 8MAN shall supervise. The minimal hardware requirements do support up to 5,000 User objects inside Active Directory 2 Fileserver with not more than 100,000 folders each 8MAN Suite Component SQL Server 8MAN Server 8MAN Collektors 8MAN User Interface Requirement 200GB free HDD Space 1GB free HDD Space Quad Core Processor 8 GB RAM 4GB free HDD Space Quad Core Processor 4 GB RAM 40 GB free HDD Space 2 GB RAM 100 MBit/s NIC 100 MBit/s Ethernet LAN Connection

5 5 Screen Resolution > 1280x1024 Grafikkarte mit mindestens DirectX 9 Supported Languages 8MAN is available in the follwoing languages: german english Supported Active Directory Server Microsoft Windows Server 2003 SP1+/R2+ (32 bit) Microsoft Windows Server 2008 SP1+ (32 bit and 64 bit) Microsoft Windows Server 2008 R2+ (Cluster) Supported Fileserver Systems Microsoft Windows Server 2003 SP1+/R2+ (32 bit) Microsoft Windows Server 2008 SP1+ (32 bit and 64 bit) Microsoft Windows Server 2008 R2+ (Cluster) NetApp Filer (CIFS) [restricted] Open-E (SMB) [restricted] Supported Fileserver Systems Logga Microsoft Windows Server 2008 SP1+ (64 bit) Microsoft Windows Server 2008 R2+ (64 bit) Virtualisation There are no known limitations in a virtualized environment as long as the minimal hardware requirements are fulfilled. We do not recommend running the MS SQL Server on a virtual machine. User accounts In order to run 8MAN you need one to many user accounts. They will be used to run the 8MAN server and 8MAN Collector processes and their jobs. To run the 8MAN Service, the 8MAN Service needs an account which is allowed to create and to change a database on the specified MS SQL Server. This account needs also the permission to read and write on the transfer folder (please refer to the 8MAN install & config guide). The 8MAN Collector must be able to read the Active Directory (normal Authenticated User) and the same or a different account to read the ACLs of the fileserver folders, which shall be read by 8MAN.

6 6 Please make sure that the SQL Server Service has write permission on the transfer folder. (Please refer to the 8MAN install & config guide) 8MAN Suite Component 8MAN Server 8MAN Collektors SQL Server required permission Create and change a Database on the MS SQL Server Write permission on the tranbsfer folder Local administrator on the 8MAN server machine Read AD Read ACL Write and read permission on the transfer folder On Integrated Security registered database user with sysadmin rights. Examples for the collector jobs accounts 1. Domain Administrator: This is the simplest but most unsafe way. If the 8MAN service runs as domain administrator he can easily deal with all the information he needs. Reading the AD information and normally domain administrators do have full access on the file servers. In later versions 8MAN will be able to manipulate the ACLs on the file servers as well as the AD groups and group memberships. 2. Local Administrator on the file server: If you use an account which is an AD member and local admin on the fileserver 8MAN can read the AD and read the ACLs on the file server, if local administrators do have access on them. This is normally the case. This option can be seen as an compromise between security and administrative overhead. Alternatively you can use a local fileserver account. 3. Dedicated Account with aligned permissions: 4. The third and securest way to permit 8MAN. Use a normal AD User account with Read rights on the file server 8MAN shall supervise. This configuration can cause administrative overhead.

7 7 protected-networks.com was founded in Berlin in 2009 and develops 8MAN, an integrated software solution for access rights management in Windows environments. protected-networks.com GmbH Alt-Moabit Berlin Tel. +49 (030) Fax +49 (030) protected-networks.com 1 Stanhope Gate Camberley, Surrey, GU15 3DW +44 (0) uk@8man.com 8MAN USA, Inc. +1 (855) TRY-8MAN usa@8man.com