Joined: 23 Dec 2005
|Posted: Tue, 18. Dec 07, 21:46 Post subject: How to setup DigaProtect
|DigaProtect is an additional software module to protect network ressources against user actions and virus affection. Instead of granting access to users, a Windows Service is running on the client PCs which allocate more rights to the DigaSystem applications than to the logged-in Windows user.
This method is approved for Microsoft Windows XP Professional and it should also run under Windows 2000. Do not use this solution togehter with Windows Vista.
DigaProtect can be installed in this way:
1. Copy files
2. Register Windows Service
3. Configure Windows Service
4. Test the result
The following files are required for DigaProtect:
The Service is installed by executing the following command:
C:\DigaSystem\TokenBroker.exe –i -d <Name of Domain>–n <User Account of Domain with sufficient rights> –p <Password of User Account>
Please do not enter the < and > characters!
Afterwards you should open the Control Panel to check Services.msc. It's important that the new installed service "TokenBroker" runs under "LocalSystem"! It should be configured to start automatically.
To have an assigned logfile folder there need to be a special entry inside the Windows registry:
HKLM \ SYSTEM \ CurrentControlSet \ Services \ TokenBroker: LogfileFolder (REG_SZ) = C:\DigaSystem\Logging
Afterwards all DigaSystem applications (*.exe) must be added to TokenBroker. This can be done by launching TokenBroker.cpl
Inside the configuration window the version control feature should not be checked.
Now the Windows Service can be started and tested.
We strongly recommend using TokenBroker Version 184.108.40.206
Uninstall is possible by executing "TokenBroker.exe -u"
DigaSystem Expert since 2001