REACH-IT Industry User Manual
Contents
1. eere rennen enun nnn 7 4 Installation of the Toolbox 11 4 1 Configuration of the Toolbox Client 11 4 1 1 Client EMEN ERAS KUNA QD REESE MERE 11 4 1 2 Client iiisixsasasaERENKEERREREEEEREEEENEEEEEREKEEERRERENEEESEREEREEREREECEASANEREEREEREEEEEREREEE 12 4 2 Configuration of the client application eeeeeeeeeee eren nana nn nnne 14 4 3 1 Non Domain isis ass quss vex ORNA Meu MUN ERN ER IE 15 4 3 2 Domain Chen ERES 15 Document Version 1 2 Page 3 of 17 February 2011 AR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server 1 Introduction Toolbox Server is distributed as a Windows MSI package It contains the files comprising the Toolbox Server and a Database to be used by the client Toolbox installations The installation procedure performs only basic COM registration and does not perform any setting up of security permissions policies needed for the working of the server The administrator of the se2. ick determine their own permissions 9 Under Default Access Permissions click Edit Default Make sure Distributed COM Users and provide all have Local and Remote Access permissions Document Version 1 2 February 2011 Page 10 of 17 ams TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server Access Permission A Acount for Toolbox ToolboxSvrt amp intranet oasisJmc org Administrators INTRANET Administrators Local Access Remote Access 10 Under Default Access Permissions click Edit Limits Make sure Distributed COM Users and provide all have Local and Remote Access permissions 11 Under Default Launch Permissions click Edit Default Make sure Distributed COM User and the user whose authentication credentials will be used to access the COM application all have Local and Remote Launch permissions as well as Local and Remote Activation permissions 12 Under Default Launch Permissions click Edit Limits Make sure Distributed COM Users and the user whose authentication credentials will be used to access the COM application all have Local and Remote Launch permissions as well as Local and Remote Activation permissions 4 Installation of the Toolbox Client Standalone version of the toolbox can be also used a Toolbox client Please unzip the Toolbox installation package on your local disk and run the StartInstall exe 4 1 Configuration of the Toolbox Client computer 4 1
3. My Computer H E Applications Config Distributed Transaction lt 9 28 Running Processes c Event Viewer Local RepDoseMDB SCPlugi SecureLogin SecureStora SecureStora SENS Logon SENSLogon2 SENS Network Object Events Events Events Sy Services Local SENS OnNow SENS ServiceLayer Setup Events Subscriber Controller 12 RDSHost RegSpy Class RegSrvc Remote RemoteProx Removable Removable Removable Storage Re Class Storage StorageS Storage SharedAccess SkypeDialog SkypelIEPlugin SkypelEPlu SkypeMames2 SkypePNR SmartcardM SMMPBCom SonicHTTP SonicLicens SsoProxy Recorder stllssvr SyncMan X ta product TdmIconOv TdmNames ThirdPartyE ThirdPartyE ThirdPartyE SyncStatus ThirdPartyE TimelinePre TintSvr ToolsPlugin ToxTreeToo TPMPlugin Class 4 4 On Security tab select Customize and click on Edit button for the Launch and Activation Permissions section Add ToolboxSvr to the list and check Allow for Remote Launch and Remote Activation permissions for the user 5 On the security tab section select Customize and click on the Edit button for Access Permission section Add ToolboxSvr to the list and check Allow for Remote Activation permission for the user ToolboxServer Object Properties 2 xl General Location Security Endpoints Identity
4. group The domain is tested on windows 2008R2 Server 1 From Administrative tools open Active Directory Users and Computers 2 On the right tab select Users 3 In the left tab select user and click on right mouse button On appeared context menu select Add to a group menu item Document Version 1 2 Page 7 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server Active Directory Users and Computers Action 1514 01 1 5 aT Active Directory Users and Computers Zulu intr Saved Queries Ej intranet oasis Imc org Builtin 3 Administrator 7 Computers 3 Domain Controllers 4 ForeignSecurityPrincipals Managed Service Accounts amp cert Publishers 2 DnsAdmins a Group Policy Creator Owners Guest 82 RAS and IAS Servers a Read only Domain Controllers 2 Schema Admins Stanislav Temelkov amp test acount Disable Account Reset Password Open Home Page Send Mail All Tasks Cut a Allowed RODC Password Replication Group a Denied RODC Password Replication Group ga Enterprise Read only Domain Controllers Descriptio this account is intended t Built in account for admini Members in this group can Members of this group are Members in this group can DNS Administrators Group DNS cients who are permi Designated admini
5. Launch and Activation Permissions C Use Default Customize E r Access Permissions C Use Default Customize E dit Configuration Permissions Use Default Customize Edit 6 From the Identity tab select The interactive user These the recommended settings The different Identity settings are explained bellow Document Version 1 2 Page 6 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server ToolboxServer Object Properties General Location Security Endpoints Identity Which user account do you want to use to run this application The launching user This user User Browse Password password The system account services only The interactive user server is started in the session of the current user logged onto the system pros Application is started with user interface cons If there is more than one logged user the server is not able to start The logged user may not have the security rights to activate or access the server The launching user not recommended to use This user server is started in separate session of the specified user pros Application should always starts cons The user interface is not accessible 3 1 3 Server running domain controller DCOM configuration Domain User who will used the server should be added to the Distributed COM Users
6. 1 Client Firewall settings Add Toolbox 2 0 application to firewall s exceptions list Document Version 1 2 Page 11 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server Add TCP port 135 to firewall exceptions list 4 1 2 Client configuration 1 Start the DCOMCNFG utility Start Menu gt Control Panel gt Administrative tools gt Component Services or invoke DCOMCNFG from the Start Menu s Run menu item 2 Right click on My Computer and select Properties from the popup menu t Component Services ES nl x e File Action View Window a t8 8 My Computer 4 object s DCOM Config Distributed Running Applications Transacti Processes J Console Root E Component Services 5 28 Computers EM Services Local 3 Go to COM Security tab and from the Access Permission section use the Edit Default and Edit Limits buttons to change the permissions for security principal Everyone and ANONYMOUS LOGON 4 Check Local Access as well as Remote Access for Security Limits Access Permission Security Limits Group ar user names ANONYMOUS LOGON Everyone Add Remove Permissions for Evernone Allow Deny Local Access Remote Access 5 Check Local Access as well as Remote Access for Default Security Document Versi
7. the toolbox remote wizard leave the selection As current user and then click OK the current user will be used to log to the server Document Version 1 2 Page 15 of 17 February 2011 TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server 4 4 Troubleshooting DCOM Error Server Unavailable Access denied by DCOM security Access denied by a provider COM server Interface not Supported The server process could not be started because the configured identity is incorrect Check the User name and Password Document Version 1 2 February 2011 Possible Issues The computer really doesn t exist The Windows Firewall is blocking the connection The user does not have remote access to the computer through DCOM Typically DCOM errors occur when connecting to a remote computer with a different operating system version The user does not have permission to perform the operation in WMI This could happen when you query certain classes as a low rights user but most often happens when you attempt to invoke methods or change WMI instances as a low rights user The namespace you are connecting to is encrypted and the user is attempting to connect with an unencrypted connection The implementation Toolbox Server interface of the server differs from the client implementation or the client There is more than one user logged on to the system Solution Connecting to Vista netsh advfi
8. 16 02 2010 Toolbox 2 1 Client Server OECD QSAR Toolbox for Grouping Chemicals into Categories AR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server Document history Version 1 0 30 10 2010 First version Version 1 1 31 01 2011 Domain controller setup Version 1 2 16 02 2010 Minor update on server side configuration Issue date February 2011 Language English If you have questions or comments that relate to this document please send them to ehscont oecd org or visit the QSAR Toolbox discussion forum at https community oecd org community toolbox forum Document Version 1 2 Page 2 of 17 February 2011 AR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server Table of Contents L TRU sues sa IRE EFE ME 4 2 PrerequisiteS eisenenxivexvaxekwevwes at wk wi wie sad wa a ACC UR ITA E WDR OR DR WR 4 2 1 1 Hardware requiremienEs iiio nn o OO REG ORG OR OR OCCORRE DECR CROCO 4 2 1 2 Software 4 3 Installation of the Toolbox Server eee n 4 3 1 1 Server Firewall Settings a a 4 3 1 2 Server DCOM configuration 5 3 1 3 Server running domain controller configuration
9. on 1 2 Page 12 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server Access Permission Default Secunty Group User names Everyone SELF Ti SYSTEM Add Remove Permissions For Everyone Allow Deny Local Access Remote Access Document Version 1 2 Page 13 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server 4 2 Configuration of the client application Toolbox standalone application can also act as a Toolbox client application Configuring this requires Toolbox to have Remote connect set instead of the default Local connection in the Toolbox options When Remote connect is selected for the Database the user needs to specify the name or address of machine where Toolbox Server is installed After this change Toolbox needs to be restarted When Toolbox is started as client application the database importing features are disabled These functions are delegated to the Toolbox server only Options Main Modules Units Reports Data matrix Chemical browser Structural space mode Title column width 350 Column count 5 2D ignore stereo information Cell width 130 Depiction height 100 Q 2 50 preserve stereo information Database Local Connect Database in use C Program Files Common Files QSAR Toolbox Ver 2 0 DB TB20DB_21 10 2010 FDB Remote Connect Server 172 17 84 248 Folder f
10. or user models E Work QSAR Toolbox Ver 2 0 UserDir Edit scale definitions 12 Q SAR display ranking Do not use parameter cache Profiling Data consistency criteria V Endpoint Basis for the Clinical signs parental animals Timeout sec 300 Duration f Body weight offspring Compartment Test organisms species Body weight and food consump Concentration Reprofile timeout structures f Author s or transferred referer Calculation basis Concentration based on Basis for effect Clinical signs offspring Cytotoxicity 4 2111 wv OK X Cancel amp 3 Restore default Do not use profiling cache Document Version 1 2 Page 14 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server 4 3 Connecting to the Toolbox Server After the client side DCOM is properly set up the Toolbox Client application only needs the IP address or name of the Toolbox server 4 3 1 Non Domain client When the Toolbox starts the user is asked to provide credentials for the Toolbox server Select As User and enter username and password of the account who have defined access to the Toolbox Server application on the remote machine for this presentation is the ToolboxSvr Remote Toolbox server 172 17 84 248 Server Identity Q 45 current user 45 User password 4 3 2 Domain Client On
11. rewall firewall set rule group windows management instrumentation wmi new enable yes Connecting to downlevel Allow the Remote Administration rule in Windows Firewall Give the user Remote Launch and Remote Activation permissions in dcomcnfg Right click My Computer Properties Under COM Security click Edit Limits for both sections Give the user you want remote access remote launch and remote activation Then go to DCOM Config find Windows Management Instrumentation and give the user you want Remote Launch and Remote Activation Give the user access with the WMI Control make sure they have Remote Access set to true Update Toolbox server and Toolbox Client to the last version Change the settings of the toolbox server object from DCOMCNFG to work as user from the identity tab Page 16 of 17 European Chemicals Agency Annankatu 18 P O Box 400 FI 00121 Helsinki Finland 3589 6861 80 Fax 358 9 6861 8210 http echa europa eu info echa europa eu
12. rver has the responsibility for configuring the security permissions used for the server s communication 2 Prerequisites 2 1 1 Hardware requirements The computer hosting Toolbox server must have at least RAM 2 GB recommended 4 GB Hard disk space 10GB recommended 20 GB CPU 2 GHz 32 or 64 bit architecture recommended multi core CPU Network adapter 100 Mbps recommended 1Gbps 2 1 2 Software requirements Firebird 2 1 32 bit and 64bit installation Toolbox uses native client library fbclient dll provided within the firebird installation as toolbox server is 32 bit application is able to load only 32 bit client library to access firebird server To be able to use 64 bit server you should provide 32bit version of fbclient dll Installation of the Toolbox Server Please unzip the Toolbox Server installation package on your local disk and run the StartInstall exe 3 1 Configuration of the Toolbox Server computer Toolbox 2 0 server is Distributed Component Object Module DCOM automation server In this respect all common rules for the DCOM applications are also valid for the Toolbox 2 0 server 3 1 1 Server Firewall settings Add Toolbox Server application to the exceptions list Add TCP port 135 to firewall exceptions list Document Version 1 2 Page 4 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server 3 1 2 Server DCOM configuration authentication policy Define a single
13. strators workstations and serve All domain controllers in th Designated administrators Members of this group are Membersin this group can Built in account for guest Servers in this group can Members of this group are Designated administrators 5 Repeat steps 3 and 4 for all users wich have to access Toolbox server 6 Start DCOMCNFG utility Start gt RUN gt DCOMCNFG Note For the 64bit versions of the Windows please use Start gt Run gt mmc comexp msc 32 to run DCOM configure utility in 32bit mode 7 Expand Component Services expand Computers and right click My Computer Select Properties Document Version 1 2 February 2011 Page 8 of 17 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server Component Services Action View Window 11 Console Root E 2 Component Services Computers DCO 4 Runn New Window from Here id Event Viewer Lo List Services Local Properties 8 Click Default COM Security Document Version 1 2 February 2011 Page 9 of 17 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server My Computer Properties You may edit who is allowed default access to applications You may also set limits on applications that ribi ee eee iplicati activate objects You may also set limits on
14. user on the server machine that all client applications then use to authenticate themselves to the server machine s operating system For the purpose of this document this user will be called ToolboxSvr 1 Start DCOMCNFG utility 27 Run Type the name of a program folder document or nternet resource and Windows will open it for you Open This task will be created with administrative privileges Cc n Note For the 64bit versions of the Windows please use Start gt Run gt mmc comexp msc 32 to run DCOM configure utility in 32bit mode 2 Select properties from the popup menu for My Computer Component Services gt m m 3 File Action view Window Help 8 1 gt 8 E pg Ex dE 68 Computer 4 object s Console Root e Component Services a cr DCOM Config Distributed Running icati Transacti Processes 3 Go to the DCOM config item on the left hand side tree view right click on the ToolboxServer Object and select Properties Document Version 1 2 Page 5 of 17 February 2011 QSAR TOOLBOX QSAR Toolbox User Manual Toolbox 2 1 Client Server e File Action View Window 18124 Amx Eta Rm DCOM Config 287 object s J Console Root e Component Services 5 28 Computers
Download Pdf Manuals
Related Search