How to stop the credentials windows popping up after SIMS upgrade on the server

[genesis]

Hi

 

I will be upgrading SIMS database to the latest version SIMS 7.164. Normally after I do the SIMS upgrade on the server and when the users open SIMS following the upgrade on their workstations , I have seen credentials window pops up 3 times and they have to enter their details 3 times for the workstations to be upgraded successfully.

 

Is there way to set up so that user enter their credentials only once \not required , so that the workstation successfully upgrades to the latest version. Any help much appreciated.

 

Thanks

[Atomic_Zombie]

If you move to SOLUS3 you won't have that issue

[Damon]

Few things to recommend -

Disable UAC

Disable Zone Checking (Open File Security Warning - Enable or Disable - Windows 7 Help Forums)

Ensure the SIMS users have modify permissions for the local SIMS directory and C:\Windows\SIMS.ini

[matt40k]

Few things to recommend -

Disable UAC

Disable Zone Checking (Open File Security Warning - Enable or Disable - Windows 7 Help Forums)

Ensure the SIMS users have modify permissions for the local SIMS directory and C:\Windows\SIMS.ini

 

Whilst your at it, you might as well turn the Windows Firewall off and change your local administrator password to "Password1"

[ITGURU]

Never had any issues with upgrading workstations, certainly never seen a login box....

After upgrading the server, clients just double click SIMS, updates and users then login.

UAC is set on 'Always Notify' on our PCs.

[Damon]

Whilst your at it, you might as well turn the Windows Firewall off and change your local administrator password to "Password1"

 

I assume you're talking about UAC? If they are a standard user then it's arguably not an issue as they can't elevate anyway. If they have admin rights then that's another story of course. If it's the latter and they need admin for something other than SIMS then keep UAC on but fix the permissions for the SIMS directory.

[matt40k]

I assume you're talking about UAC?

 

Turning UAC off is my pet peeve, you don't need to do it. Period. You might have had to do it back in the days of Vista when developers where scrabbling to update their code, but that was 2007, 8 years ago. Don't turn it off. Ever.

 

UAC basically works by created two user tokens for your user account, a lower and a elevated (they stupidly refer to it as administrator, really it confuses the matter as it also happens to standard users who don't have administrator access).

 

The reason they did it was because most of the virus that Windows was getting came from things like Internet Explorer that don't need any sort of elevated access, actually have full unrestricted access.

 

Turning UAC for the entire user\computer for one application is stupid, especially when its only for upgrades which happens up 3 times a year. You don't need elevated rights to fill in a register.

 

 

Disable Zone Checking

 

All the SIMS installers, exe, dll are digital signed, turning this off this check is like turning off SSL on your web browser.

 

Maybe it's time we all stop trying to outsmart the truth and let it have its day

 

The truth is, like @Atomic_Zombie said, SOLUS3 is the answer. No more giving users elevated access. Period.

[ITGuyWestMidlands]

I dont understand why so many are against solus3. It has made my life so much easier. Disable nightly shutdown. Run the updates. All cleints get updated. Shutdown all clients. Next day staff don't know anything has changed. Just do it!

[Damon]

I understand how UAC works and I have my own reasons for choosing to disable it. I come from a different perspective because I support multiple sites that I don't necessarily have control of. One issue I have with UAC on a standard account is highlighted by the original poster. People will enter admin credentials to 'resolve' issues. The end result for me is schools thinking that is it's normal for this to happen, not to mention the numerous copies of connect ini's in users virtualstore directories which all generate support calls. If I had total control of a network then I'm sure I'd adopt the same stance as yourself, not to mention being more of an advocate of Solus3. I made a mistake by posting on this thread as I think my view is blurred by what works from a service perspective. You may disagree with me but hopefully you can appreciate where I'm coming from.

 

Yes, SIMS upgrades are only 3 times a year and in a controlled environment there's no fuss. For those that don't have a problem with Solus3, I would make the assumption that you work directly for a school or group of schools. The reason I say this is because it's a difficult implementation for a support team to simply swallow up as part of standard operations and the lack of control or access to networks is extremely prohibitive in this project. There are issues which would affect support teams much more than individual sites so bear that in mind when you read the gripes people have. Any minor complication is magnified 100x.

[matt40k]

No, turning off such security is never an option when it comes a production system, especially when it comes to a system the holds such information.

 

not to mention the numerous copies of connect ini's in users virtualstore directories

 

You should be looking at why the connect.ini is being written to.

 

I don't necessarily have control of

 

If you have permissions to turn off UAC, then you have a lot of control of the systems.

 

There are issues which would affect support teams much more than individual sites

 

Agreed, that is why I fix issues correctly and not apply band aids. Sometimes this means working with third parties to resolve the problem correctly as access can range from none to full control over hardware\software.

 

 

Just to be clear, you will need SOLUS3. SOLUS2 will be shut off and unless you fancy going back to dark ages of CD upgrades, you will need to get it installed.

[Damon]

Understandably, you've made several assumptions based on my last few posts but I doubt the reality will match up to them. There's more than one way to skin a cat and you've probably got a bad impression of how things are done. I respect your opinion and I understand your concerns but I can assure you that we have the bases covered.

 

In terms of SOLUS3, it's not necessarily the only way forward as there's alternatives such as virtual desktops or hosted SIMS. Nonetheless, you're right and it will be shut off in summer next year so everyone needs to have a plan for what they'll be doing next. My last post was to put things in context for ITGuy as to why there may be backlash against SOLUS3.

[matt40k]

In terms of SOLUS3, it's not necessarily the only way forward as there's alternatives such as virtual desktops or hosted SIMS.

 

Very, true. You could also switch MIS.

[CyberNerd]

I dont understand why so many are against solus3.

 

Because for *years* it didn't work properly, and the default 'fix' from many local authorities was to not use it.

[matt40k]

Mmm - perhaps you should have done a Microsoft and rebranded it @PhilNeal - How about SIMS Control Centre?

[PhilNeal]

Hosted SIMS is an alternative to SOLUS3!

[matt40k]

ECHO!!

 

Just be careful re: hosted SIMS, you could find the cost or change in requirements require you to re-procure your entire MIS system - especially if the reason you selected your MIS was because it was on-prem!

[PhilNeal]

True if you are a big buyer!

[matt40k]

It's true for anything using public money, it isn't about size, all it takes is one person to slap in a FOI request and before you know you're in the papers labelled as wasting public funds! Personally it worth looking at the market just to keep you on your toes @PhilNeal. You can't argue SIMS has upped its game considerably in recent years.

[PhilNeal]

It is most certainly about size ££££

I completely agree however that schools should look at the market (and we've done very well as a result of it!)

Thanks for the "upped game" statement BTW.