Introduction

Microsoft Windows support two types of user accounts; local and global accounts. A local account is registered on a machine and does not exist outside the machine (e.g. the account cannot own files except those on the machine). A global account is registered on a primary domain controller (PDC) and can be used on any machines in the network (e.g. the account can own files on a network drive).

When specifying a user name in Microsoft Windows Services for UNIX the format is domain+username. When the user account is local, the domain name is the same as the machine name (except for PDC's where it is the domain the PDC manages). Note the standard Windows format domain\username may also be used, but is not recommended as the Korn shell interprets the backslash character. Every Windows machine is registered in a domain itself, called the primary domain. If the domain a user is in is the same as the primary domain the leading domain qualifier is not required.

EMu requires two accounts to be setup. The first is a user account called emu, which is used to administer EMu. The second account is a group called emuadmin. For security reasons it is recommended that the emu and emuadmin accounts are local (although they may be global if required). Only user emu should be a member of group emuadmin to preserve data security.

The installation notes assume that the emu user account and the emuadmin group account are local.

Where the user [emu] appears in square brackets the emu account name should be substituted. Where the account is in the primary domain the name emu may be used, for all other instances the name domain+emu must be used.

Where the group [emuadmin] appears in square brackets the emuadmin account name should be substituted. Where the account is in the primary domain the name emuadmin may be used, for all other instances the name domain+emuadmin must be used.

There are up to six steps required in setting up the required user and group accounts. They are:

1. Determine primary domain
2. Windows 2003 Server
   • Add user emu
   • Add group emuadmin
   • Allow Log on locally privilege
3. Windows XP Professional
   • Add user emu
   • Add group emuadmin
4. Windows 2000 Professional
   • Add user emu
   • Add group emuadmin
5. Windows 2000 Server
   • Add user emu
   • Add group emuadmin
   • Allow Log on locally privilege
6. Create emu home directory

It is only necessary to alter the Log on locally privilege for Windows 2000/2003 Server machines. The Professional versions of Windows do not require this privilege. The Log on locally privilege allows a user in the domain to log on to the server machine. Each user who will run EMu on the server requires this privilege.

Determining the primary domain

1. Log in as local Administrator.
2. Start a Korn Shell with Start>Programs>Windows Services for UNIX>Korn Shell.
3. Enter pdomain. The output of the command is the name of the primary domain.
4. Enter exit to terminate the shell.
5. It is recommended that you create the user account on the machine that controls the domain listed. The group account should be created on the machine on which EMu is being installed.

Windows 2003 Server - Adding user emu

1. Log in as local Administrator.
2. Open Start>Programs>Administrative Tools>Active Directory Users and Computers.
3. Double-click the Users folder in the Tree pane on the left-hand-side.
4. Select New>User from the Action menu.
   The New Object - User dialog box will open.
5. Enter a First Name: KE EMu
6. Enter a Full Name: KE EMu Administrator
7. Enter a User logon name: emu
8. Click Next>.
9. Enter a Password:
   In order for the SFU security system to function automatically the emu account must have a password and the password must not be modified.
10. Re-enter the password in Confirm Password:
11. Uncheck User must change password at next login.
12. Check User cannot change password.
13. Check Password never expires.
14. Click Next>.
15. Add the user by clicking the Finish button.
16. Double-click the emu user (KE EMu Administrator) in the user list on the right-hand-side of the Active Directory Users and Computers window. 
    The KE EMu Administrator Properties dialog box will appear.
17. Select the Profile tab.
18. In the Home folder section enter the full Local path:  where KE EMu is to be installed.
    Typically this will be c:\home\emu
19. Click the Apply button.
20. Click the OK button.
21. Close the Active Directory Users and Computers window.

Windows 2003 Server - Adding local group emuadmin

1. Log in as local Administrator.
2. Open Start>Programs>Administrative Tools>Active Directory Users and Computers.
3. Double-click the Users folder in the Tree pane on the left-hand-side.
4. Select New>Group from the Action menu. 
   The New Object - Group dialog box will appear.
5. Enter emuadmin as the Group name:.
6. Click Domain Local in the Group scope group box.
7. Click OK to add the new group.
8. Double-click group emuadmin in the list of user in the right hand pane.
   The emuadmin Properties dialog box will appear.
9. Enter KE EMu Admin as the Description:.
10. Select the Members tab and click the Add... button.
    The Select Users, Contacts, Computers, or Groups dialog box will appear.
11. Select the domain user emu is in, in the Look in: list.
12. Find user emu (KE EMu Administrator) in the Name list. Double click on the entry to add emu.
13. Click OK to close the dialog box.
14. Click OK to close the emuadmin Properties dialog box.
15. Close Active Directory Users and Computers dialog box.

Windows 2003 Server - Adding log on locally privilege

The Log on locally privilege is required so that users can start up the KE EMu server on the Windows server machine.

1. Log in as local Administrator.
2. Open Start>Programs>Administrative Tools>Domain Controller Security Policy.
   The Domain Controller Security Policy dialog box will appear.
3. Open Security Settings>Local Policies in the Tree pane on the left hand side.
4. Click on User Rights Assignment in the left pane to get a list of all local settings in the right pane.
5. Double-click Allow log on locally and the Security Policy Setting dialog box will appear.
6. Click the Add... button.
   The Add user or group dialog will appear.
7. Click Browse....
   The Select Users or Groups dialog will appear.
8. Select each user who will use KE EMu (or a group in which they are all members like Domain Users) in the Name list and click Add.... Also make sure the emu (KE EMu Administrator) account has been added.
9. Click OK.
10. Click OK to close the Add user or group dialog box.
11. Click OK to close the Security Policy Setting dialog box.
12. Close the Domain Controller Security Policy window.
13. Reboot the server. New security policies are not recognised by Windows 2003 server machines until the server has been rebooted. Do not continue the installation until that has occurred.

Windows XP Professional - Adding user emu

1. Log in as local Administrator.
2. Open Start>Control Panel, if not in Classic View then switch from Category View to Classic View.
3. Double-click through to Administrative Tools>Computer Management>Local Users and Groups.
4. In the left hand window pane expand the Local Users and Groups folder and click the Users folder.
5. Select New User... from the Action menu.
   The New User dialog box will open.
6. Enter a User Name: emu (do not use DOMAIN+emu here).
7. Enter a Full Name: KE EMu Administrator
8. Enter a Description: (leave empty)
9. Enter a Password:
   In order for the SFU security system to function automatically the emu account must have a password and the password must not be modified.
10. Re-enter the password in Confirm Password:
11. Uncheck User Must Change Password at Next Login.
12. Check User Cannot Change Password.
13. Check Password Never Expires.
14. Add the user by clicking the Create button.
15. Close the Add User dialog box.
16. Double-click the emu user in the user list on the right-hand-side of the User and Groups window.  The emu Properties dialog box will appear.
17. Select the Profile tab.
18. In the Home Folder section enter the full Local path:  where KE EMu is to be installed.
    Typically this will be c:\home\emu
19. Click the Apply button.
20. Click the OK button.
21. Leave the Users and Groups window open for the next step.

Windows XP Professional - Adding local group emuadmin

1. In the left hand window pane expand the Local Users and Groups folder and click the Groups folder.
2. Select New Group... from the Action menu. 
   The New Group dialog box will appear.
3. Enter emuadmin as the Group Name.
4. Enter KE EMu Admin as the Description.
5. Click the Add... button and the Select Users or Groups dialog box will appear.
6. Click the Locations... button and the Locations dialog box will appear.
7. Select the name of the domain user emu belongs to and click OK.
8. Enter emu into the Enter the object names to select: box. Click OK.
9. If emu is not in the local domain, the Enter Network Password dialog box will appear. Enter a User name: and Password: of a user registered in the domain in which emu is a member. Click OK.
10. Click Create to add the new group. 
11. Click Close to close the dialog.
12. Close the Users and Groups window.
13. Close User Accounts dialog box.
14. Close Control Panel.

Windows 2000 Professional - Adding user emu

1. Log in as local Administrator.
2. Open Start>Settings>Control Panel and double-click on the Users and Passwords icon.
3. Select the Advanced tab and click on the Advanced... button.
4. Double-click the Users folder in the Users and Groups list on the left-hand-side.
5. Select New User... from the Action menu.
   The New User dialog box will open.
6. Enter a User Name: emu
7. Enter a Full Name: KE EMu Administrator
8. Enter a Description: (leave empty)
9. Enter a Password:
   In order for the SFU security system to function automatically the emu account must have a password and the password must not be modified.
10. Re-enter the password in Confirm Password:
11. Uncheck User Must Change Password at Next Login.
12. Check User Cannot Change Password.
13. Check Password Never Expires.
14. Add the user by clicking the Create button.
15. Close the Add User dialog box.
16. Double-click the emu user in the user list on the right-hand-side of the User and Groups window. 
    The emu Properties dialog box will appear.
17. Select the Profile tab.
18. In the Home Directory section enter the full Local Path:  where KE EMu is to be installed.
    Typically this will be c:\home\emu
19. Click the Apply button.
20. Click the Close button.
21. Close the Computer Management window.
22. Close Administrative Tools window.
23. Close Control Panel.

Windows 2000 Professional - Adding local group emuadmin

1. Log in as local Administrator.
2. Open Start>Settings>Control Panel and double-click on the Users and Passwords icon.
3. Select the Advanced tab and click on the Advanced... button.
4. Double-click the Groups folder in the Users and Groups list on the left-hand-side.
5. Select New Group... from the Action menu.  The New Group dialog box will appear.
6. Enter emuadmin as the Group Name.
7. Enter KE EMu Admin as the Description.
8. Click the Add... button and the Select Users or Groups dialog box will appear.
9. Select the domain user emu is in, in the Look in: list.
10. Find user emu in the Names: list. Double click on the entry to add emu.
11. Click OK to close the dialog.
12. Click Create to add the new group. 
13. Click Close to close the dialog.
14. Close the Users and Groups window.
15. Close Users and Passwords dialog box.
16. Close Control Panel.

Windows 2000 Server - Adding user emu

1. Log in as local Administrator.
2. Open Start>Programs>Administrative Tools>Active Directory Users and Computers.
3. Double-click the Users folder in the Tree pane on the left-hand-side.
4. Select New>User from the Action menu.
   The New Object - User dialog box will open.
5. Enter a First Name: KE EMu
6. Enter a Full Name: KE EMu Administrator
7. Enter a User logon name: emu
8. Click Next>.
9. Enter a Password:
   In order for the SFU security system to function automatically the emu account must have a password and the password must not be modified.
10. Re-enter the password in Confirm Password:
11. Uncheck User must change password at next login.
12. Check User cannot change password.
13. Check Password never expires.
14. Click Next>.
15. Add the user by clicking the Finish button.
16. Double-click on the emu user (KE EMu Administrator) in the user list on the right-hand-side of the Active Directory Users and Computers window.  The KE EMu Administrator Properties dialog box will appear.
17. Select the Profile tab.
18. In the Home folder section enter the full Local path:  where KE EMu is to be installed.
    Typically this will be c:\home\emu
19. Click the Apply button.
20. Click the OK button.
21. Close the Active Directory Users and Computers window.

Windows 2000 Server - Adding local group emuadmin

1. Log in as local Administrator.
2. Open Start>Programs>Administrative Tools>Active Directory Users and Computers.
3. Double-click the Users folder in the Tree pane on the left-hand-side.
4. Select New>Group from the Action menu. 
   The New Object - Group dialog box will appear.
5. Enter emuadmin as the Group name:.
6. Click Domain Local in the Group scope group box.
7. Click OK to add the new group.
8. Double click on group emuadmin in the list of user in the right hand pane. The emuadmin Properties dialog box will appear.
9. Enter KE EMu Admin as the Description:.
10. Select the Members tab and click the Add... button. The Select Users, Contacts, Computers, or Groups dialog box will appear.
11. Select the domain user emu is in, in the Look in: list.
12. Find user emu (KE EMu Administrator) in the Name list. Double click on the entry to add emu.
13. Click OK to close the dialog box.
14. Click OK to close the emuadmin Properties dialog box.
15. Close Active Directory Users and Computers dialog box.

Windows 2000 Server - Adding log on locally privilege

The Log on locally privilege is required so that users can start up the KE EMu server on the Windows server machine.

1. Log in as local Administrator.
2. Open Start>Programs>Administrative Tools>Domain Controller Security Policy.
   The Domain Controller Security Policy dialog box will appear.
3. Open Security Settings>Local Policies in the Tree pane on the left hand side.
4. Click on User Rights Assignment in the left pane to get a list of all local settings in the right pane.
5. Double-click Log on locally and the Security Policy Setting dialog box will appear.
6. Click the Add... button.
   The Add user or group dialog will appear.
7. Click Browse....
   The Select Users or Groups dialog will appear.
8. Select each user who will use KE EMu (or a group in which they are all members like Domain Users) in the Name list and click Add....
   Also make sure the emu (KE EMu Administrator) account has been added.
9. Click OK.
10. Click OK to close the Add user or group dialog box.
11. Click OK to close the Security Policy Setting dialog box.
12. Close the Domain Controller Security Policy window.
13. Reboot the server. New security policies are not recognised by Windows 2000 server machines until the server has been rebooted. Do not continue the installation until that has occurred.

Creating the emu home directory

The home directory for the emu user account must now be created. It is very important that the home directory is created via Microsoft Windows Services for UNIX so that the correct permissions are given to the directory. These notes assume the emu home directory is c:\home\emu and that the home directory does not exist. If the directory already exists it is advisable to rename it so that a new directory can be created. 

1. Log in as local Administrator.
2. Start a Korn Shell with Start>Programs>Windows Services for UNIX>Korn Shell.
3. Enter mkdir  -p  /dev/fs/C/home/emu
4. Enter cd  /dev/fs/C/home
5. Enter chmod  755  emu
6. Enter chgrp  [emuadmin]  emu    (expand [emuadmin] - see above)
7. Enter chown  [emu]  emu         (expand [emu] - see above)
8. Enter exit to terminate the Korn shell.