360deployment v73 621040

Spector 360 Deployment Guide
Version 7.3 October 18, 2011
Table of Contents
Steps to Deploying Spector 360 .......................................... 4 Step 1: Deploy the Servers................................................. 5 Requirements................................................................... 5 Control Center Server Administrator Account ........................ 6 Exclude from Antivirus Scanning ......................................... 7 Download and Start the Setup ............................................ 7 Choose the Type of Setup .................................................. 8 License Agreement ......................................................... 11 Quick Install Settings ...................................................... 12 If Updates Are Available .................................................. 14 General Settings ............................................................. 15 Configure the Database ................................................... 16 Configure the Dashboard & Control Center ........................ 19 Configure the Control Center Server .................................. 20 Configure the Primary Server ........................................... 21 Configure the Web Filter Server ........................................ 22 Configure the Data Vault Server........................................ 23 View a Summary and Begin Installing ................................ 24 Register and Unlock the Installation .................................. 25 Finish the Setup and Start the Control Center .................... 26 Upgrade, Migrate, Uninstall ............................................. 27 Upgrade (Reinstall) Components ....................................... 27 Upgrade Older Versions ................................................... 30 Migrating from Spector CNE ............................................. 30 Import Data from a CNE Data Vault ................................... 32 Uninstalling Spector 360 Components ................................ 35 Step 2: Deploy Recorders ................................................. 37 Starting the Control Center .............................................. 37 Deploy the Recorder to a Windows Computer ...................... 38 Deploy the Recorder to a Macintosh................................... 40 Deploy Manually to Windows............................................. 44 Verify Recorder Deployment and Recording ........................ 47 Deploy to All Computers................................................... 48 Options - Configuration .................................................... 52 How the Spector 360 Components Work ............................ 52 Single Server Requirements.............................................. 55 Distributed Servers ......................................................... 57 SQL Express Setup .......................................................... 63 SQL Server Standard/Enterprise Setup ............................... 63 Deploy Dashboards for Managers ...................................... 65 Deploy Control Centers for Administrators .......................... 67 Installing Extra Servers .................................................... 69 Deploy for Remote Employees........................................... 70 Deploy to Branch Offices .................................................. 72 Deploy in a Domain Network............................................. 74 Deploy in a Windows Workgroup ....................................... 74 Deploy on a Multi-User Network ........................................ 76 Options - Space Management ........................................... 78 Estimate the Database Size .............................................. 78 Manage the Data............................................................. 82 Troubleshooting ............................................................... 85 Exclude by Risk .............................................................. 85 Exclude the Servers from Scanning .................................... 85 Exclude the Recorder from Antivirus Scanning ..................... 88 Troubleshoot the Server Installation .................................. 91 Troubleshoot Recorder Installation ..................................... 93 SpectorSoft Information .................................................. 97 Contact Us ..................................................................... 97 Copyrights and Trademarks .............................................. 97 Index ............................................................................... 99
2003-2011 SpectorSoft Corporation, All rights reserved.
iii
Steps to Deploying Spector 360

Step 1
Deploy the Servers. Start by downloading and running the setup program to install Spector 360 core components and applications. When the setup is complete, you will start the Spector 360 Control Center. Deploy the Recorders. The Spector 360 Control Center lets you deploy Recorder software to multiple, remote computers. Test the Recorder on a single computer, and then deploy a Recorder to all computers for which you have purchased licenses.
Step 2
The Setup program installs a Spector 360 Database, Servers, Control Center, and the Dashboard.
As soon as it is installed, a Recorder begins capturing activity. You can review the activity from a Spector 360 Dashboard.
Step 1: Deploy the Servers
Requirements
Minimum requirements
At least 60 GB (gigabytes) free disk space for a new installation. This is the MINIMUM to get started. Review requirements for a Single Server or Distributed Servers.
At least 10 GB free disk space to upgrade an existing installation.
Serial number
A Spector 360 serial number is required to download and start the Setup. Check your Spector 360 purchase receipt email or product CD case for this number.
Windows Administrator account

Spector 360 manages computers and recording via a Control Center Server (CCS). During the setup, you must provide account credentials for this Windows service. See Control Center Server Administrator Account.
A 32-bit or 64-bit Windows operating system: Windows XP Professional Windows Vista Windows 7 Windows Server 2003 or Windows Server 2008 Static IP address is recommended. Internet access is recommended. Operating system uses the NTFS (not FAT32) file system. See requirements for MS SQL Server Express for under 1,000 computer licenses or MS SQL Server Standard for 1,000+ computer licenses.
The installation takes 10-60 minutes, depending on your method of access and hardware. If the correct version of Microsoft .NET Framework is not found on the computer, the Setup will install it, requiring additional disk space.
Disable antivirus software

Antivirus scanning may interfere with the Spector 360 installation. Be sure to temporarily disable scanning as you run the Setup and exclude SpectorSoft files from future scanning on all Spector 360 computers. See
Exclude from Antivirus Scanning.
Upgrading
If you have Spector 360 version 7.0 or later installed, you can Reinstall the new version over the old version without restoring the database. However, be sure to STOP the Data Vault Server and capture a Full Backup (for insurance) before upgrading. See:
Upgrade Version 7.0 and Higher Upgrade Older Versions Migrate from Spector CNE
Control Center Server Administrator Account

An administrator on all computers
The Spector 360 Control Center Server (CCS) is installed as a Windows service and manages all other Spector 360 components. To do this, the server requires administrator-user permissions on ALL Spector 360 server and client computers.
Create a CCS account, if necessary

Use the Windows Control Panel > Manage User Accounts to Add an account in the Administrators group.
This account will need to be present in the Administrators group of EACH Spector 360 computer. Refer to your Windows documentation for more information on creating accounts and administrator privileges. During Spector 360 Setup, you will be prompted to provide Windows account credentials (user name and password) the CCS can use to login and operate. Some customers use the domain administrator account, but you can use any account belonging to the Administrators group on each computer where Spector 360 servers (Setup components) or clients (Recorders) will be installed. If you do not have such an account, or do not want to use "Domain Administrator," create a special Windows account for the CCS to use.
If you use a workgroup network, also refer to the article on Windows Workgroup configuration. You can change the CCS service account AFTER Setup by using the Servers tool in the Control Center. Refer to your Windows help system to better understand Windows services and their login accounts.
Exclude from Antivirus Scanning

Antivirus software may interfere with Spector 360
As you install Spector 360 Servers and Recorders on a network where antivirus software (McAfee, Symantec, etc.) is deployed, there is a chance the antivirus software may classify a Spector 360 component as a threat and remove it. This could happen during installation of the Servers or deployment of the Recorder, or anytime following installation. If a component is quarantined, Spector 360 won't work properly! Keep in mind, too, that many Windows Vista and 7 systems are configured with either Microsoft Windows Defender or Security Essentials performing scans by default. You must either disable this scanning or exclude Spector 360 from scanning before installing.
Download and Start the Setup

Access the Download page
If you haven't downloaded the Setup program, Click here to access the SpectorSoft web site and enter your serial number; or you can start from a SpectorSoft email with a download button.
Exclude centrally or at computers

If you use enterprise or endpoint antivirus software, create a central policy that applies to all computers on the network. If various antivirus programs are running on computers, you will need to go to each computer to make exclusions.
A Download button may be available in an email sent to you from SpectorSoft following purchase.
Exclude files or signature risk name

Use the antivirus or anti-spyware program to exclude Spector 360 from scans. Some programs accept a list of file names to exclude. Others identify "risks" by name. Refer to the Knowledge Base for instructions on creating a whitelist in Symantec, McAfee, and other popular programs.
Click the download button.
Exclude Server files - Exclude these files at the server computer(s). Exclude Recorder files - Exclude at all computers you plan to
monitor.
Risk names - Click this link for a list of SpectorSoft risk names.
Click Save to download the Setup

The File Download prompts you to Run, if you have a very fast, reliable Internet connection, or Save to download a self-extracting compressed file via HTTP. Alternative methods of downloading are available; for example, you can download via FTP. Look for "Click here for additional options". If you do not choose to run immediately after downloading, double-click the downloaded sp360-73.exe file to extract it into a folder that includes several subfolders and the sp360Setup73.exe file as shown below.
If you choose Run at this point, make sure you have a fast, reliable Internet connection. The Internet connection must not be interrupted during the entire down-load and installation procedure, which may take from 5 minutes to 1 hour.
Start the installation

Click Run on the download dialog box (if you haven't closed it) or doubleclick the extracted sp360Setup73.exe file in the Setup folder. The Setup begins.
Save and extract the file

You are prompted to choose a location (such as your local Desktop) and then download the compressed, self-extracting file. Wait as the file downloads from the SpectorSoft web site. This can take several minutes.
Choose the Type of Setup

Choose the installation you want
For a new installation, choose one of the following. If you are upgrading, you will be prompted to Reinstall.
The "Quick Install" gets you started on one server computer. You can move or add components later. Only the Data Vault Server and Web Filter Server installations can be directed to a different computer from the Setup program. Use a Component Install to set up a distributed server installation.
Quick Install - Highly recommended for new or evaluation customers.
Installs ALL core components and applications on the local computer (single-server) using default settings. All services (servers) will operate under the local system account, which works well in most cases.
SQL Server Database Setup

Microsoft SQL Server is required to build the Spector 360 Database instance. Note the type of SQL Server included with this Setup program: SQL Server Express, SQL Server Standard, or a previously purchased SQL Server install package that you will locate during the Setup.
Custom Install - Installs all ALL core components and applications
locally (single-server), but allows you to change default settings and accounts, as well as deploy Web Filter and Data Vault Servers to remote computers.
Component Install - Installs individual components as selected.
Allows you to distribute or move core components, and add Web Filter Servers, Data Vault Servers, Dashboards, or Control Center applications. Always install a Database and core components BEFORE adding or moving other components.
Run the Control Center when Setup is complete

By default, the Control Center application will open at the end of the setup making it easy to immediately deploy the Spector 360 Client Recorder to computers. Clear this check box if you prefer to finish the installation without opening the Control Center.
For a Component Install, select components

You can select components for installation ONLY when a Component
Install has been selected. Check the components you want to install on
this computer. Note that the Database should always be installed first, and the Installation Status ("Not Installed") applies only to the local computer. You will need to locate previously installed components (the Database and CCS) later in the setup.
Keep these points in mind...
ONE central Database is always installed first. A Control Center (application) should be installed with the Database. ONE Control Center Server (CCS) is installed. A Control Center application is always installed with the CCS. ONE Primary Server is installed. Multiple Data Vaults can be installed. To maintain a central data repository, all Data Vaults use the SAME Database access account and the SAME File Storage Base Path for screen snapshots and email attachments. Multiple Web Filter Servers can be installed. All Web Filter Servers communicate with the central Database using the SAME Database access account. Multiple Dashboards and Control Center applications can be installed.
10
Your serial number is provided in the purchase receipt email you received or on the CD case. If you cannot find your serial number, contact SpectorSoft.
Click Next to continue

When a valid serial number is entered, go on to the License Agreement by clicking Next.
Enter your serial number

The serial number is included in your Spector 360 product confirmation email or on the CD case. Characters 5 and 6 are letters of the alphabet; all other characters are numerical.
License Agreement
Read the agreement and check "I Accept"
Scroll to read the entire agreement. Use the buttons at the bottom of the panel to Print or Save the agreement. If you agree to the terms, check "I have read and accept the license terms" and click Next.
Points to remember are:
11
Record only computers that you own. Always inform users that you will be monitoring them. Install the Recorder only on the number of computers for which you have purchased licenses. Do not attempt to move a license from one computer to another.

Check to indicate that you agree to the terms and then continue on to Quick Install options OR (for a Custom, Component, or Re-Install) to check for newer installation files and then proceed to installation options.
Quick Install Settings

Required settings
This panel appears for a Quick Install. Two settings are required: (1) the Control Center Server (CCS) account and (2) the SA password. Other settings are optional, and you can use defaults.
Account - Type the name of a Windows account belonging to the Administrators group on this and all computers you will be monitoring. On a domain network, use the format Domain/Username. Password - Type the password for the account. Confirm Password - Type the password again.
System Administrator (SA) password

A new Spector 360 Database is set up with a single, default SA (System Administrator) account. You must provide a password for this account in order to access the Database for the first time.
The other servers will operate under the local system account. Database accounts will be automatically created for servers. Components will be installed at the listed locations.
Control Center Server account

The CCS requires an existing, valid Windows account to log in as and to manage the Server and Client Recorder components. The account must have Administrator user privileges on this computer - for installation purposes - and on each computer you plan to monitor. You can change this account from the Control Center when the setup is complete.
SA password - Type a password for the default SA (System
Administrator) account installed with this Spector 360 SQL Server instance. You will type the user name "SA" and the password defined here to log in to the Control Center or Dashboard for the first time. The password must be at least 6 characters long and include THREE of the following criteria:
12
- An uppercase letter - A lowercase letter - A number - A non-alphabetic character, such as # ^ _ Do NOT use the characters: / | ' " [ ] { } ( ) , ; ? * ! @ $ \ or <space>
All Spector 360 Servers (Windows services) and the Control Center and Dashboard applications will be installed at this base location, unless you select a different folder. The default installation path is:
C:\Program Files\SpectorSoft\Spector 360
Screen snapshot and attachment file storage base path: The Data Vault Server stores captured Screen Snapshots (graphic files) and Email Attachment files (if capture is requested) at this folder location. These files, associated with data in the Database, can quickly use up disk space, and some customers prefer to provide a dedicated hard drive for this "File Storage Base Path." Browse to a new location on the server computer or accept the default location:
C:\Spector360Data
Confirm SA password - Type the password again to confirm it.
A SQL Server System Administrator (SA) has all rights and privileges to the databases. It's important to provide a strong password, guard the password, and change it if you suspect it has been compromised.
Accept default installation locations

To get started quickly, click Next at the bottom of this panel, accepting all default installation locations. To change a location, click the Browse button and navigate to a folder on this computer. See below.
Use one file storage base path for all installed Data Vaults.
Some customers direct the Snapshot and Email Attachment File Storage location to a dedicated hard drive on the Database computer.
SQL Server installation location:
Microsoft SQL Server provides the database management system for custom Spector 360 database files. Your Spector 360 Database will be the SQL Server instance computer\SPECTOR360, where "computer" is the name of this computer. Both MS SQL Server and the Spector 360 database files are installed on the local Setup computer. The default SQL Server installation is located at:
C:\Program Files\Microsoft SQL Server
If you are using a previously purchased SQL Server package, you will be prompted to locate the installation files.
Spector 360 server and application location:
Spector 360 Database location:
When you continue, the Setup will use scripts and files to automatically build a Spector 360 Database located at the following
13
location. You can direct the SQL Server instance to another location on this computer, if you wish. The Spector 360 data will be stored in this folder:
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL
Read configuration notes for SQL Server Standard to understand the impact of setting a larger initial database size. Make sure the Database computer has disk space to handle not only the databases, but the rate of data being returned from client Recorders. See Estimate the Data Size.
Set database size, if using full SQL Server

Most Spector 360 setup packages automatically install Microsoft SQL Server Express. If you have requested MS SQL Server Standard, you have the option of setting the Database size. If you have requested to use your own copy of SQL Server 2005 Standard or Enterprise, you must locate that installation package.
View a summary
To view a summary of your selections and begin the installation, click Next.
If Updates Are Available

Check for available updates
For a Custom, Component or Re-install, you can choose to download newer installation files or use your current, local files. If time has passed since you originally acquired your Spector 360 installation, the following panel suggests that you download newer installation files. Check component to download updated files or clear components to use your existing files. Click Next to continue.
SQL Server setup executable location: Available only when SQL Server is NOT provided with the Spector 360 Setup. Type the full path to the folder, or browse to and select the drive or network folder containing your customer-provided SQL Server installation files. Initial SQL Server database size (GB): Enabled only for a full SQL
Server (not Express) setup. The Spector 360 databases will be created this size. The SA user can change the maximum size of STORAGE databases from the Control Center following setup. A larger database size may improve performance for a large installation base (more than 500 clients). Too large a size will cause disk space and performance issues.
14
Component - Lists the components to be installed. Current Version - The version included with this Setup. Latest Version - The newest available version. Status - "up-to-date" if you have the latest version; "update available"
General Settings
Spector 360 installation location
This panel appears for a Custom or Component Install. General settings are optional and allow you to set the base Spector 360 installation path. However, before you can click Next to proceed, other component settings are required:
if you do not have the latest version.
Check components to download new files

After comparing local files with those available at the SpectorSoft web site, the Setup checks all components that can be updated. If you are performing a complete installation, leave items checked. The Setup downloads and proceeds to install the newer files.
For a Custom Install: (1) define a Database SA password and (2)
provide Control Center Server (CCS) account credentials.

For individual Component Install, (1) locate the Database
Clear to install with existing files

If you are installing components, you may prefer to update all components at a later time. Clear checked components to continue installing the existing files. The Setup proceeds using the local files.
computer, (2) provide the Database SA Password if required, and (3) locate the CCS computer. If these values have been provided (or are not required for component installation), you can click Next to proceed.

To proceed using either newer, downloaded installation files or your existing installation files, click Next.
Updates ensure you have the newest and best software components. However, if you are reinstalling or adding components and will not update ALL components, it may be safest to use your existing, local version. Install Spector 360 servers and applications at this location: All
Spector 360 Servers (Windows services) and the Control Center and Dashboard applications will be installed at this base location, unless you select a different folder. The default installation path is:
15
Configure the Database

The Spector 360 Database
The Spector 360 Database is a SQL Server instance that stores recorded activity, Web Filtering rules, Event Alerts, Spector 360 user accounts, and other configuration information. Spector 360 uses Microsoft SQL Server 2005 Express or SQL Server 2005 (if requested). When you are installing the Database, these settings are available:
When you are installing another component and NOT the Database, enter the computer name and SA password, if prompted:
You cannot proceed until entering the SA Password on this panel!
Database Computer Name

REQUIRED. This field displays the name of the current computer. This computer will be your "Database computer," and the Database will be known as the SQL Server instance computer/SPECTOR360 where computer is this computer (SERVER05/SPECTOR360). If you are installing a separate component that accesses the Database, type or browse to and select the Database computer name (such as, \\SERVER05).
The System Administrator (SA Password)

REQUIRED. If you are installing the Database, you MUST set a password for a built-in account for this SQL Server instance. You will use SA as the user name and this password to log in to the Control Center or Dashboard for the first time. If you are installing or reinstalling a component that accesses the Database, enter the current SA password.
Both SQL Server and the Spector 360 Database will be installed on the computer where you run the Setup, although you can direct them to different local drives. The Database installation includes two services: the SQL Server and a Job Agent service to handle database tasks.
16
SA password - Type a password for the default SA (System
SQL Server setup executable location: Available only when SQL
Administrator) account installed with this Spector 360 SQL Server instance. You will type the user name "SA" and the password defined here to log in to the Control Center or Dashboard for the first time. The password must be at least 6 characters long and include THREE of the following criteria: - An uppercase letter - A lowercase letter - A number - A non-alphabetic character, such as # ^ _ Do NOT use the characters: / | ' " [ ] { } ( ) , ; ? * ! @ $ \ or <space>
Server is NOT provided with the Spector 360 Setup. Type the full path to the folder, or browse to and select the drive or network folder containing your customer-provided SQL Server installation files.
Initial SQL Server database size (GB): Enabled only for a full SQL
Server (not Express) setup. The Spector 360 databases will be created this size. The SA user can change the maximum size of STORAGE databases from the Control Center following setup. A larger database size may improve performance for a large installation base (more than 500 clients). Too large a size will cause disk space and performance issues.
Read configuration notes for SQL Server Standard to understand the impact of setting a larger initial database size.
Confirm SA password - Type the password again to confirm it.
Set database size, if using full SQL Server

Available when installing the Database.
Most Spector 360 setup packages automatically install Microsoft SQL Server Express. If you have requested MS SQL Server Standard, you have the option of setting the Database size. If you have requested to use your own copy of SQL Server 2005 Standard or Enterprise, you must locate that installation package.
Install SQL Server at this location

Microsoft SQL Server provides the database management system for custom Spector 360 database files. Your Spector 360 Database will be the SQL Server instance computer\SPECTOR360, where "computer" is the name of this computer. Both MS SQL Server and the Spector 360 database files are installed on the local Setup computer. The default SQL Server installation is located at:
C:\Program Files\Microsoft SQL Server
17
Install Spector 360 Database at this location

Spector 360 SQL Server and agent services account

When you continue, the Setup will use scripts and files to automatically build a Spector 360 Database located at the following location. You can direct the SQL Server instance to another location on this computer, if you wish. The Spector 360 data will be stored in this folder:
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL Make sure the Database computer has disk space to handle not only the databases, but the rate of data being returned from client Recorders. See Estimate the Data Size. Some customers prefer to install SQL Server and/or the Database files on a separate local drive to allow for plenty of disk space.
The Database services will login under a Windows account:
Local System - DEFAULT. The Database services will use the current
computer's Local System account. The service inherits appropriate security and privileges when the SQL Server and Spector 360 Database are installed on the same computer.
This account - For security purposes, you may choose to run services under a different account. Enter another valid Windows account name and password that will have full privileges at the SQL Server and Database installation locations.
18
Configure the Dashboard & Control Center

OPTIONAL CONFIGURATION. Change the installation folder for the Control Center or Dashboard on this computer, or allow installation at the default locations.
Control Center location

The Spector 360 Control Center manages Recorders, Servers, the Database, and Web Filtering and Event Alert policies. A Control Center must be installed with the CCS and Database. If these are on separate computers, install a Control Center on each. You can install as many Control Centers as needed. All Control Centers communicate with one, centralized CCS.
You can direct the installation to a different location on this computer, if you wish. The default is: C:\Program Files\SpectorSoft\Spector 360 Control Center
Dashboard location
The Dashboard allows users to query the recorded data for display in charts and reports. The Dashboard uses the SQL Server to query the Database by date, time, user, computer, Web Filtering category, and other criteria. Multiple Dashboard applications can be installed. All Dashboards access a single, central Spector 360 Database. See the Spector 360 Dashboard Guide to learn how to review, analyze, and report on Spector 360 data.
You can direct the installation to a different location on this computer, if you wish. The default is: C:\Program Files\SpectorSoft\Spector 360 Dashboard
When the Servers have been installed, you can install additional Dashboards and Control Centers at other computers using the Component Install. Note that the Control Center will automatically be selected for installation with a Control Center Server (CCS) or Database.
19
Configure the Control Center Server

The Control Center Server (CCS)
A single Control Center Server (CCS) relays instructions from the Control Center to other network computers. This service must be logged in with Administrator-user privileges on all Spector 360 computers to handle remote configuration and installation of the Recorder. When installing the CCS, you must assign a Windows account to the service before you can continue.
You can NOT proceed until the CCS has been assigned its service account. A CCS icon will appear in the Windows taskbar following installation.
Control Center Server computer name

This field displays the name of the current computer (i.e., \\COMPUTER05). If you are installing the CCS, the name cannot be changed. This computer will be your "Control Center Server computer." If you are installing a separate component, you must enter or browse to the correct computer where the CCS is already installed (i.e., \\COMPUTER01).
Control Center Server service account

Available when installing the CCS.
REQUIRED. Use an existing Windows account with Administrator privileges on all Spector 360 computers. A domain account would be acceptable, but it can be any Administrator account valid on all computers. Enter and confirm the password for the account.
Database connection credentials

Available when installing the CCS.
When installing another component, be sure to identify the CCS computer by name.
The CCS accesses the Database directly to read and write Control Center auditing data. The account you select is automatically added to the Database. This Database login is not required to install Spector 360 ; you can provide it later from the Control Center.
20
Account - Select and enter a valid Windows account name and
password. This account will be used to authenticate CCS login to the Database.
SQL Server Account - Select and enter ANY user name and
password. This SQL Server account will be created to authenticate CCS login to the Database.
Configure the Primary Server

The Primary Server
The Primary Server communicates with all Spector 360 Recorders to provide licensing and software updates. A Recorder will not operate properly unless it has a license and can establish network connection to the Primary Server. OPTIONAL CONFIGURATION. You can assign an account other than Local System to the Primary Server service
Primary Server computer name

This field displays the name of the current computer (i.e., \\COMPUTER05). If you are installing the Primary Server, the name cannot be changed. This computer will be your "Primary Server computer." If you are installing a separate component, you must enter or browse to the correct computer where the Primary Server is already installed (i.e., \\COMPUTER01).
The Primary Server service must be up and running for Spector 360 to record activity! The Primary Server can operate under the Local System account, regardless of where it is installed.
Primary Server service account

Available when installing the Primary Server.
The default service account for the Primary Server is Local System. If you want this service to log on as another account, provide the account credentials here.
Local System - The Primary Server will use the current computer's Local System account. This account - For security purposes, you may choose to run services
under a different account. Enter another valid Windows account name and password for use by the Primary Server.
21
Configure the Web Filter Server

The Web Filter Server
OPTIONAL. The Web Filter Server (WFS) enforces Web Filtering rules across the Spector 360 network. Before accessing the Internet, recorded computers with filtering enabled query the WFS, which applies filtering rules stored in the Spector 360 Database.
Web Filter Server computer name

The current computer automatically appears in this field. Type another computer name to direct the installation elsewhere. Click the Add button to add the computer to the list at the bottom of the panel and clear it from this field. You can install the WFS on multiple computers from this panel.
Web Filter Server service account

The Web Filter Server is a Windows service that must be able to access the Database location in order to apply Web Filtering rules.
Local System - DEFAULT. Choose this option when the Web Filter
Server is installed on the same computer as the Database.

This account - Choose this option for security, or when installing the Web Filter Server on computers remote from the Database. The account must have privileges to access the Database computer. Enter a Windows account name and password for use by the server.
Database connection account

If you are designating more than one computer to receive a Web Filter Server, use the same Database credentials for each.
Server account (above) - DEFAULT. The account provided above is used to create the Server's login to the Database. SQL Server Account - Select and enter ANY user name and password. This SQL Server account will be created to authenticate Web Filter Server login to the Database.
On a single-server computer, the WFS can use the default settings. Some customers install the Web Filter Server on multiple computers to handle filtering for a large number of computers. Use the same Database login account for each Web Filter Server.
Remove computers
Click the Add button to add the computer at the top of the panel to the list at the bottom. Select a computer and click Remove to delete it from the list. If you want to edit the service account or Database connection account for a computer, remove the computer and Add it again.
22
Configure the Data Vault Server

The Data Vault Server
The Data Vault Server receives recorded activity from Client Recorders, sends Email Attachment and Screen Snapshot files to the File Storage location, and processes the "raw" recorded data for insertion into the Spector 360 Database. Use default settings to install a Data Vault Server on a single-server computer. Otherwise, enter the computer name(s), the service account, and the Database login account for this server.
Some customers install the Data Vault Server on multiple computers to handle data retrieval for a large number of computers. Use the same Database login for each Data Vault.
Data Vault computer name

The current computer (i.e., \\COMPUTER05) is automatically displayed in the field. You can type in a computer name to direct the installation elsewhere. Click Add to add the computer to the list of "Data Vaults to be installed" at the bottom of the panel and clear it from this field. You can install multiple Data Vaults from a single Setup run.
Data Vault service account

The Data Vault Windows service must be able to access the Database computer in order to store captured files and data.
Local System - DEFAULT. Choose this option when the Data Vault is installed on the same computer as the Database. The Data Vault will use the current computer's Local System account. This account - Choose this option for security or when installing the Data Vault on a computer remote from the Database. The account must have full privileges to access the SQL Server instance and File Storage Base Path on the Database computer. Enter a valid Windows account name and password.
Database connection account

The Setup will configure a Database login for the Data Vault. If you are designating more than one computer to receive a Data Vault, use the SAME Database credentials for each.
If you are installing one Data Vault on a single-server computer, you can use the default settings. Some customers choose to create a network account to be used by Data Vaults. Use the same Database connection account for each Data Vault.
Server account (above) - DEFAULT. The account provided above is used to create the Server's login to the Database.
23
SQL Server Account - Select and enter ANY user name and
password. This SQL Server account will be created to authenticate Data Vault login to the Database.
View a Summary and Begin Installing

View a summary of installation selections
When you click Next after setting installation options, a message appears if required information is missing. If not, a summary of your installation choices appears. You can Print or Save the summary.
Screen Snapshot/Email Attachment File Storage

The Data Vault Server stores captured Screen Snapshots (graphic files) and Email Attachment files (if capture is requested) at this folder location. These files, associated with data in the Database, can quickly use up disk space, and some customers prefer to provide a dedicated hard drive for this "File Storage Base Path." Browse to a new location on the server computer or accept the default location:
C:\Spector360Data
Use one file storage base path for all installed Data Vaults.
Reference the same File Storage Base path for each Data Vault Server.
Remove computers
Click the Add button to add the computer at the top of the panel to the list at the bottom. The computer name at the top clears, and you can add another computer to receive the installation. Select a computer and click Remove to delete it from the list. If you want to edit the service account or Database connection account, Remove the computer and Add it again.
Click Install to begin the installation

Wait for all components to be installed. When installation is complete, following instructions to register and unlock the installation.
View a summary
To view a summary of your selections and begin the installation, click Next.
24
Register and Unlock the Installation

Click Register to receive an Unlock Code
Following installation, the Serial Number Registration panel appears. 1. Click Register in the middle of this panel to submit your serial number and registration code and receive an unlock code. A web page confirming your registration opens in a browser window. Close the browser window, but leave the Registration panel open.
4.
Paste the Unlock code in the Registration. Return to the open Registration panel. Open the Unlock Code email attachment and use Ctrl+A to highlight the entire, long, unlock code. Press Ctrl+C to copy the code. Click in the field at the bottom of the Registration panel and press (Ctrl+V) to paste the Unlock Code in the field.
It doesn't matter if you include or omit the square brackets around the code when you copy it.
5.
Click the Unlock button. A message confirms the installation has been unlocked and displays the number of licenses purchased. Click OK.
Finish the Setup

Complete the setup and open the Control Center to continue. 2. 3. Wait a minute for a Spector 360 Registration email to arrive. The email arrives with two attachments: Registration Code and the Unlock Code. Save the Unlock Code attachment to a location you can access from the Setup computer.
You can register later from the Control Center application, but keep in mind that Spector 360 will NOT operate properly until registered and unlocked for the number of licenses purchased. Registration is required after installing the first time, after adding client licenses, after installing a new Primary Server, after reinstalling servers that have been uninstalled, or after having installed a major upgrade.
25
Finish the Setup and Start the Control Center

Read the Post-Install Notes
When all server components have been installed, post-installation notes appear in a browser window. Read or print the notes and close the browser window.
Start and login to the Control Center

If requested, the Control Center will start immediately when the setup is complete, allowing you to begin deploying the Recorder to computers. Spector 360 Otherwise select Start All Programs Spector 360 Control Center from the desktop. At the prompt log in as System Administrator (SA).
Add Computers and Schedule Installation

If this is a new installation and no computers have been "added" to the Control Center, the Add Computers wizard opens automatically, prompting you to add the names of network computers you plan to monitor. The wizard allows you to type computer names or import them through Active Directory, through Network Discovery, or as a text file list.
Authentication Select SQL Database - computer\SPECTOR360, where computer is the name of
the computer where the database is installed Login - SA Password - SA password defined during setup Click LOGIN to open the Control Center.
If you are evaluating Spector 360, you may prefer to start by adding one or two test computers. Go on to Deploying the Recorder to a Test Computer.
26
Upgrade, Migrate, Uninstall
Back up the database before upgrading Upgrade, Migrate, Uninstall

Installing an upgrade should not interfere with your active databases, but it is a good policy to create a fresh, Full Backup just before you upgrade. See the Administrator's Guide for more about Database backups.
Upgrade (Reinstall) Components

Upgrade options
If you are upgrading from Spector 360 version 6.2 or later, you may choose to install directly over your existing Spector 360 installation, or test the new version on a separate computer.
1.
Open the Control Center and select Servers. Double-click the Data Vault Server. STOP the service to prevent Recorders from sending in new data. If you have more than one Data Vault Server, stop them all. This ensures the Backup has all current data. The Recorders will store data locally until their assigned Data Vault service is re-started. Select Database Select Backup
Manage Database Backup and Restore. Create a Full Backup from the toolbar.
2. 3. 4.
5.
WAIT for the backup to complete. Move the Backup Folder you just created to another, non-default location. The default location for a Backup folder is:
C:\Program Files\Microsoft SQL Server\MSSQL\Spctr_Backup
It is good policy to test your Database backups. By installing a "Test" Database on a separate computer, you can perform a Restore without compromising the active databases. See the Administrator's Guide.
Install (Re-install) over the previous version

If you are ready to upgrade your existing installation, read the Download page or Installation Notes to see if there are special installation instructions. Follow the steps to install Spector 360. This version of Spector 360 requires that you update ALL components. The setup may upgrade or install Microsoft .NET. You do not need to uninstall the previous version before installing the new version.
27
Select Install/Reinstall. The Setup detects which components are already installed on this computer. Check components you want to install or reinstall; uncheck components you do not want to reinstall. Click Next to accept Agree to the License Agreement terms.
Accept the End User License Agreement. Scroll to read the entire agreement. Use the buttons at the bottom of the panel to Save or Print the agreement. Click Yes to continue or No to exit the Setup.
Download updates, if available.

If time has passed since you originally acquired your Spector 360 installation, the following panel suggests that you download newer installation files. Check component to download updated files or clear components to use your existing files. Click Next to continue.
Database - REQUIRED: Provide a System Administrator (SA) password for your SQL Server Spector 360 database instance. Dashboard & Control Center - Installs the Dashboard for viewing
activity and the Control Center for managing Servers and Recorders.
Control Center Server - REQUIRED: Provide credentials for a Windows account that is member of the Administrators group on all Spector 360 computers.
Primary Server - Manages licensing for recorded computers. Web Filter Server - Manages web site filtering, when it is enabled. Data Vault - Retrieves recorded activity from computers to store in
the Database, and sends Screen Snapshots and Email Attachments to the specified file storage location. Install components Configure components for installation.
Components are listed in the left column. Select a component on the left to change settings on the right. You will be able to upgrade multiple Data Vault and Web Filter Servers, if necessary.
General - Change the default installation location, if desired. If necessary, change the name of the Local System account.
When you click Next, a message appears if the account or SA password is not properly provided. If a path does not exist, you are prompted to create it. The installation begins. You may be prompted to stop existing Servers in order to allow the installation. All Servers will automatically start when the new installation is finished. When the upgrade of server components is complete, you will be required to Register and Unlock the Installation.
28
Revert to a Previous Version Install separately

You may want to test the new version of Spector 360 before removing the old version. To do this, you'll need a second serial number. Set up a "test" installation 1. 2. Contact SpectorSoft and request a temporary serial number. Use a Quick Install to get started on a separate computer. Enter the new, temporary serial number for this "test" installation. You must register the test installation and unlock it in order to deploy a Recorder. When the Setup is finished, install one or two test Recorders from the new Control Center and try the upgrade. When you are finished testing, remove the test installation. You can revert back to the previous version of Spector 360 if you are not comfortable with the new version, but you MUST restore the earlier, "old installation" backup you created before upgrading. A backup created by the newer version of Spector 360 will NOT work with an older version. To revert to the previous version: 1. 2. Follow instructions in Uninstalling Spector 360 to remove all components of the new version. Install the older version. Use your previous Install CD or download. You will need to re-register your serial number and obtain a new unlock code. Restore the "old installation" Full Backup. After allowing some time, click Refresh to verify that data has been restored. Reinstall the "old installation" Recorders, Dashboards, and Control Centers.
3. 4.
3. 4.
When ready, install over the active installation 1. Use your "old" Control Center to stop the "old" Data Vault Service and perform a Full Backup of the "old" Database. Move the backup to a safe, non-default location. Next, either remove the old installation and re-install or install over the old installation. Use your fully licensed serial number. Note that if you uninstall the Database you must be able to restore your latest backup! Be sure to Register and Unlock the new installation. Upgrade ALL Servers, Control Centers, Dashboards and Recorders on the network.
You cannot restore a backup from a NEWER version of Spector 360 to an older version.
2.
3.
29
Upgrade Older Versions

What is your current version?
Select Help About from the Dashboard or Control Center menu to verify the version of Spector 360 you have currently installed. If you currently are running a pre-6.2 version of Spector 360, you will need to upgrade to version 7.0 before you will be able to restore your Spector 360 Database to the current version.
Migrate from Spector CNE

Migrate your Data Vault to the Database
It is possible to migrate data from the Spector CNE Data Vault into the Spector 360 Database, if you have been using Spector CNE Version 4.3 or later. Spector 360 will require installation of its own network Server Components, registration of its own serial number, and installation of its own Client Recorder. Before making the change from CNE to 360, decide whether you want to install Spector 360 over your current Spector CNE installation or on a separate computer. If you are using Spector CNE 4.2 or earlier, you will not be able to import your data into the Spector 360 Databases.
Contact Technical Support:

Refer to the Spector 360 Knowledge Base or contact SpectorSoft Technical Support for assistance in going through the process of upgrading first to version 7.0 and then to the latest version.
Upgrading from Version 6.1
IMPORTANT: You will need free disk space equal to 3 times your current database size in order to upgrade a version 6.1 MSDE database to the MS SQL Server 2005 Express database.
Database Backups prior to version 6.2.1105 will not properly restore in version 7.3 Please contact Technical Support before you begin! Database Management moves from the Dashboard to the Control Center as of version 7.0.
Install separately
If you have a large Spector CNE installation, begin by installing Spector 360 on a separate computer and test it before migrating. Test Spector 360 on a few computers while continuing to run Spector CNE from another server. As you become comfortable with Spector 360, you can gradually move more computers from CNE to 360 recording.
1. 2.
Check the requirements.
Make sure the server computer meets the initial requirements.

Install all Spector 360 components.
Use the Setup program to install all components on the new computer. Register and unlock the installation. 3.
Install one or two Spector 360 Recorders on computers.
Use the Add Computer wizard that pops up after setup to Install the
Recorder on "test" computer. You do not have to uninstall an
existing Spector CNE client. Use the Spector 360 Dashboard to
30
view activity on the test computers. When you feel comfortable with Spector 360, complete the next steps. 4.
Stop the Spector CNE Data Vault service.
2.
Back up your Spector CNE Data Vault.
This forces all client computers to hold data locally while you import the latest data files from your CNE Data Vault folders to the Spector 360 Database. Spector CNE clients will continue to record, and data will not be lost. 5.
Import Spector CNE data using the Spector 360 Import Utility.
Even though the Spector 360 Setup does not overwrite your CNE Data Vault, copy or move the C:\SpectorData folder (may have another name in your installation of Spector CNE) and its subfolders to another location for safety. The Spector 360 Import Utility will allow you to point to the new location and import or link to existing folders for Screen Snapshot and Email Attachment files. 3.
Install all Spector 360 Components.
If you have a Spector CNE Data Vault (version 4.3 or higher), run the Import Utility to populate your Spector 360 Database with existing data. Do this before installing the Spector 360 Recorder on clients. See Importing Data from CNE. 6.
Re-install Recorders.
You do not need to uninstall Spector CNE Server Components. Follow instructions for a Quick or Custom Install. 4.
The following components will be installed:
Use the new Spector 360 Control Center to add all computers and install the Recorder on them. You do not need to uninstall the Spector CNE Recorder. See Deploy to All Computers. 7.
Uninstall Spector CNE.
When you are ready, remove the Spector CNE servers using Windows Start All Programs Spector CNE Uninstall at the server computer.
You will be allowed to install the Recorder component only on the number of computers for which you have purchased Spector 360 licenses. You can't move a license from one computer to another.
Spector 360 Databases (with Microsoft SQL Server) the Dashboard, which will be your "viewer" a NEW Control Center Server a NEW Primary Server (Spector 360 registration required) a NEW Data Vault Server a Web Filter Server a NEW Control Center application the Import Utility, which allows you to import Spector CNE 4.3 (or higher) data into a Spector 360 Database. Register and unlock the installation.
Configuration files are preserved. The computer list (network configuration file) will be preserved and should appear in the new Control Center when you open it. Your existing Data Vault folders are preserved. When the installation is complete, you can run the Import Utility to populate the new Spector 360 Database with your existing Spector CNE data.
Install over
1.
Check the requirements.
Make computer meets Single Server Requirements for the Server Components and Database in addition to existing CNE Data Vaults. Be sure to consult Estimating the Data Size.
5.
Import Spector CNE data.
If you have a Spector CNE Data Vault (version 4.3 or higher), run the
31
Import Utility to populate your Spector 360 database with existing data. See Importing Data from CNE. Do this before installing the Spector 360 Recorder. Spector CNE clients will continue to record and store data at the computers; this data will be held locally and will not be lost. 6.
Install one or two Spector 360 Recorders on computers. Recording
Only the Spector 360 System Administrator (SA) login can import data into a Spector 360 Database. You can run the Import Utility on more than one Spector CNE Data Vault to consolidate all data in one Spector 360 Database. You can re-use the Import Utility on the same CNE Data Vault after a period of time to retrieve new data, if necessary.
Open the newly installed Spector 360 Control Center and select Manage Computers. Add and install the Recorder on "test" computers, following instructions in Installing the Recorder. Use the Spector 360 Dashboard to view activity on the test computers. When you feel comfortable with Spector 360, complete the final step.
The Import Utility can take from 5 minutes to 10 hours to populate the database, depending on the amount of data in the Data Vault, your system capacity, and network capacity.
7.
Re-install Recorders.
To import CNE data into the 360 Database

1.
Start the Import Utility:
You will need to reinstall ALL Recorders on the network. Old Recorders will not deliver data to the new Data Vault / Database, but new Recorders will deliver old data. Follow the instructions in Deploy to All Computers.
Be aware that you cannot "undo" the Spector 360 installation. If you decide to go back to Spector CNE, you must uninstall Spector 360, reinstall (and re-register) Spector CNE, and redeploy Clients.
Open the Windows Start menu, select All Programs, Spector 360, and Spector 360 SQL Import Utility. Click Next. 2.
Specify the SQL Server and log in as SA: At the Database Configuration screen, click Browse to display all instances of SQL Server available on the network. Select the computer\Spector360 instance, where computer is the Windows computer name where Spector 360 Database is installed.
Import Data from a CNE Data Vault

If you are migrating from Spector CNE
When fully installed, Spector 360 will automatically populate its Database with the recordings received by the Data Vault Service. An Import Utility (FileToSQL.exe) allows you to populate a Spector 360 Database with data from pre-existing Spector CNE Data Vault files, as long as you were using Spector CNE version 4.3 or higher. The Import Utility is automatically installed with the Spector 360 Database.
32
Check Use SQL Server Authentication. For Login Name, type sa and enter the SA password for the Spector 360 Database. Click Next. 3.
Specify the Data Vault source location:
Next to Source Folder, type or browse to the folder containing the Spector CNE Data Vault you wish to import.
Use Existing Folder Structure: Check to have Spector 360 point to Snapshots in the existing Spector CNE Data Vault rather than importing them to the new Spector 360 file storage folder. This saves disk space, but the files cannot be encrypted. Leave this option clear if you plan to archive and remove the CNE Data Vault.
Include Subfolders: Leave this option checked if you want to import data from all subfolders in the specified location. If you do not check this item, only data files in the named location are imported.
Data Extension: Leave the sdf data file name extension as is, unless
Copy Snapshot Files: Check to import and optionally encrypt
you have changed the file extension for your Spector CNE data files. Press Next.
4. Specify options for the import:
Snapshot files. Select a file encryption from the drop-down list. The encryption will be applied to each file as it is imported: None - no encryption applied, files can be opened as is Internal - applies SpectorSoft encryption format 3DES - applies "Triple Data Encryption Standard" (a NIST standard) format with 3 stages of encryption
Import Snapshot Events: Check to import existing Screen
Import Email Attachments: Check to import all email
Snapshots into the Spector 360 Data Vault. Clear this option to skip import of snapshot files. Make sure you have enough disk space to hold past, present, and future Snapshot files. See Estimating the Database Size.
attachment files. Clear this option if you do not need to view older email attachments from the Dashboard. Encryption Type: Select a file encryption from the drop-down list (None or 3DES). The encryption will be applied as files are imported.
33
Reimport Peviously Imported Files: The Import Utility can
mark data files that have and have not been imported. If you are using the Import Utility to add recently captured data from your Data Vault to the database, leave this option blank. Check this option to import all data from the Spector CNE Data Vault, including data that has already been imported.
Select the Reimport Previously Imported Files option ONLY if you want to import all data from the CNE Data Vault. Re-importing data results in duplication in the Database.
If the Import Utility fails to connect to the database, follow instructions to begin the Import "wizard" again and be sure to log in as the SQL System Administrator (SA) using the password you defined during the database setup.
6.
Importing the data: A status screen displays data being imported
and the import progress. Click OK when the import is complete.
Import Today's Data Files: The Import Utility imports data recordings in full days. To import all data for viewing in the Dashboard, leave this option blank. You can get a full day's recordings for today on a subsequent import. Check this option only if you want today's recorded events, even though additional data recording could take place after the import. Combine Local Users into One Account: Check to import user
names that may be recorded as a local user on different computers (for example: Computer1\sallyj, Computer2\sallyj) as one user (<Combined>\ sallyj). This is particularly useful for Novell networks. All data for the combined user is consolidated. Leave this option blank if this is not a problem.
7.
Review the import log.
Output Folder: Select a folder to store the imported Screen Snapshot and Email Attachment files. You can create a new folder with any name you wish. Click Next. If you are not importing snapshots or attachments, there is no need to choose a folder.
If errors occur, you can review the log file ( filetosql.log), a text file with date and time stamps showing errors that occurred during the import. The file is saved at C:\Program Files\SpectorSoft\Spector360\filetosql. If you have more than 50 errors, contact SpectorSoft and be prepared to send the Import Log File (filetosql.txt) located in the same folder as the Import Utility.
It is normal for an import to have a few errors because of differences in data structures; this will not prevent you from viewing successfully imported data in the Dashboard.
Select the Import Today's Data Files option ONLY if you know for sure that no new data will be added to the Data Vault files by Spector CNE for today.
5.
Click Finish. The Import Utility connects to the Spector 360 Database,
and the import begins.
34
Uninstalling Spector 360 Components

When to uninstall
Use the Setup program to remove the Database, a server, the Control Center, or the Dashboard from a computer. The Setup program automatically detects which components are installed on the computer where it is running and prompts you to reinstall or uninstall when it runs.
If you plan to move the Database, first STOP the Data Vault service, create a Full Backup, and move the Backup Set folder to a non-default location. Click here for more help. If you plan to move a server, click here for more help.
IMPORTANT: If your goal is to remove Spector 360 entirely, use the Control Center to uninstall all Client Recorders BEFORE you uninstall the servers. If your goal is to upgrade the Server Components, you do NOT need to uninstall components first.
To uninstall components
1. Select Windows Start All Programs Spector 360 Uninstall Spector 360. You can also double-click the downloaded sp360setup73.exe program icon or load the installation CD to autostart the Setup program. Make sure you use the Setup program for the current installation. Select Uninstall. The Setup program detects the components that are already installed, and marks them for uninstall by checking them. Leave all components selected if you wish to remove the installation. Deselect components you do not wish to uninstall. For example, to remove only the Dashboard, clear all options except the Dashboard. Click Next.
4. 5.
Supply the SA Password to remove the Database. If servers you want to remove are installed on other computers, enter or browse to the computer names. Otherwise, click Next.
2. 3.
35
6.
A Summary of components to be removed appears with your serial number. You can Print or Save the Summary. Click Uninstall to continue, Back to go back and select different components, or Cancel to exit the Setup program.
8.
A progress table shows the components being removed, and a message informs you when uninstall has been successful. Restart the computer, if prompted, and click Finish.
7.
You may be prompted to close the "Spector Web Filter Server" before continuing. Before responding to the prompt, double-click the Web Filter Server icon in the Windows System tray.
When the computer restarts, Spector 360 components have been removed.
Do not remove the Control Center application from the Database or CCS computer.
In the Administration window that opens, click Stop Service. Respond Yes at the confirmation prompt and wait. When a message informs you the service was successfully stopped, click OK. Click Retry on the SQL Server prompt and continue uninstalling SQL Server. When the Spector 360 Database changes have completed successfully, click Finish.
36
Step 2: Deploy Recorders
4.
Click the Login button. The Control Center opens.
Starting the Control Center

Starting from the Setup
Following installation of Spector 360, you are prompted to start the Control Center immediately. At the login prompt, enter the SA user name and the Database SA password you creating during Setup. Initially, SA is the ONLY login account. Guard this password carefully.
Starting from the desktop

1. Select Start > All Programs > Spector 360 > Spector 360 Control Center. You will begin by logging in as SA .
See the Administrator's Guide for complete information on how to use the Control Center. After initial login, you can "Skip" database login when you start the Control Center; however, functionality will be limited. Do NOT use the SA login for regular Control Center or Dashboard operation. Instead, create another "Master" login account to use for administrative functions.
2.
Next to Authentication, select SQL. Enter your SQL Server SA credentials. Login: SA Password: The password you defined during setup If you are not logging in, click Skip and click OK at the message that appears. Press Cancel to exit the program.
3.
Next to Database, select computer\SPECTOR360 SQL Server instance, where computer is the name of the machine where the Database is installed.
37
Deploy the Recorder to a Windows Computer

Start in the Control Center
Log in to the Control Center. See Start the Control Center. The Control Center allows you to "add" network computers to a list and immediately (or at a scheduled time) install the Recorder on those computers.
Select the Add Computers task navigation command, click New on the tool bar, or right-click and select the New context command. The Add Computers wizard opens.
You must have a license for each computer receiving a Recorder installation. Be sure to upgrade any older Recorder installations. You do NOT need to uninstall an old Recorder from a computer before installing the new version. You can change any settings except Platform and Domain after adding the computer to the Control Center list. For more about scheduling installations and automatic Recorder updates, see the Administrator's Guide.
Control Center Home
Select Advanced Setup to add ONE computer If the Add Computer wizard did not start
If the "Add Computer" wizard did not start automatically, select Recording from the left tool set. In the Add Computers Wizard window, select Advanced Setup. The Advanced Setup method is easiest for adding one or two computers. When you're ready to add a longer list of network computers, use the Wizard option, as described in Deploying Recorders to All Computers.
Select Manage Computers from the upper left pane.
38
Platform - Leave the Windows selection (or refer to Deploy to a Macintosh Computer). Computer Name - Enter the computer's name as known to the
network.
Domain Name - Enter the Domain, if applicable. If not, enter LOCAL (or any other designation). If a Domain Name entry is not detected as a domain on the network, a message will warn you when you save this information to add the computer. You can click Yes on the message to go ahead and add the computer anyway. Description - OPTIONAL. Type a description of this computer to be used in the Control Center and the Dashboard.
Click Next to open the Add New Computer box.
Leave the following settings at their default values.
Enter the computer name and domain

Choose a Windows computer easily accessible to you. Use the Add New Computer panel to identify one computer. Be careful to choose the correct platform (Windows or Mac) and use the correct computer name, as known to the network.
Group Name - DEFAULTGROUP. Define and assign groups later. Profile Name - Initial Profile. Define and assign profiles later. Recorder Version - Leave the default (latest) Version selected.
Take care to schedule Recorder installation at a time when no one is using the computer. If the computer is OFF at the scheduled time, the installation will be performed as soon as the computer is powered ON.
Schedule installation a few minutes in the future

Choose Schedule installation for and set the scheduled time for a few minutes in the future by increasing the minutes field. Leave the other selections as is.
Identify the computer:
39
Click Add to add the computer and Close to return to the Computers list. The test computer is added to the Computers list; complete information may not be available for several minutes. Wait for the CCS to perform the scheduled installation and the computer to restart.
When the computer restarts, recording begins and the computer's status is updated. At the computer, there is no indication that the installation ever occurred.
Deploy the Recorder to a Macintosh

Log in to the Control Center. See Start the Control Center. First add the Mac computer or computers to the Control Center Computers list, then create a Manual Setup File, and finally use the Manual Setup File to install the Recorder manually, at the computer.
You will need to enter the Mac Administrator password to complete the installation. For differences between Windows and Mac recording, see the Administrator's Guide.
Actively use the test computer

Once the Recorder is installed, spend some time at this "test" computer performing a variety of activities for test purposes: email, chat, web surfing, file transfers, and so on. View the recorded activity from a Spector 360 Dashboard. See Troubleshoot Recorder Installation if necessary.
The Mac does not have to be on the same Windows domain or workgroup as the Servers, but it does need TCP/IP connection to the network. If a Domain Name entry is not detected, a message warns you when you save this information to add the computer. You can click Yes on the message to add the computer anyway.
Add a computer
Select Recording > Manage Computers, and select New or Add Computers to open the Add Computers wizard. Select Advanced Setup to add computers one at a time. Note that you can NOT schedule remote installation of the Recorder to a Mac while adding the computer. If you prefer, add all computers at once using the Add Computers Wizard.
40
The computer identity includes:
Build a Manual Setup File

1.
Start the Create Manual Recorder Setup wizard.
Platform - Select Mac from the drop-down list.. Computer Name - Enter the computer's name as accessed on the
local network. If you cannot view the Mac on the network, go to the computer and check Apple > System Preferences > Sharing where the name is displayed.
In the Manage Computers view, select File > Create Manual Setup from the menu bar. At the Welcome wizard panel, click Next. 2.
Choose the platform.
Domain Name - Enter the Domain or Workgroup name, if applicable.
If not, enter LOCAL (or any other designation). If a Domain Name entry is not detected as a domain on the network, a message will warn you when you save this information to add the computer. You can click Yes on the message to go ahead and add the computer anyway.
A Manual Setup File uses an OS-specific Recorder Profile and software Version. You will be able to use this setup file on as many Mac or Windows computers as desired (up to the license limit).
Description - OPTIONAL. Type a description of this computer to be used in the Control Center and the Dashboard.
Leave all other settings at their default values.
Group Name - DEFAULTGROUP. Define and assign groups later. Profile Name - Initial Profile. Define and assign profiles later. Recorder Version - Leave the default (latest) Version selected. Don't Install the Recorder - Leave this option selected. Automatically update the Recorder at - Leave this option at the
3.
Select a Recording Profile.
default setting, unless you wish to change it.

The Control Center may not detect the Mac in its Computers list until after the Recorder is installed. Note that Initial Profile settings cause the Recorder to install "quietly" and automatically restart the computer.
Select the Initial Profile for this installation. Select (highlight) a Profile in the list, or create a New profile. Click Next.
41
4.
Select a Recorder Version.
6.
Only versions for the selected OS are shown. Initially, the version provided with your Spector 360 installation is the only one available. Highlight a version and click Next.
Name the file and location. A panel summarizes the computer OS, Profile used, Recorder Version, and serial number. Click the folder button next to the Setup File Name field at the bottom of the panel to set the name and location for the Setup file. The default file name includes the Recorder Version and Serial Number. You can change the name, but do NOT change the file extension.
5.
Select a serial number. Highlight your serial number and click Next.
Click Save after selecting the name and location, which are then displayed in the wizard's Setup File Name field.
Each computer receiving a Recorder installation requires a license. A Manual Setup file assigns licenses using the serial number you select. If there are 0 Licenses Available, you need to purchase additional licenses before continuing.
A Manual Setup file for Mac is a .zip file.
42
8.
Finish building the file.
Click Finish. Wait for the file to be built at the location you specified.
3. 4. 5. 6.
When an "Install Succeeded" panel appears, the installation is complete. If you wish, click View to view a ReadMe file. Click Finish to end the installation and restart the computer. When the computer restarts, the Recorder will be recording data and communicating with the servers. Remove all evidence of the installation from the computer: Drag .zip and .dmg install files to the Trash. Empty the Trash. Clear the Apple > Recent Items menu. If necessary, remove items from the Downloads folder. Verify the computer and Recorder status appear as expected in the Control Center's Computer list. See the Administrator's Guide. Test recording by viewing activity on this computer from a Spector
360 Dashboard .
7.
Use the .zip file to install manually.
Deliver and execute this file on a computer where you want to install a Recorder. You can use the same Manual Setup File at all Macs you wish to record, To deliver the .zip file, copy it to media, attach it to an email, put it into a shared network folder, or use any other means to deliver the file to the targeted computers.
Install the Recorder on the Mac

1. At the Mac computer, double-click the .zip file to extract a "Spector 360 Client" .dmg Setup file. 7. 8. 9. 2. Double-click the Spector 360 Client .dmg file to run the Spector Client Installation. When you are prompted, enter the Mac Admin password required for software installation. Click OK. Wait for the Recorder to be installed.
If you need to update the Profile or Version, make changes from the Control Center.
For stealth, delete the .zip and .dmg files, empty the Trash, and clear the download and browser histories as needed.
43
Deploy Manually to Windows

When to use manual deployment
Even if the Control Center cannot deliver a Recorder installation to a computer, it can manage the Recorder once it is installed, as long as the computer is connected to the network via TCP/IP, and the Control Center Server (CCS) has Administrator-level privileges on the computer. Use manual deployment for:
See Deploy to a Windows Workgroup for information about preparing a workgroup network for Spector 360.
Add a computer
Select Recording > Manage Computers, and select New or Add Computers to open the Add Computers wizard. Select Advanced Setup to add computers one at a time. Note that you can NOT schedule remote installation of the Recorder to a Mac while adding the computer.
Computers in a workgroup Computers working at a remote location (via VPN) Computers with an older OS or other limitations When another method of deploying software is preferred

Log in to the Control Center. See Start the Control Center. First add the computer or computers to the Control Centers Computers list, create a Manual Setup File, and then use the Manual Setup File to install the Recorder manually, at the computer.
The computer identity includes:
Platform - Select Windows from the drop-down list.. Computer Name - Enter the computer's name as accessed on the
local network.
Domain Name - Enter the Domain or Workgroup name, if applicable.
If not, enter LOCAL (or any other designation). If a Domain Name entry is not detected as a domain on the network, a message will warn you when you save this information to add the computer. You can click Yes on the message to go ahead and add the computer anyway.
Description - OPTIONAL. Type a description of this computer to be
used in the Control Center and the Dashboard. Leave all other settings at their default values.
44
Group Name - DEFAULTGROUP. Define and assign groups later. Profile Name - Initial Profile. Define and assign profiles later. Recorder Version - Leave the default (latest) Version selected. Don't Install the Recorder - Leave this option selected. Automatically update the Recorder at - Leave this option at the
3.
Select a Recording Profile.
Select the Initial Profile for this installation. Select (highlight) a Profile in the list, or create a New profile. Click Next.
default setting, unless you wish to change it.

If you prefer, add all computers at once using the Add Computers Wizard. Without changes, the Initial Profile settings cause the Recorder to install "quietly" and automatically restart the computer.
Build a manual setup file for Windows

1.
Start the Create Manual Recorder Setup wizard.
4.
Select a Recorder Version.
In the Manage Computers view, select File Create Manual Setup from the menu bar. At the Welcome wizard panel, click Next. 2.
Choose the Windows platform.
Only versions for the selected OS are shown. Initially, the version provided with your Spector 360 installation is the only one available. Highlight a version and click Next.
A Manual Setup File uses an OS-specific Recorder Profile and software Version. You will be able to use this setup file on as many Mac or Windows computers as desired (up to the license limit).
5.
Select a serial number.
Highlight your serial number and click Next.
45
Each computer receiving a Recorder installation requires a license. A Manual Setup file assigns licenses using the serial number you select. If there are 0 Licenses Available, you need to purchase additional licenses before continuing.
8.
Use the .zip file to install manually.
6.
Name the file and location.
A panel summarizes the computer OS, Profile used, Recorder Version, and serial number. Click the folder button next to the Setup File Name field at the bottom of the panel to set the name and location for the Setup file. The default file name includes the Recorder Version and Serial Number. You can change the name, but do NOT change the file extension. Click Save after selecting the name and location, which are then displayed in the wizard's Setup File Name field. A Manual Setup file for Windows is an .exe file. 7.
Finish building the file.
Deliver and execute this file on a computer where you want to install a Recorder. You can use the same Manual Setup File at multiple computers. To deliver the .zip file, copy it to media, attach it to an email, put it into a shared network folder, or use any other means to deliver the file to the targeted computers.
Install the Recorder on the Computer

1. 2. 3. Run the executable file on the computer. The installation runs without dialog boxes and automatically restarts the computer. When the computer starts again, the Recorder will be recording data and communicating with the servers. Verify the computer and Recorder status appear as expected in the Control Center's Computer list. See the Administrator's Guide. Use the Run Diagnostics command, if necessary. Test recording by viewing activity on this computer from a Spector 360 Dashboard. If you need to update the Profile or Version, make changes from the Control Center.
Click Finish. Wait for the file to be built at the location you specified.
4. 5.
46
Verify Recorder Deployment and Recording

Check the Control Center list
When the Recorder is successfully installed, the Computers list under Manage Computers shows a Recorder status of "Installed" and the state "Recording."
Log in to the Dashboard

1. 2. Select Start
Dashboard.
All Programs
Spector 360
Spector 360
At the login prompt, select your computer\SPECTOR360 SQL Server instance; computer is where the Database is installed.
3.
Select SQL Server authentication and log in as System Administrator:

Login: SA Password: The password you defined during setup.
4. It may take a few minutes for the OS Version for computers to be detected. The Recorder status is "Pending" if installation has been scheduled, and the assigned profile and version should appear in the appropriate columns.
Click the Login button and wait for the Dashboard to open.
Actively use the test computers

Use the "test" computer to send email, chat, surf the web, and so on. Wait a few minutes following computer restart for status to be updated in the Control Center. See Troubleshoot Recorder Installation for more help.
If you start the Dashboard before the activity has been stored in the Database, no data or charts are available. After a half-day of recording, explore the various Dashboard views and adjust Recording Profiles assigned to computers to refine activity reports.
47
Deploy to All Computers

Complete deployment
Complete Spector 360 deployment by installing the Recorder software on each computer you plan to record. If you are upgrading Spector 360 , include computers where an older Recorder is already installed, since the Recorder MUST be updated to work with the upgrade. Follow the directions below for deploying to ALL computers.
For a new installation, the Add Computers wizard automatically opens
Use the Add Computers wizard

The wizard allows you to find, select, and add computers, assign a Recorder version and profile to them, and schedule Recorder installation. See the Spector 360 Administrator's Guide for more help. 1.
Start the wizard.
If the wizard did not start automatically, select Recording > Manage Computers > Add Computers in the Control Center. Any computers you have already added will not be duplicated. Select "Using this Wizard" and click Next. Otherwise, select Recording Manage Computers.
Test communication with a single computer BEFORE or AFTER deployment by using the Computer Diagnostics under Manage Computers.
2.
Choose a source for adding computer names.
The best sources for building a complete list of network computers are "Active Directory," "Network Discovery," or "Import a list of computer names." Click Next, provide other information as requested by the wizard, and wait for the import.
48
You can use the Add Computers multiple times to build a complete computer list. Computers already in the list will not be added again. You can Windows and Mac computers to the Computers list at the same time, but make sure the Platform designation for each computer is correct.
The Platform field is required, because the Recorder configuration (Version/Profile) is always platform-dependent. Click the Platform column heading to sort any blank entries to the top of the list, and then either provide a platform selection or remove the computer from the list.
A license is required for each computer receiving a Recorder. Be sure you do not deploy computers you don't intend to record!
3.
Finalize the list of computers you are adding.
At this point you can Add in missing computers and Remove computers you don't want to record. Click Next when the list is ready.
4.
Schedule Recorder installation on Windows computers.
Once you approve the list of computers, you can schedule the installation (for Windows computers) and request automatic updates of the Recorder Version. Mac Recorders will need to be installed manually.
49
If the list includes ONLY Mac computers, the option to schedule installation is not available. If the list includes BOTH Windows and Mac computers, you can schedule installation, but the schedule will apply ONLY to Windows computers. If a computer is OFF at the scheduled installation time, the Recorder will be installed when the computer is started. Installation causes computers to restart (a profile setting that can be changed), so schedule it for a time when computers are likely not to be in use.
5.
Assign a Recording Profile.
Don't install the Spector Recorder - Select this option to add the
computers to the Control Center list without scheduling installation.

Schedule installation for - Windows Computers Only. Select this option to set a date and time for Recorder installation on these computers. Click in any field to change it, or select a date from the drop-down calendar. Select a time in the future by at least a few minutes. Automatically update the Spector Recorder - This option applies to
The behavior and capabilities of a Recorder installation are determined by its Recording Profile. If both Windows and Mac computers are in the list you are creating, select a Windows profile and a Mac profile. Choose:
ALL computers in the list (Windows and Mac) . Choose this option to deliver a new Recorder version to computers automatically when it is available.
Don't automatically update the Spector Recorder - Select this option to keep installed Recorder versions they are until you "assign" a new version specifically to computers.
50
Don't assign a Recording Profile or Build to these computers - This option is only available if you are NOT
You can modify a profile's Client Options so that an immediate restart does not occur. Instead, the installation will be complete when users themselves restart their computers. See the Administrator's Guide for complete information about profiles.
scheduling the Recorder for installation. Select to add computers to the list without making a Recorder Profile and Version selection for them.
Assign a Recording Profile to these computers - Select this
option to assign a Profile to all Windows and to all Macintosh computers in this list. 6.
Assign a Recorder Version.
Deploy manually to Mac computers

Once computers have been added to the list, File > Manual Setup File in the Control Center to build an Macintosh Manual Setup File, as described in Deploy to a Macintosh Computer. Use the single Setup file to install on each Mac you want to record. You will be able to manage Mac Recorders from the Control Center following successful installation.
A new installation has only one version. Select the latest 7.3 version for both Windows and Mac.
Verify deployment and recording

Check the Computers list to make sure the Recorder is "Installed" and "Recording." See Verify Deployment and Recording, and if you have problems refer to Troubleshoot Recorder Installation and the extensive information in the Administrator's Guide.
7.
Finish the wizard.
When you click Finish, the computers are added to the Control Center's Computer list. At the scheduled installation time, the Recorder software will be installed and when the computer restarts, the Recorder will be capturing activity.
51
Options - Configuration
user accounts, and other configuration information. You will manage the databases from a Spector 360 Control Center application on the Database computer. The File Storage Location, external to the Database (by default located at C:\Spector360Data), holds Email Attachment and Screen Snapshot files associated with event data in the STORAGE database. The File Storage folder should be on the same computer as the Database, although it may be on a separate hard drive.
How the Spector 360 Components Work

Server and Client components
The Spector 360 Server components include a central Database and Servers (Windows services), a Control Center application, and a Dashboard application. The Client component is the Spector 360 Recorder, which is deployed to and records activity at network computers. You will manage both Servers and Clients from the Spector 360 Control Center application.
One Spector 360 Database instance is installed. It includes a set of databases, the Database Server, and an additional Job Agent service. One central File Storage location contains files associated with database records.
Control Center Server

A single Control Center Server (CCS) relays instructions from the Control Center to other network computers. This service must be logged in with Administrator-user privileges on all Spector 360 computers to handle remote configuration and installation of the Recorder.
Database & File Storage

Spector 360 installs with Microsoft SQL Server 2005 Express or Standard. The Spector 360 Database is a SQL Server instance that stores recorded activity. The Spector 360 Database is actually several databases. It also stores Web Filtering rules, Event Alerts, Spector 360
52
Data Vault Server

The Data Vault Server receives recorded activity from Client Recorders, sends Email Attachment and Screen Snapshot files to the File Storage location, and processes the "raw" recorded data for insertion into the Spector 360 Database. The CCS listens for status updates from and is able to stop and start all Servers and Recorders. When changes to Recorder configuration are made at the Control Center, the CCS delivers them when it "checks in," by default every 5 minutes. If a Recorder fails to check in on time, it is highlighted in the Computer list.
One central CCS is installed with a Control Center.
Primary Server
The Primary Server communicates with all Spector 360 Recorders to provide licensing and software updates. A Recorder will not operate properly unless it has a license and can establish network connection to the Primary Server.
How does it work? 1. 2. The Data Vault Server receives data from Recorders and delivers it to the DATA VAULT DB, where it is held in "raw" format. If there are email attachments or screen snapshot files associated with the data, the Data Vault delivers these to the File Storage folder located at the Base Path (default is C:\Spector360Data ). Attachments are stored in one folder, and snapshots are stored by Domain and User. The Data Vault initiates the various "Process DV" jobs. Every few minutes, a Data Vault job runs to process events from a certain type of activity in the DATA VAULT DB and insert them into the active STORAGE Database. The STORAGE database contains records of data for each computer or user and can be queried by the Dashboard
3.
One Primary Server is installed anywhere on the network.
Multiple Data Vaults can be used to deliver data to the Database.
53
Web Filter Server

OPTIONAL. The Web Filter Server (WFS) enforces Web Filtering rules across the Spector 360 network. Before accessing the Internet, recorded computers with filtering enabled query the WFS, which applies filtering rules stored in the Spector 360 Database.
Dashboard (application)
The Dashboard allows users to query the recorded data for display in charts and reports. The Dashboard uses the SQL Server to query the Database by date, time, user, computer, Web Filtering category, and other criteria. Multiple Dashboard applications can be installed. All Dashboards access a single, central Spector 360 Database. See the Spector 360 Dashboard Guide to learn how to review, analyze, and report on Spector 360 data.
The Client Recorder

Hidden Spector 360 Recorder software automatically captures activity on a computer where it is installed. It takes snapshots of screens, captures email, chat and instant messaging, keystrokes, web sites visited, programs used, network connections made, documents transferred, and log on/off times. The Recorder automatically uploads its recorded data files (containing "event" records) to the Data Vault Server at regular intervals.
When Server Web Filtering is on, additional "categories" are added to recorded web site data (such as Shopping, Entertainment, or Finance), which can enhance Dashboard queries. If you will not be using Spector 360 Web Filtering, there is no need to install this component.
Multiple Web Filter Servers and be used to handle client Internet requests.
Control Center (application)

Spector 360 login accounts can be set with access to specific areas of Control Center and Dashboard functionality.
More about the Recorder...
1.
The Recorder checks in with the CCS every 5 minutes (or as configured) to report computer status and receive instructions and updates. The Control Center sends instructions via the CCS to the Recorder (at port 2468). Once every 4 minutes (or as configured), the Recorder attempts to upload its activity files to the designated Data Vault Server. If the Client Service cannot make contact with the Data Vault Server, the recorded data remains on the local computer until a maximum
2.
54
number days have passed or a storage limit is reached. If a maximum limit is reached (for example, the computer is offline for several weeks), the Recorder begins deleting the oldest data. When the Client Service makes contact with the Data Vault, the transmission lasts a maximum of 30 seconds. Any remaining events are transmitted to the Data Vault on subsequent connections. The Recorder would only reach this 30-threshold if it has been disconnected from the Data Vault for a period of time and has accumulated a large number of recorded events in the local Data File. You can control when the Recorder "pushes" data to the Data Vault in the Recorder Profile. 3. After a successful upload, the Recorder deletes the data from the local hard drive.
Single Server Requirements

How it works
To get started, install all Spector 360 Setup components on one computer. You can always distribute components later if there are issues (see Distributed Servers). Use the Quick Install or Custom Install to set up a single-server Spector 360 installation. Because all components are on one machine, all servers except the Control Center Server (CCS) can operate under the Local System Account. Communication problems are unlikely. The CCS, however, must operate under an account with administrator privileges on all computers being recorded.
Requirements
The Database presents the greatest disk space concern. As far as other Servers are concerned, the more users recorded and the more activity occurring on computers, the busier they will be. For additional information, see Estimate the Data Size.
55
A Server computer should have:
Recommended
OS
Hardware
Static IP address NTFS file system Firewall exceptions for ports used (see below).
100-500 Clients
Server 2003 Server 2008
2 Dual-core processors 500 GB disk space 2 GB+ RAM Gigabit Ethernet network
500-1000 Clients
2 Quad-core processors 500+ GB disk space 4-6 GB RAM Gigabit Ethernet network
100+ Clients
2 Quad-core processors 500+ GB disk space 6-8 GB RAM Gigabit Ethernet network
Microsoft SQL Server 2005 depends on the features of an NTFS file system. Make sure the computer OS where you install the Spector 360 Database uses NTFS. The FAT32 file system is NOT supported. The amount of hard disk space consumed will depend on the
Recommended OS Hardware
number of computers recorded and the amount of user activity. See Estimate the Data Size. Be sure to set up automatic Space Management following installation if you plan to go forward with monitoring. The Setup automatically creates Windows firewall exceptions for Spector 360 server ports. Make sure you address other firewall concerns or port conflicts.
Quick Start Evaluation
Windows 7 Windows Vista Windows XP Pro Server 2003 Server 2008
1 Dual-core processor 60 GB disk space 1 GB+ RAM
Up to 100 Clients
Windows 7 Windows Vista Windows XP Pro Server 2003 Server 2008
1 Dual-core processor 100 GB disk space 2 GB+ RAM Gigabit Ethernet network
56
Ports used
The following ports are used by default. The Spector 360 Setup program automatically sets Windows firewall exceptions at these ports. You can change the ports used from the Control Center Servers view.
Distributed Servers
The issues
Reasons for distributing servers to computers across a network:
Port 16769 (TCP) by the Data Vault service to receive Recorder data Port 16770 (TCP) by Primary Server for Recorder licensing Port 16768 (TCP and UDP) by the Control Center Server to manage Recorders Port 16771 (TCP and UDP) by the Web Filter Server to intercept client web requests Port 1434 (UDP) by the Spector 360 SQL Server for connection
Conserve disk space by installing the Database on a separate computer Large installation base requires additional servers Improve database performance by separating the WFS Improve database performance with multiple DVs Multiple office locations require additional servers
Options for distribution

A single database allows data to be accessed, aggregated, and interpreted for the entire network from any Dashboard. The Database requires a centralized File Storage system from which to draw Screen Snapshots and Email Attachments (if attachments are being captured).
Internet Access
Although Spector 360 components do NOT require Internet access, running Spector 360 Setup from a computer with Internet access allows the necessary downloads and immediate registration. If the Control Center application has Internet access, you can download software updates for easy distribution to computers.
A single Primary Server licenses all recorded computers for a single serial number. Special circumstances may require more than one Primary Server.
57
Dashboard application Data Vault Web Filter Server
It's possible to distribute servers to other computers during a Custom Setup. If you are installing a Database, run the Setup at the computer where you plan to install. See also:
Deploy for Remote Employees Deploy to Branch Offices
A single CCS allows all Recorders on the network to be managed from one Control Center. See Branch Offices and Remote Employees for solving these problems.
How it works
Most customers start by installing the base components on one computer. After testing the installation, they move (uninstall and reinstall) servers to other computers.
These components can be on separate computers, using Component Install:
SQL Server + Database + File Storage + Control Center application Control Center Server + Control Center application Primary Server Data Vault Server Web Filter Server Dashboard application Control Center application
These components can be installed on multiple computers: Control Center application
58
The Component Install option allows you to install each component separately. Always install a Database first. It's possible to direct the Data Vault (DV) and Web Filter Server (WFS) installations to multiple computers from the Setup, or by using a command line installation.
When Server components are on separate computers, communication and privileges are essential. You may want to define one or more Windows Network accounts to be used specifically by the services requiring access.
Path) to a separate hard drive on this computer to prevent disk space issues. See Estimate the Database Size.
Requires
Database Computer
Windows 32-bit or 64-bit Windows XP Professional systems Windows Vista Windows 7 Recommended for 100+ Clients: Server 2003 Server 2008 OS Requirements Install MS SQL Server only on a LOCAL, fixed, hard drive (run Spector 360 Setup at the Database computer) Static IP Address Computer is always ON NTFS file system; FAT32 file system is NOT supported Database Disk Space 4 GB - SQL Server 2005 Express or Standard 40 GB - Install the Spector 360 Databases 56 MB - Install a Control Center Additional free disk space to support: 100 GB (up to 25 clients) 200 GB (up to 50 clients) 500 GB (up to 100 clients) See Estimate the Database Size. File Storage Disk space 400+ MB per user, per month, for the File Storage location. See Estimate the Database Size.
Service account credentials

The services need access to the following computers:
SQL Server needs access to the Database computer Web Filter Server needs access to the Database computer Data Vault needs access to the Database computer CCS needs access to ALL COMPONENTS
Access to computers or folders on computers is defined by the Windows account the service runs under.
Database credentials
All services except the Primary Server require access not only to the Database computer, but to the SQL Server instance. You can use the Windows account assigned to the service as a Database login, or you can specify separate SQL Server login accounts for each service. Your choices during Setup will automatically create the appropriate Database login for the service.
Requirements for a Database-only installation

A Database computer, including SQL Server and File Storage has the following requirements. You may want to direct the File Storage (Base
59
Requires
Database Computer
Control Center Server Only

The Control Center Server (CCS) requires direct network connection to all Servers and Client Recorders. The CCS has the following requirements:
Requires Control Center Server Computer
Network
TCP/IP Network connection to Servers Firewall Exception at Port 1434 (UDP) As needed, Windows Firewall exceptions are automatically created on Setup.
Windows 32-bit or 64-bit systems
Windows XP Professional Windows Vista Windows 7 Server 2003 Server 2008
Control Center
A Control Center application (not necessarily the CCS) must be installed on the Database computer for Database Management purposes.
Computer You will receive a warning message if you attempt to install the SQL Server to a remote network, RAM, or removable drive. If the Setup program cannot determine the drive type, installation will not be allowed. Requirements Disk Space
Static IP address Computer is always on 1 MB - for the CCS. 56 MB - for a Control Center. The Control Center requires .NET Framework, if not installed would an additional 280 MB (x86) or 610 MB (x64).
Network
Direct network access to each client computer. Direct network access to all other Servers. Firewall Exception at IP port 16768 (TCP and UDP) to communicate with computers for Recorder installation and configuration; a Windows Firewall exception is created during Setup, as needed.
Service Requirements
Administrator user credentials to manage all other Spector 360 computers. CCS credentials for Read/Write access to the Database is provided on Setup, using the Network Account you provide.
60
Requires
Control Center Server Computer
If the Primary Server can't communicate with a Recorder, the Recorder will not deliver its recorded data.
Control Center
A Control Center application must be installed on the CCS computer.
Web Filter Server Only

When there are thousands of web sites to filter, you may decide to install the Web Filter Server on its own computer so that web filtering doesn't interfere with other database processing. Multiple Web Filter Servers (WFS) may be installed. Each WFS should use the same Database credentials.
Requires Web Filter Server Computer
Primary Server Only

The Primary Server requires direct network connection to all Client Recorders. One Primary Server can manage up to 10,000 Client Recorder licenses.
Requires Primary Server Computer
Windows 32-bit or 64bit systems
Computer Requirements Disk Space Network
Static IP address Computer is always on 1 MB - for the Primary Server. Direct network access to each client computer. Direct network access to the CCS. Firewall Exception at IP port 16770 to allow Recorders to retrieve licensing; a Windows Firewall exception is created during Setup, as needed. Internet access for registration and updates (optional).
Computer Requirements Disk Space Network
Static IP address Computer is always on 1 MB - for the Web Filter Server. Direct network access to each client computer. Direct network access to the CCS. Direct network access to the Database. Firewall Exception at IP port 16771 (TCP and UDP) to receive and filter Recorder requests to go online; a Windows Firewall exception is created during Setup, as needed.
Operates under the Local System or other Windows Network account. (No DB access.)
61
Requires
Web Filter Server Computer
Requires
Data Vault Computer
Service account must have credentials to access the Database computer. The WFS connects to the Spector 360 SQL Server instance using the account you specify during Setup.
Network
Direct network access to each client computer. Direct network access to the Database computer. Firewall Exception at IP port 16769 to receive recorded events from Recorders; a Windows Firewall exception is created during Setup, as needed.
If you install more than one WFS, use the Recording Profile to direct each client Recorder to the correct server.
Data Vault Server

When there are many clients to handle or client multiple locations, you may want to install multiple Data Vaults. Each Data Vault should use the same Database credentials.
Requires Data Vault Computer
Service account must have Windows credentials to access the Database computer. The Data Vault connects to the Spector 360 SQL Server instance using the account you specify during Setup.
Direct Client Recorders to the correct Data Vault from the Recording Profile.
Computer Requirements Disk Space
Static IP address Computer is always on 205 MB - for the Data Vault Server.
62
SQL Express Setup

When SQL Server Standard or Enterprise is required
A Spector 360 Setup for fewer than 1,000 computer licenses installs MS SQL Server Express Edition, unless you have requested otherwise. Your Spector 360 Setup package displays the type of Database Setup purchased on the first installation panel.
SQL Server Standard/Enterprise Setup

When SQL Server Standard or Enterprise is required
A Spector 360 Setup for 1,000 or more Recorders installs MS SQL Server Standard Edition. You may have specially requested the standard SQL Server, or you may be using a previous purchased SQL Server package.
A SQL Server Express Setup requires

32- or 64-bit* Windows 7, Windows Vista, Windows XP Pro, Server 2003, or Server 2008 with NTFS Direct TCP/IP communication with the Control Center Server, Data Vault Servers, Web Filter Servers, Dashboards A Control Center application installed on the same machine About 60 GB free disk space to install and get started. MS SQL Server Standard - about 350 MB STORAGE Database - 4096 MB LOOKUP Database - 4096 MB DATA VAULT Database - 4069 MB Other Databases (ADMIN, AUDITING, CUSTOMER, SEARCH, WFS FILTER, WFS SYSTEM) - 5 GB
1.
Run the Setup on the computer where to install the Spector 360 SQL Server instance. Your Spector 360 Setup package displays the type of Database Setup purchased on the first installation panel. Follow normal instructions for a Quick, Custom, or Component Install. During the Database Setup: If the Setup includes SQL Server 2005 Standard, it automatically installs SQL Server and configures the Database. If you will be using a previously purchased SQL Server 2005 package, the Setup prompts you to locate SQL Server installation files and then automatically configures the Database. The Setup program checks for required disk space.
2. 3.
See Configure the Database for more information.
* The setup automatically queries the system to determine whether 32-bit or 64-bit SQL Server Express should be installed.
A full SQL Server Setup requires

32- or 64-bit* Windows 7, Windows Vista, Windows XP Pro, Server 2003, or Server 2008 with NTFS Direct TCP/IP communication with the Control Center Server, Data Vault Servers, Web Filter Servers, Dashboards A Control Center application installed on the same machine
Working Requirements
With 60 GB free disk space, you can run a single-server Spector 360 installation and record a few computers. To record 25 or more computers, you plan on 100 GB free disk space. Even with this amount of disk space available, you must set up Space Management. See Estimate the Data Size and Space Management.
63
About 100 GB free disk space to accommodate 25+ recorded client computers. MS SQL Server Standard - about 350 MB STORAGE Database - 4096 MB LOOKUP Database - 4096 MB DATA VAULT Database - 4069 MB Other Databases (ADMIN, AUDITING, CUSTOMER, SEARCH, WFS FILTER, WFS SYSTEM) - 5 GB
The DATA VAULT DB must be accommodated based on the userdefined STORAGE size as indicated in the table above. 5 GB should accommodate the other Spector 360 databases. 90 GB
* Spector 360 provides SQL Server 2005 Standard, 32-bit edition, for installations with more than 1,000 clients. If you are providing a previously purchased SQL Server (32-bit or 64-bit), make sure it is version 2005 and appropriate for the OS where you are installing.
EXAMPLE: If you define a STORAGE database size of 25 GB, the minimum disk space free required will be about 63 GB. The STORAGE (and related) databases will expand at the rate of about 3 MB per user, per day. 350 MB - MS SQL Server Standard 25 GB - User-defined STORAGE database 25 GB - LOOKUP database 8 GB - DATA VAULT database (see table above) 5 GB - Other 360 databases 63.5 GB
Approximate Total, before data collection. Requirements for 100+ users for 1 month would be around 500 GB.
Change the Database size

During installation, or following installation from the Control Center's Database Configuration feature, you can change the size of the STORAGE (and related) databases for your Spector 360 instance. A larger database size provides better performance for a large installation base, but requires more disk space. Use this formula: STORAGE * 2 + DATA VAULT DB + 5 GB
STORAGE size set at DATA VAULT DB requires:
Working requirements
Once you are actively using Spector 360, more free disk space is required to store data. The rate of disk space used depends on the number of computers recorded and amount of activity recorded. See Estimate the Data Size and Manage the Data for tips on managing disk space. For a single-server, full SQL Server Setup, 100 GB free disk space is strongly recommended to accommodate data.
0-20 GB 20-50 GB Greater than 50 GB
4 GB 8 GB 16 GB
The user-defined STORAGE size applies to both the STORAGE and LOOKUP databases (Size * 2). Note that another STORAGE database of the defined size is automatically created when the active one has been "filled."
Be careful setting database size!

Setting a large user-defined STORAGE database size (e.g., 100 GB) can cause lengthy Backup, Restore, and Archive times, and could slow down Dashboard searches and queries. You can use the Control Center
64
(Databases Database Configuration) to change the maximum size of future STORAGE databases.
The Spector 360 SQL Server instance by default is set to a maximum of 4096 GB, which you can change from the Control Center following installation. Microsoft SQL Server 2005 depends on the features of an NTFS file system. Make sure the computer OS where you install the Spector 360 Database uses the NTFS and not the FAT32 file system. The MS SQL Server installation and the Spector 360 Databases can be installed at different locations, but must be in constant communication.
Requires
Dashboard Computer
Disk Space
56 MB free hard disk space. An additional 280 MB (x86), 610 MB (x64) for Microsoft .NET Framework 2.0, if not installed
Network
TCP/IP network connection to the Database computer. Windows login or SQL login privileges to the Spector 360 SQL Server instance. Ports 1111 and 1424 (TCP) are used to receive data.
File Storage Share Access (see below)
Each Dashboard requires permissions for accessing the File Storage Location where Screen Snapshot and Email Attachment files are stored. By default, this is the C$ Share on the Database computer. You can change the network share for security. See the Administrator's Guide.
Deploy Dashboards for Managers

Dashboard requirements
Each Dashboard requires network access to the Spector 360 Database (SQL Server instance). As many Dashboards as needed can be installed on the network. The Dashboard installation requires:
Requires Dashboard Computer
To install, choose Component Install

Access and run the sp360setup73.exe program from the computer where you want to install the Dashboard. If any components were previously installed on this computer, you will be using Install/Reinstall. Otherwise, choose Component Install.
Windows 32-bit or 64bit systems Other Software
Windows XP Pro, Windows Vista, Windows 7, Server 2003, or Server 2008. Microsoft .NET Framework 2.0 (installed by Setup if not found).
Select only the Dashboard for installation. Enter your 16-character Spector 360 serial number and click Next. Agree to terms of the license agreement; click Yes.
65
Configure components for installation

Database - REQUIRED. Enter the name of the computer where the
Windows account or a SQL Server account that you define. Refer to the Administrator's Guide.
Database Login management in the Control Center
Database is already installed.

Dashboard & Control Center - OPTIONAL. Accept or change the
installation path. The default path is C:\Program Files\SpectorSoft\Spector 360 Dashboard. Click Next to check for disk space and begin the installation. Download newer installation files if they are available. The installation is finished when the Setup closes.
When installing a Dashboard, make sure you are using the same Setup program you used to install the Spector 360 Database. The Dashboard accesses the Database via a TCP/IP connection. If it needs to retrieve snapshot or attachment information, it attempts to connect to the appropriate share using the context of the user currently logged on to Windows.
Set up sharing of the file storage location

To provide Dashboard access to the file storage location where snapshots and email attachments are stored (C:\Spector360Data ), Spector 360 automatically uses C$ share for all Dashboard users. For better security, create a share for your file storage location and add this Dashboard Share to the Control Center. The Control Center will automatically apply this share to all installed Dashboards on the network.
Database Configuration of File Storage in the Control Center
Test the Dashboard

Start the Dashboard by selecting Start > All Programs > Spector 360 > Spector 360 Dashboard. At the startup splash screen, location your Spector 360 Database instance, computer\SPECTOR360 , and log in as SA.
Create a login for each Dashboard user

From the Dashboard (Management) or Control Center (Database > Manage Database Logins) you can create a Database login for each user, using their
66
Deploy Control Centers for Administrators

Requirements for a Control Center
Each Control Center requires network access to the Control Center Server and (if Database login is required) permission to access the Spector 360 SQL Server instance. As many Control Centers as needed can be installed on the network. The Control Center installation requires:
Requires Control Center Computer
To install, choose Component Install

Access and run the sp360setup73.exe program from the computer where you want to install the Control Center. If any components were previously installed on this computer, you will be using Install/Reinstall. Otherwise, choose Component Install.
Select only the Control Center for installation. Enter your 16-character Spector 360 serial number and click Next. Agree to terms of the license agreement; click Yes.
The Spector 360 servers should already be installed on the network!
Windows 32-bit or 64bit systems Other Software
Windows XP Professional, Windows Vista Windows 7, Server 2003, or Server 2008. Microsoft .NET Framework 2.0 (installed by Setup if not found).
Configure components for installation

Database - REQUIRED. Select Database and enter the name of the computer where the Database is already installed and type and confirm the SA password. Control Center Server - REQUIRED. Select Control Center Server
Disk Space
56 MB free hard disk space. An additional 280 MB (x86), 610 MB (x64) for Microsoft .NET Framework 2.0, if not installed.
and provide the name of the computer where the CCS is already installed.
Network
Direct network connection to Servers and Client computers. Network access to the SPECTOR360 SQL Server instance and a Database login, if Web Filtering, Event Alerts, or Database Management will be used at this Control Center. Note that the Control Center can be used to configure and install Recorders without Database access.
Dashboard & Control Center - OPTIONAL. Accept or change the
installation path. The default path is C:\Program Files\SpectorSoft\Spector 360 Control Center.
Primary Server - REQUIRED. Select Control Center Server and
provide the name of the computer where the Primary Server is already installed.
Note that the default location for server components will be THIS computer; change it to the computer where the server is installed.
67
Test the Control Center

You can now open the Control Center from the Windows Start menu on this computer. Select Windows Start > All Programs > Spector 360 > Spector 360 Control Center.
If no computers have been added, the Manage Computers list is empty. Computers you add are visible to other Control Centers.
Create a Database login for users that need it

Users who manage computers and recording can open the Control Center without logging in to the Database. However, users who will manage the Database, or set up Web Filtering or Event Alerts, require Database access. Select the large Database button and Manage Database Logins. Create an account for each user. Refer to the Administrator's Guide.
For security, give each user his or her own Database login.
Select the large Recording button from the lower left and Manage Computers from the upper left pane. If computers have been added via another Control Center, the CCS will populate the list of computers in this Control Center.
Select the large Servers button from the lower left pane. All servers should be visible in the right pane.
68
Installing Extra Servers

After initial Spector 360 installation, customers who are recording hundreds of clients or use complex filtering can improve Spector 360 performance by adding a Data Vault or Web Filter Server to their configuration.
4.
Configure the components you are adding as desired. Give each Web Filter Server the same Database credentials, and give each Data Vault Server the same Database credentials. Follow instructions to complete the installation. The Server icon should appear in the system tray of the computer where it is installed.
5.
Install servers from the Setup

If you are installing or re-installing ALL components, use the
The CCS automatically attempts to detect the location of all servers, but you may need to ADD the server to the Control Center. To have Client Recorders use the extra Server, you will need to change the Recorder Profile Server Settings and name the extra Server computer.
Custom Install, starting at the Database computer. You will be able to add multiple Data Vault and Web Filter Servers at other computers on the network from a single Setup run.
If you've completed the base installation, use the Component
Install and direct the Data Vault or Web Filter Server configuration to computers as desired. You will be required to identify the CCS and Database computers.
Add the servers to the Control Center

Check the Control Center Servers section to make sure new servers are being managed. If the new server is NOT visible, Add it to the Control Center.
Install servers from a command line

Another option is to install the servers from a command line. Download the Setup program to a hard drive, if necessary. You can access the Setup at any time from the www.spectorsoft.com using your serial number.
1.
Select Windows Start > Run and type cmd in the run box and press Enter. At the console prompt, navigate to the folder where the Setup program is saved and use the following command:
sp360setup73.exe /e
Direct client Recorders to the new servers

Finally, direct clients to use the new server. Use Manage Recording Profiles to create a new Recording Profile that references the new server in its General Options Servers panel.
If components are detected on this computer, the Setup program launches to the Reinstall/Uninstall panel. 2. 3. Enter your serial number and agree to the End User License Agreement. Select the Server(s) you wish to install. Click Next. Agree to the License Agreement.
69
Deploy for Remote Employees

Options
To monitor computers that leave the network or operate from a remote location, you need to provide a path for the Recorder to communicate with the Servers. Once communication is established, the Recorder sends data to the central Data Vault Server, requests Internet access from the Web Filter Server, requests licensing from the Primary Server, and is managed and updated by the Control Center Server (CCS).
Two methods are possible:
In the Manage Computers list, assign the new profiles (one for Windows and one for Mac, if necessary) to the computers you want to use the new servers. Refer to the Administrator's Guide for complete instructions.
You will need a Recording Profile for each added Server.
The computer connects to the Servers via VPN.When the remote
user connects via VPN to the network where Server Components are accessible, the computer is essentially on the same network. No different from local clients, the computer secretly delivers its recorded data and receives instructions while connected via VPN. The CCS has no trouble communicating with and managing the Recorder.
The computer connects to the Servers via Internet connection.
When a computer connects to a static, external IP address on the network where Servers are accessible, the necessary ports must be forwarded and open to traffic. The Recorder uses its Server Settings to deliver data to the central Data Vault and receives Web Filtering from the WFS over the "raw" Internet connection. However, the CCS will NOT be able to identify or manage the remote Recorder. If that remote computer itself is configured to communicate via a static IP address, you can add the computer's IP address to your Server side DNS or host file to provide name resolution. The Control Center will then be able to fully manage the Recorder.
70
Opening up an external IP address leaves your network vulnerable to hackers for DoS and flood attacks. If you choose this method, it is imperative that you use industry strength, standard Firewall protection!
Recorder to Primary Server: 16770 (TCP) Recorder to Web Filter Server: 16771 (TCP/UDP) CCS to Recorder: 2468 (TCP)
To set up communication via the Internet

1.
Use a static IP for all Server computers.
To set up the Recorder for a VPN connection

1.
Add the remote computer to the Control Center.
It is detected when connected via VPN. Assign a Recording Profile with the same Server Settings used by local network computers. 2.
Schedule the installation. When the VPN connection is active, the installation is delivered.
In the above illustration, Servers are installed on a computer with the static IP address 192.168.1.10. 2.
Set up an external static IP for the receiving device.
A VPN connection allows communication with a remote computer as if it were local, providing:
The external IP address receives the communication from roaming Recorders intended for the Servers. In the above illustration, a NAT router device has the address 65.8.119.2. 3.
Create a separate profile using the external static IP address.
Secure access to Servers and Database at the central location. Ability to install, configure and manage the Recorder from a remote Control Center. Direct contact of the remote Recorder with the Primary Server. Direct delivery of recorded data to the central Data Vault server. Centralized Web Filtering provided by the Web Filter Server (WFS). 4.
Open the Control Center's Recording Manage Computer Profiles. Use General Options Security to name the profile. This profile will ONLY be used for computers connecting via the Internet. Use the Servers panel to Edit each Server IP field to use the static external IP address (65.8.119.2 in the above illustration). Make sure the Port entry for each Server is correct, and save the profile.
Install the Recorder manually.
Port forwarding for Internet connection

The Recorder is configured to communicate with each Server component on a specific port. If the computer is connected by VPN, normally all open ports are available. If the computer is connected by Internet, you must configure the Server-side device receiving communication to forward ports requested by the Recorder to the correct port at the computer where each Server is installed. By default, communication is configured at the following ports.
If the centralized CCS wont be able to resolve the remote computer name, install the Recorder manually. When you create the Manual Setup File, be sure to assign the profile that specifies the external IP address. 5.
Configure port forwarding.
Recorder to CCS: 16768 (TCP/UDP) Recorder to Data Vault: 16769 (TCP)
Use your NAT or other system configuration interface to forward the ports used by the Recorder (as they are listed in the Server Settings panel) to the appropriate Server port. If possible, forward the Recorder listening port on the client side (at the remote computer).
71
Deploy to Branch Offices

General branch office configuration
When there are too many remote computers to reasonably provide VPN or Internet access for each. It is possible to monitor branch offices at remote locations through a centralized database. Complete your centralized Spector 360 and SQL Server installation BEFORE setting up a branch office.
Give the branch server computer a VPN connection to the central server network
Spector 360 Recorders require direct connection to the Primary Server, and you can install only one Primary Server under one serial number. To obtain serial numbers for branch offices, contact SpectorSoft .
Install ALL servers and applications EXCEPT the Database A single-server computer requires: - At least 100 GB free hard disk space (depending on data recorded) - Static IP address - Always available - Internet connection Install a Control Center to manage and configure the Recorders Install Recorders with a profile set to use the branch office servers
Run the Setup at a branch office

1. 2. Obtain a serial number for the branch office. Be sure to purchase licenses for the number of computers you plan to record. Activate a VPN connection from the local server computer to the central Spector 360 server network. The central servers should be visible on the network via VPN.
72
3.
At the branch office server, use the new serial number to download and run the Spector 360 Setup program. Use the Component Install to install all components EXCEPT the Database. Enter the branch office serial number when prompted by the setup.
computer name and the path name (by default Spector360Data computer). For example: \\COMPUTER05\Spector360Data
4.
Keep in mind that the Data Vault Server may be handling 10-30 MB of data per Recorder - every day.
Locate the central Spector 360 SQL Server instance

The Setup will prompt you to locate the Spector 360 SQL Server instance. Be sure to provide the correct Computer Name for the central Server computer where the Spector 360 Database is installed.
Register the branch office serial number

Finish the installation and follow normal procedure to register the local branch office serial number and apply an unlock code. Use the SA password to open the Control Center and add the branch office computers to the Control Center Computers list.
Enter the SA Password defined for the central Database. Click Next.
Install servers under network accounts

For each computer, install on a local branch computer. For service accounts, be sure to select an account with network permissions to access the centralized CCS and Database locations. For the Data Vault and Web Filter Server, use the SAME Database connection account you use for centralized servers. For the Data Vault Server, use the SAME centralized Screen Snapshot/Email Attachment folder. Reference the central Database
Install Recorders
Use the Control Center to add branch office computer to the Control Center list and deploy the Recorder. Check the profiles you plan to use to be sure they reference the local servers. Installed Recorders will send data to the local Data Vault, which will deliver it for processing and storage in the central Database and File Storage location.
73
Deploy in a Domain Network

Spector 360 was designed for domain networks
A managed domain network is already configured for centralized management. After installing the Spector 360 Server Components, you will be able to install the Recorder on network computers from the Control Center. The Control Center Server must have Local Administrator privileges on each computer in order to control the remote computers. Any computer, in turn, must be able to authenticate that the Control Center has Local Administrator privileges before it allows control. If you supply Domain Administrator credentials to the Control Center Server, it will have control, as set by Domain Group Policy, over all aspects of the Recorder installation and administration.
Deploy in a Windows Workgroup

Spector 360 supports workgroup networks
Spector 360 was designed for domain networks, but it's possible to configure a Windows Workgroup for Spector 360 management. To make sure the Control Center Server (CCS) has Administrator privileges on each computer, follow these steps:
Define a common Local Administrator at each server and workstation. Check each computer's network and local security policy settings. Run the Setup as described in this guide to install server components. Install the Client Recorder manually, at the computer. Make sure the Control Center Server (CCS) is using the same, Local Administrator credentials you defined at each computer so that it can manage Recorders across the network.
Using Active Directory and Spector 360

It's possible to "synch" Active Directory with your Spector 360 installation to make sure all computers are being recorded. See Managing Computers from Active Directory in the Administrator's Guide.
The Control Center Server needs credentials!

The Control Center Server must have Local Administrator privileges on each computer in order to control the remote computers. Any computer, in turn, must be able to authenticate that the Control Center has Local Administrator privileges before it allows control. During Spector 360 Setup, when asked for CCS network account credentials, you should use the SAME common, local administrator account you defined at each computer. If you do not have a common Administrator defined at each computer, go to each computer you plan to record and follow the next steps. You can change the CCS credentials following installation from the Control Center. Select Servers, right-click Control Center Server and select Modify.
74
Set up a common Windows administrator account

Create exactly the same administrator account (user name and password) at each computer as described in Administrator credentials. This account will give Spector 360 access to each computer. The admin005 account is a local administrator on each computer
Policies
Security Options
Network access: Sharing and
security for local accounts.
Enable this setting for local security: Classic local users authenticate as themselves 3. 4. Make sure the File and Printer Sharing setting is enabled. Make sure C$ Administrative Share is enabled.
Install the Client Recorder manually at the computer

Instead of installing the computers from the Control Center, you will use the Control Center to create an executable Manual Install file with the configuration you want. Then, launch the Install executable file at each computer. Follow instructions in Installing Manually. Restart the computer following Recorder installation.
If a Guest Login prompt appears when Spector 360 connects to the computer, the CCS wont be able to log on as administrator. Change the Local Security Policy to prevent this from happening.
It does NOT matter which user is logged on to the network computer as long as the account as described above exists in the local Administrators group on the computer.
Make sure each computer belongs to the workgroup

1. While at each computer, use Windows Control Panel System to view the current workgroup settings. If necessary, change settings so that each computer is a member of the same workgroup. If necessary, change the computer's local security policy to allow user authentication. This may or may not be a problem. The steps may be: Control Panel Administrative Tools Local Security Policy Local
2.
75
Deploy on a Multi-User Network

Set up Spector 360 at the server
Spector 360 Server Components will operate in a Terminal Server or Citrix environment, provided requirements are met. All users logging on to the network will be recorded. Install the Spector 360 Database and Servers at your server. The same requirements apply as for a normal single-server installation. Use:
SpectorSoft requires customers using multi-user platforms to purchase a license for each user who will be logging in to the server. A 50-computer license allows for the installation of the Recorder onto a Citrix MetaFrame server configured for 50 unique users.
Capture published applications

No special procedures are required to capture activity in "Full Desktop" mode. If "Published Applications" are used, follow these steps to modify the Recording Profile at the server computer Recorder:
Quick Install or
Custom Install
Give the CCS a common administrator account

The Control Center Server (CCS) must have Local Administrator privileges on each computer in order to control the remote computers. Any computer, in turn, must be able to authenticate that the Control Center has Local Administrator privileges before it allows control. If computer users log on to:
1. 2. 3. 4.
In the Control Center, select Recording > Recording Profiles and create a new Recording Profile or modify the Intial Profile. In the Profile Settings box, select General Options > Client Options. Check Enable Alternative Shell Support. Click Edit to open a box where you can specify the alternate shell that is launched when a user requests a Citrix or Terminal Server published application. NOTE: Clear this option to record applications running under the normal Windows shell. Enter the alternative shell name: wfshell.exe - Citrix Server rdpshell.exe - Windows Terminal Server
A workgroup - Spector 360 behaves exactly as if it were in a Windows
Workgroup environment. Make sure the Control Center Server (CCS) runs under an Administrator account common to all workstations. See Deploy to a Windows Workgroup.
A domain - Spector 360 behaves as it would on a Windows Domain
Network. Make sure the CCS runs as domain administrator or equivalent before you attempt to deploy the Recorder. See Deploy to a Domain Network.
5. 6.
Click OK to set the alternate shell name. List all computers in the Control Center, and assign a Recorder Profile with this setting to computers.
A common Windows account - If all users are assigned a common
Windows account, the Spector 360 will have issues managing computers and data. Spector 360 is more useful if each user has his or her own Windows login account.
A Recorder will capture sessions directly from a Terminal Server (Microsoft Remote Desktop) or Citrix server where either Full Desktop or "Published Applications" are used.
76
Install a Recorder at the server

By installing a Recorder on the server, sessions from a Windows Terminal or Citrix Server (either Full Desktop or "Published Applications") are captured. Add the server computer to the Control Center as described in Deploy to a Windows Computer. Schedule installation for a time the server can restart without interrupting users.
domain. Create a Manual Setup file to execute at each computer the computers are in a workgroup.
To ensure activity recorded at any computer is stored by user name in the Database, enable the Data Vault Server setting, Combine user recordings across computers. (This assumes users have their own Windows account.)
Spector 360 Servers and a Client Together? - Yes, you CAN install
Spector 360 Server Components and the Client Recorder on the same machine - AFTER the Spector 360 Setup is complete. The servers cannot be installed if any previous SpectorSoft recording software exists on a computer.
Watch ongoing performance

Keep track of performance and usage. The more users who connect to the server and are recorded, the more difficult it becomes for the Recorder to take Screen Snapshots for each user every 30 seconds. Use Recorder Profile settings to reduce frequency of (or disable) Screen Snapshots, or consider disabling other activity recording.
Simultaneous Users - The Recorder on the server records activity under the login name of the user who performed the activity. This means the Recorder will capture email, web sites visited, keystrokes, and all other activities for DOMAIN\SALLY, DOMAIN\PETER and DOMAIN\JIM as they use the terminal services, even when activity occurs simultaneously. Uninstall the Recorder to Upgrade - It will be necessary to uninstall
the Recorder before you upgrade or reinstall Servers. Perform upgrades when users will not be at workstations, or when you can prevent activity at the server. Re-install the Recorder at the server computer when the Setup is complete and the upgraded Control Center and Servers have been verified.
Install a Recorder at each workstation

By installing a Recorder on each workstation in addition to the server, local activity will be captured. For example, web surfing from a local Internet Explorer application would not be captured by a Recorder on the server. Add the workstation computers to the Control Center and schedule them for installation from the Control Center if the computers are on a
77
Options - Space Management
The Control Center view of Databases
Estimate the Database Size

Which type of database installation are you using?
The best policy is to test your particular installation with a limited set of users, watch disk space usage, and establish benchmarks. The base SQL Server Database requirements are provided in:
SQL Express Setup SQL Server Standard/Enterprise Setup
How it works
The "Spector 360 Database" actually includes several databases, which are fully described in the Spector 360 Administrator's Guide. As data is received from Recorders, the Data Vault Server sends event records to the currently active STORAGE database.
Quick numbers
How much disk space is required for a single-server Spector 360 installation capable of collecting data? The quick answer using default settings is:
The STORAGE database is where activity recordings are stored. New STORAGE databases are automatically created when a maximum size is reached. The LOOKUP database allows query of the data and grows with the STORAGE database. The DATA VAULT database receives recordings from Spector 360 Recorders before processing them for storage in the STORAGE database and is sized to match the maximum STORAGE size. Other databases (for Alert Profiles, Web Filtering and administrative purposes) do not change in size as data is recorded.
25 Recorders installed - Minimum 100 GB 25-50 Recorders installed - Minimum 100 GB 50-100 Recorders installed - Minimum 500 GB More than 100 Recorders installed - 500 GB +
Ongoing estimating
The required hard disk space for effective, ongoing monitoring depends on:
The Data Vault sends associated Screen Snapshot and Email Attachment files (if recorded) to a File Storage Location, by default C:\Spector360Data on the Database computer.
The number of computers you are recording The amount of daily activity at computers How much activity recording is requested When using SQL Server Standard or Enterprise, the maximum database size How often you archive or remove STORAGE databases The number of centralized Alerts and Web Filtering rules used
78
How you choose to capture and manage Screen Snapshot and Email Attachment files
recording 20 average employees, the STORAGE database will receive about 1 GB of recorded data per month. The following formula helps to estimate on-going disk space needs for data storage following installation. This formula assumes a recording period of 8 hours, that each user costs about 3 MB per day (which you should adjust to your benchmarks), and that the "Initial Profile" default settings are used.
3 MB * <users> * <days> = Total Cost
Be sure to activate automatic Database Space Management and regularly monitor disk space used. If the data size exceeds thresholds on the Database computer, Spector 360 will be compromised. See Single Server or Distributed Servers for more about disk space required for component installation.
Therefore:
3 MB * 30 days * 15 users = 1.35 GB 3 MB * 30 days * 100 users = 9 GB
Users Disk Cost per Day Disk Cost per Month
STORAGE Database
A newly installed Database has one STORAGE database. When the maximum data size is reached (4 GB for MS SQL Server Express or a userdefined limit for SQL Server Standard/Enterprise), Spector 360 automatically creates a new STORAGE and LOOKUP database. You may end up with several active STORAGE databases. New STORAGE databases continue to accrue until you archive them or set up automatic space management. Most users want to have about a month's worth of non-archived, active data available for effective Dashboard use.
Watch the data (Database Statistics) for a week or two to establish your own benchmarks for average daily disk cost per user.
15 100 500 1000 5000
45 MB 300 MB 1.5 GB 3.0 GB 15 GB
1.35 GB 9 GB 45 GB 90 GB 450 GB
Disk cost based on activity and recording profiles

The initial Recording Profile is set to automatically capture:
Disk cost based on number of computers (default settings)

The "per user" rate of database space consumption depends on the number and activity of your users. Roughly, you can estimate a rate of 50 MB per user, per month, for users working an 8-hr day. So, if you are
All exchange Email and Webmail (no attachments) All Web Site Visits All Online Searches All Chat and IM activity All Keystroke Activity All Keyword Alert Activity All Application Activity All Network Activity
79
All File Transfer Activity Document Tracking of print and CD/DVD activity (complete tracking of Create, Edit, and Delete activity can be enabled) Screen Snapshots (single monitor) at a rate of once every 30 seconds in 4-bit grayscale
The size limits and types of email attachments captured
From the Control Center Database tool, you can: Delete snapshots older than a certain number of days Include snapshots and attachment files with STORAGE archives to preserver them AND free up space
A user sending dozens of email messages generates a higher record count for Email. A user continuously filling out forms generates a higher record count for Keystrokes. Database Statistics shows events records by activity
Depending on the amount of activity data captured at a computer, the daily total of 3 MB per user may be significantly larger.
Screen Snapshots
The single largest data point is the Screen Snapshots, actual pictures of the user's screen, taken by default every 30 seconds. The daily per-user storage requirement can drop to as little as 2-3 MB per day if snapshots are disabled and increase to as much as 100 MB or more if they are taken every few seconds or in color with multiple monitors. Grayscale Screen Snapshot viewed from the Dashboard
File Storage
The File Storage folder collects all Screen Snapshot graphics and Email Attachment files. These files are associated with event records in the STORAGE database. The folder is usually located on the same computer as the Database. It's entirely possible to give this data storage area its own hard drive so that the disk space it uses does not compromise the active Database. However, employ space management techniques to avoid a full hard drive, lost snapshots, and Database errors. From the Recorder Profile, you can control:
Factors that influence storage requirements are:
How many snapshot "triggers" are used Keyword alerts, if set to trigger snapshots Whether or not email attachments are captured
The amount of time the user was active on the computer The resolution of the user's desktop and number of monitors used The color depth the Recorder is configured to record The frequency with which areas of the user's screen change
80
Multiple monitors being used
For example, a user with an 800 x 600 display engaged in computer activity for 2 hours a day, who is being recorded in grey scale, is going to have a significantly lower storage requirement than a user with two 1280 x 1024 displays engaged in activity for 6 hours a day, who is being recorded in color. You can control the frequency and color depth of snapshot files from the Recorder Profile Settings.
Email Attachments
If you decide to enable "Email Attachment Capture and/or Local Document Tracking (at the user's hard drive) you should expect to add significantly to the daily storage requirements.
Email attachment recording is OFF by default, and attachments are not captured. If attachment recording is turned ON in the Recorder Profile Settings, the default maximum size of attachments captured is 100K. Files up to 100K attached to sent or received email will be captured and stored in the File Storage location; anything larger will not be captured.
Be careful to balance your need for detail with the storage needed for requesting additional Triggers and Capture Snapshots on Alert.
Number of Computers Snapshot taken every... Disk Cost per Day Disk Cost per Month
15 15 100 100 500 500
30 seconds 10 seconds 30 seconds 10 seconds 30 seconds 10 seconds
120 MB 800 MB 800 MB 2.5 GB 4 GB
3.6 GB 11.25 GB 75 GB 75 GB 120 GB
You can change the settings to capture ALL email attachments, but be aware that file attachments can take up a great deal of disk space.
81
Manage the Data

The issues
A full or nearly full hard disk causes problems viewing data, prevents new data from being stored, and eventually causes the Spector 360 Database to stop functioning. As recorded activity accrues, you must be prepared to manage the space used by the active databases, by database backups, and by the files stored to be accessed with database records.
What happens?
new STORAGE database - and a new LOOKUP database - are automatically created. This can go on and on until disk space is used up and new data can no longer be stored! Set up Space Management for your organization in a way that conserves disk space without sacrificing what you need to see. Choose options that will work best for you. Note that once data is archived or removed from the Database, it is no longer included in Dashboard reports.
Delete unnecessary backup sets

Deal with old backup sets by keeping only the last two sets. Restoring a backup resets the Database to a previous state and overwrites all current data. You will restore a backup ONLY if something bad happens to the computer or the database, or if you decide to MOVE the database. To preserve older data, use Storage database archives. Read about Backups vs. Archives in the Administrator's Guide. In the Control Center, select Database
Configuration Manage Database Modify space management settings.
1. 2.
Data is recorded. The Recorder records activity and delivers it every
4 minutes to the Data Vault Server.

Data is stored in the database. The Data Vault Server delivers
recorded event records to the Data Vault DB, where they are temporarily held and then processed and stored in the active STORAGE DB. 3.
Associated files are stored in a folder. The Data Vault Server
directs recorded Screen Snapshots (ON by default) and Email Attachments (OFF by default) to the default location (base path) on the Data Vault computer. Screen snapshots are graphic files and Attachments, if on, can be any file type. This File Storage folder can grow extremely large in a short time. 4.
Automatic Backups are performed. A Database Backup includes ALL active Spector 360 Databases. By default, an automatic DIFFERENTIAL BACKUP is performed every night and a new FULL BACKUP set is created once a week on the Database computer. Old Backup sets - equivalent to a whole other database - are NOT automatically removed. New STORAGE databases are automatically created. When a
5.
STORAGE database becomes full (at 4 GB for SQL Server Express, or at the defined maximum DB size for SQL Server Standard or Enterprise), a
82
Manage Database Configuration - Modify space management settings
The setting below archives any FULL Storage database after 30 days have passed. Manage Database Configuration - Modify space management settings
Automatically archive full Storage databases

When a Storage database is full, as defined by the maximum database size, a new one is automatically created. All data in active Storage databases is accessible in the Dashboard. Because a database in an SQL Server Express installation is full at about 4 GB and is accompanied by LOOKUP information, four active Storage databases may be costing the installation about 32 GB of disk space. STORAGE DB - 001 STORAGE DB - 002 STORAGE DB - 003 STORAGE DB - 004 If your Storage databases are multiplying quickly, consider automatically archiving them to a different location. Although the Dashboard loses instant access to the archived data, you can always move the archive back and restore it to pop that data back in without sacrificing the current data.
Change the location of backups and archives

By default, backups and archives are stored in a folder in the same SQL Server path as the current Database. You could direct backups to a different local hard drive and archives to another network folder. This would prevent backups and archives from "piling up" on the Database machine. Select Database
database settings. Manage Database Configuration Modify
83
Manage Database Configuration - Modify database settings
Refer to the Administrator's Guide

These are just a few of the space management options available. Refer to the Administrator's Guide for all options and complete instructions.
Keep in mind that fewer problems occur when automatic database operations stay on the local computer (if on a different hard drive). You can always manually move backup and archive folders. Be sure to move a folder back to the local Database machine before attempting a restore. Some organizations maintain the File Storage (base path) on its own, local hard drive to ensure access to snapshots. Use Data Vault Server settings to change the base path.
Trim snapshots saved in the active storage folder

If snapshots are important to you - they provide good legal proof - make sure they are being copied with backups and archives. On the same Modify database settings panel shown above, find and select the Snapshot and Attachment Files options.
You can then delete the oldest snapshots to ensure the storage folder will not unexpectedly fill up. Do this on the Modify space management settings panel.
84
Troubleshooting
Exclude the Servers from Scanning

Looking for SpectorSoft
Some antivirus and anti-spyware programs will look for and attempt to remove SpectorSoft files on a computer. Files may be removed during or after Spector 360 installation. To keep all components running properly, exclude Spector 360 server files from scanning. If you use enterprise or endpoint antivirus software, make exclusions at the antivirus server to apply across the network. If antivirus programs are installed locally, make exclusions the server computer.
See the Knowledge Base for articles on adjusting McAfee, Symantec, and other popular antivirus programs.
Exclude by Risk
Exclude by risk name, if possible
Some antivirus/anti-spyware packages allow you to exclude the SpectorSoft signature "risk name" during scans. The package must list SpectorSoft products as a possible risk that you can exclude, or SpectorSoft software must have already been detected as a "risk." Open the antivirus or anti-spyware control panel and look for their provided list of "risks" to exclude from scanning. The following table shows a few antivirus packages and the risk name to exclude from scanning. See Exclude the Servers from Scanning. Vendor Symantec/Norto n Antivirus AntiVirus, Internet Security, Endpoint PC Tools Spyware Doctor Risk Name Spyware.Eblaster Spyware.Eblaster!gen1 Spyware.Spector Spyware.Eblaster, Application.Spector_Pro_Keylogge r Trend Micro OfficeSca n SPYW_SPECTOR SPYW_SPECTOR.A SPYW_SPECTOR.B Note that risk names may change as you upgrade your antivirus software. With Symantec and Norton products, the safest approach is to exclude both the risk AND the file names.
Temporarily disable scanning

Disable antivirus scanning on the server computer while installing Spector 360 to ensure completion of the Setup. Before re-enabling scanning, exclude the SpectorSoft risk name, if the antivirus software identifies "risks" by signature name (see Exclude Risks) or exclude the installed files by adding them to an "whitelist." This ensures the antivirus software will bypass these files in subsequent scans and not remove or quarantine them.
Be sure to take steps to exclude Recorder files from scanning before deploying the Recorder!
Exclude installed servers by file name, if possible

Open the antivirus or anti-spyware control panel and look for an option that allows you to exclude specific files from scanning. To safeguard your Spector 360 installation, exclude all of the following files. If you wish, exclude the entire SpectorSoft folder instead of listing each file:
85
Troubleshooting
SPDataServer.log
\..\SpectorSoft\* Example: Exclude files in Windows Defender
CNESvrMgr.exe CNECDLL4.dll CENotify.dll msocxushell.dll
Installation folders include:

C:\Program Files\SpectorSoft C:\Program Files\SpectorSoft\Setup C:\Program Files\SpectorSoft\Spector 360
Exclude the following files in the Spector 360 program folder.

Files below with ???? in the filename include the Recorder build number. Use a wildcard, if your antivirus software permits it, because new Recorder versions will be added.
Note that the Control Center and Dashboard applications generally are not targets for antivirus detection and therefore their installed files are not included.
Files are listed with the default directory structure path; computer directory structures may vary. In the System32 folder on the computer where servers are installed, exclude:
C:\Windows\SYSTEM32 SPLicenseManager.exe SPLicenseManager.log SPWebFilterSvr.exe SPWebFilterSvr.log SPDataServer.exe
Admin.exe CEAdmin.cfg CEAdmin.dll CEAdminExt.dll CEAdminRT.log CEClientSettings????.cmp CEClientSettings????.dll CENotify.dll CESetup.exe CNECommDll.dll CNESvrMgr.exe ControlCenterSetup.msi ControlCenterXP0.msc DeploymentGuide.chm ExportCtl2.dll FileToSql.exe msnwcfg.ini MSVxRsc.dll NetConfig.xml PostRead360.htm
86
Troubleshooting
Read360.htm ReadMe.htm Settings.ini SPCEAdminSvc.exe SPCEAdminSvc.log SPClientSvc????.exe SPDataServer.exe SPDataServer.log SpectorCNE.chm SPLicenseManager.exe SPLicenseManager.log SPSetup.exe SPSetup????.cmp SPSetup????.exe SPSetupMac????.zip spsetup_Settings.sds SPUninst.exe SPUninst64.exe SPWebFilterSvr.exe SPWebFilterSvr.log VersionInfo.txt
Default files appear in the SDSFiles folder, but other files will be created as Spector 360 is used:
C:\Program Files\SpectorSoft\Spector 360 \SDSFiles\*.xml C:\Program Files\SpectorSoft\Spector 360 \SDSFiles\*.sds C:\Program Files\SpectorSoft\Spector 360 \SDSFiles\*.ini
Exclude files in the Setup folder:

C:\Program Files\SpectorSoft\Setup C:\Program Files\SpectorSoft\Setup\CNE C:\Program Files\SpectorSoft\Setup\360DotNet FileManipCommon.dll FileManipDriver.exe
FileManipDriver.exe.config FileToSql.cmp license.txt msdesetup.log msvcr71.dll msxml6_x86.msi osql.exe SACSDataVault.sql.log SACSSqlAgent.sql.log SACSSqlServer.sql.log setup.exe setup.ini setup.rll spctrdb_CreateAddLoginTest.sql spctrdb_CreateAddLoginTest.sql.log SPCTR_ADMIN_Data.cmp SPCTR_ADMIN_Log.cmp SPCTR_CUST_Data.cmp SPCTR_CUST_Log.cmp SPCTR_DB_CreateNewSPs.sql SPCTR_DB_CreateNewSPs.sql.log SPCTR_DB_Install.sql SPCTR_DB_InstalX.sql SPCTR_DB_InstalX.sql.log SPCTR_DB_Preupgrade.sql SPCTR_DB_ProductInfo.sql SPCTR_DB_ProductInfo.sql.log SPCTR_DB_Settings.sql SPCTR_DB_Settings.sql.log SPCTR_DB_TestConnect.sql SPCTR_DB_TestConnect.sql.log SPCTR_DB_TestLogin.sql SPCTR_DB_Uninstall.sql SPCTR_DB_Uninstall.sql.log SPCTR_DB_Upgrade.sql SPCTR_DB_UpgradeFrom2000.sql
87
Troubleshooting
SPCTR_DB_UpgradeFrom2000.sql.log SPCTR_DB_UpgradeFrom2K_step2.sql.log SPCTR_DB_UpgradeFrom2K_step3.sql SPCTR_DB_UpgradeFrom2K_step4.sql.log SPCTR_DB_UpgradeFrom2K_step5.sql SPCTR_DB_UpgradeFrom2K_step5.sql.log SPCTR_DB_UpgradeFrom2K_stepX.sql SPCTR_DB_UpgradeFrom2K_stepX.sql.log SpectorAgent.msi Spector360SqlAgent.msi SpectorSoft.Spector360.Logging.cmp SpectorSoft.Spector360.SqlAgentService.SqlAgentInterf ace.cmp SpectorSoft.Spector360.SQLCLR.cmp SpectorSoft.WinService.cmp sqdedev.dll SQLEXPR.EXE sqlresld.dll SqlRun.cab SqlRun01.msi sqlsut.dll sqlunirl.dll usp_Migration_Detach2KDBs.sql usp_Migration_Detach2KDBs.sql.log VersionInfo.txt VersionInfo.txtX WFSCategories.cmp
Exclude the Recorder from Antivirus Scanning

Looking for SpectorSoft
If antivirus or anti-spyware software detects and quarantines the Recorder software, the computer may remain "Pending" at the Control Center without ever becoming fully installed. In addition, the user at the computer may be alerted that a "Threat" was found. If you want to record secretly and without interference, you must exclude the Spector 360 client files from scanning. If you use enterprise or endpoint antivirus software, you can make exclusions at the antivirus server to apply across the network. If antivirus programs are installed locally and actively scanning, you must make exclusions at each computer.
If you make exclusions locally at a computer, keep in mind that a knowledge-able user may be able to find and remove Recorder files.
Exclude by risk name, if possible

Some antivirus and anti-spyware programs identify software by a "risk" signature. You may need to look up the software's risk name for SpectorSoft and exclude it. The risk name applies to both Server and Recorder software. See Exclude by Risk. If possible, make exclusions at the antivirus server to apply across the network.
88
Troubleshooting
Exclude by file name, if possible

By default, the Recorder is installed on client computers using fixed filenames. This means each Recorder installation uses the same hidden files at the same locations. If necessary, check the Recording Profile configuration from the Control Center.
Exclude files in Windows Defender
If the Recorder was already installed on a computer using random filenames - Fixed Filenames - were NOT used, uninstall the Recorder before reinstalling with fixed filenames to make sure the random names are not retained.
Temporary Recorder setup files

The following files are used to install the Recorder and are removed when installation is complete. Files containing ???? (question marks) listed below include the 4-digit Client Recorder Version number being installed. Replace the question marks with the version number being installed, for example, SPClientSVC7454.exe. If possible use a ? or * wildcard in your antivirus exclusion. This is a temporary file created for "fresh" installations (not updates) and will change as the Recorder version changes.
Open the antivirus or anti-spyware control panel and look for an option that allows you to exclude specific files from scanning. Enter all files listed below. Refer to the Spector 360 Knowledge Base for instructions on creating a whitelist in Symantec, McAfee, Windows Defender, and other popular programs.
C:\Windows\SPSetup.exe
32-bit systems, in the System32 folder:
C:\Windows\System32\SPClientSVC????.exe C:\Windows\System32\msocxushell2.dll
89
Troubleshooting
C:\Windows\System32\CNECommDll.dll C:\Windows\System32\SPSetup.exe C:\Windows\System32\SPSetup64.exe
C:\Windows\SYSTEM32\svrltwp.dll C:\Windows\SYSTEM32\svrlser.dll C:\Windows\SYSTEM32\svrltmgr.dll C:\Windows\SYSTEM32\vdorctrl.dll
64-bit systems, in the SysWOW64 folder:
C:\Windows\SYSTEM32\wshvtx.exe C:\Windows\SYSTEM32\wzodlg32.dll C:\Windows\SYSTEM32\Winipdat\winipdll\svrltwp.dll C:\Windows\SYSTEM32\drivers*\vdorctrl.sys
C:\Windows\SysWOW64\SPClientSVC????.exe C:\Windows\SysWOW64\msocxushell2.dll C:\Windows\SysWOW64\CNECommDll.dll C:\Windows\SysWOW64\SPSetup.exe C:\Windows\SysWOW64\SPSetup64.exe
64-bit systems, in the System32 and SysWOW64 folders

If you are disabling scanning during Recorder installation, you do NOT need to enter the temporary Recorder Setup files in the whitelist. Files are shown within the default directory structure path; computer directory structures may vary. If your network includes both 32-bit and 64-bit machines, enter all file names once. Some files are used in both 32-bit and 64-bit installations. Spector 360 automatically installs the correct Recorder software on a 32-bit or 64-bit machine.
C:\Windows\SYSTEM32\cmproxfr.dll C:\Windows\SYSTEM32\nmcpusym.dll C:\Windows\SYSTEM32\sgvrfy32.exe C:\Windows\SYSTEM32\svrltwp.dll C:\Windows\SYSTEM32\svrltmgr.dll C:\Windows\SYSTEM32\vdorctrl.dll C:\Windows\SYSTEM32\drivers*\vdorctrl.sys C:\Windows\SysWOW64\mxcrsc32.exe
Installed Client Recorder files

32-bit systems, in the System32 folder:
C:\Windows\SYSTEM32\cmproxfr.dll C:\Windows\SYSTEM32\nmcpusym.dll C:\Windows\SYSTEM32\secadtr.dll C:\Windows\SYSTEM32\sgvrfy32.exe
C:\Windows\SysWOW64\nmcpusym.dll C:\Windows\SysWOW64\secadtr.dll C:\Windows\SysWOW64\svrlser.dll C:\Windows\SysWOW64\svrltmgr.dll C:\Windows\SysWOW64\svrltwp.dll C:\Windows\SysWOW64\wshvtx.exe
90
Troubleshooting
C:\Windows\SysWOW64\wzodlg32.dll
* Vista/System 7/Server 2008 machines
Troubleshoot the Server Installation

Setup Error: You do not have enough free disk space
When you install the Database, it runs a script and checks available free disk space. If there is not enough free disk space to install (40 GB), you receive an error. EXIT out of the Setup program. You need to free up disk space or install on a different computer. 1. 2. 3. Select the Servers tool. Right-click on Control Center and select Modify. If you are unable to modify the CCS, you may have to reinstall it (see below). In the CCS Properties box, click the Start Service button. If you get an error trying to start the CCS, there may be a problem with the network communication to the CCS. If the CCS computer is wrong, use Change to set the correct Computer Name and location. If the port is wrong, change the Port number. Click Use Default Port if you know you are using the defaults and the number may have been wrongly changed. When the service starts, on a Refresh all Servers will be visible in the Control Center.
Setup Error: Unable to connect to SQL Server

When you are installing or reinstalling the Dashboard, Control Center, or a Server that requires Database access, you must locate the Database computer. If you receive an error saying the Setup is unable to connect to SQL Server:
4.
Check the Database computer name entry Check the SA Password entry Make sure the Database computer is online Make sure the current computer has network connection
5.
A Server is not running

If a Server has stopped running for some reason, Spector 360 cannot operate correctly. You can start each Server from the Control Center Servers tool or from the Server's administration window.
Only the Control Center Server (CCS) is visible

If you see only one Server when you select the Control Center Servers tool, it may be the CCS service is not currently running, or your Control Center application cannot find the CCS.
1. 2. 3.
Select the Servers tool. Right-click on a Server and select Modify. In the Properties window, click the Start Service button to start the Server. If the Stop Service button appears, the Server is already running.
To check the administration window, double-click the Server icon in the System Tray of the computer where the Server is installed. This
91
Troubleshooting
window allows you to Start/Stop the service, check the version, communication settings, and other information.
Check the Server log file

If there appears to be a problem with a Server, check its log file for errors or other interruptions. The log file lists all Server actions and events with a date and time stamp. Scroll to the bottom of the log to view the latest events.
A Start Service button is disabled

If the Start Service button is visible but disabled when you open a Server Properties box, it means that the Control Center cannot connect to the service control manager on the CCS machine typically a machine offline," connectivity, or permissions issue.
1. 2. 3.
Select the Servers tool. Right-click on a Server select Modify. In the Properties button click the View Log button.
1.
Make sure the CCS is running under an account with Administrator privileges on all computers where Spector 360 components are installed. Make sure the CCS machine is running and on the network. Check the Server at the computer where it is installed to determine whether or not the service is running. If necessary, reinstall the CCS.
If you contact SpectorSoft Technical Support, they may ask you to send a copy of the log file to troubleshoot a problem.
2. 3.
Reinstall the Server

If you are unable to modify the Control Center Server, you may need to exit out of the Control Center and use the Spector 360 Setup program to reinstall the Control Center Server. This will not affect other components. Be sure to provide service account credentials that have administrator privileges on other Spector 360 computers. If any Server installation or its computer has become compromised, you can reinstall the Server. Be sure to uninstall the old Primary Server or CCS if your intention is to install it on a new computer. You may need to re-register your serial number and receive a new unlock code. Use the Spector 360 Setup version compatible with your other installed components and Database.
Cannot stop or start the service

You attempt to stop or start the Server (using the Stop/Start Service button) and see the "Starting" or "Stopping" progress message followed by the message "Cannot stop [start] SPDataServer service on computer 'COMPUTERNAME'. This operating system message may indicate a problem with the Server, but it also may be that the service actually was stopped or started, after you clicked OK on the error message. The Control Center's connection to the Windows Service Control Manager (SCM) may get hung up by the shutdown request while attempting to stop the service. This may also happen if you stop or start the service from SCM.
92
Troubleshooting
Troubleshoot Recorder Installation

Check the status in Manage Computers
You can tell if the Client Recorder is properly installed from the Recording > Manage Computers view. For each recorded computer you should see:
6. 7. 8.
Click Run Diagnostics on the toolbar. In the Computer Diagnostics dialog box, click Start Automatic Diagnostics. Wait for results. The Administrator's Guide provides information on each set of results.
State - Recording Recorder - Installed Recorder Version - Displays a version number Last Recording - Date and time of last data sent Profile Name - Profile settings installed
Communication ("ping") test failed
It may take up to an hour for a newly deployed Recorder to report If you do not see these indicators following installation, or if the Recorder appears to be installed but is not recording, read this section. its status to the Control Center. Run Computer Diagnostics from the Control Center while logged into Windows under the same account as the CCS. As an administrator, the CCS will attempt to start the necessary Windows services.
Run Diagnostics
A series of diagnostic tests help to pinpoint problems with Recorder installations. For Macintosh computers, the tests can only determine if communication is possible ("ping") with the Mac. For Windows, the tests are useful for tracking how far a Recorder installation progressed. 4. 5. Select Recording
Manage Computers.
Computer is "Not Detected"

If a computer remains "Not Detected" in the Control Center Computers list, it may be off the network, it may not have the required Windows settings enabled, or the CCS may not have administrator privileges on the computer.
Select a computer in the right pane to test.
93
Troubleshooting
Check the CCS service account credentials. If the Server does not
1. 2.
have Administrator access to a computer, the installation will fail. Automatic Diagnostics indicate lack of appropriate credentials. Use the Control Center's Servers tool, if necessary, to change the Control Center Server Credentials to an account with Administrator privileges on the remote computer.
Refresh the Control Center view. Press F5 to update the Control Center and see if the computer status has changed. Verify the scheduled installation time. If there is a difference in the system clock on this computer and at the target computer, the install may not have happened yet. To check the target computer's time, open a cmd window and type net time \\computername replacing computername with the name of the computer in question.
Check and enable the required Windows settings. If Automatic Diagnostics show the computer cannot receive an installation, you many need to make adjustments to that computer's operating system: Enable the Administrative Share (C$) Enable Remote Registry Services Enable File and Printer Sharing
If necessary, perform a manual installation. Some computers may
not be able to receive a remote installation. Even if status does not properly appear in the Control Center, you may still be able to receive recorded activity from the computer. See Deploy Manually to a Windows Computer.
You may need to wait an hour after Recorder installation for the Computer list to be fully updated.
3.
Use Automatic Diagnostics to verify how far the installation progressed. Run the Control Center's Automatic Computer Diagnostics on the computer in question. If the client bootstrap file is found on the computer, follow instructions in the Administrator's Guide before attempting to install again. Make sure antivirus software is not interfering with the installation. Check antivirus software for messages that may indicate discovery of Spector 360 . Be sure to Exclude the Recorder from Scanning before attempting to install again. Reinstall the Recorder using the "Push" option. Cancel the current installation command by selecting Cancel Recorder Install/Uninstall. Then select Install the Recorder. Check the "Push" option in the installation dialog box to force a complete software re-installation.
4.
Recorder State remains "Pending"

When you request a Recorder installation, the Recorder State immediately becomes "Pending." In a normal Recorder install, (a) a Client Bootstrap service is deployed to the computer, (b) the installation (.sds) file is downloaded and executed, (c) the Client Service is installed while the Bootstrap service is removed, and (d) the computer restarts with the Client Service activated. Status remains "Pending" until all steps are completed. If you continue to see "Pending" after the Recorder computer restarts (or is manually restarted) and after time passes, try these steps:
5.
94
Troubleshooting
3.
If you are unsuccessful, Uninstall and Install the Recorder again. If necessary use a manual install at the computer.
Manual uninstall cleanup

After uninstalling the Recorder from a computer manually (at the computer), information still remains in the Control Center that may interfere with future installations. Return to the Control Center and perform this cleanup procedure to fully remove this Recorder configuration from the Control Center Server (CCS). Note that the
License is not available

If you have check Computer Diagnostics, and the Client Service appears to have been installed, but the computer lists the Recorder as "Not Installed" or there is no entry in the "Last Check-in" field, you may have used all computer licenses for this serial number. Check Manage Computer Licenses, which tells you how many licenses have been assigned and how many are available. If all licenses have been assigned, you need to update your serial number for additional licenses with SpectorSoft . You may then install the Recorder.
computer will remain in the Control Center list until you remove it.
1. 2. 3.
At the Control Center, select Recording > Manage Computers. Select the computer you have uninstalled from the Computer list, open the Edit menu, and select Manual Uninstall Cleanup. A message asks if you want to update the CCS configuration for the selected computer after manually uninstalling the Recorder. Click Yes to continue or No to cancel.
Recorder is not sending data

If the Recorder is successfully installed, but the "Last Recording" column is not updated, or you are not receiving the data you expect:
Recorder is "Not Installed"

If a Recorder has a license and version, but appears to be "Not Installed," or if you get a Client Service error, it's possible the Client Service was not properly installed or the Recorder configuration has been corrupted. Run Computer Diagnostics from the Control Center. If the Client Bootstrap Service is running, the installation is in progress. Wait a few minutes and then re-run the diagnostics.
Check your Computer Profile settings.
Make sure recording is ON for all activities. Make sure Internet access has not been blocked for the type of recording you expect.
1.
Look for "The Client Service is installed." If the result is "Yes," then the Spector Client Bootstrap Service (needed for installation) should already have been removed. Look for "The Client Service is running." If the result is "No," and the service has been installed. Try the Manual diagnostics to start the service.
Make sure Spector 360 supports recording.
There are a few applications, protocols and circumstances where Spector 360 does not record. See the specific topics in this section.
2.
Check your antivirus/anti-spyware software.
Although SpectorSoft continually improves and updates the Recorder stealth so it will not be detected, software vendors also continually update their "risks." Your software may suddenly begin detecting and
95
Troubleshooting
quarantining the Spector 360 Recorder software. Refer to the Spector 360 Deployment Guide for proactive solutions that exclude SpectorSoft from scans and prevent detection from happening in the future. Consult the Knowledge Base for specific instructions in adjusting settings in major antivirus / anti-spyware packages, such as McAfee and Symantec.
Consult the online Knowledge Base. Click the link at the bottom of this page and enter your serial number. The Knowledge Base covers issues, workaround, and solutions to a variety of problems.
96
SpectorSoft Information
Contact Us
When sending email, please include your company name, city, and state to ensure your request is handled as promptly as possible. Feel free to contact us 24 hours a day, 7 days a week.
Suggestions and Comments

SpectorSoft is always interested in hearing from our customers. If you would like to make a suggestion that would improve this product or the Online Help, do not hesitate to contact us.
General
SpectorSoft Corporation 1555 Indian River Blvd., B-210 Vero Beach, FL 32960 USA Web: www.spectorsoft.com U.S. & Canada: 1-888-598-2788 International: 772-770-5670
Copyrights and Trademarks

Copyright Notice
Copyright 2011 SpectorSoft Corporation, 1555 Indian River Blvd., B-210, Vero Beach, Florida 32960 U.S.A. All rights reserved. Spector 360, Copyright 2001-2011 SpectorSoft Corporation. SpectorSoft and Spector are Registered Trademarks of SpectorSoft Corporation. This software includes code under license from Microsoft Corporation. 1995-2011 Microsoft Corporation. All rights reserved.
Sales
Contact our sales staff for pre-sales questions, upgrade options, adding computer licenses, and information about the latest SpectorSoft products. Monday - Friday; 9:00 AM to 10:00 PM EST Saturday & Sunday; 10:00 AM to 6:00 PM EST Web inquiries: http://www.spectorsoft.com/products/ productinquiry.asp Email: sales@spectorsoft.com Sales Fax: 772-770-3442
Other Trademarks
Microsoft, Microsoft SQL Server, Microsoft Internet Explorer logo, Microsoft Office Compatible logo, Explorer, Windows, Windows logo, Windows Vista, Windows XP, Windows 7, .NET, Terminal Services, and / or other Microsoft products referenced herein are either registered trademarks or trademarks of Microsoft Corporation in the U.S. and / or other countries. Macintosh and Mac are trademarks of and copyrighted by Apple, Inc. Citrix is a registered trademark of Citrix Systems, Inc. All other trademarks and service marks are the property of their respective owners.
Technical Support
Contact SpectorSoft engineers if you have any difficulties at all, 24 hours a day, seven days a week. Web: Request Support Email: 360support@spectorsoft.com
97
Index A
Antivirus ................................................. 7 Exclude scanning of Recorder ................ 90 Risk names ......................................... 87
N
Not installed status ................................. 94
P
Pending status ........................................ Ports used ............................................. Primary Server settings ........................... Published applications .............................. 94 56 21 77
B
Branch offices ......................................... 73
C
Citrix deployment .................................... 77 Computer not detected ............................. 94 Contact .................................................. 98 Control Center ........................................ 19 Control Center login ................................. 37 Control Center Server .............................. 19
R
Recorder installation ................................ Deploy to all computers ....................... Deploy to Mac .................................... Pending status .................................... Risk name.............................................. Run Diagnostics ...................................... 37 48 40 94 87 94
D
Dashboard login ...................................... 46 Domain network ...................................... 75 Download ................................................ 7
S
Single server .......................................... 56 sp360-73.exe ........................................... 8 sp360setup73.exe ..................................... 8 Spector CNE ........................................... 30
E
Enable alternative shell support ................. 77 Exclude by risk ........................................ 87 Exclude Recorder files .............................. 90
T
Test Recorder ......................................... 46
F
Full desktop ............................................ 77
W
Web Filter Server settings ........................ Windows Domain network deployment ................ Recorder deployment ........................... Terminal services deployment ............... Windows settings required........................ 22 75 48 77 94
M
Macintosh ............................................... 40 Recorder deployment ........................... 40 Manual install cleanup .............................. 94 Multi-user network ................................... 77
99
Index
100

360deployment v73 621040

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

360deployment v73 621040

Caricato da

Copyright:

Formati disponibili

Spector 360 Deployment Guide

Version 7.3 October 18, 2011

2003-2011 SpectorSoft Corporation, All rights reserved.

Steps to Deploying Spector 360

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Step 1: Deploy the Servers

Windows Administrator account

Disable antivirus software

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Control Center Server Administrator Account

Create a CCS account, if necessary

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Exclude from Antivirus Scanning

Download and Start the Setup

Exclude centrally or at computers

Exclude files or signature risk name

Click the download button.

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Click Save to download the Setup

Start the installation

Save and extract the file

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Choose the Type of Setup

Quick Install - Highly recommended for new or evaluation customers.

SQL Server Database Setup

Custom Install - Installs all ALL core components and applications

Component Install - Installs individual components as selected.

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Run the Control Center when Setup is complete

For a Component Install, select components

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Click Next to continue

Enter your serial number

Points to remember are:

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Click Next to continue

Quick Install Settings

System Administrator (SA) password

Control Center Server account

SA password - Type a password for the default SA (System

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Confirm SA password - Type the password again to confirm it.

Accept default installation locations

SQL Server installation location:

Spector 360 server and application location:

Spector 360 Database location:

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

Set database size, if using full SQL Server

If Updates Are Available

2003-2011 SpectorSoft Corporation, All rights reserved.

Step 1: Deploy the Servers

if you do not have the latest version.

Check components to download new files