| 18 | {{{ |
| 19 | boinc_<ComputerName> |
| 20 | boinc_project_<ComputerName> |
| 21 | }}} |
| 22 | |
| 23 | Both `boinc_<ComputerName>` and `boinc_project_<ComputerName>` should be setup so that their passwords never expire. |
| 24 | |
| 25 | A file should be dropped in the BOINC data directory called client_init.xml which contains the username and base64 encoded password for `boinc_project_<ComputerName>`. The first time the client starts up after install it should read the file and store an encrypted form of the data in the state file using !CryptProtectData/CryptUnprotectData. After reading in the client_init.xml file it should be deleted. |
| 26 | |
| 27 | Groups: |
| 28 | |
| 29 | {{{ |
| 30 | boinc_administrators |
| 31 | boinc_project |
| 32 | }}} |
| 33 | |
| 34 | Each group will contain the following members: |
| 35 | |
| 36 | || boinc_administrators || Administrator [[BR]] <Installing User> [[BR]] `boinc_<ComputerName>` || |
| 37 | || boinc_project || `boinc_project_<ComputerName>` || |
| 38 | || Guests || `boinc_project_<ComputerName>` || |
| 39 | |
| 40 | == Data Directory == |
| 41 | |
| 42 | All data, configuration files, and logs will be moved to the following default location: |
| 43 | {{{ |
| 44 | Vista: |
| 45 | C:\Users\All Users\BOINC |
| 46 | |
| 47 | 2000/XP: |
| 48 | C:\Documents and Settings\All Users\Application Data\BOINC |
| 49 | }}} |
| 50 | |
| 51 | Under BOINC there will be a 'projects' and 'slots' directory. |
| 52 | |
| 53 | Directories will have the following permissions: |
| 54 | |
| 55 | || BOINC || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Deny All) || |
| 56 | || BOINC\projects || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Modify, Read & Execute, List Folder Contents, Read, Write) || |
| 57 | || BOINC\slots || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Modify, Read & Execute, List Folder Contents, Read, Write) || |
| 58 | |
| 59 | Notes: What to do if an organization has disabled the 'Bypass Traverse Checking' user right for Everyone? See http://support.microsoft.com/kb/823659 for more details. |
| 60 | |
| 61 | == Executables Directory == |
| 62 | |
| 63 | Same location as the previous releases. |
| 64 | |
| 65 | {{{ |
| 66 | C:\Program Files\BOINC |
| 67 | }}} |
| 68 | |
| 69 | Directory will have the following permissions: |
| 70 | |
| 71 | || BOINC || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Deny All) || |
| 72 | |
| 73 | == Additional Notes == |
| 74 | |
| 75 | Each time an installation occurs, both of the account passwords should be reset and a new randomly generated password should be used. |
88 | | == User Accounts == |
89 | | |
90 | | Two user accounts will be created, one to execute boinc.exe, and one that boinc.exe can use to launch science applications. |
91 | | |
92 | | NOTE: Including the computer name avoids name collisions when BOINC is installed on domain controllers. |
93 | | |
94 | | Users: |
95 | | |
96 | | {{{ |
97 | | boinc_<ComputerName> |
98 | | boinc_project_<ComputerName> |
99 | | }}} |
100 | | |
101 | | Both `boinc_<ComputerName>` and `boinc_project_<ComputerName>` should be setup so that their passwords never expire. |
102 | | |
103 | | A file should be dropped in the BOINC data directory called client_init.xml which contains the username and base64 encoded password for `boinc_project_<ComputerName>`. The first time the client starts up after install it should read the file and store an encrypted form of the data in the state file using !CryptProtectData/CryptUnprotectData. After reading in the client_init.xml file it should be deleted. |
104 | | |
105 | | Groups: |
106 | | |
107 | | {{{ |
108 | | boinc_administrators |
109 | | boinc_project |
110 | | }}} |
111 | | |
112 | | Each group will contain the following members: |
113 | | |
114 | | || boinc_administrators || Administrator [[BR]] <Installing User> [[BR]] `boinc_<ComputerName>` || |
115 | | || boinc_project || `boinc_project_<ComputerName>` || |
116 | | || Guests || `boinc_project_<ComputerName>` || |
117 | | |
118 | | == Data Directory == |
119 | | |
120 | | All data, configuration files, and logs will be moved to the following default location: |
121 | | {{{ |
122 | | Vista: |
123 | | C:\Users\All Users\BOINC |
124 | | |
125 | | 2000/XP: |
126 | | C:\Documents and Settings\All Users\Application Data\BOINC |
127 | | }}} |
128 | | |
129 | | Under BOINC there will be a 'projects' and 'slots' directory. |
130 | | |
131 | | Directories will have the following permissions: |
132 | | |
133 | | || BOINC || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Deny All) || |
134 | | || BOINC\projects || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Modify, Read & Execute, List Folder Contents, Read, Write) || |
135 | | || BOINC\slots || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Modify, Read & Execute, List Folder Contents, Read, Write) || |
136 | | |
137 | | Notes: What to do if an organization has disabled the 'Bypass Traverse Checking' user right for Everyone? See http://support.microsoft.com/kb/823659 for more details. |
138 | | |
139 | | == Executables Directory == |
140 | | |
141 | | Same location as the previous releases. |
142 | | |
143 | | {{{ |
144 | | C:\Program Files\BOINC |
145 | | }}} |
146 | | |
147 | | Directory will have the following permissions: |
148 | | |
149 | | || BOINC || SYSTEM (Full Control) [[BR]] Administrators (Full Control) [[BR]] boinc_administrators (Modify, Read & Execute, List Folder Contents, Read, Write) [[BR]] boinc_projects (Deny All) || |
150 | | |
151 | | == Additional Notes == |
152 | | |
153 | | Each time an installation occurs, both of the account passwords should be reset and a new randomly generated password should be used. |