Use the following high-level procedure for installing the necessary components to run ZENworks Desktop Management on a single Windows 2000/2003 server:
Install eDirectory. This also requires the following complementary software:
IMPORTANT: If you install the Novell ClientTM on a Windows 2000/2003 server, then install the Middle Tier Server on the same machine, then uninstall the Novell Client from this server, the Middle Tier Server will fail. The client uninstall program removes important files needed by the ZENworks Middle Tier Server.
In this same software combination scenario, if you subsequently upgrade the client to 4.9 SP2, a different version of nicm.sys will be installed. If you do not use the nicm.sys included in ZENworks 6.5 Middle Tier Server, the Middle Tier Server will fail.
To work around this issue, you have two options:
If Active Directory is also installed on this server (that is, the server is a Primary Domain Controller), make sure that eDirectory LDAP is configured to listen on ports other than the defaults (389: nonsecure, and 636: secure).
From the Novell Client, log in to eDirectory as Admin (or equivalent) so that you will have sufficient rights to modify the LDAP Server object.
In ConsoleOne, right-click the LDAP Server object > select Properties > General.
In the TCP Port field, change the TCP port to some other port than the default (port 388 might be a good choice).
NOTE: This action varies slightly in older versions of eDirectory. You might need to open the Other page of the LDAP Server to find the TCP Port property and change the value.
Click the SSL Configuration tab to open the SSL Configuration page.
In the SSL Port field, change the port number value to something other than 636, then click Apply.
If an error is displayed after you apply the port changes, you can ignore it and close the error dialog box.
Click the Refresh NLDAP Server Now button.
If an error is displayed after you refresh the NLDAP server, you can ignore it and close the error dialog box.
At the Windows desktop, click Start > Settings > Control Panel > double-click NDS Services.
In the NDS Services window, select nldap.dlm, then click Start to accept the changes to the TCP port.
You can confirm the port that the LDAP Server is listening on by entering the following command at a command prompt:
netstat -a -n
If iMonitor is also installed on this server, configure it to run on a port other than 80. Use these steps to configure:
At the Windows desktop, click Start > Programs > Administrative Tools > Internet Services Manager.
In the Internet Information Services window, click the plus sign (+) to expand the server node in the console tree.
At the Default Web Site icon, check for the (Stopped) description.
If the Web site is running, proceed to Step 3.d.
If the Web site is stopped, proceed to Step 3.e.
(Conditional) Stop the IIS Web Server by entering the following command at the command prompt:
iisreset /stop
From the desktop, click Start > Settings > Control Panel > NDS Services > select NDS iMonitor > click Stop to stop the iMonitor service.
The screen might not refresh to show that the service has stopped. You might need to close NDS® services and open them again to verify that the service has stopped.
You can confirm that no service is listening on port 80 by entering the following command at a command prompt:
netstat -a -n
Change the conflicting port settings. From ConsoleOne, In the same container as the eDirectory server, right-click the Http Server-Servername object > click Properties.
Expand the httpDefaultClearPort and the httpDefaultTLSPort attributes.
Select the value under each attribute > click modify and enter an unassigned port to use for DHost Console and ndsimon.
For example, if the httpDefaultClearPort default value were set to 80, you could change it to 9000 and if the httpDefaultTLSPort value were set to 43, you should change it to 443, assuming that ports 9000 and 443 were not used by other applications.
Shut down and restart eDirectory so that the new port numbers will take effect.
Start iMonitor. From the desktop, click Start > Settings > Control Panel > NDS Services, select NDS iMonitor, then click Start.
Confirm that iMonitor is listening on the configured port by entering the following command at a command prompt:
netstat -a -n
From a command prompt, enter the following command to start IIS:
iisreset /start
Install the Desktop Management Server software. For information, see Installing the ZENworks Desktop Management Server.
Install ZENworks Middle Tier Server software on the server. For information, see Installing the ZENworks Middle Tier Server.
If the server has Active Directory and is the Primary Domain Controller, grant IIS rights to modify Middle Tier registry entries:
From the Windows Desktop, click Start > Run > enter regedt32.
In the Windows Registry Editor, open HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Xtier > click Security > Permissions.
In the Permissions for Xtier dialog box, click Advanced.
In the Access Control for Xtier dialog box, click Add.
In the Look In field of the Select Users, Computers, or Groups dialog box, make sure that the domain is selected where you installed the ZENworks Middle Tier Server software > select the IUSR_server_name user object from the list, then click OK.
In the Permission Entry for Xtier dialog box, select Allow for each of the following permissions:
Click OK.
In the Access Control for Xtier dialog box, select Reset Permissions on All Child Objects, then click Apply.
In the Security warning dialog box, click Yes.
In the Access Control for Xtier dialog box, click OK.
In the Permissions for Xtier dialog box, click OK.
Close the Windows Registry Editor.
Open a browser, enter the address of the NSAdmin utility (http://server_IP_address/oneNet/nsadmin), then modify the LDAP Port configuration for the ZENworks Middle Tier Server.