Tuesday, October 16, 2012

Default Address and Logins



Default Addresses and Logins

Lenel Access Control Panels

192.168.0.251    Login  user: admin  password:  password

Axis Cameras

192.168.0.90      Login  user: root  password:  pass

S2 Access Control Panels

192.168.0.250   Login  user: admin  password:  admin 

SQL Server Memory Settings



SQL Server Memory Settings

 
The fix was to limit the amount of memory that can be used by SQL Server.  The Lenel installation guide for SQL Server standard edition tells you to limit the memory and how to do it.  Microsoft explains this behavior and says it is “normal.”


“When you start SQL Server, SQL Server memory usage may continue to steadily increase and not decrease, even when activity on the server is low. Additionally, the Task Manager and Performance Monitor may show that the physical memory

Changing SQL SA Passwords



Lenel SA and SA Passwords

Lenel OnGuard uses two SA passwords.  The first SA account is within Microsoft SQL.  And the second SA account is in the Lenel database.  Very often, when we do a version upgrade on the Lenel OnGuard software these passwords are not known.  Here's how to handle both passwords:

Microsoft SQL

If this is an existing installation of OnGuard, use Windows Authentication when logging into the SQL Server Management Studio.

Open the Security folder.
Open the Logins folder.
Select the SA account.
Right-click the SA account and select Properties.
Change the password.

Now you can use the SQL SA account to log in or to perform the upgrade.

Lenel OnGuard

Login to SQL Server Management Studio.
Open Databases folder.
Select AccessControl database.
Right-Click the database and select New Query.
In the query window type the following command:
    update users set logonpwd=null where userid = -1
Press F5 to execute the query.
This command changes the Lenel SA account password to a blank password

Axis Camera Firmware Upgrade



Axis Camera Firmware Upgrade

HTTP
  1. Download the upgrade file to a directory that is accessible from your local computer.
  2. Go to the product's start page (e.g. http://192.168.0.90).
  3. Click the Setup link and log in as root (or any other user with Administrator privileges) if you are prompted for a username and password.
  4. You must be logged in as an Administrator to upgrade the unit.
  5. Click System Options in the menu to the left.
  6. Click Maintenance.
  7. Click the Browse button in the Upgrade Server section.
  8. Select the upgrade file you downloaded (and maybe decompressed) from www.axis.com
  9. Click the Open button.
  10. Click the Upgrade button in the Upgrade Server section.
  11. Wait for the flash load to complete, which may take 1-10 minutes.
The upgrade procedure is in four steps. The LEDs indicate the progress of the upgrade procedure, please refer to the user's manual for a description of the power, status and network LED indicators:
 Step 1:Shut down Running applications are shut down and active connections are terminated.
 Step 2:Upload firmwareThe old firmware will be erased and the new firmware will be saved. After a while, the progress of the upgrade will be displayed in the web browser.
Step 3:Reboot The system restarts automatically.
 Step 4:ReconfigurationThe new firmware settings are configured to match the previous settings.
After the upgrade has completed, the unit will automatically initiate the system

Windows 7 and Servers 2008 Blocks By Default



Windows 7 and Server 2008 Blocks by Default


Windows 7 and Server 2008 are built by default to block the installation of software (and other administrative tasks) and to block communication to and from the server.  There are a few adjustments which must be made in order to change this behavior.

1.  There is an added control of user accounts in these operating systems called User Account Control.  User Account Control will block the installation of software for any user except THE Administrator.  This includes any other user even if part of the administrator’s group.  And the software may appear to install correctly, but it is not installed correctly.  If installed by THE Administrator the software will correctly install but any other user will not be able to run the software.

FIX:  User Account Control must be turned off using a vertical slider bar.  This control is found in the User Accounts applet in the Control Panel.  There is a link for User Account Control.  Move the slider bar to the bottom and this will turn off the feature.

2.  In Server 2008 especially, there are 3 firewalls in some of our servers.  There is a Domain, Public, and Private firewall.  All three may need to be turned off in order for communication between the server and clients to operate.  If not turned off, then exceptions must be applied for the security applications.

FIX:  Use the Firewall applet in Control Panel to control the Firewalls.

3.  ICMP is a common network protocol.  It is used when the PING command is executed to determine network connectivity.  Server 2008 turns off ICMP.  So even when the network is fine, you may not be able to ping the server.  We have actually blamed the customer’s network for blocking communication and this was not true.  Other needed protocols are also turned off, like HTTP.

FIX:  This is also found in the firewall settings and policies.  Server 2008 provides an interface almost like a hardware based firewall where you can open or close inbound or outbound HTTP traffic.  Adjust these settings for your particular application.  But at least turn on ICMP in the server before

Control Panel Input Supervision



Control Panel Input Supervision

Rob Dennis reminds us to be aware of the type and configuration of control panel input supervision.  Discrete resistors or "resistor packs" can be used to supervise inputs.  The wiring configuration and values vary from one system to another.  Below are some common types of supervision.  Always use a multimeter to verify the correct values will be seen at the panel.

ANDOVER 


LENEL AND GE SECURITY

Lenel License Administration



Lenel License Administration

How to Discover Which Clients Are Connected to OnGuard Applications/Using Licenses
In License Administration, you see application names followed by the “In Use/Max.” column.
The screen shots below, for example, show that the System Administration Application (STD) has a “Max.” of 1 concurrent connections and 1 is currently “In Use.”




















If you click the “In Use” number (1 in this case), you will get a popup window that displays the hostnames and IP addresses of the clients using System Administration.
An example of this screen is below.
This popup also provides the ability to revoke a specific host’s use of the application.