infoxpert Support Article

infoxpert Support Article Version Date: March 2011 infoxpert Version: infoxpert Version 8.0.43 and above. Document Distribution This document is of a technical nature and is targeted to I.T. staff. Details infoxpert utilises the powerful inforouter WebDAV server (Web Distributed Authoring and Versioning) which enables users to manage infoxpert documents from within the Windows Explorer and Web Folders. A new feature enables mapping of a Windows network drive to infoxpert, enabling users to access their infoxpert Workspace folders using a familiar network drive (e.g. Drive R:). Another new feature is to launch and edit MS Office from within the infoxpert web interface. This document describes the requirements for implementing the WebDAV server for Windows 7, XP, Vista, Server 2003 and Server 2008/R2. 2011 InfoXpert Pty Ltd Page 1

Server-side Web Site Install Requirements In order to use the latest WebDAV features infoxpert must be installed at the root of the web site using Port 80 either as: the Default Web Site on the server OR created as a separate Named web site For example: http://infoxpert or http://infoxpert.organisation.com And if using SSL: https://infoxpert or https://infoxpert.organisation.com (Naming will depend on what other web applications are configured on the infoxpert server, the server name, whether SSL is used and DNS (Domain Name System) configuration) For existing customers that have infoxpert installed in a virtual directory (e.g. http://infoxpert/inforouter) instead of a root level web site you will need to contact infoxpert Technical Support to assist with the migration to a root level web site. Microsoft Updates required for client machines running Windows 7, XP, Vista or 2003 The following updates and patches from Microsoft are required for WebDAV functionality from Windows based workstations and Server 2003. Windows XP and Server 2003 Software Update for Web Folders (KB907306) http://www.microsoft.com/downloads/details.aspx?familyid=17c36612-632e-4c04-9382- 987622ED1D64&displaylang=en The above update resolves issues and adds SSL support. The update should not be installed to Vista, Windows 7 or server 2008/R2 as Microsoft have re-written the WebDav redirector for Vista and above. Vista For x64-based Systems Update for Windows Vista (KB945435) http://www.microsoft.com/downloads/details.aspx?familyid=16a8648c-8213-453f-b0e6-5a539fd28c7a&displaylang=en For x86-based Systems http://www.microsoft.com/downloads/details.aspx?familyid=6725da2e-afa9-4246-a5b3-3c4f8f3290e9&displaylang=en Windows 7 No updates are currently specified. 2011 InfoXpert Pty Ltd Page 2

Client Machine Windows Registry Changes Note: Applies to non SSL implementations of infoxpert e.g. http. If the infoxpert instance is using SSL (https) then generally no registry key changes apply although value confirmation is recommended. The following Windows Registry changes to enable Basic Authentication are required for Client PCs using infoxpert WebDAV for non-ssl sites e.g. http. (Microsoft explains why they disabled the basic authentication and the suggested work around in http://support.microsoft.com/kb/841215). Important Note: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. XP SP2+ and 2003 server client machines Open registry editor and go to the following key: HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters Add a new DWORD Value named UseBasicAuth and give it the value 1. Windows 7 and Vista (x86 or x64) client machines Open the registry editor and navigate to the following key: HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters If a DWORD Value named BasicAuthLevel exists, change its value to 2. If it is not found add a new DWORD Value named BasicAuthLevel and give it the value 2. Note: possible values for BasicAuthLevel are: 0 - Basic authentication disabled 1 - Basic authentication enabled for SSL shares only (default value) 2 or greater - Basic authentication enabled for SSL shares and for non-ssl shares A reboot of the machine will be required for the registry changes to take effect. 2011 InfoXpert Pty Ltd Page 3

Office 2010 Registry key changes (non SSL infoxpert instances) Microsoft have applied their latest security model to Office 2010 and sites not using an SSL (https) instance of infoxpert will need to alter specific registry keys to support a non-ssl infoxpert instance with Office. The setting value is the same as for Windows 7/Vista however it applies to HKCU\Software\Microsoft\Office\14.0\Common\Internet\ If a DWORD Value named BasicAuthLevel exists, change its value to 2. If it is not found add a new DWORD Value named BasicAuthLevel and give it the value 2. Hive HKEY_CURRENT_USER Key path Software\Microsoft\Office\14.0\Common\Internet Value name BasicAuthLevel Value type REG_DWORD Value data 0x2 (2) If using an SSL secured infoxpert instance the value can be 1 If NOT using an SSL secured infoxpert instance the value can be 2 Value definitions. The value of 2 allows Basic Authentication for both SSL and non-ssl websites. (http/https) The value of 1 allows Basic Authentication for SSL only enabled websites. (https) The value of 0 disables Basic Authentication entirely. The default value is 1 2011 InfoXpert Pty Ltd Page 4

Deploying Windows Registry Keys and Values Windows registry key changes can deployed using a number of methods dependent on local I.T. administration. Some examples of deployment are below. Scripted Startup scripting for the HKLM registry hive with conditions for determining the O/S and therefore the value to apply. Login scripting for the HKCU registry hive with conditions for determining the version of Office installed. Manual Update The registry hives are configured using preconfigured.reg files or the values are updated using the regedit program. Group policy Preferences Microsoft Group Policy Preferences can be utilised to deploy the required registry keys and values with appropriate conditions for determination of O/S and Office version and deployment scopes for Users/Computers. 2011 InfoXpert Pty Ltd Page 5

Configuring Server 2008/R2 for WebDav Usage Microsoft have rewritten the WebDav redirector for Server 2008 and 2008 R2 to provide increased functionality for WebDav enabled applications. If using Server 2008/R2 as a client based machine (e.g. as a Terminal Server or Citrix client) the Desktop Experience feature will require installation to enable WebDav usage for clients using the machine. By default the WebDav redirector is not installed for 2008/2008 R2 and will need to be installed via the Features option of Server Manager. To Install: Open the Server Manager Select Features and Add Features 2011 InfoXpert Pty Ltd Page 6

Select the following features for installation. The installation of these additional services will require a machine restart. 2011 InfoXpert Pty Ltd Page 7

Registry Key and Further Configuration: Once the machine has restarted and configured itself the following registy key will require checking/configuring. A restart will be required for the value to take effect. Important Note: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Open the registry editor and navigate to the following key: HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters BasicAuthLevel = Value If a DWORD Value named BasicAuthLevel exists, change its value to 2. If it is not found add a new DWORD Value named BasicAuthLevel and give it the value 2. Hive HKEY_LOCAL_MACHINE Key path SYSTEM\CurrentControlSet\services\WebClient\Parameters Value name BasicAuthLevel Value type REG_DWORD Value data 0x2 (2) If using an SSL secured infoxpert instance the value can be 1 If NOT using an SSL secured infoxpert instance the value can be 2 Value definitions. The value of 2 allows Basic Authentication for both SSL and non-ssl websites. (http/https) The value of 1 allows Basic Authentication for SSL only enabled websites. (https) The value of 0 disables Basic Authentication entirely. The default value is 1 The following Windows Service should also be set to Automatic and started. (Manual is the default) 2011 InfoXpert Pty Ltd Page 8

How To Map a WebDAV Drive using Windows Command Line A new feature enables mapping of a Windows network drive to infoxpert, so that users can access their infoxpert Workspace folders using a familiar network drive (e.g. Drive R:). Open the Command line prompt with Administrative privileges. Type in the following command: Net use <drive>: "http://<server name or IP>/dav" /User:<username> <password> For example: net use r: "http://rogeryoung.infoxpert.local/dav/" /User:trevor pass123 Note: You may need to map the WebDAV drive as part of the user login script and disconnect the WebDAV Drive when the user logs out of Windows to ensure correct authentication. 2011 InfoXpert Pty Ltd Page 9

Limitations of WebDAV from Windows Clients. Mapping WEBDAV folder as a Network Drive infoxpert must be installed as a website root (website) using Port 80 and not as a virtual directory otherwise you will be unable to map infoxpert as a Windows network drive. Windows 7 using Add Network Location infoxpert must be installed as a website root (website) using Port 80 and not as a virtual directory otherwise you will be unable to view documents via Add Network Place. (Note: the infoxpert folders will appear in the Windows Explorer navigation pane but the documents will not be displayed). Using "Open Web folder" from infoxpert Web Interface infoxpert must be installed as a website root (website) and not as a virtual directory otherwise a Windows authentication dialog displays. Microsoft Office 2010/2007/2003/XP infoxpert must be installed as a website root (website) and not as a virtual directory otherwise a Windows authentication dialog displays. WebDAV Compared with infoxpert Web Interface WebDAV has a number of limitations compared to working within documents from within the infoxpert Web Client or enhancements modules such as the Document Workbench. Examples of limitations: When using infoxpert through the standard web interface, you will quickly be familiar with reasons why certain actions can and cannot be performed. Business Rules, Library Policies and Folder Rules are just a few reasons why you may not be able to edit a particular document. When you attempt such an action, infoxpert will provide the necessary reasons as to why the action was not allowed. However, a user using WebDAV to attempt the same action may receive a very generic error message that may not be helpful. This is mainly due to Microsoft s implementation of WebDAV on Windows workstations. If you get a generic error messages using WebDAV, try attempting the same action using the standard infoxpert web interface. Alternative WebDAV Client Software As an alternative to mapping WEBDAV folder as a Network Drive using Microsoft Windows - you can also consider the optional WebDrive utility from South River Technologies. WebDrive can be used to map a Windows Network Drive (e.g. drive X:) to an infoxpert Document Library Folder via WebDAV even if infoxpert is not installed as a website root. For more information refer to the document WebDrive Map Network Drive for infoxpert.pdf. 2011 InfoXpert Pty Ltd Page 10