vovici enterprise 6 - verintvovici.com/downloads/commhelp/6_3/install_vovici_v6_3.pdf · access...

68
Installation Guide Vovici Enterprise 6.3 January 2012 Prepared for the Exclusive Use This document contains proprietary and confidential information of Verint Systems Inc. and may not be distributed to any persons or organizations for which it was not intended.

Upload: vuongque

Post on 30-Mar-2018

220 views

Category:

Documents


0 download

TRANSCRIPT

Installation Guide

Vovici Enterprise 6.3

January 2012 Prepared for the Exclusive Use This document contains proprietary and confidential information of Verint Systems Inc. and may not be distributed to any persons or organizations for which it was not intended.

For installation support, please contact our Vovici Enterprise installation experts at [email protected]. If phone support is requested an installation expert will call the phone number requested. Or visit: www.vovici.com Please contact Vovici technical support if any of the information shown here is incorrect. Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Vovici, A Verint Company. Copyright © 2012 Verint Systems Inc. All Rights Reserved Worldwide. Confidential and Proprietary Information of Verint Systems Inc. All other company and product names are trademarks or registered trademarks of their respective holders. Printed in the United States of America January 2012

Contents Installing Vovici Enterprise 6.3 .................................................................. 5

Setup ....................................................................................................... 5

SQL Server Notes ....................................................................................... 6

Oracle Notes .............................................................................................. 6

Requirements ............................................................................................ 6

Downloading Vovici Enterprise 6.3 File ...................................................... 8

Running the Installer ................................................................................. 9

Options.lic File ......................................................................................... 17

Windows Server 2003 Authentication and Permissions ............................ 18

Windows 2003 Server Permissions ............................................................. 18

Vovici Enterprise Authentication ................................................................. 19

Windows Authentication ............................................................................ 24

Windows Server 2008 Authentication and Permissions ............................ 30

IIS 6 Management Compatibility ................................................................ 30

Windows 2008 Server Permissions ............................................................. 30

Vovici Enterprise Authentication ................................................................. 31

Windows Authentication ............................................................................ 37

Configuring Database Connections ........................................................... 43

Access Administrative Portal ...................................................................... 43

Setup Database Connection ....................................................................... 45

Configuring Default Workgroup ................................................................ 48

System Options ........................................................................................ 52

Connection .............................................................................................. 52

Resync Tables – Run Table Setup ............................................................... 52

Mail Setup ............................................................................................... 53

Password Security .................................................................................... 54

System Administrator ............................................................................... 55

Contents

Vovici Enterprise Installation Guide 4 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Adding More Workgroups (Optional) ........................................................ 56

Creating User Accounts ............................................................................ 60

Manually Adding a User Account ................................................................ 60

Importing a User Account .......................................................................... 61

Importing from Active Directory ................................................................. 63

Web Services ........................................................................................... 63

Testing Environment ................................................................................ 64

Appendix .................................................................................................. 65

Determining the Web Server Root in Microsoft IIS 6 (Windows Server 2003) ..................................................................................................... 65

Determining the Web Server Root in Microsoft IIS 7 (Windows Server 2008) ..................................................................................................... 65

ASP.NET Framework ................................................................................. 66

Knowledge Base ....................................................................................... 66

IIS Default Documents.............................................................................. 67

Chapter 1

Installing Vovici Enterprise 6.3 Please read the Setup and Requirements section before beginning the installation of Vovici Enterprise.

Setup Vovici Enterprise can be installed on a single server machine, or on a separate App Server (for handling survey design and survey reporting) and a Web Server (for handling survey submissions). This document only applies to an installation on a single server setup. For instructions regarding a multi-server setup, contact our installation experts at [email protected]. See the diagram below.

Vovici Enterprise installation diagram

Chapter 1 Installing Vovici Enterprise 6.3

Vovici Enterprise Installation Guide 6 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

A Database Server is required that must also be available to save the survey responses (The Database Server can also be on the same machine that Vovici Enterprise is installed on, but is not recommended for performance reasons). Before Vovici Enterprise can be installed, the database must be configured with a user that should have permission to create, update, alter, and delete tables and rows in the database.

SQL Server Notes 1 If dbdatareader and dbdatawriter Security Roles have been assigned to the account the

ability to create tables must be added in order for the account to perform all needed database functions.

2 The account must use SQL Authentication in order to function.

3 Vovici Enterprise only works with the default instance. Named instances will not work.

Oracle Notes Assigning the Security Roles Create and Resource to a user generally contains the required permissions for our application.

When running the Vovici Enterprise installer on the Application Server, the user must be logged into Windows as a Local Administrator account (not a Domain Administrator) in order for the installer to be able to properly install all the necessary files.

Requirements The following requirements must be fulfilled before Vovici Enterprise can be installed.

1 Service Pack 1 for Windows 2003 Server must be installed and the server re-started before the installation of Vovici Enterprise can begin.

2 Vovici Enterprise is a .NET application so ASP.NET 4.0 Framework needs to be installed on the server. Microsoft .NET Framework (version 4.0.30319) is available at:

http://www.microsoft.com/download/en/details.aspx?id=17851

ASP.NET 4.0 must be allowed inside Microsoft IIS. Follow the steps below to achieve this:

• For Windows Server 2003:

a Open Microsoft IIS.

b Click Web Service Extensions.

c Highlight ASP.NET 4.0.

d Click Allow.

Chapter 1 Installing Vovici Enterprise 6.3

Vovici Enterprise Installation Guide 7 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

• For Windows Server 2008:

a Open Microsoft IIS.

b Click the Computer name in the left pane.

c In the Features View, double-click ISAPI and CGI Restrictions.

d Highlight ASP.NET 4.0.

e Under Actions on the right side, click Allow.

3 You can find the hardware requirements for Vovici Enterprise at the link below:

http://vovici.com/downloads/commhelp/6_3/vovici_v6_3_sys_requirements.pdf

4 You can find the software requirements for Vovici Enterprise at the link below:

http://help.vovici.net/robohelp/robohelp/server/general/projects_fhpro/survey_workbench_MX/system_requirements.htm

This is in addition to the requirements and prerequisites listed earlier in this document.

Chapter 2

Downloading Vovici Enterprise 6.3 File To begin the installation process, perform the following steps:

1 In a Web browser, navigate to the correct URL for the server’s operating system:

• For 32-bit servers:

http://vovici.com/downloads/comm/6_3/Vovici_Ent_6_x86.htm

• For 64-bit servers:

http://vovici.com/downloads/comm/6_3/Vovici_Ent_6_x64.htm

2 Click Save (Steps 2-4 refer specifically to Microsoft Internet Explorer and may be different on other browsers.)

3 Choose a local directory to save the installer and make a note of this directory.

4 Click Save to begin downloading the installer. Once the download is complete, proceed to the next section.

NOTE

Our technicians will prove invaluable in assisting the server configuration and Vovici Enterprise installation. You can contact them at [email protected] for assistance downloading and installing Vovici Enterprise.

Chapter 3

Running the Installer Once the installer has been downloaded, locate the file and follow the steps below to unzip it and begin the installation.

1 Double-click the installer (.MSI) file and click Run to continue. The following warning message may appear.

Running the software

IMPORTANT

Do not select “Never run software from “Vovici Corporation,” otherwise installers produced by Vovici will never work on the server.

Chapter 3 Running the Installer

Vovici Enterprise Installation Guide 10 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

2 The Windows installer launches and the Welcome to the Vovici v6 Setup Wizard dialog appears.

Welcome to the Vovici v6 Setup Wizard dialog

The version of the Vovici Enterprise installer can be found by following the steps below:

a Right-click the file, and then click Properties.

b Click Summary.

c The version number is in the “Comments” field.

This is the version of the installer not the application itself and can help our Installation Specialists and Technical Support staff discover which version of the software is being installed. See image below.

Chapter 3 Running the Installer

Vovici Enterprise Installation Guide 11 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Vovici Properties dialog

NOTE

Click Cancel at any time to stop the installation.

Chapter 3 Running the Installer

Vovici Enterprise Installation Guide 12 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

3 Click Next. The End-User License Agreement dialog appears.

End-User License Agreement dialog

4 Read the license agreement and, if it is acceptable, select the “I accept the terms in the License Agreement” check box.

Chapter 3 Running the Installer

Vovici Enterprise Installation Guide 13 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

5 Click Next. The Web Site and Application Name dialog appears.

Web Site and Application Name dialog

6 In the “Select the web site the application should be installed on” drop-down list, select the Web site where the application will be installed.

7 In the “This name will be a part of the application URL” field, enter the name for the virtual directory inside Microsoft IIS that will be used to access the Vovici Enterprise application.

The default value is “Community”

Therefore, the URL to access the main application will be:

http://servername/Community

NOTE

Ensure that the virtual directory name selected is not already in use by another application as a Web site name or virtual directory name on the server.

Chapter 3 Running the Installer

Vovici Enterprise Installation Guide 14 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

8 Click Next. The Custom Setup dialog appears. Multiple options can be selected in this dialog.

Custom Setup dialog

9 Click the “+” sign next to CommunitySetup to expose the following component (It is installed by default):

Vovici Service – This determines the installation options for the Vovici Service that controls the scheduling feature within the main application.

IMPORTANT

The Vovici Service will be installed by default. It provides time-based services to users such as deployment of invitations, opening and closing of surveys, etc. It is highly recommended that the Vovici Service is installed because certain functions require this service to work properly. Installing the service on multiple servers that are in a single Web farm may result in duplicate invitations being sent. Although, if the Vovici Service is disabled on all but one server this will prevent any duplicate invitations from being sent. This solution allows a quick failover if the server running the Service goes down. Simply enable the Vovici Service on one of the other servers and it will restore the functionality without needing to locate the installer and re-run it to install the service on another server.

Contact our installation specialists for other information regarding the migration of Vovici Enterprise on a Web farm.

Chapter 3 Running the Installer

Vovici Enterprise Installation Guide 15 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

NOTE

Selecting the text for either installation component will display available disk space.

10 Click the icon ( ) next to its name to install one component or the other. Select the “X” icon to cancel installation of the component.

The following buttons (other than the three navigation buttons, Back, Next, and Cancel) are available on this page:

• Reset – Used to return all options to the original default states.

• Disk Usage – Click to open a page that displays the following information about every drive partition either physically connected to the computer or mapped over a network:

Disk Size – The total available disk space.

Available – The amount of free space available.

Required – How much disk space will be taken by the application.

11 Once all desired options have been configured, click Next.

12 Click Install to start the installation of the selected components. A dialog appears with the message of a completed installation.

Completed installation dialog

Chapter 3 Running the Installer

Vovici Enterprise Installation Guide 16 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

13 Select the “Launch Setup Configuration Page Now” check box if you want the application to load the Administrative Portal page based on the information it receives from IIS. Section 7 covers the steps needed inside the Administrative Portal.

The steps outlined in Section 4 still need to be done to fully register the application with the new version. Otherwise, the application will be installed in a trial state so that it will expire after 30 days and certain advanced features will not be available in the application.

It is still advisable to verify permissions listed in Section 5 or Section 6 but it is not required because Windows often retains the previous permission settings. If a problem occurs during the remaining installation process, it is recommended that the permissions listed in Section 5 or Section 6 are verified.

14 Click Finish.

15 Click Yes if you are prompted to restart your system before continuing this installation procedure. Otherwise, the Vovici Service will not function correctly.

Restart system dialog

IMPORTANT

A reboot of the server is required for the Vovici Service (this is a Windows Service that handles the schedule functions inside the application) to function properly. Until the server is rebooted, the schedule functionality will not work in Vovici Enterprise.

Chapter 4

Options.lic File Vovici Enterprise installation experts should provide the options.lic file. The options.lic file needs to be copied into the following directory before proceeding:

Drive Letter:\pathto\Vovici\AppData

The path for Drive Letter:\pathto\ should be the path to the root of the Web site specified in Step 9 above.

This is the license file for the application and is needed to access the application. It also controls which add-ons purchased to the product are accessible.

NOTE

The Application Pool used by our application will need to be recycled in order for this file to be properly read.

Chapter 5

Windows Server 2003 Authentication and

Permissions This section deals with a configuration on a machine with Windows Server 2003 and explains how to configure the desired authentication mode and permissions. If Windows Server 2008 is used, instead please skip to the Section 6.

Once the machine has been restarted (assuming it was needed), the authentication mode used for granting access to the application must be selected and configured inside IIS.

Windows 2003 Server Permissions Vovici Enterprise has two authentication modes:

1 Vovici Enterprise Authentication – The authentication process is handled by Vovici Enterprise via users added under Manage Users in the Administrative Portal or under Administration > Users inside the main application.

Using this authentication method when the main application URL (for example, http://servername/Community/login.aspx) is accessed, the Vovici Enterprise login prompt appears.

Login fields

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 19 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

2 Windows Authentication – IIS handles the authentication of the user. Vovici Enterprise only verifies that the Windows account used to log into the computer itself was added to the list of authorized users under Manage Users in the Administrative Portal or under Administration > Users inside the main application. No login screen to the application is displayed to the user.

Each of these two authentication modes has a different set of permissions that must be allowed in order for Vovici Enterprise to function correctly. Both authentication modes still require the users to be added within Administrative Portal – Manage Users or within the application itself under Administration – Users. These two authentication modes are discussed in more detail in the following sections.

Vovici Enterprise Authentication Anonymous access must be enabled inside IIS in order for Vovici Enterprise Authentication to function correctly.

NOTE

Integrated Windows authentication must be disabled inside IIS in order to attempt to login into Vovici Enterprise using Vovici Enterprise Authentication.

To enable “Anonymous access” and disable “Integrated Windows authentication” in Microsoft IIS follow the steps below:

1 Open Microsoft IIS.

2 Right-click the Community Virtual Directory.

3 Select Properties.

4 Click the Directory Security tab.

5 Click Edit.

6 Select Anonymous access to enable it.

7 Clear Integrated Windows authentication to disable it.

8 Click OK twice.

Vovici Enterprise Authentication Permissions

The following permissions must be assigned after the Vovici Enterprise installer has been run in order for Vovici Enterprise Authentication to function.

Most of the permissions listed below are requirements of the Windows Operating System, the Microsoft IIS Web server, and Microsoft ASP.NET 4.0. They are listed for reference to speed the installation process and to aid troubleshooting.

Vovici is not responsible for any of the permissions assigned.

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 20 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Vovici does not require any of the accounts listed below. The accounts listed in most cases can be replaced with another account to align with the organization’s security standards, but whatever account is used must have these minimum permissions in order for the application to function properly. To change an account being used, follow the instructions in the sections labeled “Determining the account…” list at the bottom of the “Windows NTFS Permissions” chart.

The Vovici Enterprise installer does not attempt to assign permissions due to security limitations encountered in most environments. Instead, they must be applied manually in order for the application to function with Microsoft IIS and Microsoft ASP.NET 4.0 in a Windows environment.

Windows NTFS Permissions

Network Service*

IIS_WPG# Vovici Service**

Community Virtual Directory

Read

List

Read and Execute

Read

List

None

AppData Full Control Read

List

Read

List

Surveys Full Control Read

List

Read

List

Write

(Modify)

Reports Full Control Read

List

None

Temporary ASP.NET Files##

Full Control N/A N/A

C:\Program Files\Vovici\Service

None None Read

List

Read and Execute

Windows Temp Dir###

Read

List

Write

Read None

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 21 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

* – See the section regarding Determining the Account Running the Default Application Pool.

NOTE

Microsoft IIS requires accounts used to run an Application Pool to be a member of the IIS_WPG group on the local server. Otherwise, it cannot start the Application Pool inside IIS.

# – See the section regarding Determining the Account that the Web Server Runs as in IIS.

** – See the section regarding Determining the Account that the Vovici Service Runs as (On some servers, the “Modify” permissions might be needed for the Vovici Service to function properly).

## – This is a Microsoft .NET Framework created directory and whatever account runs the Application Pool needs to have access to it. Otherwise, .NET applications will not function.

### – This directory is a Windows environment setting. (This permission is a .NET requirement.) The default value is C:/Windows/Temp, but this can be verified under “Control Panel – System – Advanced” inside the “Environment Variables” tab under “System Variables”: it will be the TEMP variable.

Setting Windows Permissions

This section is not meant to replace Windows documentation but is intended as a reference for people that are not familiar with applying Windows NTFS permissions.

1 Open either Windows Explorer or click the “My Computer” icon.

NOTE

Microsoft IIS 6.0 supports the ability to right-click virtual directories or subfolders in order to apply Windows NTFS permissions.

2 Locate the directory in question.

3 Right-click it.

4 Select Properties.

5 Click Security.

6 Use the Add button to add accounts not listed.

7 Click an existing account to see the currently permissions allowed and to change them by clicking Allow.

It is advisable to verify that permissions have propagated down to files inside each of these directories for each account. In some cases, child objects (files inside directories) are not allowed to receive permissions from the parent objects (directories). To force this propagation, inside the Security tab, click Advanced, and then select the bottom check box. This will force the permissions to all child objects under the directory in question. Vovici Enterprise installation experts have on occasion only seen this work to the next layer of folders.

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 22 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

For example:

Permissions set on the /vovici directory are only applied to the:

/vovici/AppData directory

However, permissions will not always be applied to:

/vovici/AppData/admin directory

IIS Permissions

Permissions

Community Virtual Directory

Read

AppData Read

Write

Surveys Read

Write

Reports Read

Write

Determining the Application Pool Used by Vovici Enterprise

By default, Vovici Enterprise is run by the default Application Pool but this varies. Use the information listed above to determine the exact Application Pool.

1 Open Microsoft IIS.

2 Select the Web site that is being used to host Vovici Enterprise.

3 Right-click the Community Virtual Directory folder (specified during the original installation, sometimes called Perseus).

4 Select Properties.

5 Select the Virtual Directory tab.

6 Record the Application Pool setting at the bottom of the page.

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 23 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Determining the Account that Runs the Application Pool

In IIS, the Account that the default Application Pool runs as is typically Network Service. The account actually used can be verified by doing the following:

1 Open Microsoft IIS.

2 Click the “+” next to Application Pools.

3 Right-click Default Application Pool.

4 Select Properties.

5 Select the Identify tab.

6 Record the username that is specified.

This is the account that needs the permissions labeled for the Network Service account in the Windows Permissions column.

Determining the Account that the Web Server Runs as in IIS

In IIS, the Account that the Web Server runs as is typically IUSR_machinename or the IWAM_machinename account. This can be checked by doing the following:

1 Open Microsoft IIS.

2 Right-click the Web site that is being used to host Vovici Enterprise.

3 Select Properties.

4 Select the Directory Security tab.

5 Under “Anonymous access and authentication control,” click Edit.

NOTE

Verify the username that is specified. If IUSR_machinename is listed sometimes this is not used when Vovici Enterprise is used, instead the IWAM_machinename account will be used by IIS. On Windows 2003 Server, the IIS_WPG account is used in most scenarios instead of either of these accounts. Both the IUSR and IWAM local machine accounts are included in the IIS_WPG account by Windows.

Determining the Account that the Vovici Service Runs as

The Vovici Service used by Vovici Enterprise performs all the scheduled functions within the Schedule Events section of the main application. View our Online Help for more information. The only exception is if the Now lightning bolt icon is clicked under List view inside Schedule Events.

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 24 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

This can be checked by doing the following:

1 Inside Control Panel, open Administrative Tools.

2 Double-click (open) Services.

3 Look for the Vovici Service, it is typically named Vovici Service, and right-click it.

4 Select Properties.

5 Select the Login tab.

NOTE

Please record the username that is specified. This account needs the permissions specified under the “Vovici Services” column in order to open and close surveys.

The account listed here must have the ability to start services on the local server. Otherwise, the Vovici Service cannot be started.

Windows Authentication Integrated Windows authentication must be enabled inside Microsoft IIS to attempt to login into Vovici Enterprise using Windows Authentication. Also, edit the web.config file to support this authentication method.

Editing the Web.Config File for Windows Authentication

Inside the \vovici root directory, the web.config file must be found (this path was specified when the installer was run earlier in the process). The following line needs to be changed:

<authentication mode=“Forms” />

To:

<authentication mode=“Windows” />

Editing the App.Config File for Windows Authentication

Inside the \AppData subdirectory (of the vovici root directory), the App.config file must be found (this path was specified when the installer was run earlier in the process). Look for:

<ApplicationSettings>

and add the following line below it:

<AuthenticationMode>WINDOWS</AuthenticationMode>

This should look like the example below when done:

<ApplicationSettings>

<AuthenticationMode>WINDOWS</AuthenticationMode>

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 25 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

NOTE

Anonymous access must be disabled in order for Windows Authentication to function correctly.

To enable “Integrated Windows authentication” and disable “Anonymous access” in IIS follow the steps below:

1 Open Microsoft IIS.

2 Right-click the Community Virtual Directory.

3 Select Properties.

4 Click the Directory Security tab.

5 Click Edit.

6 Clear Anonymous access to disable it.

7 Select Integrated Windows authentication to enable it.

8 Click OK twice.

NOTE

Some networks require that Digest Authentication for Windows domain servers be enabled in order for users to have access to all features within Vovici Enterprise.

Windows Authentication Permissions

The following permissions must be assigned after the Vovici Enterprise installer has been run in order for Windows Authentication to function.

Most of the permissions listed below are requirements of the Windows Operating System, the Microsoft IIS Web server, and Microsoft ASP.NET 4.0. They are listed for reference to speed the installation process and to aid troubleshooting.

Vovici is not responsible for any of the permissions assigned.

Vovici does not require any of the accounts listed below. The accounts listed in most cases can be replaced with another account to align with the organization’s security standards, but whatever account is used must have these minimum permissions in order for the application to function properly. To change an account being used, follow the instructions in the sections labeled “Determining the account…” list at the bottom of the “Windows NTFS Permissions” chart.

The Vovici Enterprise installer does not attempt to assign permissions due to security limitations encountered in most environments. Instead, they must be applied manually in order for the application to function with Microsoft IIS and Microsoft ASP.NET 4.0 in a Windows environment.

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 26 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Windows NTFS Permissions

Network Service*

Windows User Accounts#

Vovici Service**

Community Virtual Directory

Read

List

Read and Execute

Read

List

None

AppData Full Control Read

List

Read

List

Surveys Full Control Read

List

Read

List

Write

(Modify)

Reports Full Control Read

List

None

Temporary ASP.NET Files##

Full Control N/A N/A

C:\Program Files\Vovici\Service

None None Read

List

Read and Execute

Windows Temp Dir###

Read

List

Write

Read None

* – See the section regarding Determining the Account Running the Default Application Pool.

# – In certain IIS configurations (for example, when Impersonation is enabled) all the domain users that will access Vovici Enterprise will need these permissions to access the product correctly.

** – See the section regarding Determining the Account that the Vovici Service Runs as (On some servers, the “Modify” permissions might be needed for the Vovici Service to function properly).

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 27 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

## – This is a Microsoft .NET Framework created directory and whatever account runs the Application Pool needs to have access to it. Otherwise, .NET applications will not function.

### – This directory is a Windows environment setting. (This permission is a .NET requirement.) The default value is C:/Windows/Temp, but this can be verified under “Control Panel – System – Advanced” inside the “Environment Variables” tab under “System Variables”: it will be the TEMP variable.

NOTE

In some cases, the “Write” and “Modify” permissions might need to be assigned to these users over the AppData, Surveys, and Reports subdirectories.

It is recommended that a group is created containing all these users under Control Panels – Administrative Tools – Computer Management – Local Users and Groups. This will make assigning the permissions in Windows easier, but the group must be maintained every time a new user is added.

Setting Windows Permissions

This section is not meant to replace Windows documentation but is intended as a reference for people that are not familiar with applying Windows NTFS permissions.

1 Open either Windows Explorer or click the “My Computer” icon.

NOTE

Microsoft IIS 6.0 supports the ability to right-click virtual directories or subfolders in order to apply Windows NTFS permissions.

2 Locate the directory in question.

3 Right-click it.

4 Select Properties.

5 Click Security.

6 Use the Add button to add accounts not listed.

7 Click an existing account to see the currently permissions allowed and to change them by clicking Allow.

It is advisable to verify that permissions have propagated down to files inside each of these directories for each account. In some cases, child objects (files inside directories) are not allowed to receive permissions from the parent objects (directories). To force this propagation, inside the Security tab, click Advanced, and then select the bottom check box. This will force the permissions to all child objects under the directory in question. Vovici Enterprise installation experts have on occasion only seen this work to the next layer of folders.

For example:

Permissions set on the /vovici directory are only applied to the:

/vovici/AppData directory

However, permissions will not always be applied to:

/vovici/AppData/admin directory

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 28 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

IIS Permissions

Permissions

Community Virtual Directory

Read

AppData Read

Write

Surveys Read

Write

Reports Read

Write

Determining the Application Pool Used by Vovici Enterprise

By default, Vovici Enterprise is run by the default Application Pool but this varies. Use the information listed above to determine the exact Application Pool.

1 Open Microsoft IIS.

2 Select the Web site that is being used to host Vovici Enterprise.

3 Right-click the Community Virtual Directory folder (specified during the original installation, sometimes called Perseus).

4 Select Properties.

5 Select the Virtual Directory tab.

6 Record the Application Pool setting at the bottom of the page.

Chapter 5 Windows Server 2003 Authentication and Permissions

Vovici Enterprise Installation Guide 29 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Determining the Account that Runs the Application Pool

In IIS, the Account that the default Application Pool runs as is typically Network Service. The account actually used can be verified by doing the following:

1 Open Microsoft IIS.

2 Click the “+” next to Application Pools.

3 Right-click Default Application Pool.

4 Select Properties.

5 Select the Identify tab.

6 Record the username that is specified.

This is the account that needs the permissions labeled for the Network Service account in the Windows Permissions column.

Determining the Account that the Vovici Service Runs as

The Vovici Service used by Vovici Enterprise performs all the scheduled functions within the Schedule Events section of the main application. View our Online Help for more information. The only exception is if the Now lightning bolt icon is clicked under List view inside Schedule Events.

This can be checked by doing the following:

1 Inside Control Panel, open Administrative Tools.

2 Double-click (open) Services.

3 Look for the Vovici Service, it is typically named Vovici Service, and right-click it.

4 Select Properties.

5 Select the Login tab.

NOTE

Please record the username that is specified. This account needs the permissions specified under the “Vovici Services” column in order to open and close surveys.

Chapter 6

Windows Server 2008 Authentication and

Permissions This section deals with a configuration on a machine with Windows Server 2008 and explains how to configure the desired authentication mode and permissions.

IIS 6 Management Compatibility In order for the Vovici Service to work on Windows Server 2008, you need to install IIS 6 Management Compatibility. The steps below explain how to do this. Install the IIS 6.0 Management Compatibility Components in Windows Server 2008 R2 or in Windows Server by using the Server Manager tool:

1 Click Start.

2 Click Administrative Tools.

3 Click Server Manager.

4 In the navigation pane, expand Roles, right-click Web Server (IIS), and then click Add Role Services.

5 In the Select Role Services pane, scroll down to IIS 6 Management Compatibility.

6 Select the IIS 6 Metabase Compatibility and IIS 6 Management Console check boxes.

7 In the Select Role Services pane, click Next.

8 Click Install at the Confirm Installations Selections pane.

9 Click Close to exit the Add Role Services wizard.

Now, select the authentication mode used to allow access to the application based on the information below.

Windows 2008 Server Permissions Vovici Enterprise has two authentication modes:

1 Vovici Enterprise Authentication – The authentication process is handled by Vovici Enterprise via users added under Manage Users in the Administrative Portal or under Administration > Users inside the main application.

Using this authentication method when the main application URL (for example, http://servername/Community/login.aspx) is accessed, the Vovici Enterprise login prompt appears.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 31 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Login fields

2 Windows Authentication – IIS handles the authentication of the user. Vovici Enterprise only verifies that the Windows account used to log into the computer itself was added to the list of authorized users under Manage Users in the Administrative Portal or under Administration > Users inside the main application. The users do not encounter the login screen to the application as long as they access the default.aspx script.

Each of these two authentication modes has a different set of permissions that must be allowed in order for Vovici Enterprise to function correctly. Both authentication modes still require the users to be added within Administrative Portal – Manage Users or within the application itself under Administration – Users. These two authentication modes are discussed in more detail in the following sections.

Vovici Enterprise Authentication Enable both “Forms Authentication” and “Anonymous Authentication” inside IIS in order for Vovici Enterprise Authentication to function correctly.

NOTE

Integrated Windows authentication must be disabled inside IIS in order to attempt to login into Vovici Enterprise using Vovici Enterprise Authentication. Otherwise, login failures can occur since IIS or Windows can become confused when using both authentication modes.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 32 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

To enable “Anonymous access” and disable “Integrated Windows authentication” in Microsoft IIS follow the steps below:

1 Open Microsoft IIS.

2 Select the Site used to host Vovici Enterprise.

3 Click the Community Application folder (specified during the original installation) and in the Features View under IIS, click Authentication.

4 In the Actions pane, click Open Feature.

5 Select Anonymous Authentication.

6 In the Actions pane, click Enable.

7 Select Forms Authentication.

8 In the Actions pane, click Enable.

9 Select Windows Authentication.

10 In the Actions pane, click Disable.

Vovici Enterprise Authentication Permissions

The following permissions must be assigned after the Vovici Enterprise installer has been run in order for Vovici Enterprise Authentication to function.

Most of the permissions listed below are requirements of the Windows Operating System, the Microsoft IIS Web server, and Microsoft ASP.NET 4.0. They are listed for reference to speed the installation process and to aid troubleshooting.

Vovici is not responsible for any of the permissions assigned.

Vovici does not require any of the accounts listed below. The accounts listed in most cases can be replaced with another account to align with the organization’s security standards, but whatever account is used must have these minimum permissions in order for the application to function properly. To change an account being used, follow the instructions in the sections labeled “Determining the account…” list at the bottom of the “Windows NTFS Permissions” chart.

The Vovici Enterprise installer does not attempt to assign permissions due to security limitations encountered in most environments. Instead, they must be applied manually in order for the application to function with Microsoft IIS and Microsoft ASP.NET 4.0 in a Windows environment.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 33 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Windows NTFS Permissions

Application Pool Account*

IIS_IUSRS# Vovici Service**

Community Virtual Directory

Read

List

Read and Execute

Read

List

None

AppData Full Control Read

List

Read

List

Surveys Full Control Read

List

Read

List

Write

(Modify)

Reports Full Control Read

List

None

Temporary ASP.NET Files##

Full Control N/A N/A

C:\Program Files\Vovici\Service

None None Read

List

Read and Execute

Windows Temp Dir###

Read

List

Write

Read None

* – See the section regarding Determining the Account Running the Default Application Pool.

NOTE

Microsoft IIS requires accounts used to run an Application Pool to be a member of the IIS_IUSRS group on the local server. Otherwise, it cannot start the Application Pool inside IIS.

# – See the section regarding Determining the Account that the Web Server Runs as in IIS.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 34 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

** – See the section regarding Determining the Account that the Vovici Service Runs as (On some servers, the “Modify” permissions might be needed for the Vovici Service to function properly).

## – This is a Microsoft .NET Framework created directory and whatever account runs the Application Pool needs to have access to it. Otherwise, .NET applications will not function.

### – This directory is a Windows environment setting. (This permission is a .NET requirement.) The default value is C:/Windows/Temp, but this can be verified under “Control Panel – System – Advanced” inside the “Environment Variables” tab under “System Variables”: it will be the TEMP variable.

Setting Windows Permissions

This section is not meant to replace Windows documentation but is intended as a reference for people that are not familiar with applying Windows NTFS permissions.

1 Open either Windows Explorer or click the “My Computer” icon.

NOTE

Microsoft IIS 7.5 supports the ability to right-click virtual directories or subfolders in order to apply Windows NTFS permissions (through the “Edit Permissions” menu option). If this is used, skip to Step 6 listed below.

2 Locate the directory in question.

3 Right-click it.

4 Select Properties.

5 Click Security.

6 Click Edit.

7 Use the Add button to add accounts not listed.

8 Click an existing account to see the currently permissions allowed and to change them by clicking Allow.

It is advisable to verify that permissions have propagated down to files inside each of these directories for each account. In some cases, child objects (files inside directories) are not allowed to receive permissions from the parent objects (directories). To force this propagation, inside the Security tab, click Advanced, and then select the bottom check box. This will force the permissions to all child objects under the directory in question. Vovici Enterprise installation experts have on occasion only seen this work to the next layer of folders.

For example:

Permissions set on the /vovici directory are only applied to the:

/vovici/AppData directory

However, permissions will not always be applied to:

/vovici/AppData/admin directory

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 35 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

IIS Permissions

Permissions

Community Virtual Directory

Read

AppData Read

Write

Surveys Read

Write

Reports Read

Write

Determining the Application Pool Used by Vovici Enterprise

By default, Vovici Enterprise is run by the default Application Pool but this varies. Use the information listed above to determine the exact Application Pool.

1 Open Microsoft IIS.

2 Select the Site used to host Vovici Enterprise.

3 Click the Community Application folder (specified during the original installation) and in the Actions pane, click Advanced Settings.

4 Under General, look for Application Pool.

5 Record the name of the Application Pool setting at the bottom of the page.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 36 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Determining the Account that Runs the Application Pool

In IIS, the Account that the default Application Pool runs as is typically Network Service. The account actually used can be verified by doing the following:

1 Open Microsoft IIS.

2 In the Connections pane, expand the server node and click Application Pools.

3 Select the desired Application Pool and in the Actions pane, click Advanced Settings.

4 Under Process Model, look for Identity and click the ellipsis button (…).

5 Record the username specified.

This is the account that needs the permissions labeled for the Application Pool Account column in the Windows Permissions chart.

Determining the Account that the Web Server Runs as in IIS

In IIS, the Account that the Web Server runs as is typically the new IUSR account (not to be confused with the old IUSR_machinename or the IWAM_machinename accounts). Follow the steps below to verify the account used:

1 Open Microsoft IIS.

2 Select the Site used to host Vovici Enterprise.

3 Click the Community Application folder (specified during the original installation) and in the Actions pane, click Basic Settings.

4 Select Properties.

5 Select the Directory Security tab.

6 Under “Anonymous access and authentication control,” click Edit.

NOTE

Verify the username that is specified. If IUSR_machinename is listed sometimes this is not used when Vovici Enterprise is used, instead the IWAM_machinename account will be used by IIS. On Windows 2008 Server, the IIS_WPG account is used in most scenarios instead of either of these accounts. Both the IUSR and IWAM local machine accounts are included in the IIS_WPG account by Windows.

Determining the Account that the Vovici Service Runs as

The Vovici Service used by Vovici Enterprise performs all the scheduled functions within the Schedule Events section of the main application. View our Online Help for more information. The only exception is if the Now lightning bolt icon is clicked under List view inside Schedule Events.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 37 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Follow the steps below to verify the account used:

1 Inside Control Panel, open Administrative Tools.

2 Double-click (open) Services.

3 Look for the Vovici Service, it is typically named Vovici Service, and right-click it.

4 Select Properties.

5 Select the Log On tab.

NOTE

Please record the username that is specified. This account needs the permissions specified under the “Vovici Services” column in order to open and close surveys.

The account listed here must have the ability to start services on the local server. Otherwise, Windows will not start the Vovici Service.

Windows Authentication Windows authentication must be enabled inside Microsoft IIS to attempt to login into Vovici Enterprise using Windows Authentication. Also, edit the web.config file to support this authentication method.

Editing the Web.Config File for Windows Authentication

Inside the \vovici root directory, the web.config file must be found (this path was specified when the installer was run earlier in the process). The following line needs to be changed:

<authentication mode=“Forms” />

To:

<authentication mode=“Windows” />

Editing the App.Config File for Windows Authentication

Inside the \AppData subdirectory (of the vovici root directory), the App.config file must be found (this path was specified when the installer was run earlier in the process). Look for:

<ApplicationSettings>

and add the following line below it:

<AuthenticationMode>WINDOWS</AuthenticationMode>

This should look like the example below when done:

<ApplicationSettings>

<AuthenticationMode>WINDOWS</AuthenticationMode>

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 38 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

NOTE

Anonymous authentication must be disabled in order for Windows Authentication to function correctly. Otherwise, login failures can occur since IIS or Windows can become confused when using both authentication modes.

To enable “Windows Authentication” and disable “Anonymous Authentication” in IIS follow the steps below:

1 Open Microsoft IIS.

2 Select the Site used to host Vovici Enterprise.

3 Click the Community Application folder (specified during the original installation) and in the Features View under IIS, click Authentication.

4 In the Actions pane, click Open Feature.

5 Select Anonymous access.

6 In the Actions pane, click Disable.

7 Select Integrated Windows authentication.

8 In the Actions pane, click Enable.

NOTE

Some networks require that Digest Authentication for Windows domain servers be enabled in order for users to have access to all features within Vovici Enterprise.

Windows Authentication Permissions

The following permissions must be assigned after the Vovici Enterprise installer has been run in order for Windows Authentication to function.

Most of the permissions listed below are requirements of the Windows Operating System, the Microsoft IIS Web server, and Microsoft ASP.NET 4.0. They are listed for reference to speed the installation process and to aid troubleshooting.

Vovici is not responsible for any of the permissions assigned.

Vovici does not require any of the accounts listed below. The accounts listed in most cases can be replaced with another account to align with the organization’s security standards, but whatever account is used must have these minimum permissions in order for the application to function properly. To change an account being used, follow the instructions in the sections labeled “Determining the account…” list at the bottom of the “Windows NTFS Permissions” chart.

The Vovici Enterprise installer does not attempt to assign permissions due to security limitations encountered in most environments. Instead, they must be applied manually in order for the application to function with Microsoft IIS and Microsoft ASP.NET 4.0 in a Windows environment.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 39 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Windows NTFS Permissions

Application Pool Account*

Windows User Accounts#

Vovici Service**

Community Virtual Directory

Read

List

Read and Execute

Read

List

None

AppData Full Control Read

List

Read

List

Surveys Full Control Read

List

Read

List

Write

(Modify)

Reports Full Control Read

List

None

Temporary ASP.NET Files##

Full Control N/A N/A

C:\Program Files\Vovici\Service

None None Read

List

Read and Execute

Windows Temp Dir###

Read

List

Write

Read None

* – See the section regarding Determining the Account Running the Default Application Pool.

# – In certain IIS configurations (for example, when Impersonation is enabled) all the domain users that will access Vovici Enterprise will need these permissions to access the product correctly.

** – See the section regarding Determining the Account that the Vovici Service Runs as (On some servers, the “Modify” permissions might be needed for the Vovici Service to function properly).

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 40 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

## – This is a Microsoft .NET Framework created directory and whatever account runs the Application Pool needs to have access to it. Otherwise, .NET applications will not function.

### – This directory is a Windows environment setting. (This permission is a .NET requirement.) The default value is C:/Windows/Temp, but this can be verified under “Control Panel – System – Advanced” inside the “Environment Variables” tab under “System Variables”: it will be the TEMP variable.

NOTE

In some cases, the “Write” and “Modify” permissions might need to be assigned to these users over the AppData, Surveys, and Reports subdirectories.

It is recommended that a group is created containing all these users under Control Panels – Administrative Tools – Computer Management – Local Users and Groups. This will make assigning the permissions in Windows easier, but the group must be maintained every time a new user is added.

Setting Windows Permissions

This section is not meant to replace Windows documentation but is intended as a reference for people that are not familiar with applying Windows NTFS permissions.

1 Open either Windows Explorer or click the “My Computer” icon.

NOTE

Microsoft IIS 7.5 supports the ability to right-click virtual directories or subfolders in order to apply Windows NTFS permissions (through the “Edit Permissions” menu option). If this is used, skip to Step 6 listed below.

2 Locate the directory in question.

3 Right-click it.

4 Select Properties.

5 Click Security.

6 Click Edit.

7 Use the Add button to add accounts not listed.

8 Click an existing account to see the currently permissions allowed and to change them by clicking Allow.

It is advisable to verify that permissions have propagated down to files inside each of these directories for each account. In some cases, child objects (files inside directories) are not allowed to receive permissions from the parent objects (directories). To force this propagation, inside the Security tab, click Advanced, and then select the bottom check box. This will force the permissions to all child objects under the directory in question. Vovici Enterprise installation experts have on occasion only seen this work to the next layer of folders.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 41 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

For example:

Permissions set on the /vovici directory are only applied to the:

/vovici/AppData directory

However, permissions will not always be applied to:

/vovici/AppData/admin directory

IIS Permissions

Permissions

Community Virtual Directory

Read

AppData Read

Write

Surveys Read

Write

Reports Read

Write

Determining the Application Pool Used by Vovici Enterprise

By default, Vovici Enterprise is run by the default Application Pool but this varies. Use the information listed above to determine the exact Application Pool.

1 Open Microsoft IIS.

2 Select the Site used to host Vovici Enterprise.

3 Click the Community Application folder (specified during the original installation) and in the Actions pane, click Advanced Settings.

4 Under General, look for Application Pool.

5 Record the name of the Application Pool setting at the bottom of the page.

Chapter 6 Windows Server 2008 Authentication and Permissions

Vovici Enterprise Installation Guide 42 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Determining the Account that Runs the Application Pool

In IIS, the Account that the default Application Pool runs as is typically Network Service. The account actually used can be verified by doing the following:

1 Open Microsoft IIS.

2 In the Connections pane, expand the server node and click Application Pools.

3 Select the desired Application Pool and in the Actions pane, click Advanced Settings.

4 Under Process Model, look for Identity and click the ellipsis button (…).

5 Record the username specified.

This is the account that needs the permissions labeled for the Application Pool Account column in the Windows Permissions chart.

Determining the Account that the Vovici Service Runs as

The Vovici Service used by Vovici Enterprise performs all the scheduled functions within the Schedule Events section of the main application. View our Online Help for more information. The only exception is if the Now lightning bolt icon is clicked under List view inside Schedule Events.

Follow the steps below to verify the account used:

1 Inside Control Panel, open Administrative Tools.

2 Double-click (open) Services.

3 Look for the Vovici Service, it is typically named Vovici Service, and right-click it.

4 Select Properties.

5 Select the Log On tab.

NOTE

Please record the username that is specified. This account needs the permissions specified under the “Vovici Services” column in order to open and close surveys.

The account listed here must have the ability to start services on the local server. Otherwise, Windows will not start the Vovici Service.

Chapter 7

Configuring Database Connections The Vovici Enterprise Administrative Portal is where the application creates the necessary table structure in the database needed to carry out its functions.

Access Administrative Portal This section explains how to enter the URL in a Web browser to access the Vovici Enterprise Administrative Portal.

Depending on the authentication, method designated in Section 5 or Section 6 access to the Vovici Enterprise Administration Portal will be different.

Vovici Enterprise Authentication

The first time the Vovici Enterprise installer is run, it is required that access is made on the server that Vovici Enterprise is installed on or by remotely connecting to it.

The Administrative Portal will be accessed through the following URL:

http://localhost/community/admin/default.aspx

NOTE

If a virtual directory other than community was used in Section 3, Step 7 above, replace community in the URL with the name of the virtual directory used. Attempting to access this URL from a different computer by changing “localhost” to the server’s name or IP will fail on all initial installations performed until the administrator account is enabled inside the Vovici Enterprise Administrative Portal. This is by design and is intended as an extra security feature.

Using Localhost on a Web Server Hosting Multiple Web Sites

In a Web server hosting multiple Web sites, in order to use localhost as a URL for a specific Web site, a unique port needs to be assigned for localhost for that Web site. The steps below explain how to do this.

Chapter 7 Configuring Database Connections

Vovici Enterprise Installation Guide 44 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

This example assumes that the port is 8080, but any viable port that Microsoft IIS supports and is not currently in use will work.

1 Open Microsoft IIS.

2 Right-click the Web site that is being used to host Vovici Enterprise.

3 Select Properties.

4 Select the Web Site tab.

5 Click Advanced.

6 Click Add.

7 Leave the IP Address (All Unassigned).

8 Enter 8080 for the TCP Port.

9 In the Host Header Name, enter localhost.

10 Click OK.

After the initial setup is configured, usage of the administrator account to access the Vovici Enterprise Administrative Portal remotely will be enabled.

Windows Authentication

If Windows Authentication has been chosen, access can be from any machine but the login to the machine will need to be a local administrator (not a Domain Administrator) account on the Vovici Enterprise host application server.

The Administrative Portal will be accessed through the following URL (This is a placeholder and not intended as an actual URL. <server> would be replaced with the name of the server).

http://server/community/admin/default.aspx

Or via the server either locally or by remotely connecting to it (This will work on a server where the application is installed).

http://localhost/community/admin/default.aspx

NOTE

If a virtual directory other than community was used in Section 3, Step 7 above, replace community in the URL with the name of the virtual directory used.

The username should be administrator, all lower case and the password will be the one defined when the application’s connection was established to the database (this is performed in the next section, Setup Database Connection).

Chapter 7 Configuring Database Connections

Vovici Enterprise Installation Guide 45 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Setup Database Connection The first time the Administrative Portal is accessed, it will load the Setup Database Connection page. See image below.

Setup Database Connection page

To configure the database connections, follow the steps below:

1 Select the type of database server.

NOTE

See the database notes listed in the Setup section above.

2 Enter the Name or IP Address of the database server. If the application and database servers are on the same machine, “localhost” can be entered.

3 Enter the Port Number used to access the database server.

4 Enter the Name of the database to store the survey data. This database will serve as the Master Connection.

NOTE

This database must be created manually and must exist before continuing. See the database server’s documentation for details.

Oracle Note: The Service Name must be entered during this step.

Chapter 7 Configuring Database Connections

Vovici Enterprise Installation Guide 46 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

5 Enter the User Name to connect to the database.

NOTE

This user should have permission to create, update, and delete tables and rows in the database. Some recommendations are listed in the Setup section above.

6 Enter the User’s Password.

7 Enter a Name for the default Workgroup. When using a one-workgroup license of Vovici Enterprise, all users will need to be members of this workgroup.

NOTE

Record the name of this Workgroup. If a problem occurs during the installation of Vovici Enterprise, this information will be needed to properly re-connect the Vovici Enterprise application with the database.

8 Click Setup.

A prompt appears to select a password for the System Administrator account (Username will always be and cannot be edited: administrator). This account can be used after the initial setup is finished to access the Vovici Enterprise Administrative Portal remotely, bypassing the need to access it via a localhost URL.

The System Administrator account cannot access the main application. This is by design and is intended as a security feature. If the System Administrator account’s password is ever lost, the Administrative Portal can still be accessed without a password by using a localhost URL as listed above.

The Administrator password should meet the following criteria:

• Must be at least 7 characters long.

• Must include at least one numeric character.

• Cannot include username (as noted previously the username for the System Administrator account is administrator).

If the password prompt for the System Administrator account does not appear, please re-check the settings, and try again. Typically, a message will appear in the tool tip at the bottom of the page.

Error message from database

Chapter 7 Configuring Database Connections

Vovici Enterprise Installation Guide 47 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Once the System Administrator’s account password has been provided, the Administrative Portal’s Dashboard appears. See image below.

Administrative Portal’s Dashboard

Chapter 8

Configuring Default Workgroup 1 Click Manage Workgroups.

2 Select the first workgroup.

3 Click Edit.

4 There already will be a name for the workgroup as entered in Setup Database Connection Section in Step 7.

NOTE

The Description field is optional.

5 Leave the following fields blank (these are for the Online Community Builder add-on product):

• Portal URL

• Portal registration mode

• Portal Registration Profile

• Require Approval

• Portal Web Service URL

6 The Healthy Panel Threshold and Unhealthy Panel Threshold values are used in the “Panel” functionality of the product. Vovici’s proprietary health scores provide Administrators with an immediate overview of respondent history, both at the individual panelist and aggregate panel levels. Numerous factors go into determining the health score including email open rates, survey start and completion rates, and unsubscribe rates. The default values are 75 and 25 respectively. These are the recommended values but they can be changed. In addition, this can be later changed within the main product user interface.

7 Several check boxes are at the bottom window that control the ability to disable certain features inside Vovici Enterprise:

• Disable use of Vovici-created themes – Select to hide standard Survey Themes that control the look and feel of surveys. Vovici Enterprise allows the creation of custom Survey Themes that can be designed to fit a Web site’s look and feel. Knowledge of CSS and HTML is recommended. Vovici’s Services Team offers the ability to create customized Survey Themes for clients. Contact your Sales Representative or Account Manager for more information.

Chapter 8 Configuring Default Workgroup

Vovici Enterprise Installation Guide 49 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

• Disable publishing to social media sites – Select to remove the option from the application to publish to social media sites (for example, Facebook, LinkedIn, and Twitter) within the workgroup. This is useful if organizational policy prohibits sharing organizational branding on personal social networks.

• Disable permanent survey deletion – Select to stop user accounts from permanently deleting surveys from the application. Instead a flag will be used in the database to hide the survey, and allow restoration of the survey at a later date.

8 Click Publishing (This tab defines the publishing options used to post the HTML content to survey takers):

a Survey Engine Path – This value should be defaulted to the se.ashx script (the Survey Engine) located inside the Virtual Directory specified in Section 3, Step 7. If the value is not present enter the full http path to the se.ashx script.

b Web Survey Location – This is the full HTTP path to the root directory for the workgroup’s surveys. It should have an auto-filled value.

NOTE

At the end of this path is the Workgroup ID listed under the Manage Workgroups tab in the Administrative Portal. Each workgroup publishes content to a separate directory. The Survey Engine uses this to find the survey for a particular workgroup.

An example would be (this assumes the Workgroup’s ID value is 1885224648):

http://server.com/Community/surveys/1885224648

c Publish To – This setting defines how the survey content viewed by survey takers reaches the server:

Local Web Server – This is the default publishing option. It should automatically have the path to reach the Web Survey Location setting listed above.

Network Share – A network share could be used to publish the workgroup’s survey content.

Remote FTP Server – An alternative publishing method that uses a non-secure FTP setting to publish content. Workgroups using this publishing method will not be able to use the Edit Survey HTML feature within Vovici Enterprise.

NOTE

In all cases, the folder pointed to by the publishing settings (Publish To) should be the same folder referred to by the Web Survey Location so that files uploaded/saved to that FTP server subfolder, network share, or local directory are accessible at the Web Survey Location URL.

Chapter 8 Configuring Default Workgroup

Vovici Enterprise Installation Guide 50 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

d Click Test. A tool tip message should appear confirming that the publishing setting passed. See image below.

9 Click Mail.

a Leave the defaulted SMTP option selected.

NOTE

Contact Vovici Enterprise installation experts for more information regarding the Hurricane mail option.

b Enter the location of a valid SMTP server (Simple Mail Transfer Protocol) that the application server can access to send email.

c Specify the Port used by the SMTP server.

d Enter the Time Out in number of seconds for the SMTP server. The default setting is 60 seconds; this should work in most environments.

e If the server is an open SMTP server, select None in the Authentication section.

If the server requires authentication, choose the appropriate method of authentication and enter a username and password that can access the SMTP server.

f Select the From Address setting to use for survey invitations. The default value is Survey Author:

Enable address piping in From field of Invitation – Select to enable email addresses to be piped into the From Address for each survey invitation based on preloaded data for each participant.

Survey Author – The From Address for each survey will default to the email address of the owner of the survey.

Email List – Enter email addresses into a list that can be selected in Write Invitations within the main application. This is useful if it is desired that the invitation is seen as sent from an email address of someone who is not a user in the application.

g Select the Reply To Address setting to use as the reply address for survey invitations. The default value is Survey Author:

Enable address piping in Reply To field of Invitation – Select to enable email addresses to be piped into the Reply To Address for each survey invitation based on preloaded data for each participant.

Chapter 8 Configuring Default Workgroup

Vovici Enterprise Installation Guide 51 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Survey Author – The Reply To Address for each survey will default to the email address of the owner of the survey.

Other – Enter a default email address that will be used as the reply to address for all surveys’ invitations. This is useful if it is desired that all replies to survey invitations be sent to a specific email address (most useful if an email alias is used with multiple people handling the replies).

h Select the Enable address piping in To field of Invitation option to prepopulate the To Address for survey invitations. This data would be preloaded on a per survey participant basis.

i Enter the System From Address – This is used for all system wide email message sent out, such as lost password email requests.

j Click Test. A tool tip message should appear confirming that the mail settings passed. See image below.

10 Click License.

a Ensure that all potential features are checked. If a purchased feature is not grayed out, make sure that the options.lic file provided by [email protected] email alias has been placed in the \vovici\AppData directory.

11 Click OK to save the changes.

Chapter 9

System Options System Options are used to define multiple global settings for the Vovici Enterprise environment. These settings are:

• Update and test the database connection and verify that the table structure in the database matches the current installation base.

• Email settings for the “Email Triggers” feature.

• Define the security level required for user accounts’ passwords.

• Assign a password for the “Administrator” account that allows for remote access of the Vovici Enterprise Administrative Portal.

Connection This tab is used to resync the database tables with the existing installed code of the application, along with testing the connection to the database or the database or editing the connection information.

There is an option to clear the connection information to the database as well. This is useful if the database credentials change later. However, the Administrative Portal would need to be re-accessed and the Setup Database Connection of this guide would need to be repeated. It is recommended that the steps below are performed in addition.

Resync Tables – Run Table Setup This option will connect to the database and verify that all the required tables exist in the database and have the proper data columns.

1 From the System Administration Dashboard tab, click System Options.

2 Click Run Table Setup. A progress indicator appears.

3 Once the table setup is completed, the following message appears. See image below.

NOTE

Even though the initial database information has been configured, it is recommended to perform this step now.

Chapter 9 System Options

Vovici Enterprise Installation Guide 53 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Mail Setup Assign the email settings used by the Survey Engine when the Email Triggers feature is used with the Vovici Enterprise application. The settings entered earlier in Section 8 should be retained.

1 From the System Administration Dashboard, click System Options.

2 Under the Default Mail Settings, leave the defaulted SMTP option selected.

NOTE

Contact Vovici Enterprise installation experts for more information regarding the Hurricane mail options.

3 Enter the SMTP Server – Defines the (outgoing) email server used.

4 Enter the SMTP Port – Specify the SMTP port for the SMTP server specified. On most SMTP servers this is 25.

5 Enter the SMTP Time Out – The time, in seconds, that Vovici Enterprise will wait for a response from the SMTP server. By default, this value is usually 300.

6 Authentication – Define whether authentication is used when sending email via the SMTP server specified or if authentication is required. There are three options:

• None – Select if no authentication is required.

• Auth Login – A method of email authentication that passes the username and password encrypted via base-64 encryption.

• CRAM-MD5 – A method of email authentication used by LDAP servers. The password is encrypted using the MD5 algorithm.

7 Optional – Only entered if Step 6 had either Auth Login or CRAM-MD5 selected.

a Account – Enter the account to use during authentication.

b Password – Enter the account’s password during authentication.

8 Invitations Per Interval – Define the maximum number of invitations that can be sent out per the interval. The Interval is defined in the next field. This applies to all surveys in every Workgroup in the environment. This setting will vary from environment to environment as different hardware and network set configurations can radically affect the realistic upward limit on the number of invitations sent.

9 Interval (in minutes) – Define how many minutes makes up the interval period per sending of email invitations.

NOTE

If 0 is entered for both values, no limitation is in place and the application will attempt to send all invitations to all participants specified under Select Participants.

Select the appropriate settings and when done, click Save to record them.

Chapter 9 System Options

Vovici Enterprise Installation Guide 54 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Password Security By default, Vovici Enterprise has the following security requirements for password for newly created accounts:

• Must be at least 7 characters long.

• Must include at least one numeric character.

• Cannot include username.

Determine the security level of the passwords for all user accounts inside the Vovici Enterprise system.

• Require Strong Password – Force new passwords entered inside the Vovici Enterprise to fulfill three of the following four criteria:

a Lowercase

b Uppercase

c Numbers

d Punctuation – Examples include ,.!’”:;

For example, the password below would fulfill three of the four criteria because the password has three lowercase letters, two capital letters, and three numbers.

T3stP2s5

In addition, the password below is a valid, strong password because it contains five lowercase letters, two numbers, and one punctuation character:

t,st9a5s

• Minimum Password Length (Characters) – Determine the shortest possible password for all user accounts.

If the application is configured to use Windows Authentication instead of Vovici Enterprise Authentication, the accounts will not have their passwords verified. Only the existence of the user name is checked by the application. This is done because we assume that the account has been verified by Windows when they logged into their computer. This setting is enabled inside IIS as noted in this guide.

Accounts with already existing passwords will be ignored if changes are made to these first two security settings until their password is reset either through the Administrative Portal or by the user themselves. The last option however is applied to already existing users.

• Maximum Password Age (Days) – Determine the longest a password can be maintained within the application before the user is prompted for a new password. The default value is 120 days but this can be modified.

Select the appropriate settings and when done, click Save to record them.

Chapter 9 System Options

Vovici Enterprise Installation Guide 55 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

System Administrator Assign the password for the “administrator” user in order to access Vovici Enterprise Administrative Portal remotely under the System Administration Dashboard tab. This is useful if the password for the administrator account has been lost.

If the Administrative Portal is accessed via a localhost URL as covered in the Access the Administrative Portal section of this guide, the information below can be used to reset the password:

1 From the System Administration Dashboard, click System Options.

2 Under Change System Administrator Password, enter the new password for the “administrator” account.

3 Confirm the password.

4 Click Save to enable the new password.

Chapter 10

Adding More Workgroups (Optional) If more than one workgroup was purchased for Vovici Enterprise, follow the steps below to create an additional workgroup.

1 From the System Administration Dashboard, click Manage Workgroups.

2 Click Add Workgroup.

3 Enter the Name of the new workgroup.

NOTE

The Description field is optional.

4 Leave the following fields blank (these are for the Online Community Builder add-on product):

• Portal URL

• Portal registration mode

• Portal Registration Profile

• Require Approval

• Portal Web Service URL

5 The Healthy Panel Threshold and Unhealthy Panel Threshold values are used in the “Panel” functionality of the product. Vovici’s proprietary health scores provide Administrators with an immediate overview of respondent history, both at the individual panelist and aggregate panel levels. Numerous factors go into determining the health score including email open rates, survey start and completion rates, and unsubscribe rates. The default values are 75 and 25 respectively. These are the recommended values but they can be changed. In addition, this can be later changed within the main product user interface.

6 Several check boxes are at the bottom window that control the ability to disable certain features inside Vovici Enterprise:

• Disable use of Vovici-created themes – Select to hide standard Survey Themes that control the look and feel of surveys. Vovici Enterprise allows the creation of custom Survey Themes that can be designed to fit a Web site’s look and feel. Knowledge of CSS and HTML is recommended. Vovici’s Services Team offers the ability to create customized Survey Themes for clients. Contact your Sales Representative or Account Manager for more information.

Chapter 10 Adding More Workgroups (Optional)

Vovici Enterprise Installation Guide 57 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

• Disable publishing to social media sites – Select to remove the option from the application to publish to social media sites (for example, Facebook, LinkedIn, and Twitter) within the workgroup. This is useful if organizational policy prohibits sharing organizational branding on personal social networks.

• Disable permanent survey deletion – Select to stop user accounts from permanently deleting surveys from the application. Instead a flag will be used in the database to hide the survey, and allow restoration of the survey at a later date.

7 Click Publishing (This tab defines the publishing options used to post the HTML content to survey takers):

a Survey Engine Path – This value should be defaulted to the se.ashx script (the Survey Engine) located inside the Virtual Directory specified in Section 3, Step 7. If the value is not present enter the full http path to the se.ashx script.

b Web Survey Location – This is the full HTTP path to the root directory for the workgroup’s surveys. It should have an auto-filled value.

NOTE

At the end of this path is the Workgroup ID listed under the Manage Workgroups tab in the Administrative Portal. Each workgroup publishes content to a separate directory. The Survey Engine uses this to find the survey for a particular workgroup.

An example would be (this assumes the Workgroup’s ID value is 1885224648):

http://server.com/Community/surveys/1885224648

c Publish To – This setting defines how the survey content viewed by survey takers reaches the server:

Local Web Server – This is the default publishing option. It should automatically have the path to reach the Web Survey Location setting listed above.

Network Share – A network share could be used to publish the workgroup’s survey content.

Remote FTP Server – An alternative publishing method that uses a non-secure FTP setting to publish content. Workgroups using this publishing method will not be able to use the Edit Survey HTML feature within Vovici Enterprise.

NOTE

In all cases, the folder pointed to by the publishing settings (Publish To) should be the same folder referred to by the Web Survey Location so that files uploaded/saved to that FTP server subfolder, network share, or local directory are accessible at the Web Survey Location URL.

Chapter 10 Adding More Workgroups (Optional)

Vovici Enterprise Installation Guide 58 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

d Click Test. A tool tip message should appear confirming that the publishing setting passed. See image below.

8 Click Mail.

a Leave the defaulted SMTP option selected.

NOTE

Contact Vovici Enterprise installation experts for more information regarding the Hurricane mail option.

b Enter the location of a valid SMTP server (Simple Mail Transfer Protocol) that the application server can access to send email.

c Specify the Port used by the SMTP server.

d Enter the Time Out in number of seconds for the SMTP server. The default setting is 60 seconds; this should work in most environments.

e If the server is an open SMTP server, select None in the Authentication section.

If the server requires authentication, choose the appropriate method of authentication and enter a username and password that can access the SMTP server.

f Select the From Address setting to use for survey invitations. The default value is Survey Author:

Enable address piping in From field of Invitation – Select to enable email addresses to be piped into the From Address for each survey invitation based on preloaded data for each participant.

Survey Author – The From Address for each survey will default to the email address of the owner of the survey.

Email List – Enter email addresses into a list that can be selected in Write Invitations within the main application. This is useful if it is desired that the invitation is seen as sent from an email address of someone who is not a user in the application.

g Select the Reply To Address setting to use as the reply address for survey invitations. The default value is Survey Author:

Enable address piping in Reply To field of Invitation – Select to enable email addresses to be piped into the Reply To Address for each survey invitation based on preloaded data for each participant.

Chapter 10 Adding More Workgroups (Optional)

Vovici Enterprise Installation Guide 59 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Survey Author – The Reply To Address for each survey will default to the email address of the owner of the survey.

Other – Enter a default email address that will be used as the reply to address for all surveys’ invitations. This is useful if it is desired that all replies to survey invitations be sent to a specific email address (most useful if an email alias is used with multiple people handling the replies).

h Select the Enable address piping in To field of Invitation option to prepopulate the To Address for survey invitations. This data would be preloaded on a per survey participant basis.

i Enter the System From Address – This is used for all system wide email message sent out, such as lost password email requests.

j Click Test. A tool tip message should appear confirming that the mail settings passed. See image below.

9 Click License.

a Ensure that all potential features are checked. If a purchased feature is not grayed out, make sure that the options.lic file provided by [email protected] email alias has been placed in the \vovici\AppData directory.

10 Click OK to save the new workgroup.

11 Repeat these steps to add another workgroup.

Chapter 11

Creating User Accounts This section explains how to add user accounts to access the main Vovici Enterprise application. This can be done in four different ways, and each is covered in its own section below.

Manually Adding a User Account 1 Access the System Administration Portal. See Section 7 on how to access the

Administrative Portal.

2 Click Manage Users.

3 Click Add New User.

4 Enter the following information:

a User Name – The user will use to log in to Vovici Enterprise.

b Display Name – The name that will be displayed to other users when they are referring to that user, such as viewing the user’s surveys, adding the user as a survey administrator, and inviting the user to a survey.

c Email – The email address that Vovici Enterprise will contact that user at with invitations and other survey notifications.

d Language – Define the language the user will see when they log into the application.

NOTE

Not all languages have been translated in the application at this time. If a language is needed that is not on this list, please contact the account’s Sales Representative for pricing information to add the language to the application.

e Default Workgroup – This will be the first Workgroup the user will access when they log into the application. They can still toggle to any other Workgroup they have access to within the application via the Workgroup Banner.

f Status – Define whether the user is active, suspended, or deleted. The default value is Active, allowing the user to log into the application.

g Password – Once a new user is added to the application, an email is sent to the new user containing their username and a link to define their password. If you prefer, you can define the password for the user. Select the “I prefer to set a password” check box, enter the password in the “Password” field that appears, and then confirm the entered password.

Chapter 11 Creating User Accounts

Vovici Enterprise Installation Guide 61 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

5 Click the Workgroup tab.

6 Click Add Workgroup.

a Select the workgroup from the drop-down list.

b Click Add.

7 Click Edit next to the new workgroup.

a Select the desired Role for the user in this workgroup. This value controls what functions are available to the new user in this workgroup. Below is a short description of the predefined roles included in the application:

Default – If a user is not assigned a role, they receive the Default role, which only allows a user to log into the application.

Survey Author – User is able to create and design surveys.

Lite Survey Author – Survey Author that does not have access to advanced survey design features.

Report Author – Role that allows creating and editing reports for surveys it has been granted access.

Report Viewer – User is able to view saved reports if granted access.

Translator – Role used to allow translators to convert survey and invitation text along with open-ended responses to another language.

Survey Administrator – Survey Author that has access to most Administration functions.

Group Administrator – The Administrator of a workgroup.

b Select the Reviewer Status to define whether the user needs approval to perform some of the functions granted by its Role (for example, opening a survey to collect live survey data). Selecting Standard Survey Author, which is the default value, will result in no extra approval being needed.

c Click the green check mark to approve.

8 Click OK to add the new user.

Importing a User Account If it is desired to import the Administrative user from a file (.CSV or .TSV only), instead of manually creating an account, follow the steps below (these instructions assume that the Administrative Portal has been accessed):

There are requirements on how this file must be formatted in order to be read correctly by the application. The first row of the file must include an identifying name for each column of data. Each prospective user must be a new row after this.

Chapter 11 Creating User Accounts

Vovici Enterprise Installation Guide 62 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

The following pieces of information are required:

• User Name

• Email

• Display Name

The following is an example of how the file should appear. This is a .TSV file example:

User Name Display Name Email

testuser1 First test user [email protected]

testuser2 Second test user [email protected]

If the data to be imported contains any non-ANSI characters, be sure to format the text file using UTF-8 encoding. At this time, Microsoft Excel does not offer this as an option for saving files, but several other text editors offer this option. For example, Notepad which typically is included in most Windows installations. Also, other text editors can perform this function such as TextPad.

1 Access the System Administration Portal.

2 Click Manage Users.

3 Click Import > Import Users From File.

4 Click Browse to select the file to upload.

5 Click Next. The Map Fields page appears asking you to confirm that the fields in the file will map properly to fields in the application. Certain fields will map automatically such as:

• User Name

• Display Name

• Email

• Culture

Values in the import file should be formatted using the en-US format for cultures, which is a Microsoft ASP.NET format for Web page globalization: en-us will provide the imported user a culture of English – United States, fr-ca will add a user with the culture of French – Canada. If no culture is specified, English – United States will be used.

6 Click Next. A prompt appears asking to provide the Role each user will have inside the application. Consult the application’s Help file for more information on how Roles affect the user’s access level inside the application.

7 Click Next.

8 Click Import to start the import process.

9 Click Close.

Chapter 11 Creating User Accounts

Vovici Enterprise Installation Guide 63 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

Importing from Active Directory 1 Access the System Administration Portal.

2 Click Manage Users.

3 Click Import > Import From AD. The Import From AD dialog opens.

4 Click the letter, from which the domain name containing the users to import starts. A list of users appears from the specified active directory.

5 Select the appropriate users.

6 Click Add.

Users who have been added previously will not appear in the list. Vovici Enterprise also does not have the ability to filter by organizational units and is limited to returning the first 2000 names in the Active Directory. If the desired Active Directory has more names, either one of two options needs to be used instead to add users:

• Web Services – This is covered in more detail below.

• Import Users From File – The users need to be exported from Active Directory and imported using the steps detailed earlier in this chapter to add them into Vovici Enterprise’s user list.

Web Services Web Services (this is a per fee add-on charge to the main application) can be used to import the users from any external database. Web Services are not enabled by default and need to be purchased separately (this would result in a new options.lic file to unlock the Web Services feature). Contact your original Sales Representative for more information. If it is already purchased, consult the Web Services Technical Guide available at the following link:

http://help.vovici.net/robohelp/robohelp/server/general/projects_fhpro/survey_workbench_MX/Technical_Web_Services_Guide.htm

Chapter 12

Testing Environment The installation is complete and testing can be performed. Below is a recommendation of testing that can be done to insure the installation is successful:

Create a new survey by following the steps below:

1 Create a test survey via Surveys – Design from Scratch by providing it a name such as First Test Survey and clicking OK.

2 Create two pages for the survey with a simple “Multiple Choice: Choose One” question on each page with three choices labeled 1 through 3 (Add Page is an option in the right corner of the Design page and is just below the Test button).

3 Test publishing by clicking Test and when it is done see if a survey response can be submitted on the Test Your Survey page inside Design.

4 Click Distribute and select Send to an Email List.

5 In the To field enter an email address.

6 Enter a Subject.

7 Place the cursor inside the body of the invitation, click Insert Field, and then select Survey URL in the Fields dialog.

8 Click Save Invitation.

9 Click Schedule.

10 Select Open Survey and click Edit.

11 Set the Start time to the next half-hour period (either the top or bottom of the half hour, for example, 1:00 or 1:30).

12 Set no Recurrence or Advanced options, and then click OK.

13 Inside Schedule, select Send Initial Invitation, and then click Edit.

14 Set the Start time to the next half-hour period after the Open Survey event was scheduled (either the top or bottom of the half hour, for example, 1:00 or 1:30).

15 Set no Recurrence or Advanced options, and then click OK.

16 Check the survey after both time periods entered to confirm that the survey was:

a First “Opened.”

b The initial invitation was sent.

17 Once this is done, take the survey via the invitation that was sent out.

18 Under Analyze, select View Responses and make sure the response entered is listed.

Chapter 13

Appendix

Determining the Web Server Root in Microsoft IIS 6

(Windows Server 2003) The Web server root can be checked under Microsoft IIS by performing the following steps:

1 Open Microsoft IIS.

2 Right-click the Web site that is being used to host Vovici Enterprise.

3 Select Properties.

4 Click the Home Directory tab.

NOTE

The path is specified in the “Local Path” field.

Determining the Web Server Root in Microsoft IIS 7

(Windows Server 2008) The Web server root can be checked under Microsoft IIS by performing the following steps:

1 Open Microsoft IIS.

2 Right-click the Web site that is being used to host Vovici Enterprise.

3 Select Manage Web Site – Advanced Settings.

4 Look in the Physical Path field.

NOTE

The path specified will likely start with %SystemDrive%, which is a Windows Environment variable and is typically C:\ but might be configured differently on some servers.

Chapter 13 Appendix

Vovici Enterprise Installation Guide 66 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

ASP.NET Framework Vovici Enterprise 6.3 only works with version 4.0.30319 of the Microsoft ASP.NET Framework.

Microsoft ASP.NET Framework versions 2.0 and 1.1 will not function. If multiple versions are installed on the Application Server inside Microsoft IIS, it is possible to enable the version 4.0.30319 over versions 2.0 and 1.1 by following the steps below.

Allowing ASP.NET 4.0 in Windows Server 2003

1 Open Microsoft IIS.

2 Right-click the Community Virtual Directory.

3 Select Properties.

4 Click the ASP.NET tab.

5 Select v4.0.30319 in the ASP.NET version drop-down list.

6 Click OK.

NOTE

Two different versions of Microsoft ASP.NET cannot be used on the same virtual directory. Applications using one version of ASP.NET (v1.1, for example) cannot run in an application using the other version of ASP.NET (v4.0, for example). A new Application Pool must be created to house one of the applications using the different version of ASP.NET.

Allowing ASP.NET 4.0 in Windows Server 2008

1 Open Microsoft IIS.

2 Select the Site used to host Vovici Enterprise.

3 Click the Community Application folder (specified during the original installation) and in the Features View under IIS, click ISAPI and CGI Restrictions.

4 In the Actions pane, click Open Feature.

5 Select ASP.NET v4.0.30319 in the list.

6 In the Actions pane, click Allow.

Knowledge Base Vovici has a Knowledge Base within our Vovici Customer Support Portal that contains valuable recommendations on maintaining the server on which Vovici Enterprise is installed. It also contains troubleshooting assistance (This is in addition to our installation experts help). It also provides information about best practices for the application:

http://www.vovici.com/support/

Chapter 13 Appendix

Vovici Enterprise Installation Guide 67 Vovici, A Verint Company

© 2012 Verint Systems Inc. All Rights Reserved Worldwide. CONFIDENTIAL AND PROPRIETARY INFORMATION OF VERINT SYSTEMS INC.

IIS Default Documents In the past, the installer did not address the issue of IIS Virtual Directory default documents. This meant that the virtual directory / Web application created by the installer would inherit the properties of the parent Web site. If the parent Web site did not have the default.aspx file listed as one of the default documents, this would have to be manually added by the user. In Vovici Enterprise 6.3, the installer should explicitly add the default.aspx file as a default document inside IIS as shown on the image below.

Documents tab

This should avoid permissions problems that sporadically occurred during installations and upgrades of the application.

© 2012 Verint Systems Inc. All Rights Reserved Worldwide.

Confidential and Proprietary Information of Verint Systems Inc.

The contents of this material are confidential and proprietary to Verint Systems Inc. and may not be reproduced, published, or disclosed to others without express authorization of Verint Systems Inc.

Vovici, A Verint Company196 Van Buren Street, Suite 400Herndon, VA 20170 USA

[email protected]

www.vovici.com