Using CA AppLogic › Appliance Developer Guide › Appliance OS Installations › Common Components › Windows APK › Install the APK Separately › Manually Perform APK Prep Script

Manually Perform APK Prep Script

The APK prep script automatically performs a series of procedures, such as disable the Window Firewall and set the administrator password to never expire, using the AppWinCfg.vbs .

If you disable the APK prep script during install, you can perform the steps manually.

Windows Server 2008

Perform the following steps, as applicable:

1. Set the screen resolution and screen saver timeout.
   1. Right-click an empty area of the desktop and select Personalize.
   2. Set the screen resolution to 1024x768 and the screen saver timeout to 1000 minutes or disable it.

   Note: On 64-bit versions of Windows Server 2008 R2, click Start, Control Panel, Appearance, Change screen resolution or right-click an empty area of the desktop and click Screen Resolution.

2. Disable the page file.
   1. Click Start, Control Panel, System, Advanced system settings, Advanced, Performance Settings, Advanced, Change Virtual Memory.
   2. Clear the check box Automatically manage paging file size for all drives and click No paging file.
   3. Click Set.
   4. Click Restart Later.
3. Disable power management hibernation support.
   1. Click Start, Command Prompt.
   2. Enter powercfg –h off.
4. Disable IE enhanced security.
   1. Open Server Manager, Configure IE ESC, and turn IE enhanced security off for both administrators and users.
5. Clean up the leftover page file, if present.
   1. Open Windows Explorer.
   2. Click Organize, Folder and Search Options, View and select Show hidden files and folders.
   3. Clear the Hide protected operating system files check box.
   4. Delete the file C:\pagefile.sys if it is present.
   5. Restore the default settings under Organize, Folder and Search Options, View.
6. Disable external network access.
   1. Open Server Manager, View Network Connections, Local Area Connection, Properties, TCP/IPv4, Properties.
   2. Click Obtain an IP Address automatically and Obtain DNS server address automatically.
7. Disable Windows Firewall.
   1. Open Server Manager, and go to Windows Firewall, Windows Firewall properties.
   2. Set the firewall to Off for Domain Profile, Private Profile and Public Profile.
8. Disable Windows Automatic Updates.
   1. Open Server Manager, Configure Updates, Change Settings.
   2. Click Never check for updates.
9. Disable password complexity
   1. Open Start, Administrative Tools, Local Security Policy, Account Policies, Password Policy.
   2. Disable password complexity requirements.
10. Set the Administrator password never to expire.
    1. Open Server Manager, Configuration, Local Users and Groups, Users, Administrator, Properties.
    2. Select Password Never Expires.
11. Disable the shutdown event tracker.
    1. Open the Group Policy Editor (Run > gpedit.msc).
    2. Open Computer Configuration, Administrative Templates, System.
    3. Scroll down the right pane and right-click Display Shutdown Event Tracker, Properties.

       Note: On 64-bit versions, click Display Shutdown Event Tracker, Edit.

    4. Select Disabled and click OK.
12. Set the default Windows disk device timeout value to 60 seconds as required.
    1. Open the registry editor (Run > regedit.exe) and navigate to the key HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Disk.
    2. If there is already an entry name TimeOutValue, set the timeout to 60 seconds as required. If not, add a new REG_DWORD value named TimeOutValue. If this value already exists, skip this step.
    3. Set the TimeOutValue to 60 decimal.
    4. Close the registry editor.
13. Disable TCP checksum offload for TurboGate PV drivers.
    1. In the registry editor, navigate to HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Tcpip/Parameters.
    2. Right-click Parameters in the left pane and select New, DWORD.
    3. Type DisableTaskOffload and press Enter.
    4. Right-click DisableTaskOffload, click Modify, and enter 1.
    5. Close the registry editor.
14. On 64-bit Windows, copy shutdown.exe from C:\Windows\system32 to C:\Windows\SYSWOW64.

    If Windows Explorer does not copy the executable file and instead moves it, perform the following manual steps:

    1. In Windows Explorer, move shutdown.exe to C:\Windows.
    2. Open a bash shell and perform the following command:

       cp -p /cygdrive/c/WINDOWS/shutdown.exe cygdrive/c/WINDOWS/system32/shutdown.exe
       

       This command copies the file into the C:\WINDOWS\SYSWOW64 directory.

    3. Use Windows Explorer to move C:\WINDOWS\shutdown.exe to C:\WINDOWS\system32\shutdown

Windows 7 and Windows 8

Perform the following steps, as applicable:

1. Set the screen resolution and screen saver timeout.
   1. Right-click an empty area of the desktop and select Screen Resolution.
   2. Set the screen resolution to 1024x768.
   3. Right-click an empty area of the desktop and select Personalize.
   4. Select Screen Saver and disable or set the screen saver timeout to 1000 minutes.
2. Disable the page file.
   1. Click Start, Control Panel, Systems and Security, System, Advanced system settings, Advanced, Performance Settings, Advanced, Change Virtual Memory.
   2. Clear the check box Automatically manage paging file size for all drives and click No paging file.
   3. Click Set.
   4. Click Restart Later.
3. Disable power management hibernation support.
   1. Click Start, Command Prompt.
   2. Enter powercfg –h off.
4. Clean up the leftover page file, if present.
   1. Open Windows Explorer.
   2. Click Organize, Folder and Search Options, View.
   3. Select Show hidden files and folders.
   4. Clear the Hide protected operating system files check box.
   5. Delete the file C:\pagefile.sys, if present.
   6. Restore the default settings under Organize, Folder and search options, View.
5. Disable external network access.
   1. Open Control Panel, Network and Internet, Network and Sharing Center, Local Area Connection, Properties, TCP/IPv4, Properties.
   2. Click the Obtain an IP Address automatically and Obtain DNS server address automatically option.
6. Disable Windows Firewall.
   1. Open Control Panel, System and Security, then select Windows Firewall and the Turn Windows Firewall On or Off option.
   2. Set the firewall to Off for Private and Public network location settings.
7. Disable Windows Automatic Updates.
   1. Open Control Panel, System and Security, then select Windows Update, Change Settings.
   2. Click the Never check for updates option.
8. Disable password complexity, if set.
   1. Open Start, Administrative Tools, Local Security Policy, Account Policies, Password Policy.
   2. Disable password complexity requirements.
9. Set the Administrator password never to expire.
   1. Open Start, Administrative Tools, Computer Management, Local Users and Groups, Users, Administrator, Properties.
   2. Select Password Never Expires.
10. Disable the shutdown event tracker.
    1. Open the Group Policy Editor using Run > gpedit.msc.
    2. Open Computer Configuration, Administrative Templates, System.
    3. In the right pane, right-click Display Shutdown Event Tracker, Edit.
    4. Select Disabled and click OK.
11. Set the default Windows disk device timeout value to 60 seconds, as required.
    1. Open the registry editor (Run > regedit.exe) and navigate to the key HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Disk.
    2. If there is an entry name TimeOutValue, set the timeout to 60 seconds as required.
    3. If not, add a new REG_DWORD value named TimeOutValue. If this value already exists, skip this step.
    4. Set the TimeOutValue to 60 decimal.
    5. Close the registry editor.
12. Disable TCP checksum offload for TurboGate PV drivers.
    1. In the registry editor, navigate to HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Tcpip/Parameters.
    2. In the left pane, right-click Parameters and select New, DWORD.
    3. Type DisableTaskOffload and press Enter.
    4. Right-click DisableTaskOffload, click Modify, and enter 1.
    5. Close the registry editor.
13. On 64-bit Windows, copy shutdown.exe from C:\Windows\system32 to C:\Windows\SYSWOW64.

    If Windows Explorer does not copy the executable file and instead moves it, perform the following manual steps:

    1. In Windows Explorer, move shutdown.exe to C:\Windows.
    2. Open a bash shell and perform the following command:

       cp -p /cygdrive/c/WINDOWS/shutdown.exe cygdrive/c/WINDOWS/system32/shutdown.exe
       

       This command copies the file into the C:\WINDOWS\SYSWOW64 directory.

    3. Use Windows Explorer to move C:\WINDOWS\shutdown.exe to C:\WINDOWS\system32\shutdown

Windows Server 2012

Perform the following steps, as applicable:

1. Set the screen resolution.
   1. Right-click an empty area of the desktop and select Screen Resolution.
   2. Set the screen resolution to 1024x768.
2. Set the screen saver timeout.
   1. Click Start, Control Panel, System, Appearance, and Display.
   2. Select Change screen saver, then either disable the screen saver timeout or set it to 1000 minutes.
   3. Click OK.
3. Disable the page file.
   1. Click Start, Control Panel, System, Systems and Security, System, Advanced system settings, Advanced, Performance Settings, Advanced, Change Virtual Memory.
   2. Clear the Automatically manage paging file size for all drives check box and click No paging file.
   3. Click Set.
   4. Click Restart Later.
4. Disable power management hibernation support.
   1. Click Start, Command Prompt.
   2. Enter powercfg –h off.
5. Clean up the leftover page file, if present.
   1. Open Windows Explorer.
   2. Click Organize, Folder and Search Options, View and select Show hidden files and folders.
   3. Clear the Hide protected operating system files check box.
   4. Delete the file C:\pagefile.sys..
   5. Restore the default settings under Organize, Folder and Search Options, View.
6. Disable external network access.
   1. Open Control Panel, Network and Internet, Network and Internet Sharing Center, Local Area Connection, Properties, TCP/IPv4, Properties.
   2. Click the Obtain an IP Address automatically and Obtain DNS server address automatically option.
7. Disable Windows Firewall.
   1. Open Control Panel, System and Security and go to Windows Firewall, Turn Windows Firewall On or Off.
   2. Set the firewall to Off for Private and Public Network Location Settings.
8. Disable Windows Automatic Updates.
   1. Open Control Panel, System and Security, Windows Update, Change Settings.
   2. Click Never check for updates.
9. Disable password complexity (if set).
   1. Open Start, Administrative Tools, Local Security Policy, Account Policies, Password Policy.
   2. Disable password complexity requirements.
10. Set the Administrator password never to expire.
    1. Open Start, Administrative Tools, Computer Management, Local Users and Groups, Users, Administrator, Properties.
    2. Select Password Never Expires.
11. Disable the shutdown event tracker.
    1. Open the Group Policy Editor by entering gpedit.msc from the PowerShell Window.
    2. Open Computer Configuration, Administrative Templates, System.
    3. Scroll down the right pane and right-click Display Shutdown Event Tracker, Edit.
    4. Select Disabled and click OK.
12. Set the default Windows disk device timeout value to 60 seconds as required.
    1. Open the registry editor by entering regedit.exe from the PowerShell window.
    2. Navigate to the key HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Disk.
    3. If an entry name TimeOutValue exists, set the timeout to 60 seconds as required. If not, add a new REG_DWORD value named TimeOutValue. If this value already exists, skip this step.
    4. Set the TimeOutValue to 60 decimal.
    5. Close the registry editor.
13. Use Windows Explorer to move C:\WINDOWS\shutdown.exe to C:\WINDOWS\system32\shutdownDisable TCP checksum offload for TurboGate PV drivers.
    1. In the registry editor, navigate to HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Tcpip/Parameters.
    2. Right-click Parameters in the left pane and select New, DWORD.
    3. Type DisableTaskOffload and press Enter.
    4. Right-click DisableTaskOffload, click Modify, and enter 1.
    5. Close the registry editor.
14. On 64-bit Windows, copy shutdown.exe from C:\Windows\system32 to C:\Windows\SYSWOW64.

    If Windows Explorer does not copy the executable file and instead moves it, perform the following manual steps:

    1. In Windows Explorer, move shutdown.exe to C:\Windows.
    2. Open a bash shell and perform the following command:

       cp -p /cygdrive/c/WINDOWS/shutdown.exe cygdrive/c/WINDOWS/system32/shutdown.exe
       

       This command copies the file into the C:\WINDOWS\SYSWOW64 directory.

    3. Use Windows Explorer to move C:\WINDOWS\shutdown.exe to C:\WINDOWS\system32\shutdown