Frequently Asked Questions - BMC-IT


windows ubuntu macos xibo network zenworks android storage
  1. GraphPad Prism, what does it cost?     [jump in page]   2019-05-16
  2. How do I connect a private computer to the department network?     [jump in page]   2019-05-08
  3. How do I force activation of Windows 10 using KMS?     [jump in page]   2019-05-03
  4. May I have SIMCA and MODDE for Windows please?     [jump in page]   2019-05-03
  5. What is Argos?     [jump in page]   2019-05-03
  6. How does the reinstallation of Windows computers work at BMC-IT?     [jump in page]   2019-05-03
  7. How do I print on EduPrint with LPD on Windows 10?     [jump in page]   2019-04-26
  8. How do I connect to storage at Argos?     [jump in page]   2019-04-25
  9. Who is resposible for what on the BMC network? Who can help me?     [jump in page]   2019-04-11
  10. What should be done to introduce a new system administrator at BMC?     [jump in page]   2019-04-09
  11. How do I install telnet in Windows 10?     [jump in page]   2019-04-05
  12. How do I map a network drive via SMB on Windows?     [jump in page]   2019-03-08
  13. How do I connect to a file server via SMB on macOS?     [jump in page]   2019-03-01
  14. What is the BMC-IT computer platform and how does it work?     [jump in page]   2019-02-28
  15. My Windows computer is running out of storage. What is using it?     [jump in page]   2019-02-13
  16. My Internet does not work! How can I find the problem?     [jump in page]   2019-02-08
  17. How do I use port forwarding and SOCKS-proxy in SSH?     [jump in page]   2019-02-05
  18. Where do I store my data? How do I take backup?     [jump in page]   2019-01-22
  19. How do I uninstall old Adobe software and remove old license information?     [jump in page]   2019-01-21
  20. How do I find specific files like the last updated, the one with the longest file name, or the largest one?     [jump in page]   2019-01-17
  21. How do I take backup of the data on my computer?     [jump in page]   2019-01-11
  22. We need more storage! Do you have a file server we can use?     [jump in page]   2019-01-11
  23. How do I mount my home directory or shared storage at HNAS?     [jump in page]   2018-12-21
  24. How to connect with VPN using AnyConnect in Windows     [jump in page]   2018-12-20
  25. What is my IP-address and MAC-address?     [jump in page]   2018-12-19
  26. How much do Adobe Photoshop and Illustrator cost?     [jump in page]   2018-12-10
  27. How do I copy many files in Windows using Robocopy?     [jump in page]   2018-11-27
  28. How do I start an elevated command prompt (as administrator) in Windows?     [jump in page]   2018-11-09
  29. How to change language in Windows 10 Enterprise     [jump in page]   2018-11-07
  30. How to change language in Windows 7 Enterprise     [jump in page]   2018-11-06
  31. What is the cost for EndNote? What is Zotero? And Pages?     [jump in page]   2018-10-15
  32. How do I sign my documents with an electronic signature?     [jump in page]   2018-10-05
  33. What software applications do the university have that I can install?     [jump in page]   2018-09-21
  34. How do I lookup LDAP or Active Directory via command line on Mac and Linux?     [jump in page]   2018-09-10
  35. How do I install Ubuntu?     [jump in page]   2018-09-06
  36. What do I do with old computers or phones?     [jump in page]   2018-08-29
  37. How do I access my work-computer from home?     [jump in page]   2018-08-21
  38. How do I convert video between different formats with free software?     [jump in page]   2018-06-15
  39. How do I install Adobe CC Complete (Photoshop, Illustrator...) in Windows?     [jump in page]   2018-06-11
  40. Do you have some examples of fanless computers we can buy?     [jump in page]   2018-06-05
  41. How to use the IBM Spectrum Protect (Tivoli Storage Manager aka TSM)     [jump in page]   2018-06-04
  42. What about the quality of a created PDF document?     [jump in page]   2018-06-04
  43. How do I configure my resolver on a Linux machine?     [jump in page]   2018-06-04
  44. How do I really delete a directory and files in Windows?     [jump in page]   2018-06-04
  45. How to transfer web hosting for a domain     [jump in page]   2018-06-04
  46. How do I convert an image from RGB to CMYK?     [jump in page]   2018-06-04
  47. How do I convert EPS to PDF in Windows and macOS?     [jump in page]   2018-06-04
  48. What should I think about when adding my own network printer?     [jump in page]   2018-05-31
  49. I would like SPSS on my computer.     [jump in page]   2018-05-30
  50. How do I add a macOS printer at IMBIM?     [jump in page]   2018-05-22
  51. How do I change default settings for a printer in Windows?     [jump in page]   2018-05-18
  52. How do I install PyMOL?     [jump in page]   2018-03-29
  53. What is ransomware and CryptoLocker?     [jump in page]   2018-03-23
  54. How do I buy a new computer?     [jump in page]   2018-03-23
  55. How do I use AddPrinterGUI to add printers in Windows 7/8/10 x64?     [jump in page]   2018-03-23
  56. Please help with installing the software Origin!     [jump in page]   2018-03-07
  57. How do I access PCFS over SMB using smbclient?     [jump in page]   2018-02-22
  58. What is my computer name in Windows?     [jump in page]   2018-01-29
  59. After my employment at the university has finished, may I bring home my old computer?     [jump in page]   2018-01-11
  60. How do I uninstall the Zenworks agent?     [jump in page]   2017-12-14
  61. What is the point with the zone files.uu.se?     [jump in page]   2017-12-07
  62. Who is an employee and who is a student at the university?     [jump in page]   2017-10-23
  63. My computer has got a virus! What do I do?     [jump in page]   2017-09-25
  64. My Windows 7 computer is stuck in a Windows Update loop!     [jump in page]   2017-09-21
  65. How do I temporarily disable an update in Windows 10?     [jump in page]   2017-09-21
  66. How do I merge PDF documents with PDF-Xchange in Windows?     [jump in page]   2017-08-17
  67. How much memory does my Mac have? Can I get more? How much do I need?     [jump in page]   2017-08-16
  68. There is a problem with my screen     [jump in page]   2017-08-16
  69. I cannot read my USB-drive. What do I do?     [jump in page]   2017-07-19
  70. How do snapshots in the HNAS file server work?     [jump in page]   2017-06-22
  71. My Outlook do not start! What can I do?     [jump in page]   2017-06-12
  72. What is the cost of a PC file server?     [jump in page]   2017-06-02
  73. How do I change Windows offline files disk usage?     [jump in page]   2017-05-22
  74. How do I use offline files?     [jump in page]   2017-05-22
  75. How do I use Eduroam, the wireless network, in Windows?     [jump in page]   2017-05-17
  76. How to use WinSCP to access files over SCP on Windows     [jump in page]   2017-03-31
  77. How do I look in the event log in Windows?     [jump in page]   2017-01-24
  78. How do I activate my Office using KMS?     [jump in page]   2016-12-08
  79. How to downgrade to Java 7 for Windows     [jump in page]   2016-11-24
  80. How do I access my home directory?     [jump in page]   2016-10-10
  81. My Save as dialog doesn't show the desktop!     [jump in page]   2016-10-10
  82. How do I overwrite deleted data in Windows?     [jump in page]   2016-09-20
  83. How do I install EndNote?     [jump in page]   2016-03-07
  84. How do I access my work-computer from home?     [jump in page]   2016-01-22
  85. How do I start Primula? (or install a new version)     [jump in page]   2016-01-12
  86. Print using locked print on Windows     [jump in page]   2015-06-04
  87. How to create a local Windows user     [jump in page]   2015-05-26




1. GraphPad Prism, what does it cost?

See also: What software applications do the university have that I can install?

GraphPad Prism is a commercial scientific 2D graphing and statistics software for Windows and macOS.

Licenses

Search Progdist at UU Reload

Send a message to helpdesk@bmc.uu.se for help with installing GraphPad Prism.



2. How do I connect a private computer to the department network?

See also: What is my IP-address and MAC-address?
See also: How do I find the serial number on macOS?
See also: How do I change the Mac computer name, host name and NetBIOS-name?

The most common way to connect private computers to the university network is to use the wireless network Eduroam. Read more about Eduroam on the central university support pages. Printing is done via eduPrint.

Some departments allow connecting private computers directly on the department internal LAN, because it might be the only way to use the internal department printers not connected to eduPrint.

When that is the case, the following information is needed to be put in the inventory. Please send the answers in a mail (in the body (text) of the mail not as an attachment) to helpdesk@bmc.uu.se.

  1. Full name of user and e-mail address
  2. Research group leader
  3. Serial number
  4. Computer name (hostname - what you are calling the computer)
  5. Computer manufacturer and model
  6. Operating system (Windows 10, macOS 10.12.6, Ubuntu 17.04 etc)
  7. Procurement date
  8. Name of anti-virus software (if any)
  9. Current firewall settings - enabled or disabled or something else? (Are there any open services on the computer? Please close any file shares, printers and similar services that are not needed and keep a password on those that must be open. No anonymous guest login should be possible for the services on the the computer.)
  10. Computer MAC-address on the LAN port
  11. Has the computer installed the latest updates for the operating system (Windows, macOS, Ubuntu etc) and major applications (Microsoft Office, Firefox, Google Chrome, anti-virus etc)?

The information is needed because the security division at Uppsala University must be able to trace security incidents, virus and similar activity. The university rules require every computer to run adequate anti-virus software. We also need too know if too old and insecure operating systems are being used (Windows XP) and who we should contact if there are any questions.

When the computer is registered it can be used on any network socket connected to the department network.

How to find some of this in Windows (type in command line)

  1. wmic csproduct get IdentifyingNumber
  2. hostname
  3. wmic csproduct get name
  4. ver && echo %PROCESSOR_ARCHITECTURE%
  1. getmac
    ipconfig /all (find the physical address for the ethernet adapter)

How to find some of this in macOS (type in command line)

  1. ioreg -l | grep IOPlatformSerialNumber (Also see How do I find the serial number on macOS? )
  2. hostname
  3. sysctl hw.model
  4. sw_vers -productVersion
  1. ifconfig en0 | grep ether




3. How do I force activation of Windows 10 using KMS?

See also: How do I activate my Office using KMS?
See also: How do I start an elevated command prompt (as administrator) in Windows?

When updating Windows Pro 7 to Windows 10 activation may fail. The name of the university KMS-server has also changed a few times, making Windows computers using the old name get unactivated.

It may look like this:

How to activate Windows

  1. Connect to the university fixed network (ethernet).
  2. First start a command window as administrator.
  3. The command slmgr.vbs /ato should try to do an automatic activation if the computer is part of the Active Directory. If it is not part if the Active Directory you need to specify the KMS-server, see below.

  4. If that do not work, try to specify the activation server first with slmgr.vbs /skms kms.user.uu.se and then followed by slmgr.vbs /ato again.
  5. And if that do not work, try to reset the product key and then do an activation with the command slmgr.vbs /rearm.

  6. Display information about activation with slmgr.vbs /dli. It should look like this:

  7. You can also check when the license expires with the command slmgr.vbs /xpr.
  8. If things do not work, maybe the KMS-address has changed? You can also check the current address with the command nslookup -type=srv _vlmcs._tcp.user.uu.se. If that is the case, the address kms.user.uu.se should be changed to the new one. Please send mail to helpdesk@bmc.uu.se to let us know if this is the case. In the example below both reference to the same server which is correct.





4. May I have SIMCA and MODDE for Windows please?

See also: What software applications do the university have that I can install?

SIMCA is software for multivariate data analysis.

Modde is software for design of experiments and optimization

The university has a site license payed for by some departments that are using SIMCA and MODDE. In practice that means that SIMCA and MODDE are not payed for initially when installed but the departments and research groups that are using it has to pay when the site license is renewed. For this to be fair we need to keep track of every installation of the software. The computers that are using it are also tracked via the license server. The license server is currently handled by BMC-IT.

There are Zenworks bundles for SIMCA and MODDE, so check if it is available in the ZENworks application window for you. (Otherwise, ask for it and it can be added). There are also packages for SCCM as far as we know.

The current version of SIMCA 15 is included in the license. The current licensing period is from 2018-07-01 to 2019-06-30 and has already been payed for. The bill was for 75000 SEK divided by 38 users which gave a cost for each user at 1973 SEK/user. (2018-09-20)

Neither the total cost for the next licensing period nor the number of users are known.

Contact helpdesk@bmc.uu.se for help with licenses or manual installation. If you want to use the software send the username and e-mail of the new user.

The license server for SIMCA and MODDE is running on bmc-itws001.bmc.uu.se with the IP-address 130.238.40.9 and is listening on the ports 6201/TCP and 6200/UDP.



5. What is Argos?

See also: How do I map a network drive via SMB on Windows?
See also: How do I order a personal storage at Argos?
See also: How do I order a group storage at Argos?
See also: How do I connect to storage at Argos?
See also: How do I manage access to a group storage at Argos?
See also: Where do I store my data? How do I take backup?

What is argos?

"Argos" is the name of a secure server storage that is provided by Rudbeck-IT. Keep your data safe by storing your personal and group data there. Use the links above to read about how to order storages and use them.


Protection levels


Addresses

macOS
Personal storage:smb://argos.rudbeck.uu.se/MyFolder$
Group storage:smb://argos.rudbeck.uu.se/MyGroups$
Windows
Personal storage:\\argos.rudbeck.uu.se\MyFolder$
Group storage:\\argos.rudbeck.uu.se\MyGroups$




6. How does the reinstallation of Windows computers work at BMC-IT?

See also: What is the BMC-IT computer platform and how does it work?

These are instructions for installing Windows 10 x64 Enterprise via MDT 2013.

  1. Prepare installation
    1. Create USB flash drive
    2. Configuration for network boot
    3. Configuration of router filter
    4. Permissions for autojoin domain
    5. Hardware support
  2. Configure BIOS
  3. Starting install via USB flash drive
  4. Starting install via network
  5. Clearing partitions
  6. Continue with installing
    1. Select task sequence
    2. Fill in computer name and join domain
    3. Select applications
    4. Wait while installing
    5. Administrator password

Prepare installation

Create USB flash drive

  1. Get access to the installation directory through User-AD group bmc-autoadmin-group. Mail a mail to BMC-IT (helpdesk@bmc.uu.se) with your username and what you want.
  2. Get one or several 32 GB USB flash drives.
  3. Login on a Windows 10 computer with USB-ports as administrator.
    IMPORTANT: DO NOT HAVE A NETWORK DRIVE MAPPED TO G: H: I: OR J:!
  4. Reformat the USB flash drive with FAT32 file system
  5. Insert the USB flash drives (max 4 at the same time) in Windows 10 computer.
  6. Start a command prompt as administrator cmd (use CTRL and SHIFT to run as administrator from the prompt in the start menu)
  7. Run command: net use n: \\uuit-nasutus.its.uu.se\BMCIT-Common /user:user\account and login using your university account and password A.
  8. Run command: \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\scripts\MDT_FormatUSB.cmd \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\MDT-MediaMT

    This will format and erase all USB flash drives inserted in computer!

  9. Wait a long time. The faster the USB flash drives the better.
  10. Done!

Update USB flash drive

  1. If you already have done the above steps on a USB flash drive, you can choose to only update the USB flash drive by running command: \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\scripts\MDT_FormatUSB.cmd \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\MDT-MediaMT sync
    This will not format, just update the sticks with changed files.

Configuration for Network boot

For Windows DHCP it looks like this:


For ISC dhcpd it looks like this: from dhcpd.conf (this is using the central tftp.its.uu.se server)

 filename "bmc/pxelinux.0";
 next-server "130.238.7.37";
/tftpboot/pxelinux.cfg/default (already done)
PROMPT 1
TIMEOUT 100
DEFAULT l
DISPLAY msgs/boot.msg

LABEL l
      MENU LABEL ^Local Boot (default)
      LOCALBOOT 0

LABEL mdtmt
  MENU LABEL Windows MDT LiteTouchPE x64
  KERNEL memdisk
  APPEND iso initrd=LiteTouchPE_x64.iso raw

/tftpboot/msgs/boot.msg (already done)
Displaying tftp://tftp.its.uu.se/bmc/msgs/boot.msg from 130.238.7.37

 l        Local Boot (default)
 mdtmt    Windows 10 Enterprise x64

Pxelinux is coming from syslinux.org. It is included in most Linux-distributions.

The LiteTouchPE_x86.iso is located at \\BMCIT-Common.files.its.uu.se\BMCIT-Common\MDT\Boot\LiteTouchPE_x64.iso

Configuration of router filter

TFTP is using UDP. The request to the TFTP-server is sent on port 69/udp from any port. The TFTP-server at tftp.its.uu.se (130.238.7.37) is using UDP source ports 6900-6999 for responding.

Open up UDP, both directions, from host 130.238.7.37 to your clients. Usually this is all of your subnets. Send a request for this to netsupport@its.uu.se.

Permissions for autojoin domain

The account USER\bmc-autoadmin-mdt must at least have permission to Create Computer objects in the correct OU to be able to join automatically.

Hardware support

MDT 2013 based on Windows 10 have these requirements:

Microsoft has for Windows 8.1 dropped support for CPUs without the PrefetchW-feature. This includes the Pentium D 8xx CPUs hich are used in for example many Dell Optiplex GX620 desktops. So even if they have 4 GB RAM they cannot run the installation.

Some other Dell Optiplex with the slightly faster Intel Pentium D 9xx are working fine.

Check model with wmic csproduct get vendor, version

Configure BIOS

  1. Make sure you have the latest BIOS for the computer.
  2. Press F12 or F10 or whatever to enter BIOS. It depends on the computer model.

  3. To use UEFI-mode and install from USB flash drive, select:
    • Secure boot: OFF
    • Legacy boot: OFF
    • SATA mode: AHCI (not RAID)
    • UEFI boot order: Deselect USB flash drive

  4. To use Legacy-mode and install from network, select:
    • Legacy option ROMs: ENABLED
    • Secure boot: OFF

Starting install via USB flash drive

  1. Press F12 or F10 or whatever it is to be able to select boot source. It depends on the computer model.
  2. Choose to boot via USB. Some older computers might be limited to boot from an USB2-port. USB3 might not work on older computers.
  3. Continue with installing.

Starting install via network

  1. Press F12 when starting computer to boot via Network. If the Network adapter do not show PXE-booting may have to be enabled in BIOS.
  2. Choose to start MDT by typing M D T M T and pressing ENTER

  3. This will boot the netinstallation ISO over TFTP.
    If it do not work, boot via USB flash drive instead.
  4. Continue with installing (next section below).

Clearing partitions

If the installation stops because of a previous installation attempt or if something else is weird with the partition table, previously created partitions may be cleared manually.
  1. Press F8 during installation to start a command prompt
  2. diskpart
  3. sel dis 0
  4. cle
  5. exit
Diskart can also be used for unmounting a drive:
  1. Press F8 during installation to start a command prompt
  2. diskpart
  3. list volume
  4. sel dis 0
  5. remove all dismount
  6. exit

Continue with installing

  1. Select task sequence:
    • W10E is the normal Win10 Enterprise x64 deploy.

  2. Fill in computer name. The new computer name standard is first three letters for institution, then a dash and the computer serial number. The serial number is automatically read from the computer BIOS.
    USER\bmc-autoadmin-for-mdt must be given privileges to create new computer accounts in the USER-AD.
  3. If you are using a Virtual Machine then name the computer TLA - VM USERNAME. For me at BMC withe the username jny25782 I would name my first virtual machine BMC-VMJNY25782.

  4. Select what applications or other packages to install during installation:

  5. Wait up to two hours, but normally 20-30 minutes while the computer is running MDT for installing OS and applications.
  6. For computers in USER-AD at BMC the local administrator password is set by a GPO to a unique hash for each computer. Any locally set password will be overwritten.

    Without the GPO SetLocalPassAsMD5 the password will be set to bytgenast which means that you are responsible to CHANGE PASSWORD when the installation is done.

    Currently the algorithm looks like this: The serial number is upper case, cut to 11 characters, and padded by zeroes until 12 characters length, and then a secret password is added. The following works at the command line at macOS or Linux to create the password.

    macOS:

    echo -n SERIAL000000SECRET | md5 | head -c 12

    Scientific Linux, Ubuntu etc:

    echo -n SERIAL000000SECRET | md5sum | head -c 12






7. How do I print on EduPrint with LPD on Windows 10?

See also: How do I access my scans for eduPrint in Linux?
See also: How do I set up eduPrint for a Linux server?
See also: How do I print to eduPrint using LPD on macOS?

This solution pick the LPD username from the Windows user. You must use the same username on your Windows computer as the account you are trying to print to in EduPrint. Sorry about that, but I have not find any workaround for using local accounts with other names.

  1. Start the Control Panel

  2. Enter View devices and printers

  3. Enter Add a printer

  4. Pick The printer that I want isn't listed

  5. Pick Add a local printer or network printer with manual settings and then Next

  6. Pick Create a new port: followed by Standard TCP/IP port and then Next.

  7. Enter edp-uu-prn01.user.uu.se as the Hostname or IP address and for example EduPrint LPD as the name

  8. Wait a moment for Windows to time out while detecting ports.

  9. Pick Custom and enter Settings...

  10. Pick the Protocol LPR and then enter the Queue Name eduPrint-UU, check the option LPR Byte Counting Enabled and proceed with OK

  11. Proceed with Next.

  12. Choose the manufacturer RICOH and the Printer PS Driver for Universal Print and Next.

  13. This computer already have the driver so in this case just go Next.

  14. Name the printer for example EduPrint LPD
  15. Do not share the printer and proceed with Next

  16. Yoy may please Print a test page and then Finish.

  17. If everything works fine you should now be able to enter EduPrint on the web at Eduprint.uu.se your job should show up.

  18. This is how the new printer looks like when following this instruction.





8. How do I connect to storage at Argos?

See also: What is Argos?
See also: How do I order a personal storage at Argos?
See also: How do I order a group storage at Argos?
See also: How do I manage access to a group storage at Argos?
See also: How do I map a network drive via SMB on Windows?

The file server is currently only accessible within the Uppsala University network or from home using VPN.

Please use the guides at Rudbeck-IT portal “My Rudbeck” to see the different options to access the storage spaces.
Windows
Please note that Windows users with a BMC-IT installed computer should use the alternative "Access via server address" to connect to the storage. Learn more about how to map a network drive to your Personal Storage above.



9. Who is resposible for what on the BMC network? Who can help me?

See also: What Internet bandwidth does the university have?
See also: Which VLANs are at the campus BMC-router?
See also: How are the network sockets identified?
See also: How do I use an Apple AirPort Time Capsule?
See also: What do the different symbols in BlueCat mean?
See also: My Internet does not work! How can I find the problem?
See also: There is no wired network here - what to do?

Local IT

This may be you, your department, BMC-IT or client support at UUIT or any other organisation at the university, depending on where you work.

BMC-IT

Contact helpdesk@bmc.uu.se

UUIT

Contact Domainmaster (DNS/DHCP/TFTP), Netsupport (Network), IRT (Security) or UU helpdesk (everything else).

Responsibilities

These reflect how it is usually done, but are not carved in stone

  • All usage on the VLAN/subnet
  • Local security on the VLAN/subnet
  • Identity of the different computers
  • Request change in router filter
  • Physical network copper and fiber.
  • Buy switches
  • Request change of VLAN configuration of switch ports
  • Patch network in cross connect cabinets
  • Keep documentation of cross connect cabinet patches
  • May help Local IT track down rogue computers
  • Router and router filter (Netsupport)
  • Perimeter Firewall (Security division)
  • Install, configure, replace and maintain switches (Netsupport)
  • Security tracking (Security division)
  • TFTP, DNS and DHCP for UU (Domainmaster)
  • May help Local IT track down rogue computers (Netsupport and Security division)
Install a new network socket (or move an existing network socket) Installation of a new socket costs around 3000 SEK for a double socket. It depends on the amount of work. Several sockets in one room is less work (cheaper) per socket than one single socket. Please write the following information in the mail:

  • Room number
    Example A1:123d
  • Other requests
    Example right side, near the window
  • Who to charge (Kostnadsställe)
    Example 123ABC

If you want to connect the network sockets to the network (and not only telephone) then also supply:

  • Which VLAN at BMC you would like to use.
    Example Vlan680 "BMC-Data"
  • If you want one or two sockets to be connected. If you only want one, clarify which socket to activate.
    Example Left, right or both
Install a new fiber network socket Installation of a new socket costs around 8000-10000 SEK SEK for a double socket with two single-mode fiber connections. In total the cable has four fibers. The cost depends on the amount of work. Several sockets in one room is less work (cheaper) per socket than one single socket. Please write the following information in the mail:

  • Room number
    Example A1:123d
  • Other requests
    Example right side, near the window
  • Who to charge (Kostnadsställe)
    Example 123ABC

If you want to connect the network sockets to the network then also supply:

  • Which VLAN at BMC you would like to use.
    Example Vlan680 "BMC-Data"
  • If you want one or two sockets to be connected. If you only want one, clarify which socket to activate.
    Example Left, right or both

If you want to connect the fiber somewhere else at the university let us and Netsupport know what your plans are.

Directly connect two network sockets Two network sockets connected to the same cross connect cabinet may be directly connected with two patch cables in the cross connect cabinet. Just send an email to helpdesk@bmc.uu.se with the network socket and cross connect cabinet identifiers.
New power socket Talk to Bo Ejdesjö at BMC. Will cost money. Hyresgästanpassning.
New pillar with power and network sockets Talk to technical service at BMC. Free of charge AFAIK.
All about fixed telephone Talk to teleservice at university. Will cost money.

Activate Network Socket ()

BMC-IT does the cross connect cabinet patching and requests VLAN change.

Please write the the following information in the mail. (Read more in FAQ on how the network sockets are identified. If you do not know the VLAN maybe you have other equipment that using that VLAN? Send the IP- and/or MAC-address of that equipment and we can look it up.)

  • Cross connect cabinet identifier
    Example A1-D101-11-17
  • Network socket identifier
    Example A1.202:1
  • VLAN name or number
    Example Vlan664 "NEURO"
  • If it is a double socket identifier, clarify which socket to activate
    Example Left, right or both

Here is an example how a mail could look like:

Deactivate network socket Send a message to BMC-IT with the following information in the mail. (Read more in FAQ on how the network sockets are identified.)

  • Cross connect cabinet identifier
    Example A1-D101-11-17
  • Network socket identifier
    Example A1.202:1
  • If it is a double socket identifier, clarify which socket to deactivate
    Example Left, right or both
Change VLAN in an already activated socket Send the request to BMC-IT. Please write the following information in the mail:
  • Cross connect cabinet identifier
    Example A1-D101-11-17
  • Network socket identifier
    Example A1.202:1
  • VLAN name or number
    Example Vlan664 "NEURO"
  • If it is a double socket identifier, clarify which socket to deactivate
    Example Left, right or both

Here is an example how a mail could look like:

UUIT Netsupport will do the configuration of VLAN in switch.
Server room access in D11:0 May give temporary guided access Contact UUIT for permanent access to your rack
Faster network Upgrades to 1 Gbit/s are available in most cross connect cabinets. Request upgrade from Fast Ethernet to Gigabit by sending a mail to helpdesk@bmc.uu.se with the following information written in the mail:
  • Cross connect cabinet identifier
    Example A1-D101-11-17
  • Network socket identifier
    Example A1.202:1
  • If it is a double socket identifier, clarify which socket to upgrade
    Example Left, right or both
If you need 10 Gbit/s contact BMC-IT together with UUIT Netsupport. This is available in a few cross connect cabinets.
Order a new VLAN/subnet First find out how many IP you need
(Remember to fix DNS and perhaps DHCP, router filter settings, and possibly perimeter firewall settings)
BMC-IT may be aware of spare ranges or networks on the way of being decomissioned that can be reused. We do not want to create a lot of small VLANs if not needed. Contact UUIT Netsupport to get new subnet and VLAN assignments
Campus router filter settings (Cisco) Figure out what you need And let UUIT Netsupport configure the router filter
University perimeter firewall settings (Fortigate) Figure out what you need And let Security Division configure the firewall
DNS Local IT can do this but should not. Use the BlueCat IPAM system at UUIT.
DHCP Local IT can do this but should not. Use the BlueCat IPAM system at UUIT.
TFTP / PXE-boot Local IT can do this Use the UUIT TFTP-server.
Finding a rogue computer The responsibility belongs to Local IT Arpwatch service is available. Manual check in router and the Upunet Tracking Database (NetDB) service
Finding used and unused IP-addresses Keeping track of who is using what. Registration and removal of IP in DNS. Arpwatch service is available. Manual check in router, Bluecat (IPAM) and the Upunet Tracking Database (NetDB) service
Router and uplink bandwidth Linkstatus graphs available for BMC Netstat graphs available for UU
Magic network problems Contact your Local IT And then let Local IT contact UUIT Netsupport
My windows server does not work Contact your Local IT
Eduroam do not work on my client or in general Local IT may help with client configuration Broken wireless hotspots should be reported to UUIT Netsupport

Wireless (Eduroam) coverage is low in some rooms or corridors ()

Contact BMC-IT to discuss what can be done. All office corridors should have coverage, or at least they originally had. Over the years more and more equipment is using the wireless network or the free frequencies used by the wireless network for different purposes.
  1. BMC-IT can together with IT-division order more hotspots to get better coverage. This is a payed for by the tenant (department). Send a mail to helpdesk@bmc.uu.se with the following information
    1. A list of room numbers with low coverage
    2. Who to charge (Kostnadsställe) Example 123ABC

    An approximate cost would be 3000 SEK for the network socket and 5000 SEK for the wireless access point. Current delivery times are around two months for a new network socket to be installed and the wireless access point to be delivered and set up.

  2. With a start in 2018 the IT-division will upgrade the network at BMC to a new generation of wireless hotspots. Most of the switches and wireless hotspots will be upgraded. It will take some time for this to be completed.

  3. If you have a laptop computer with no ethernet port you can use a USB-adapter for attaching the wired network to the computer.

  4. Some laboratory instruments and door locks also use the same free frequences. It is not much we can do, the equipment manufacturers and the landlord / facility providers do not always have the same priorities as us (IT-support and network users).

UUIT Netsupport may together with BMC-IT install new wireless hotspots. This may cost money. All public rooms for students should have coverage.
I need a network cable Contact your Local IT
The IRT-group has disconnected my computer from the Internet! Contact your Local IT to fix your computer Let the Local IT contact the IRT-group to open the router filter when computer is fine.
My Internet do not work! Help! Check how to find the cause of the problem here. Finding configuration problems in the local computer is a job for Local IT. If it should work but get no link then perhaps switch port is broken. Contact helpdesk@bmc.uu.se.
If a network port has been unused (no link) for over 300 days the switch port may reused for something else. If you want unused connectors to keep being active you have to use them from time to time. This counter is automatically reset in the switch so the network socket just has to be connected with an active link for a short time.
This might be a magic network problem. Then contact UUIT Netsupport.

Sometimes the Security division may have blocked an IP. So if a specific IP do not work but others do then this may be the case. This may have happened years ago when an old unpatched computer was using that IP.





10. What should be done to introduce a new system administrator at BMC?

There are several different systems a new employee may get access to. This is not a complete list of all systems that should be given access to but rather a list of external systems that one should at least be aware of.

Some of these things have to be done before an employee start.

Some of this applies to more than just BMC so you are more than welcome to take a look. Please let us know if there are things we are missing.

Personal computer and work space

Get an office. Chair, table, network. Do you need an ergonomic adjustable table? Make a raid down to the BMC campus office supply cabinet and get some pens, a notebook, a scissor and other office stuff that you might need.

If you have a Mac, get an external hard drive to run local Time Machine backups.

Get a standard PC and/or Mac up and running with the standard installation. When you have a UU account, make sure you are a local administrator.

If you need to, get two USB-sticks, one with Windows (with MDT) and one with latest macOS so that you can reinstall computers. Be familiar with the instructions regarding reinstallation of Windows and macOS.

There is a Mac installation server available on the BMC-Data network. There is a PXE boot menu available on almost all networks where legacy (not UEFI) installations of Windows can be done. Also basic network boot options for installing CentOS, installing Ubuntu and running Memtest86 etc are available there.

Configure the computer to work with eduroam and duPrint. Make sure it works.

Order a home directory at My Rudbeck and use the Medfarm voucher to get it for free. Make sure you can access this storage on your computer.

Try out Filr the file sync system. Install the Filr client on your computer. Understand where data is stored. Make sure you can access the data both via Filr and directly.

Let your boss order a phone, either fixed phone or mobile.

Activate your access to the VPN service by following the instructions.

Work clothing

You may get your own fancy BMC/UU hoodie at Grolls. Or whatever work clothing you need for doing your job.

Administrator access

Apply for administrator access to the Local IT organisation in the Active Directory. This will control access to USER.UU.SE\BMC and USER.UU.SE\LocalIT\BMCI in the Active Directory. The terminalserver to use is called dcts.user.uu.se.

The group BMC Computing Department in USER-AD (sorry for the odd name of this group) control some access to different systems, including the file share \\BMCIT-Common.files.uu.se\BMCIT-Common aka \\USER.UU.SE\BMCI\Common.

The Zenworks system for management of Windows (just FYI)

The Munki system for managemnt of Mac (just FYI)

The Symantec server (just FYI).

Physical access

You need an employee key card. This will grant access to the corridors at BMC but not to other campuses.

You need a key to your office. Almost all offices at BMC campus management share the same lock and key.

After instructions, you may get access to the BMC computer room at D11:0.

The cross connect cabinets of BMC are locked with a special key which could be granted access via the BMC-administration if needed. There exists an extra key in the Nyckelpiga at the basement so one do not need a physical key all the time.

Network management systems

There are some network administrative systems that one should be aware of and maybe given access. This includes:

  1. NetDB (for IP / VLAN / Mac / Switch-port information) (Ask Netsupport for access)
  2. NetReg (for Vlan and router and router filter configuration)
  3. Bluecat (the IPAM system for DNS DHCP information) (Ask Servicedesk for access)

Medarbetarportalen

Login at Medarbetarportalen. Here you can find for example:

  1. Sympa - mailing list server. You may want to join these mailing lists:
    • bmc-it@lists.uu.se
    • da-info@lists.uu.se
    • it-forum@lists.uu.se
    Someone at BMC-IT have to add you to:
    • bmc-it@lists.uu.se
    You will be automatically added to:
    • bmc-int@lists.uu.se
  2. Primula Web - wage, vacation, sick leave, parental leave etc.
  3. Product Web - procurement
  4. Progdist - software licence server
  5. Akka-self service - how to change password and create guest accounts
  6. eduPrint - the printing system
  7. EasIT - the helpdesk system. This is the tool to handle support requests.

Documentation to read

Read the docs in the FAQ at http://it.bmc.uu.se/faq/ and SOPs at http://it.bmc.uu.se/sop/. You do not have to read everything but it is good to have an idea of what it is. Of special interest may be how to reinstall computers with Windows and macOS.

There are more docs at the INV-Common share as well.

Take a look at the central IT helpdesk documentation at mp.uu.se/web/info/stod/it-telefoni

Take a look at the environment and security web pages at BMC. Make sure you know the way to the recycle rooms and to the container for the combustible fraction.

New employee introduction

The university has intrductions to new employees. Book in the next scheduled event!

Wellness, waste and environment at BMC

There are a gym, table tennis room, showers and sauna at BMC. Read more at BMC - health. Please note that employees at Uppsala University get a small wellness subsidy every year which can be used for gym membership and other similar activites. Also when job allows you may have one hour of wellness activities every week on paid time.

There are a couple of in-service bikes at BMC, two normal and two are electical. Lend them at the reception.

In order to learn on how to handle waste on BMC, please read the documentation.

Please note that no smoking is allowed closer than 15 meters from any university entrance.

Welcome! :-)





11. How do I install telnet in Windows 10?

Run this to install the telnet client from the command line:

dism /online /Enable-Feature /FeatureName:TelnetClient

You can also open the Windows Features dialog and add from there. Search for Turn Windows features on and off to open it directly from the Windows menu.





12. How do I map a network drive via SMB on Windows?

See also: How do I mount my home directory or shared storage at HNAS?
See also: How do I access PCFS over SMB using smbclient?
See also: How do I use AddPrinterGUI to add printers in Windows 7/8/10 x64?
  1. Open the file explorer. Press Left Windows key together with E.
  2. Right click on my computer and choose Map network drive...

  3. Enter the network folder you would like to map. In this example \\filserver.uu.se\neuro
    Learn about server name and path to your home directory or shared storage at "HNAS" above.

  4. Enter your username and password. Please note that the Windows domain USER has to entered. Do not use my username jny25782 but your own username. Enter your password A.

Not working?

You may want to read about SMB Security Enhancements at Microsoft.



13. How do I connect to a file server via SMB on macOS?

See also: How do I mount my home directory or shared storage at HNAS?
See also: How do I install anti-virus software on macOS?
See also: How do I access PCFS over SMB using smbclient?
  1. In the Finder, choose connect to server... from the menu.
  2. Enter server name and name of the share, in this example smb://filserver.uu.se/neuro
    Learn about server name and path to your home directory or shared storage at "HNAS" above.


  3. Enter the Windows-domain USER, your username and your password A


    Problem and workaround with AD-connected macOS connecting to HNAS on some shares

    We have with macOS 10.12.6 had problems connecting to the HNAS service that he university in November 2017. By ignoring the Active Directory Kerberos but instead using old-school password maybe the problem go away. The way of fooling the Mac is to connect to the IP instead. Like this

    $ host bmci-users.files.uu.se bmci-users.files.uu.se is an alias for uuc-nas110.user.uu.se. uuc-nas110.user.uu.se has address 130.238.2.140 $

Another possible solution for this is to try using cifs instead of smb.

Just replace smb with cifs in the path. Read more about Cifs and SMB at Wikipedia.

Using the command line

Here are a few examples on how to mount on the command line

mkdir ~/Desktop/account mount_smbfs //user;account@TLA-Users.files.uu.se/TLA-Users$/account ~/Desktop/account

/usr/bin/osascript -e "try" -e "mount volume \"smb://jny25782@bmcit-common.files.uu.se/bmcit-common\"" -e "end try"

mkdir ~/Desktop/account open "smb://jny25782@bmcit-common.files.uu.se/bmcit-common/"





14. What is the BMC-IT computer platform and how does it work?

See also: What service levels does BMC-IT have compared to others at the university?
See also: Who manages IT-support for whom at BMC?
See also: What do the different symbols in BlueCat mean?
See also: Do you have a virtual machine (server) I can use?
See also: How does the reinstallation of Windows computers work at BMC-IT?
See also: We need more storage! Do you have a file server we can use?

The platform is the stack of software and infrastructure that BMC-IT use.

Goals for the BMC-IT work with the platform:

  1. Provide a well working platform environment for the end users.
  2. Listen to what the users need. Implement changes in the platform when possible.
  3. Work together with the university and use central systems whenever possible.
  4. Provide options for the users with different needs regarding management, storage and operating system.

These are the major components of the platform

UpUnet and internal campus network

  • backbone and router financed via IT-division
  • campus switches financed via BMC
  • maintained by IT-division
  • cross connect patched by BMC-IT

The network and maintenance is payed for by the rent. There are no extra cost involved. However new networks sockets have to be payed for by the tenant.

BlueCat

  • pushed for and initiated by BMC-IT via IPAM-talk on IT-forum
  • maintained by and financed via IT-division

BlueCat is a tool for IPAM, an interface to manage DHCP and DNS. BMC-IT are using whitelists in BlueCat to control what clients will get an IP on which networks. BMC-IT also using central TFTP (PXE) server maintained by IT-division.

BMC server room

  • owned via IT-division and BMC
  • maintained by Akademiska Hus
  • operated by IT-division with assistance by BMC-IT
  • financed by the users from the whole university

The server room is for use by the whole university. Servers BMC-IT maintain for the departments we give support too are paid for by the users of BMC-IT.

Microsoft deployment toolkit (MDT)

  • included in present licenses
  • maintained by BMC-IT

MDT is used for installation of Windows and an engine for software distribution (Zenworks) on client computers.

Munki

  • open source software
  • maintained by BMC-IT

Munki is used for software distribution on Mac. Munki does one thing, program and configuration distribution, and does that very well.

Microsoft Active Directory

  • maintained by IT-division

The client computers are joined to the Active Directory providing authentication and directory services.

OCS Inventory

  • maintained by BMC-IT

Light weight inventory of software and hardware. Currently run in Mediateket (student computer laboratories) and some Linux servers at BMC.

Zenworks

  • maintained by Uppsala University

Zenworks is used for software distribution on Windows. Packages that BMC-IT uses are mostly built by BMC-IT but some are shared over the university.

HNAS file server

  • owned and maintained by IT-division
  • financed by the users

Better storage. Cost 7000 SEK/TB/year (7 SEK/GB/year) in steps of 500 GB. Offline files may be used for access of Documents and Desktop, but not shared group folders.

PCFS (Archive storage)

  • owned maintained by BMC-IT
  • financed by the users

In the price range of cloud storage. Simple storage with compression, snapshots and rsync to secondary server. The solution can handle tens of millions of files with hundres of snapshots with snapshots for over a year.

OwnCloud sync storage (In development)

  • open source software
  • maintained by BMC-IT

Syncronized storage, similar to Dropbox in functionality. Currently used by a single department.

IBM Spectrum Protect tape backup

  • owned and maintained by IT-division
  • financed by the users

IMB Spectrum protect is a enterprise standard backup and recovery system maintained by IT-division for the whole university. It is not very fast for many small files, in particular when backing up tens of millions of files incrementally.

Shared parts of the platform and comparison with some of the other platforms at UU made in 2018

SUNET highed BMC-IT EPI UADM UUIT RBL-IT POL-IT EBC UUB EKIT GT BLAS
info / contact JNvB JNvB BB various CR HH SÅ+BG EL AL
server room 3000 SEK/U/y BMC server room BMC server room
BMC server room
UUIT
BMC server room
Ångström
ITC + Ångström EBC
CAR
BMC server room
Ekonomikum
virtual machine platform Openstack KVM
UUIT VMWare VCenter ESXi
KVM
Microsoft Datacenter Hyper-V UUIT VMWare VCenter ESXi RUD-IT VMWare VCenter
Cloud­system OpenStack
POL-IT VMWare VCenter ESXi
EBC VMWare VCenter ESXi
UBIT VMWare VCenter ESXi
KVM
MS Hyper-V
network infra­structure Cisco Cisco
Fortinet
Cisco
Cisco
Fortinet
HP
Cisco
Cisco Cisco Cisco
IPAM solution BlueCat BlueCat BlueCat
Bluecat
ISC DHCP
?
BlueCat
ISC DHCP
BlueCat BlueCat
tape backup solution IBM Spectrum Protect IBM Spectrum Protect IBM Spectrum Protect IBM Spectrum Protect Arcserve IBM Spectrum Protect IBM Spectrum Protect IBM Spectrum Protect
main client storage
UUIT Hitachi NAS (HNAS)
RBL-IT EMC Isilon
Microsoft Windows Storage Spaces UUIT Hitachi NAS (HNAS) RBL-IT EMC Isilon HP 3Par NetApp UBIT SAN EKIT SAN
sync storage SUNET box
Windows offline files
OwnCloud
UUB Micro Focus Filr
Windows work folders -
dat­Anywhere
Micro­focus Filr (2018)
Micro­focus Filr Windows offline files UUB Micro Focus Filr
Micro Focus Filr
SUNET Box
software distribution and inventory
SCCM
Jamf Casper Suite
Munki
Micro Focus Zenworks
Munki
OCS Inventory
SCCM
Jamf Casper Suite
- LanRev Micro Focus Zenworks Micro Focus Zenworks
Micro Focus Zenworks
Mobile Manage­ment
Micro Focus Zenworks
anti-virus software POL-IT SEP SCEP System Center Endpoint Protection - RUD-IT SEP POL-IT SEP (Windows)/ FortiClient (Mac) F-Secure F-Secure EKIT SEP
printing system eduPrint
eduPrint
direct print
? eduPrint eduPrint
eduPrint
direct print
eduPrint
eduPrint
direct print
Gespage
eduPrint
signage Xibo ? ? Samsung ? ? ? EKO-sign
number of computers in USER-AD 1174
bmc- fbv- farmbio- icm- ifv- ikv- imb- neuro- inv- isp- kmb- mcb- sll- mms- !inv‑opht !inv-srv00
2841
epi- ep- uadm- ucr- ilk- farmaci- nai- far-
- 1240
surgsci- igp- rud- rudb- inv-d0 inv-l1 imv- inv‑opht-
996
itc- mat- pol- fys- ang- kem- it- pol- polb-
335

ebc-
574
uub-
504
eki- kug- eh- fek- im- obs- kg- stat- nek-
624
psy- ipb- peki- uue- ipbs- bla- edu- did- fba- ffs- pu- kuup- ped-




15. My Windows computer is running out of storage. What is using it?

See also: My Android device is running out of storage. What is using it?

Wikipedia has a list of disk space analyzers. Disk space analyzers do a scan of the file system and display what is using up all the resources.


After installation it will scan the hard drive and display a nice window that looks like a file manager. It will display the size for every directory and the contents in it.






16. My Internet does not work! How can I find the problem?

See also: How are the network sockets identified?
See also: How do I configure my resolver on a Linux machine?
See also: Some Cisco switch commands
See also: What is my IP-address and MAC-address?
See also: Who is resposible for what on the BMC network? Who can help me?

What network are you using?

  1. First check - are you trying to connect via the Wireless Network or the Wired network?

The wireless network:

  1. Do not use UpUnet-S
    Make sure you are not using UpUnet-S. UpUnet-S has a captive portal and require login. Forget that network.
  2. Connect via Eduroam
    I will not go into details regarding how to configure Eduroam, but begin to read more about it here: Internet access with eduroam
  3. Do you not have coverage?
    • In student areas - order new Wi-Fi hotspots via Netsupport. In department areas, the department has to order and pay for them.
    • Use the wired network instead.

The wired network:

  1. Do you not have a link?
    If no link, check network cable. Throw away and destroy faulty Ethernet cables, even if only the little retainer tab is broken.

  2. If the link is down - has the network socket never been used before? Or was it a very long time ago since it was last in use?
    Contact your Local IT and activate the network socket. If there has been a switch upgrade in the cross connect cabinet recently, only the patch cables for the network sockets (or rather the switch ports) that has been used in the last year has been moved over to the new switch. If that is the case the network socket has to be activated again.
  3. Is the switch out of order?
    If the network socket suddenly stopped working with no link, maybe the switch is broken. Did the network suddenly go dark in some parts of the corridor and not on others? Then this may be the case. Contact helpdesk@bmc.uu.se.
  4. Is it really the network that is broken and not the computer?
    Try the network socket with another computer that is working with another network socket. This can help to identify whether the network socket is not working or if the problem is somewhere in the computer.
  5. Is the power out in the network cabinet?
    If Internet suddenly stopped working - it does happen that the power is out. It is not very common. The cross connect cabinets are usually located in the same part of the building that the lab or office housing the network socket. So go check if power is out. Are the lights on? If the power is out, just wait, Akademiska Hus is almost always already working on it.
  6. Do you have an IP-address?
    Check with ifconfig (Mac/Linux) or ipconfig (win). The IP-address should usually begin with 130.238 if you are at the university.
  7. Do you get intermittent link flaps?
    If the link sometimes goes down but not all the time this may be the case. Maybe the switch has put the switch port in link flap error disabled and then after a timeout period turn the switch port on again. Send message to helpdesk@bmc.uu.se or netsupports@its.uu.se.
  8. Are you on the correct VLAN? (1)
    If you get a link but do not get an IP-address you may be on the wrong Vlan. You can listen on the network to see what traffic there is. Then you can quite often figure out whether you are on the correct subnet or not. This can be done in Linux with sudo tcpdump -n -i eth0 or on Mac with sudo tcpdump -n -i en0. (The network interface names may differ - check the names with ifconfig) For Windows Wireshark is a bit overkill but should work as well.
    As an administrator you can search for the MAC-address in NetDB to see how the switch port is configured.
  9. Are you on the correct VLAN? (2)
    If you have a static IP, you have link, but cannot reach the gateway you may be on wrong Vlan. This may be due to switch upgrades or wrong configuration of the switch. Se above for possible ways of diagnosing this.
  10. Does the switch have that VLAN in the trunk?
    If the VLAN is correct, the link is up but everything is silent, check if the port is the first port with that VLAN on the switch. If so then maybe the trunk is missing that particular VLAN. Let Netsupport add the VLAN to the trunk.
  11. Is the DHCP-server out of free leases?
    If you have a link but do not get an address via DHCP then perhaps the DHCP-server are out of leases for your VLAN. You must contact your Local IT (which could be helpdesk@bmc.uu.se or someone else) to check what is going on. If it looks there are free leases but when it still do not work let the Local IT send a request to servicedesk@uu.se and ask for DHCP-server-logs for that particular MAC-address.
  12. Is the computer in the whitelist?
    If this is the first time you are connecting this particular computer, maybe your computers MAC-address has not been included in the DHCP whitelist. This is a list of computers that are allowed to connect to the network. Again you must contact your Local IT (which could be helpdesk@bmc.uu.se or someone else) to check what is going on.
  13. Does the network not have a DHCP-server at all, or maybe a local one?
    You have to check how your department has set up the network. On some networks, by historical reasons, the IP adresses are still distributed manually. Please contact your local IT-support. (The local IT may be, or may not be, be BMC-IT.)
  14. Is the default gateway address wrong?
    Do you have a gateway? route print (Windows), ipconfig (Windows) netstat -nr (Mac) or route (Linux). If you got an IP-address but cannot reach the gateway maybe there are old firewall rules that are blocking your IP. Check with your Local IT (which could be helpdesk@bmc.uu.se or someone else) and then let them check with Netsupport or Security Division.
  15. Can the gateway be reached?
    Ping the gateway! First check what the default gateway is and then ping it. Example: ping 130.238.39.193...

  16. Can you reach outside the gateway (router)?
    Test to ping Google resolver ping 8.8.8.8
    If this is not working this might also be a problem with router filters or firewall rules.
  17. Does DNS resolving work?
    1. Check the configured resolvers with nslookup www.uu.se
    2. Check if you can reach the UU resolver with nslookup www.uu.se 130.238.7.10
    3. Check if you can reach Google resolver with nslookup www.uu.se 8.8.8.8 or nslookup www.uu.se 8.8.4.4
  18. Are the network settings correct on the computer?
    Check Internet settings. Here is a guide at Microsoft for Windows.

    Check DNS-server settings. The Uppsala University resolvers (nameservers aka DNS-servers) are 130.238.7.10, 130.238.4.11, 130.238.164.6. (They should have the common name resolver.uu.se.) If you are using DHCP it should look like this:

  19. Does the computer work on another IP?
    if you are using a static IP you can try to use another free IP (check with your Local IT before using another IP). If that does work then:
    1. Maybe the IP you are trying to use is already in use. Please check arpwatch/NetDB.
    2. Maybe the IP is blocked in the university firewall. Please check with Security division.
  20. Is this a virtual machine that has been cloned?
    Check that you are using a unique MAC-address and unique IP-address for the cloned virtual machine. Otherwise the cloned machines will steal the addresses from each other which will make the network work erratically.

Windows specific fixes when all else fails

  1. Reset TCP/IP-stack
    If most things look OK but the computer can not connect to Internet anyway, they maybe the TCP/IP-stack needs to be reset. In Windows 7/8/10the command for doing this (as an administrator) is netsh winsock reset. Follow up by a restart of the computer.

  2. Reset firewall rules
    To reset the firewall rules in Windows 10/8/7/Vista type netsh advfirewall reset as an administrator at the command line.

For administrators

It could be of help to find out this information about the computer for a more efficient troubleshooting:

  1. Look up the computer login logs for standard Windows clients. Search for the user and the computers. Here you can find the computer name and the username.
  2. Look up the computer name in Active Directory. In the description you can find the computer model and the MAC-address used for installation.
  3. Look up the MAC-address in NetDB. Here you can find the IP-address, swith name and switch port.
  4. Look up the MAC-address in IPAM (BlueCat). Here you can find if the computer is in a DHCP whitelist or any other DHCP-configuration related to the computer.
  5. Look up the IP-address in NetReg. Here you can find VLAN number and VLAN name and the ACL (router filter) for the VLAN.
  6. Look up the Switch and SwitchPort in the network documentation Excel-sheets at BMC. Here you can find the cross connect cabinet ID and network socket ID.
  7. Look up the MAC-address in Arptrack. Here you can find previous arpwatch log entries.




17. How do I use port forwarding and SOCKS-proxy in SSH?

See also: What is VPN?
Let us assume that there is a service on a server listening to a local port 8787.

Port forwarding using PuTTY in Windows

"c:\Program Files (x86)\PuTTY\putty.exe" -L 8787:localhost:8787 youraccount@server.department.uu.se

PuTTY can of course also be configured using the GUI.

Port forwarding using OpenSSH in Linux and macOS

ssh -L 8787:localhost:8787 youraccount@server.department.uu.se

SOCKS-proxy using PuTTY in Windows

Also be aware that you can use PuTTY and OpenSSH as a SOCKS-proxy which can be used to access arbitrary ports.

"c:\Program Files (x86)\PuTTY\putty.exe" -D 9999 youraccount@server.department.uu.se

SOCKS-proxy using OpenSSH in Linux and macOS

ssh -D 9999 youraccount@server.department.uu.se

Acessing the SOCKS-proxy from the web browser

Let your web browswer be configured to use this SOCKS-proxy.

Firefox is configured in Preferences, General and Connection Settings like this:

Chrome can be started with the SOCKS-proxy as a command line argument. This example is in macOS:

open /Applications/Google\ Chrome.app --args --proxy-server="socks5://localhost:9999"

Will it work?

Then start the web browser and go to a web page which displays where you are connecting from.

It looks like you right now are using IP 54.146.98.143 but you can go to What is my IP-address and MAC-address? in this FAQ or perhaps www.whatismyip.com.

In the screenshot to the right I have connected to UPPMAX over SSH and proxied my browser via that server.

This can be useful for working with the Bianca system (see step 2). Please note that you are personally responsible for fullfilling any security requirements required for your local computer, your work process or how you access the data.

Here is an example on how to on macOS connect to Bianca at UPPMAX graphically with Chrome. The first command opens a SOCKS-proxy on Rackham via SSH but do not run any command and put the process in the background. The second command start Chrome and uses that proxy.

ssh -D 8888 rackham.uppmax.uu.se -N -f open /Applications/Google\ Chrome.app --args --proxy-server=socks5://localhost:8888 https://bianca.uppmax.uu.se

Please note that using a SSH Proxy like this will not protect your local IP from the web server due to how WebRTC is leaking the local IP. This do not protect against DNS leaks either.




18. Where do I store my data? How do I take backup?

See also: How do I manage access to a group storage at Argos?
See also: How do I connect to storage at Argos?
See also: How do I order a group storage at Argos?
See also: How do I order a personal storage at Argos?
See also: What is ransomware and CryptoLocker?
See also: We need more storage! Do you have a file server we can use?

Strategy

The general idea is to focus on where you store your data instead of how you take backup of your data. You have to be aware of where your data is stored!

Ideally the computer should not need to be backed up - all data should be on a secure file server. If the computer breaks down it should be possible to just grab another computer, login and access the data. Most standard software and configuration should be easy to reinstall.

Where do I put my data

Make sure you store your data safely on a secure file server. Check with your IT support organisation which file server you should use. Recommended file servers are "HNAS" and "Argos".

How do I work with my data?

Mount your storage folder on your local computer and work directly with the files on the file server. If you need to access the data when not at the university, you can connect to the university network via VPN and then mount the storage folder.

Guides for connecting to the file server and mount a storage folder on your local computer:

But I need all my data on the client!

Do you really? We do not recommend this, but sometimes, this is the only solution that works. In that case:

What do I do now?

Check if your computer was backed up with Retrospect or Time Machine (over the network). These services are no longer available and if your computer was configured to use them you need to make sure your data is secured in another way:





19. How do I uninstall old Adobe software and remove old license information?

See also: How does the new Adobe Creative Cloud Named license model work?
See also: How do I change from an Adobe Device license to a Adobe Named user license?
See also: How do I sign my documents with an electronic signature?

Uninstall old software

Before you install the latest version of the Adobe software you need to remove the old software and all information about the old license from the computer.

Problem

If you uninstall old Adobe software in the above manner and then install An Adobe Creative Cloude application using a Named User license, a problem can occur with not getting the correct license loggin in to Creative Cloud.

Symptom

When logging in to Adobe Creative Cloud Desktop Application the tab "Apps" is missing. "Apps" is the tab you use for installing and updating all of your licensed Adobe CC Software.

Solution

macOS

Windows





20. How do I find specific files like the last updated, the one with the longest file name, or the largest one?

See also: How do I compare the content of two directories?
These tools work on Linux (Ubuntu/CentOS/etc) and probably on macOS too.

Find the most recently updated file

Here is a small script that displays the most recently updated files in a directory. In the example this FAQ entry was the most recently updated!

$ find . -type f -print0 | xargs -0 -P 1 stat --format '%Y :%y %n' | sort -nr | cut -d: -f2- | head -3 2018-04-27 08:55:47.517999369 +0200 ./last.updated.file.txt 2018-04-27 08:54:07.277999790 +0200 ./last.updated.file.txt~ 2018-04-27 08:51:50.658000281 +0200 ./compare.directories.txt $ _

Find the number of files and the file with the longest file name

This little script display the number of files in the current directory, the character length of the longest file name and the name of that file. There were in total 219 files and the longest filename has 49 characters in the path was ./how.to.map.network.drive.via.SMB.on.Windows.txt.

$ find . -type f | awk 'BEGIN{N=0} {N=N+1; if ( length > L ) { L=length ;s=$0 } }END{ print N" "L" "s }' 219 49 ./how.to.map.network.drive.via.SMB.on.Windows.txt $ _

Find the files with the longest file names

This little snippet just find print the files with the longest names:

$ find . -type f | while read ; do echo ${#REPLY} $REPLY ; done | sort -nr | head -3 45 ./how.to.map.network.drive.via.SMB.on.Windows 33 ./windows.office.force.activation 30 ./win.default.printer.settings $ _

Find the largest files

This will list the largest files. It will print a list of all files, in parallell do a stat on them, sort the list and then print the largest ones.

$ find . -print0 -type f | xargs -0 stat -c "%s %n" | sort -rn | head -3 23637 ./network.8021x 20285 ./platform 18051 ./network.help $ _





21. How do I take backup of the data on my computer?

See also: Why use the university central storage (HNAS)?
See also: How to use the IBM Spectrum Protect (Tivoli Storage Manager aka TSM)
See also: How do I overwrite deleted data in Windows?
See also: Backing up via Rsync to Btrfs snapshots
See also: What about the GDPR?

Option 1: Keep all data on file server and let the system administrators take backup

K R T
332

Option 2: Keep all data on the computer and take backup on your own

Discuss with helpdesk@bmc.uu.se if you need advice in this or help buying extra hardware or order storage space on a file server.



22. We need more storage! Do you have a file server we can use?

See also: How do the different types of storage compare to each other?
See also: How do I mount my home directory or shared storage at HNAS?
See also: How do I map a network drive via SMB on Windows?
See also: What is the cost of a PC file server?
See also: Backing up via Rsync to Btrfs snapshots
See also: How do I use an Apple AirPort Time Capsule?
See also: What is the BMC-IT computer platform and how does it work?
See also: What about the GDPR?

UUIT HDS NAS file server (HNAS)

K R T
332

The university has a common file server service run by IT-division running Hitachi NAS called file area (filarea)

In general order by contacting IT-division or contact helpdesk@bmc.uu.se if your department is already using the service.

BMC-IT PC file server (PCFS)

K R T
221

The PC file server storage service is a cost-efficient storage solution for mostly high volume archive data. It is built of commodity PC hardware (which means the hardware can be replaced with equipment from other vendors) and open source software (no hidden costs or support agreements). This gives us freedom and a low price but it also means that we are on our own.

The concept is from around 2010 where it was used for two departments. The service was originally built in 2016 for users at BMC who do not have to own their storage but since it is self-sustained it may be used by everyone at the university.

The setup is fully documented in SOP - Install PC file server, SOP - Common service PC file server and SOP - Rsync backup to Btrfs snapshots. This means you can set up a very similar setup using the same concept on your own if you want to.

Order by contacting BMC-IT at helpdesk@bmc.uu.se.

RBL-IT EMC Isilon file server (Argos)

K R T
331

(The KRT-value 332 requires Gold-level.)

Everyone at the university may use the Rudbeck-IT file servers running EMC Isilon. Technical Specifications Guide - Dell EMC Isilon OneFS and IsilonSD Edge.

For ordering please contact RBL-IT helpdesk@rudbeck.uu.se with this information:

Connect use Windows: \\argos.rudbeck.uu.se\MyGroups$

Connect use Mac OSX: smb://argos.rudbeck.uu.se/MyGroups$

UPPMAX

K R T
???

Uppmax has storage which is free if you have applied for and been granted resources. Please go to www.uppmax.uu.se to figure out what UPPMAX can do for you.






23. How do I mount my home directory or shared storage at HNAS?

See also: How do snapshots in the HNAS file server work?
See also: We need more storage! Do you have a file server we can use?
See also: How do I map a network drive via SMB on Windows?
See also: How do I connect to a file server via SMB on macOS?
See also: How do I mount SMB share in Linux?
See also: How do I access my home directory?
See also: What is the point with the zone files.uu.se?

For Windows clients in USER-AD your home directory and the department common (public) share will automatically be mounted when you login using the drive letters below.

This storage is in the university shared HNAS file server. Some departments also have other storage available - contact helpdesk@bmc.uu.se for details.

  1. Please select your department:

    DepartmentAcronym
    Biomedical Centre Campus Management
    Department of Cell and Molecular Biology
    Department of Medical Biochemistry and Microbiology
    Department of Medical Cell Biology
    Department of Neuroscience
    Department of Pharmaceutical Biosciences
    Department of Public Health and Caring Sciences
    International Science Programme (ISP)
    . . .
  2. Please enter your username here:


    PurposePlatformDFS-pathDirect path Driver letter
    Home directory for personal files Windows \\user.uu.se\BMCI\TLA-Users\account \\TLA-Users.files.uu.se\TLA-Users$\account X:
    Mac smb://account@user.uu.se/BMCI/TLA-Users/account smb://user\account@TLA-Users.files.uu.se/TLA-Users$/account
    Common (public) share for department,
    research groups etc.
    Windows \\user.uu.se\BMCI\TLA-Common \\TLA-Common.files.uu.se\TLA-Common$ P:
    Mac smb://account@user.uu.se/BMCI/TLA-Common smb://user\account@TLA-Common.files.uu.se/TLA-Common$
  3. Sometimes you want to mount via the command line.

    • Windows, command line version on mapping a network share:

      net use x: \\TLA-Users.files.uu.se\TLA-Users$\account /user:user\account

    • macOS, command line version on how to connect to a file server:

      mkdir ~/Desktop/account
      mount_smbfs //user;account@TLA-Users.files.uu.se/TLA-Users$/account ~/Desktop/account

    • On Linux, command line version on how to mount a CIFS file system:

      mkdir ~/Desktop/account
      sudo mount -o username=account,domain=user -t cifs //TLA-users.files.uu.se/TLA-users$/account ~/Desktop/account

  4. Also read in the SOP - Connect a Mac to HNAS (v1.0).pdf or follow the links to other FAQs above on how to use the Windows Explorer or Mac Finder GUI. Remember to use the VPN if you are connecting from outside the university network.

    Connect from Mac

Problems with accessing the shared folders

A common problem may be that your account has not got the correct permissions called group membership in AKKA, the university catalogue. Please then contact your department administration to get this fixed.



24. How to connect with VPN using AnyConnect in Windows

See also: What is VPN?
See also: How do I set firewall rules in Linux to block SSH?
See also: How to connect with VPN using AnyConnect in macOS?
See also: How do I connect to the VPN using Ubuntu?
See also: What is my IP-address and MAC-address?
  1. First you must apply for a VPN account.
  2. Start Cisco AnyConnect Secure Mobility Client.
  3. Enter vpn.uu.se and press Connect.

  4. Enter Username and password A and press OK.

  5. When connected it should briefly look like this.

  6. Open the client again by for example clicking the little icon in the toolbar.

  7. Disconnect by pressing Disconnect.





25. What is my IP-address and MAC-address?

See also: How to connect with VPN using AnyConnect in Windows
See also: How do I connect to the VPN using Ubuntu?
See also: How do I connect a private computer to the department network?
See also: My Internet does not work! How can I find the problem?

The easiest way to see what IP your computer or phone is currently using when contacting Internet is to go to a web page that displays it.

How to look up the local IP-address on different operating systems:

Your local IP-address may be translated into another external IP-address over a router using NAT (network address translation).

  1. macOS
  2. Linux
  3. Windows

1. macOS

On a Mac this is also displayed in System Preferences:

  1. Open the Network tab in System Preferences and go to active interface to see the IP-address. Example 130.238.39.228

  2. Open Advanced. The IP-address is displayed again.

  3. Check MAC-address in Advanced. Example a8:20:66:19:5b:b8

2. Linux

For Linux (or macOS) open a terminal and type ifconfig or ip addr list.

3. Windows

For Windows, open a command window and type ipconfig /all

Example: IP-address is 130.238.39.229 and MAC-address is 08:00:27:27:06:ad

The command getmac also display the currently used MAC-address.





26. How much do Adobe Photoshop and Illustrator cost?

See also: Why did my Adobe licenses stop working?
See also: How does the new Adobe Creative Cloud Named license model work?
See also: How do I install Adobe CC Complete (Photoshop, Illustrator...) in Windows?
See also: What software applications do the university have that I can install?
See also: How do I merge PDF documents with PDF-Xchange in Windows?
See also: How do I merge documents with Preview in macOS?
See also: How do I sign my documents with an electronic signature?

Short story: This is how much the Adobe applications cost

Application Cost (updated 2017-09-18)
Adobe Acrobat Pro 818 SEK (perpetual license - one-time fee)
A single application (example: Photoshop or Illustrator) 444 - 996 SEK/year depending on app
Adobe Complete (all applications) English 1620 SEK/year
Adobe Acrobat Reader free

Search Progdist at UU Reload



Search Progdist at UU Reload

Long story:

You can rent the whole suite from Adobe called Creative Cloud for teams All Apps which contain the following applications:

You can also rent a program as Single-App, but that cost is more than half of renting All Apps.

This means that it will be less expensive to rent the entire suite if you are interested in more than one application.

The applications below are possible to rent as Single-Apps (note that Acrobat Pro and Photoshop Lightroom are not possible to rent as Single-Apps):

Notice that Acrobat Pro is not required to read PDF-files, fill PDF-forms or create PDF-files. This is possible by combining the freeware Acrobat Reader and Microsoft Office.

Some of you may consider finishing your Adobe Campus UU licenses to reduce cost. The Adobe applications must then be removed from your computer. In some cases certain applications can be replaced with earlier versions if they have been bought (not rented). There is no guarantee for how long earlier Adobe versions continue to operated since they may become incompatible with newer versions of Windows and Mac OS.

The applications probably contain report functions allowing Adobe to identify and count computers within UU using their applications and relate that to the number of paid licenses. It is therefore risky to keep Adobe applications without paying for the new license. Such cheating may lead to financial claims from Adobe.

There are some free alternatives to the Adobe applications but no perfect replacements. Here are some suggestions:

ApplicationAlternativePlatform
Photoshop GIMP Mac OS, Windows, Linux
Illustrator Inkscape Mac OS, Windows, Linux
Draw.IO (simple block diagrams) Web
InDesign Scribus Mac OS, Windows, Linux
Acrobat Pro Acrobat Reader (to read PDF and fill forms) Mac OS, Windows, Linux
PDFCreator (to create PDF by "printing" from other applications) Windows
PDF-Xchange (create, edit, merge PDF) Windows
Word 2013 (to open PDF, edit and convert to Word) Windows
PDFsam (to combine, divide and rotate PDF-documents) Mac OS, Windows, Linux
AbleWord (to open PDF, edit and convert to Word) Windows
CutePDF (to create PDF by "printing" from other applications) Mac OS, Windows, Linux
PDFtk Server (command line tool to manipulate PDF in many ways)Mac OS, Windows, Linux
Dreamweaver We have found no direct replacement, but here is a list of 10 alternatives to Adobe Dreamweaver. Also read the Wikipedia page of Comparison of HTML editors - general information.




27. How do I copy many files in Windows using Robocopy?

See also: How do I really delete a directory and files in Windows?
See also: How do I start an elevated command prompt (as administrator) in Windows?
Robocopy is a built in command line tool in Windows to copy files. when it cannot read a file because of any reason, like the file is locked or unavailable, it can retry.

Mirror a directory into another

This deletes destination files that are not in the original.

robocopy g:\myfiles h:\myarchive /MIR /R:2 /W:1

Copy a directory into another

This just copy the files.

robocopy g:\myfiles h:\myarchive /E /R:2 /W:1

If you are copying junction points in Windows you may not want to follow them in order to not loop and fill up the destination. By using /MIR instead of /E files that are not in the source will be deleted from de destination.

j: mkdir backup-2018-11-27 robocopy c:\ j:\backup-2018-11-27\ /MIR /XJ /R:1 /W:1





28. How do I start an elevated command prompt (as administrator) in Windows?

See also: How to change language in Windows 10 Enterprise
See also: How do I activate my Office using KMS?
See also: How do I force activation of Windows 10 using KMS?
See also: How do I really delete a directory and files in Windows?
See also: How do I copy many files in Windows using Robocopy?
  1. Start a command interpreter window by entering cmd in the search prompt.

  2. Launch by pressing CTRL SHIFT and ENTER at the same time.

  3. Answer Yes to run as administrator.

    It should look like this for Windows 7:

    And like this for Windows 10:

  4. If everything works fine you are running as administrator. The Window title bar should contain the text Administrator:.

    It should look like this for Windows 7:

    It should look like this for Windows 10:

It does not work! What do I do now?

  1. Make sure you are connected to the university network. Then restart computer.

  2. Make sure you are using your employee account and not your old student account.

  3. If you need to be local administrator, send a mail to helpdesk@bmc.uu.se where you specify your computer name and your account name. We can then add you as a local administrator, after we have confirmed that it is your computer. Then restart computer.

  4. If it does not work anyway, restart computer again. When the computer restarts it should read the group policy which adds the members in a group in the Active Directory to that computers local administrators.

  5. If the group has been created and populated with members and it still do not work? Run the command gpupdate /force in a command window to force the computer to update the group policy if this was not done automatically. It may look like this. Answer y and enter to logoff. Then login and try again.





29. How to change language in Windows 10 Enterprise

See also: How to change language in Windows 7 Enterprise
See also: How do I start an elevated command prompt (as administrator) in Windows?

Please follow the instructions from Microsoft to Add and switch input and display language preferences in Windows 10.

There is however a way of doing this (or at least some of this) on the command line (by using International Settings Cmdlets in Windows PowerShell. Try this:

  1. Start a command prompt window with cmd as administrator.

  2. First start the Powershell:

    powershell

  3. Then run this command to change the Windows system locale (language) to English:

    Set-WinSystemLocale en-US

  4. If you want you can change the current user langauge settings with this command: (This will for example change the keyboard and as far as I understand default everything to en-US. This may not be what you want.)

    Set-WinUserLanguageList en-US

  5. Restart the computer:

    shutdown /r /t 0

Change to Swedish by using sv-SE instead of en-US.





30. How to change language in Windows 7 Enterprise

See also: How to change language in Windows 10 Enterprise

Computers with Windows 7 Enterprise are installed with a default language. We install with either English or Swedish.

Install Swedish language pack

There are two ways of doing this.

Change language from Swedish to English

Microsoft Windows 7 Enterprise may change language after installation if you have more than one language installed.

(The version of Windows pre-installed (OEM) is usually Windows 7 Professional or Home. In those versions language cannot be changed after installation.)

  1. Start Byt visningsspråk or Change display language

  2. Change to English

  3. Copy settings to welcome screen and new users

  4. Click the checkboxes

  5. Restart computer

  6. Done





31. What is the cost for EndNote? What is Zotero? And Pages?

See also: How do I install EndNote?
See also: What software applications do the university have that I can install?

The current (2016-01-11) cost for EndNote X7 is 1376 SEK as a one-time cost, but please note, if you already have an older version of EndNote, an upgrade is only 781 SEK. EndNote is available for Windows and macOS.

Search Progdist at UU Reload

The University library regularly provides courses on the reference management software EndNote - but not EndNote basic.

EndNote basic is a free but limited version of EndNote. It does include EndNote integration in Word via a special plugin.

There are open source alternatives, for example Zotero and Mendeley which are free. They are not compatible with EndNote but may be used instead.

The University library regularly provides courses on the reference management software Zotero and Mendeley.

Pages is a Mac only application available in the Mac App Store. Some say it is great, but as usual, not directly compatible with neither EndNote nor Zotero.



32. How do I sign my documents with an electronic signature?

See also: How much do Adobe Photoshop and Illustrator cost?
See also: How do I install Adobe CC Complete (Photoshop, Illustrator...) in Windows?
See also: Why did my Adobe licenses stop working?
  1. Introduction
  2. Read also
  3. Installation of Adobe Acrobat DC
    1. macOS
    2. Windows
  4. Create and sign with a self-signed electronic signature

1. Introduction

Please note that this guide allow you to create and sign with a self-signed certificate. Signing a document with this self-signed certificate will not prove that you are the one creating the signature since anyone can create a signature with your name. It is more or less the same safety as a normal signature.

2. Read also

3. Installation of Adobe Acrobat DC

If you read this and get IT-support from another organisation at UU then please mail your own helpdesk or local IT-support.

3.1 macOS

Acrobat Reader DC works fine and is free.

To get Adobe Acrobat Standard/Pro DC installed you can send a mail to helpdesk@bmc.uu.se.

When you have ordered either Adobe Acrobat Pro 2017 or Adobe Creative Cloud for Teams - All Apps the icons will pop up in Managed Software Center. Go ahead and install.

3.2 Windows

Acrobat Reader DC is free and works fine.

Acrobat Pro is included in Adobe All Apps and or can be installed by itself.

Please ask helpdesk@bmc.uu.se to get Acrobat for guidance.

4. Create and sign with a self-signed electronic signature

  1. Open your PDF-document
  2. Go to the top menu Tools

  3. Go to Certificates

  4. Choose Digitally sign

  5. Now accept to pick an area where to sign and choose OK

  6. This is the first time so we must create a new digital ID by Configure Digital ID

  7. We want to Create a new digital ID and Continue. Pick the Create your own self-signed Digital ID option and then choose Continue. This means this can be easily forged, but lets assume this is what we want to do.

  8. Choose Save to File and then Continue. You can then bring the certificate with you if you want to as a file.

  9. Fill in your details and Continue

  10. Pick a new unique password and Save

  11. Choose to sign with your new certificate and Continue

  12. Enter your password and Sign

  13. Pick a new name for your document and Save

  14. View your signed document

Getting a personal certificate

  1. Please follow the instructions regarding Personal certificate at Medarbetarportalen to get your own personal certificate.
  2. Import it into (for example) Firefox.
  3. Export it from (for example) Firefox into an .p12 file. Set a password.
  4. When you sign with Acrobat, import the certificate from the file.
  5. That's it.




33. What software applications do the university have that I can install?

See also: I would like MATLAB on my computer please!
See also: I would like SPSS on my computer.
See also: GraphPad Prism, what does it cost?
See also: How much do Adobe Photoshop and Illustrator cost?
See also: How do I install Adobe CC Complete (Photoshop, Illustrator...) in Windows?
See also: May I have SIMCA and MODDE for Windows please?
See also: What is ZENworks? How to I install applications via ZENworks application window?
See also: What is the cost for EndNote? What is Zotero? And Pages?
See also: How do I merge PDF documents with PDF-Xchange in Windows?
See also: I work for another part of the university too. How can they pay for my software licenses?
See also: How do I order a standard computer?
See also: Please help with installing the software Origin!

Follow the links above for what is documented in this FAQ.

Also go to the Uppsala University IT-division service Progdist to search for what the IT-division distribute licenses for). Some of these the university has site-licenses for like Microsoft Office, Outlook, Windows which means they are available for no extra cost. Ask helpdesk@bmc.uu.se if you have any questions.

Other software like SAS is not listed at the search but exists there anyway. We do not have a full list of all software that the university has liceseses for but are not in the list.




34. How do I lookup LDAP or Active Directory via command line on Mac and Linux?

See also: How do I send mail from a shell script in Linux and macOS?

Connecting anonymously to LDAP

ldapsearch -l 10 -x -Hldap://ldap.katalog.uu.se -b 'cn=People,dc=uu,dc=se' '(&(objectClass=person)(uid=jny25782))'

Connecting with authentication to LDAP

ldapsearch -l 10 -x -Hldaps://ldap.katalog.uu.se -D 'uid=jny25782,dc=user,dc=uu,dc=se' -w 'passwordA' -b 'cn=People,dc=uu,dc=se' '(&(objectClass=person)(uid=jny25782))'

Connecting with authentication to Active Directory

ldapsearch -Hldap://dc.user.uu.se -x -D "jny25782@user.uu.se" -b "DC=user,DC=uu,DC=se" -w "passwordA" "(uid=jny25782)" uid mail

Those timestamps in the Active Directory look quite strange do they not?

Convert from Windows time (100 ns/tick resolution) to Unix time ( 1 s/tick) by dividing by 10000000 (changing 100 ns resolution into 1 s) and then subtract 11644473600 to get from 1601-01-01T00:00:00Z to 1970-01-01T00:00:00Z.

$ date -d @$(echo 131243293252095302/10000000-11644473600 | bc) Wed Nov 23 00:02:05 CET 2016 $ _

Examples

List all mail addresses in the group SI29:9 in the public LDAP catalogue and then count them:

$ ldapsearch -l 10 -x -Hldap://ldap.katalog.uu.se -b 'cn=People,dc=uu,dc=se' 'departmentNumber=SI29:9' mail | grep -i mail: | wc -l 38 $ _

This would list all mail addresses in the group SI29:9 that also has a room number in the BMC C6:3 corridor.

$ ldapsearch -l 10 -x -Hldap://ldap.katalog.uu.se -b 'cn=People,dc=uu,dc=se' '(&(roomNumber=BMC C6:3*)(departmentNumber=SI29:9))' mail | grep -i mail:

View all group membership of a user:

$ ldapsearch -Hldap://dc.user.uu.se -x -D "jny25782@user.uu.se" -b "DC=user,DC=uu,DC=se" -w "passwordA" -L "(&(uid=jny25782))" -o ldif-wrap=no memberOf | grep ^memberOf:





35. How do I install Ubuntu?

See also: Add a printer in Ubuntu 14.04
See also: Print using UserCode for Ubuntu
See also: How do I mount SMB share in Linux?
See also: Do you have a virtual machine (server) I can use?
See also: How do I configure my resolver on a Linux machine?

This is documentation for a network installation of Ubuntu on the BMC network using the BMC-IT network boot menu over PXE. This applies to physical PCs or VirtualBox.

You can always do a manuall installation. Just download the DVD from Ubuntu and install. Skip a few steps in the instructions below.

  1. Netboot the computer, usually by pressing F12 at BIOS boot time.
  2. In the PXE-boot men, start the latest and greatest Ubuntu installation. For example start a text installation of Ubuntu 18.04 Bionic Beaver x64 Mini:

    l Local Boot (default) m Memtest86 mdtmt Windows 10 Enterprise x64 (Mediatek network) c74 CentOS 7.4 x64 Netboot c73iso CentOS 7.3 x64 Minimal ISO debian74 Debian Netinstall 7.4 AMD64 sl65 Scientific Linux 6.5 x64 sl65kick Scientific Linux 6.5 x64 kickstart u1604live Ubuntu 16.04 "Xenial Xerus" x64 Mini Remix Live u1704mini Ubuntu 17.04 "Zesty Zapus" x64 Mini u1710mini Ubuntu 17.10 "Artful Aardvark" x64 Mini u1804mini Ubuntu 18.04 "Bionic Beaver" x64 Mini boot: u1804mini_

  3. Step through the text installation. Activate automatic updates.
  4. Please name the computer TLA-SERIALNUMBER where TLA is your department unique three letter ancronym and SERIALNUMBER is the computer serial number.
  5. If you want to keep the Windows installation, if there is one on the computer, you can resize the existing partitions.
  6. You can choose several different desktop environments, but I recommend to begin with the standard Ubuntu desktop. This is how the Xubuntu desktop looks like in VirtulaBox running in macOS:

Installing in VirtualBox

If you install in VirtualBox, remember to install the VirtualBox Guest Additions to enable shared clipboard and files between the host and guest OS.
  1. The CD is mounted automatically by VirtualBox. If everything works fine Ubuntu will find the CD and ask you for permission to install the guest additions. Just go ahead.
  2. Otherwise, tro to mount the CD via the menu in VirtualBox with Devices - Insert Guest Additions CD image.... Continue as above.
  3. And finally if the autorun does not execute but the CD has been mounted, you can manually run the installation:
    cd /media/jerker/VBOXADDITIONS_4.3.28_1003095
    sudo ./VBoxLinuxAdditions.run




36. What do I do with old computers or phones?

See also: After my employment at the university has finished, may I bring home my old computer?
See also: What software applications do the university have that I can install?

Why can I not leave everything at the electronic recycle room?

The storage (usually a hard drive or flash memory with permanent storage) in may contains software with licenses belonging to Uppsala University (Windows, Office, Adobe etc).

Sometimes the storage contains passwords (stored in Firefox, Safari, Internet Explorer, Outlook, Thunderbird etc), password hashes (kerberos keys in Windows, macOS etc) or private keys (PyTTY, OpenSSH etc).

Sometimes the drives also contains sensitive personal data or data of other sensitive nature.

Option one - give it to BMC-IT

  1. Please fill in the form Data deletion approval.
  2. Give the equipment to BMC-IT. We will either scrap it or try to reuse the parts. If it is not for scrapping or possible reuse we cannot store it.
  3. Report the equipment as scrapped in the department inventory.

Option two - scrap it right away

  1. Remove the permanent storage (hard drive, solid-state drive, flash or other). This may not be possible in all devices.
  2. Please fill in the form Data deletion approval.
  3. Give the storage to BMC-IT (or your Local IT).
    1. If the storage contain really sensitive data it will be sent to the Security and safety division or the facility they recommend.
    2. If the data is not as sensitive and the drive is meaningsful to reuse, we will erase the drive on the block level (killdisk) and then reuse it.
  4. Bring the equipment to the electronic recycle room at The Goods reception at BMC.
  5. Report the equipment as scrapped in the department inventory.





37. How do I access my work-computer from home?

See also: How to connect with VPN using AnyConnect in Windows
See also: How do I mount my home directory or shared storage at HNAS?
  1. Find out if you need access to the files or the actual computer running programs on it.
  2. If you only need access to the files, then it might be easier to store the files on a file server. Access the files in a secure way from home over VPN connecting to the file server.
  3. If you need access to the computer to be able to run programs on the computer, then:
    1. Allow someone to connect to your computer using Remote Desktop Connection. (Read HOWTO in Swedish or Read HOWTO in English)
    2. Lock the computer to a specific IP (Contact your Local IT, computer name, your current IP and MAC-address)
    3. .. and open in the router filter so that you can run remote desktop from the VPN to the computer. (This is also done by your Local IT.)

Mac

In Mac, get Microsoft Remote Desktop which is free in the App Store.

Add a new host hosts with login (with the windows domain) and password and then Start!

Remember to add the Windows domain in for example the format username@domain, if the host is connected to a Windows domain.

Windows

In Windows, start Remote Desktop Connection and enter the details and then Connect.

Linux Ubuntu

Install rdesktop and run for example this command:

rdesktop -p MySecretPassword -u _jny25782-T -d USER -x 0x80 -g 1800x1100 -k sv dcts.user.uu.se





38. How do I convert video between different formats with free software?

See also: What are the bitrates for different digital video quality?
See also: How do I play movies on my webpage?

HandBrake is a GUI open source video transcoder.

HandBrake is available for Windows, Mac, Linux etc.

Mencoder

Mencoder is part of Mplayer, a video player. Mencoder is a command-line open source video transcoder.

Mencoder is available for Windows, Mac, Linux etc.

  1. Download Mplayer at www.mplayerhq.hu.
  2. Run the command line tool mencoder by starting the cmd. If you don't know what this is then don't follow this instruction. You have to have mencoder in your path.
  3. mencoder.exe input.avi -occ x264 -oac mp3lame -o output.mp4

  4. The new file named theoutput.mp4 should then contain the movie in the new x264 (mp4) format.

FFmpeg

FFmpeg can be used as a command line open source tool for transcoding video.

ffmpeg -i input.avi output.mp4

Bitrate and quality

FFmpeg can also be used to convert between different bitrates. Please read the FFmpeg H.264 Video Encoding Guide.

ffmpeg -i input.avi -acodec coy -vcodec libx264 -crf 40 slioutput.mp4

The videos displayed below has been converted to different quality levels with the folling comand.

gforce:Movies jerker$ for i in 1 30 40 ; do ffmpeg -i big_buck_bunny_240p_1mb.mp4 -preset veryslow -acodec copy -vcodec libx264 -crf $i big_buck_bunny_240p_FFMPEG_CRF_${i}.mp4 ; done

From left to right are the original, the best quality, slightly lower quality and quite bad quality.

gforce:Movies jerker$ ls -la big_buck_bunny_240p_* -rw-r--r-- 1 jerker staff 1053651 Jun 17 2016 big_buck_bunny_240p_1mb.mp4 -rw-r--r-- 1 jerker staff 2199681 Jun 13 13:07 big_buck_bunny_240p_FFMPEG_CRF_1.mp4 -rw-r--r-- 1 jerker staff 742577 Jun 13 13:07 big_buck_bunny_240p_FFMPEG_CRF_30.mp4 -rw-r--r-- 1 jerker staff 692186 Jun 13 13:07 big_buck_bunny_240p_FFMPEG_CRF_40.mp4 gforce:Movies jerker$

The annotation on the poster image was made like this, following the examples at ImageMagick v6 Examples - Compound Font Effects.

TEXT="My text" convert source_image.png -font "Arial" -pointsize 50 \ -draw "fill black text 27,77 '$TEXT' \ text 25,78 '$TEXT' \ text 23,77 '$TEXT' \ text 22,75 '$TEXT' \ text 23,73 '$TEXT' \ text 25,72 '$TEXT' \ text 27,73 '$TEXT' \ text 28,75 '$TEXT' \ fill white text 25,75 '$TEXT' " \ poster.png

Read more about the sample video at Wikipedia.



39. How do I install Adobe CC Complete (Photoshop, Illustrator...) in Windows?

See also: How much do Adobe Photoshop and Illustrator cost?
See also: How do I sign my documents with an electronic signature?

For Windows computers that has a Zenworks agent it is quite easy.

  1. First restart computer if it has any pending upgrades. Otherwise the installation will fail.

  2. Open the Adobe Complete application in the Zenworks window.

  3. Answer OK once.

  4. Answer OK twice.

  5. Wait a very long time (all files are around 14.5 GB) for everything to install. The files are read from a file server so you have to be connected to the university network.

  6. It is possible to open a ZENworks progress window from the status bar. Step 7 of 8 will take a very long time.

Normally in Zenworks everything may be loaded over the Internet, but in this case, since the package is so large, for technical reasons we choose to install it directly from a file server.

When installing the bundle a request for registration of licenses will be automatically sent to helpdesk@bmc.uu.se who will confirm the registration at appropriate group or department.

For Windows computers that do not run the Zenworks agent, the same package can be installed by a system administrator. Also contact helpdesk@bmc.uu.se for this.

For macOS this installation is more or less manual. Contact helpdesk@bmc.uu.se.



40. Do you have some examples of fanless computers we can buy?

See also: What are the different PC form factors?
See also: How do I order a standard computer?

Please check this detailed list of fanless laptops and ultrabooks available in 2018.

Please note that even fanless computers with no moving parts may emit high-frequency sounds that some but not everyone can hear.

2-in-1

Dell Latitude 7285 2-in-1
Price from 12077 SEK (2018-05-31) with 12.3" screen, Intel i5 1.2 GHz, 8 GB RAM and 256 GB SSD.
Dell XPS 9365 2-in-1
Price from 12244 SEK (2018-05-31) with Intel m5 1.2 GHz, 8 GB RAM and 256 GB SSD.
Microsoft Surface Pro m3
Price from 7677 SEK (2018-06-01) with Intel m3 1 GHz, 4 GB RAM and 128 GB SSD.
Microsoft Surface Pro i5
Price example 10854 SEK with Intel i5 7300U 2.6 GHz, 8 GB RAM and 256 GB SSD.

Laptop

Apple Macbook 12"
Price from 10200 SEK (2018-05-31) with Intel i3 1.2 GHz, 8 GB RAM and 256 GB SSD.
HP EliteBook Folio G1
Price from 12414 SEK (2018-05-21) with 12.5" screen, Intel m7 1.2 GHz, 8 GB RAM and 512 GB SSD

Desktop

MSI Cubi N 067NE
Price from 2034 SEK (2018-05-31) with Intel Celeron N3160, 4 GB RAM and 32 GB SSD.
MSI Cubi 3 Silent S 026EU
Price from 5931 SEK (2018-05-31) with Intel i5 7200U 2.5 GHz, 8 GB RAM and 256 GB SSD.

Embedded

Raspberry Pi 3 Model B
Price 304 SEK (2018-05-31) with ARM 1.2 GHz quad core and 1 GB RAM.
Also requires case, storage, charger etc. This is not a PC and cannot run normal Windows.
Go to the Raspberry Pi homepage Download Section for software, including Raspbian, Windows 10 IOT Core or others.
Dell Embedded Box PC 3000 (Order via Dell Punchout)
Price from 9060 SEK (2018-05-31) with Intel Atom 1.33 GHz, 4 GB RAM, 500 GB HDD.
Dell Embedded Box PC 5000 (Order via Dell Punchout)
Price from 14995 SEK (2018-05-31) with Intel Celeron 2.8 GHz, 4 GB RAM, 500 HDD.
Intel Compute Stick
Price from 1100 SEK (2018-05-31) with Intel Atom Z8300 1.44 GHz, 2 GB RAM and 32 GB flash.




41. How to use the IBM Spectrum Protect (Tivoli Storage Manager aka TSM)

See also: How do I take backup of the data on my computer?
See also: How do I overwrite deleted data in Windows?
See also: Backing up via Rsync to Btrfs snapshots
See also: What is ransomware and CryptoLocker?
See also: How do you secure delete data from the computers and servers?


IBM Spectrum Protect is the backup system run at the university at the IT-division. The software was previously known as TSM - Tivoli Storage Manager and is still referenced as both names.

Financing and pricing

The services is paid for by the users. This includes salaries for everyone involved in maintaining the system and all equipment. The costs includes a starting cost per node and (decreasing) cost per GB depending on how much data that is stored in the system. Read the pricelist.

Documentation

IBM has their own documentation of TSM 7.1.3 (the latest version at 2016-04-14)

Schedule

Usually on Windows-systems the backup-client is asking the server whether it should backup or not. Send a mail to backup-admin to let them know.

On Mac and Linux (and other Unix-based systems) instead the client is called at a certain point in time doing the backup like this:

dsmc incr

To put this in crontab in a Linux system first run editor for the crontab as root using emacs as an editor.

EDITOR=emacs crontab -e

Or use the default vi editor:

crontab -e

Then enter the point in time to run the backups (with the full path to the client)

1 1 * * * /usr/bin/dsmc incr

Performance with TSM

TSM store files in tapes and after a while the incremental backups will store files in several different tapes. One way of taking care of this is to instead from time to time do a selection backup or a image (block device) backup. The block device backup is harder to read back for certain files obviously.

There are several options to decrease the amount of data being sent on the wire by doing more work on the client. Inside the university network this usually it not a problem since we usually have enough bandwidth betwen the campuses and to the backup servers.

Compression yes Memoryefficientbackup yes

Examples: Query the backup...

To list what partitions (or file systems) have been backed up:

dsmc query files

To list files that have a backup date during a certain date range: (However, running with options time limits (todate, fromdate) will change the behaviour for the client and read a lot of data into RAM. With several millions of files this will be slow. Read about Classic Restore versus No Query Restore (NQR) at IBM)

The option -inactive will list both active and inactive files.

dsmc q ba -inact -fromdate=01/01/2016 -todate=01/03/2016 -subdir=yes '/blue/*'

To get summary of all files backed up and the size:

dsmc query backup '/etc/*' -subdir=yes -querysummary

To get more details, for example to see files with the wrong backupclass which still are taking up space in the backup, run this command:

dsmc query backup '/etc/*' -subdir=yes -querysummary -detail

Examples: Restoring backup...

To interactively pick and restore the files, restoring to the directory /tmp:

dsmc restore -pick '/blue/*' "/tmp/"

To also interactively pick among the inactive files when restoring:

dsmc restore -pick '/blue/*' "/tmp/" -inactive

To also restore subdirectories while restoring:

dsmc restore -pick '/blue/*' "/tmp/" -inactive -subdir=yes

To restore the state of a directory at certain different points in time. This will run the restore command each for the specified dates and restore the directory as it were at that point in time.

for i in 10 11 12 13 14 15 16 17 ; do mkdir /var/tmp/jerker.restore.2016-04-$i-12.00.00/ dsmc restore -pitd=04/$i/2016 -pitt=12:00:00 -subdir=yes '/home/jerker/*' /var/tmp/jerker.restore.2012-11-$i-12.00.00/ done

To backup everything irrespective of whether files have changed since the last backup, use the selective command:

dsmc sel '/green/home/USER/jny25782/*' -subdir=yes

Examples: Deleting old backup data...

To delete a backup (which may require extra permissions), use the delete command. This time the -pick makes it interactive.

dsmc delete backup '/archive/jerker/*' -subdir=yes -pick

To delete all inactive files:

dsmc delete backup '/archive/jerker/*' -subdir=yes -deltype=inactive

To delete all inactive files backed up during a certain date range:

dsmc delete backup -fromdate=01/01/2010 -todate=01/01/2016 '/green/home/USER/jny25782/*' -subdir=yes -deltype=inactive

With the number of files into multiple tens of millions, this may not work so well since it takes up too memory or perhaps timeout when waiting too long for the confirmation prompt unless the operator (you) are staring at the window. Use the -noprompt option and break it down inte smaller parts like this:

for i in /home/* ; do dsmc delete backup -fromdate=01/01/2010 -todate=04/01/2016 $i/'*' -subdir=yes -deltype=inactive -noprompt ; done

To delete all files from the backup, including inactive files, specify -deltype=all. Do not prompt for confirmation.

dsmc delete backup '/unwanted.data/' -deltype=all -noprompt

This however do not delete parent directories from the backup. To remove them to, run the expire command. The position of the wildcard is described at IBM but look a bit strange, so be careful!

dsmc expire '/unwanted.data*' -noprompt

Different management classes:

To view the different management classes:

dsmc q mgmtclass

To list the details different backup management classes:

dsmc q mgmtclass -detail

To change class when taking backup, the new class can be specified in the file dsm.opt when including file systems:

include /myfilesystem/* TWOYEARCLASS

Please note that this may (or may not) only affect new objects created in the backup system. Manual clean up (using the method in the previous section) may have to be done.

The way I know about how to view the current backup management class is to start the graphical client: dsmj and in the menu Utilities the entry View policy information

This is a small script to list managment classes:

#!/bin/bash echo 'Management Retain Only Retain Extra Version Version' echo 'Class Version Version Data Exists Data Deleted' echo '--------------- --------------- --------------- --------------- --------------' ( dsmc q mgmtclass -detail ; echo DONE ) | grep -e 'MgmtClass Name' -e 'Retain Only Version' -e 'Retain Extra Version' -e 'Versions Data Exists' -e 'Versions Data Deleted' -e 'DONE' | ( while read A B C D E F ; do if test "$A" = "MgmtClass" -o "$A" = "DONE" ; then if test "$EXTRA" != "" -a "$ONLY" != "" ; then echo -e $MGMT'\t'$ONLY'\t'$EXTRA'\t'$EXISTS'\t'$DELETED | expand --tabs=16,32,48,64 ONLY="" EXTRA="" MGMT="" DELETED="" EXISTS="" fi MGMT=$D fi if test "$B" = "Only" ; then ONLY=$D fi if test "$B" = "Extra" ; then EXTRA=$D fi if test "$C" = "Exists...:" ; then if test "$D $E" = "No Limit" ; then EXISTS="NoLim" else EXISTS="$D" fi fi if test "$C" = "Deleted..:" ; then if test "$D $E" = "No Limit" ; then DELETED="NoLim" else DELETED="$D" fi fi done ) | sort -n --key=2,5

The output looks like this on the current (2016-05-16) classes on the domain that I are using. Note that there may be different domains with different management classes.

# ./tsm.list.mgmtclasses.sh Management Retain Only Retain Extra Version Version Class Version Version Data Exists Data Deleted --------------- --------------- --------------- --------------- -------------- ITSDBCLASS 0 0 1 0 ORACLECLASS 0 200 3 0 ONEDAYCLASS 1 1 3 2 DAYCLASS 2 0 1 1 MONTHCLASS 9 9 8 7 TWOWEEKS 14 14 14 1 TDPDIFF 30 30 No Limit No Limit TDPDIFF-META 30 30 No Limit No Limit TDPFULL 30 30 No Limit No Limit TDPFULL-META 30 30 No Limit No Limit TDPLOGS 30 30 No Limit No Limit TDPLOGS-META 30 30 No Limit No Limit PUBCLASS 60 30 2 1 STANDARD 60 30 2 1 QUARTERCLASS 120 90 3 2 ITSCLASS 300 200 3 2 LOGCLASS 300 200 3 2 ITS_DISK 365 200 3 2 DEVCLASS 500 450 4 3 TWOYEARSCLASS 750 30 2 1 ADMCLASS 900 800 8 7 TENYEARSCLASS 4000 30 2 1 # date Fri Aug 26 13:51:51 CEST 2016 # _

This is how to Assign management class to specified directories or default.



42. What about the quality of a created PDF document?

See also: How do I merge PDF documents with PDF-Xchange in Windows?

When creating a PDF document from a Word document, different PDF generators create different files. Some difference is due to the way different fonts are handled. You can for example read more on kerning here: https://en.wikipedia.org/wiki/Kerning.

Also be aware that this is screenshots. Antialias and subpixel rendering may affect the images below.


Here is an example of a Word-document generated into a PDF in different ways all displayed on the screen in Windows 10 using Adobe Reader DC with 300% zoom. The limited screen resolution makes it hard to see the finer details.

  1. Microsoft Word 2016. Created with Microsoft Print to PDF virtual printer. Good quality with no visible kerning problems in this example. However the generated text is a bit dark.

  2. Microsoft Word 2013. Created with save as.. and the as a file type PDF. Take notice of the kerning problems marked with yellow.

  3. Microsoft Word 2016. Created with PDF X-Change virtual printer. Take notice of the kerning problems marked with yellow.

  4. Microsoft Word 2016. Created Adobe Acrobat Pro XI virtual printer Adobe PDF.

  5. Microsoft Word 2016. Created with PDFCreator virtual printer.

  6. Microsoft Word 2016. Created with Save as.. and then as the file type PDF with the higher quality.





43. How do I configure my resolver on a Linux machine?

See also: My Internet does not work! How can I find the problem?
See also: How do I install Ubuntu?
See also: How do I get deduplication to work in Linux?

The university has a couple of resolvers which are referred to by resolver.uu.se.

$ host resolver.uu.se resolver.uu.se has address 130.238.7.10 resolver.uu.se has address 130.238.164.6 resolver.uu.se has address 130.238.4.133 resolver.uu.se has IPv6 address 2001:6b0:b:215:130:238:4:133 resolver.uu.se has IPv6 address 2001:6b0:b:732:130:238:164:6 resolver.uu.se has IPv6 address 2001:6b0:b:242:130:238:7:10 $ _

Historically the host name lookups in Linux were done by the resolver. No resolver was running and no cache existing locally in the machine. The resolvers were put in /etc/resolv.conf, either statically (manually) or via DHCP.

The problem with this approach is that if the first in the list of external resolvers cannot be reached the timeout is defaulting to 5 seconds with 2 attempts. This means that if the first server is down there will be a timeout up to 2*5=10 seconds. When a resolver is failing most things using the network will get slow and not work very well. This can be decreased but not eliminated by adding a shorter timeout to /etc/resolv.conf:

options timeout:1 attempts:1 rotate

Using dnsmasq as a forwarding resolver

Another, better, solution is to run dnsmasq in Linux. Dnsmasq will get you:

  1. Faster failover.
  2. Local cache.
  3. A well behaved client using central resolvers. (No problems with split-DNS, firewalls or router filters)

This is how it looks like in CentOS 7 when not using NetworkManager (most common on servers) and using DHCP. It will replace the first nameserver with the local dnsmasq. This works for a server always located on the UpUnet network.

Here we also add the Google public resolvers. But please note, if you add the those you cannot reach local split-DNS, like the Windows-domains or other local networks (RFC1918). Also check that you have access (not blocked by router filter or firewall) to the Google public resolvers before you add them.

$ yum install dnsmasq $ echo 'resolv-file=/etc/resolv.dnsmasq' > /etc/dnsmasq.d/resolv.file $ echo 'DNS=127.0.0.1' >>/etc/sysconfig/network $ host resolver.uu.se | grep -v IPv6 | awk '{print "nameserver " $4}' >/etc/resolv.dnsmasq $ echo 'nameserver 8.8.8.8' >>/etc/resolv.dnsmasq $ echo 'nameserver 8.8.4.4' >>/etc/resolv.dnsmasq $ _

if you are running a totally static setup without NetworkManager you need to manually add the 127.0.0.1 resolver first in resolv.conf instead of adding it to the /etc/sysconfig/network configuration file.

$ sed -i '1i nameserver 127.0.0.1' /etc/resolv.conf $ _

Most clients use NetworkManager. For a client moving around between networks you need to get the recommended resolvers from DHCP but also insert the dnsmasq 127.0.0.1 resolver first. NetworkManager has built in support for dnsmasq. Simply adding dns=dnsmasq to the [main] section and then restart NetworkManager should solve it.

[main] dns=dnsmasq

Also check that dnsmasq do not have the option bogus-priv activated in /etc/dnsmasq.conf otherwise queries about the local networks (RFC1918) will be blocked with answer NXDOMAIN in dnsmasq. These are used in the university network so they should not be blocked between client and resolver. The default in CentOS 7 is to not have bogus-priv activated which is fine. Otherwise, uncomment with:

$ sed -i 's/\(^bogus-priv\)/#\1/1' /etc/dnsmasq.conf $ _


Using Bind as a local resolver

If you want to maximize reliability then nothing beats a local resolver. Just run BIND and set it up to only listen to the local machine (or local HPC cluster). On the university network, this usually requires openings in the router filters and perhaps firewalls in order to send UDP traffic in and out. Only do this if you do not want to pester the university resolvers with all your requests, like when you are running an HPC cluster connected to the USER-AD, doing statistics for a lot of webserver logs or something else similar.






44. How do I really delete a directory and files in Windows?

See also: How do I copy many files in Windows using Robocopy?
See also: How do I start an elevated command prompt (as administrator) in Windows?
  1. Start a command prompt as a local administrator.
  2. Change directory to the one above the directory you want to delete.
  3. Fix permissions.
  4. Delete files (this should not be needed...)
  5. Delete directories

    cd "c:\my stuff" attrib /s /d -s -h -r "to delete" del /f /s /q "to delete" rmdir /s /q "to delete"

  6. If this do not work also try to take ownership of the directory and full control in the ACLs and then delete again:

    takeown /f "to delete" /r /d y icacls "to delete" /grant %username%:F /T





45. How to transfer web hosting for a domain

  1. Add the correct virtual host to the webserver
  2. Check to whom the mail to change in DNS should be sent
  3. Send a mail to domainmaster and request the change

Step 1. Add the correct virtual host to the webserver

In order to get the new webserver to respond the new name. Usually one must must add the virtual host to the web server configuration.

Check that the new service is working at the new host. Change the the hosts-file on a client computer. On Ubuntu (Linux) and macOS it is called /etc/hosts and Windows %SystemRoot%\system32\drivers\etc\hosts usually c:\windows\system32\drivers\etc\hosts.

If the webserver is called www.department.uu.se and will be moved to the new IP-address 130.238.39.248 then add the following line:

130.238.39.248 www.department.uu.se

Or if you wish to use both www.department.uu.se and department.uu.se you need to put them both in the hosts-file:

130.238.39.248 www.department.uu.se department.uu.se

Now restart the local webbrowser (Firefox, Internet Explorer etc) and open the website (http://www.department.uu.se/). Your webbrowser will now contact the new IP-address (picked from the hosts-file).

If the website has two names (www.department.uu.se and department.uu.se), you need to test them both.

If the the web browser shows an page like this you need to activate the web site on the new web server. If you run Apache you need to create the correct VirtualHost. Contact the responsible person for the webserver or the web site and let them fix the problem before you proceed.

When everything is OK proceed to the next step. Also, remember to remove your changes to your hosts-file.

Step 2. Check to whom the mail to change in DNS should be sent

Then check the SOA field of the domain. The SOA record contain information on what what the contact person is for the domain. When querying for SOA also authoritative nameserver may be shown.

Use the command Dig for this. Dig is included in macOS and Linux and may be downloaded for free for Windows.

The output may look like this:

$ dig soa bmc.uu.se ; <<>> DiG 9.4.3-P3 <<>> soa bmc.uu.se ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35450 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 7 ;; QUESTION SECTION: ;bmc.uu.se. IN SOA ;; ANSWER SECTION: bmc.uu.se. 14400 IN SOA ddns.uu.se. domainmaster.uu.se. 2015021900 3600 600 2592000 1800 ;; AUTHORITY SECTION: bmc.uu.se. 1078 IN NS dns2.uu.se. bmc.uu.se. 1078 IN NS dns3.uu.se. bmc.uu.se. 1078 IN NS dns1.uu.se. bmc.uu.se. 1078 IN NS dns.uu.se. ;; ADDITIONAL SECTION: dns.uu.se. 13974 IN A 130.238.7.10 dns.uu.se. 13974 IN AAAA 2001:6b0:b:242:130:238:7:10 dns1.uu.se. 13974 IN A 130.238.4.133 dns1.uu.se. 13974 IN AAAA 2001:6b0:b:215:130:238:4:133 dns2.uu.se. 13974 IN A 130.238.164.6 dns2.uu.se. 13974 IN AAAA 2001:6b0:b:732:130:238:164:6 dns3.uu.se. 13974 IN A 193.11.12.166 ;; Query time: 4 msec ;; SERVER: 130.238.39.248#53(130.238.39.248) ;; WHEN: Fri Feb 27 17:43:03 2015 ;; MSG SIZE rcvd: 304 $ _

There are two interesting things in this output.

  1. The contact person is domainmaster@uu.se. The first unescaped . (dot) in the field is substituted to an @.
  2. There are DNS-servers on uu.se.

Step 3. Send a mail to domainmaster and request the change

  • If you are a webmaster or system administrator for the department in question, go ahead.
  • If you are not a webmaster or system administrator for the department in question, get a confirmation from the webmaster or system administrator. Include the confirmation in the mail to the domainmaster.
The main part of the mail may look like this:

To: domainmaster@uu.se From: me@department.uu.se Subject: change webserver www.department.uu.se Hello, Please make www.department.uu.se a CNAME to www.service.uu.se like this: www.department.uu.se. IN CNAME www.service.uu.se. Kind regards, My contact information

Or, if you wish to change both http://www.department.uu.se and http://department.uu.se it may look like this with only IPv4 addresses.

To: domainmaster@uu.se From: me@department.uu.se Subject: change webserver www.department.uu.se department.uu.se Hello, Please remove the old A-record for department.uu.se and any record for www.department.uu.se. Add the following: department.uu.se. IN A 130.238.39.248 department.uu.se. IN A 130.238.39.252 www.department.uu.se. IN A 130.238.39.248 www.department.uu.se. IN A 130.238.39.252 Kind regards, My contact information.

If you have any questions contact helpdesk@bmc.uu.se or domainmaster@uu.se.





46. How do I convert an image from RGB to CMYK?

See also: How do I convert EPS to PDF in Windows and macOS?

The software ImageMagick can do this. This can also be done in Photoshop and other tools. But ImageMagick works in both Windows, macOS and Linux (Ubuntu etc) and also has an interface in plenty of programming languages. And it is free.

  1. As an example we have a small sRGB PNG.

    $ identify start.image.png start.image.png PNG 448x54 448x54+0+0 8-bit sRGB 4101B 0.000u 0:00.009 $

  2. First convert the sRGB PNG into a sRGB TIFF.

    $ convert start.image.png start.image.tiff $

  3. Then convert the sRGB TIFF into a CMYK TIFF.

    $ convert start.image.tiff -colorspace CMYK output.image.tiff $

  4. Confirm that the resulting image is a CMYK TIFF.

    $ identify output.image.tiff output.image.tiff TIFF 448x54 448x54+0+0 8-bit CMYK 2376B 0.000u 0:00.000 $

The command line tool seems to work fine in Windows as well:





47. How do I convert EPS to PDF in Windows and macOS?

See also: How do I merge PDF documents with PDF-Xchange in Windows?
See also: How do I merge documents with Preview in macOS?
See also: How do I convert an image from RGB to CMYK?
See also: How do I create binary packages with MacPorts?

Mac OS X

  1. Open in Preview.
  2. Save as PDF.

Windows

There seems to be no built in way to convert EPS to PDF in Windows.

Use Adobe Acrobat Pro.

  1. Open the file.
  2. Save as PDF.

Use some external service like Cloudconvert

  1. Upload file
  2. Download PDF
  3. If you want to import a vector image into Word then convert into EMF instead.

Linux (Ubuntu, CentOS etc) / Windows / macOS

The software ImageMagick can do this.

convert fish.eps fish.pdf





48. What should I think about when adding my own network printer?

See also: How do I set up eduPrint for a Linux server?
See also: What do the different symbols in BlueCat mean?
See also: How do I use an Apple AirPort Time Capsule?
See also: How do I use AddPrinterGUI to add printers in Windows 7/8/10 x64?
See also: How do I add a macOS printer at IMBIM?

Be aware that the Uppsala University already have a central printing system currently called eduPrint. Getting your own printer is in general contra productive.

  1. The printer should in general be configured to use DHCP. In order for the printer to get an IP-address thne MAC-address should be added to the DHCP-server at the network. This is in general the central IPAM-system called Bluecat.
  2. Close down any older or unused protocols on the printer that are not in use, like telnet or FTP. No other services than those to be used should be open at the printer.
  3. Set up a local firewall on the printer and only let those networks that should be able to also be able to print directly onto the printer.
  4. Check that the manufacturer has working drivers or instructions for at least macOS, Windows and Linux (RHEL/CentOS).
  5. Check that the PostScript module is added to the printer. Double check this when the computer has arrived. This makes printing on macOS work better or at some models at all.
  6. For scanning purposes, use the central mail server called smtp.uu.se. As a sender for the mail use the receivers own mail-address or create a special account for this. The sender must be accepted at the university mail servers. People receiving mail will eventually reply to this sender so the behaviour should be known - do not send everyting to a black hole for example.
  7. For searching use the catalogue LDAP-server at ldap.uu.se or maybe the Active Directory LDAP-servers at dc.user.uu.se. For the later an account is needed for access so create a function account for this.
  8. Set up logging for the printer to syslog.uu.se using the syslog protocol.
  9. Set up a unique password for the department printers. Make sure the default passwords are removed. Make sure the IT-support know about the passwords.
  10. Make sure to update the firmware on the printer regularly in order to follow normal security guidelines.




49. I would like SPSS on my computer.

See also: What software applications do the university have that I can install?

The current cost 2018-04-12 for SPSS is 1500 SEK/year/user. The license is per user.

Search Progdist at UU Reload

  • For macOS the installation is still manual. Send a mail to helpdesk@bmc.uu.se
  • If you have ZENworks and a SPSS icon in the ZENworks Application Window with SPSS in, install it from there. An automatic notification will be sent to BMC-IT who will take care of registration of license.
  • If you have ZENworks and no SPSS icon in the ZENworks Application Window, send a mail to helpdesk@bmc.uu.se to put it there after registration of a license.
  • If you do not have ZENworks on your computer, send a mail to helpdesk@bmc.uu.se to do a manual installation.

This is how to install SPSS in Windows via ZENworks and trigger license registration

  1. Open ZENworks application window and click on the SPSS 22 icon.

  2. Accept the costs involved with license registration.

  3. Wait a while for the installation to complete.

  4. You can now start SPSS from the Start menu.




50. How do I add a macOS printer at IMBIM?

See also: What should I think about when adding my own network printer?
See also: How do I change default settings for a printer in macOS?
See also: How do I change default settings for a printer in Windows?

Imbim has new printers since 2018-03-22. Users with macOS clients need to reinstall the printers. Remove old Imbim printers before installing new ones. Depending on your macOS version, you may need to install a printer driver before installing the printer. See instructions below.

One of the old printers remains (D9:4). That printer can still be used as before, without any changes.

Important! You need to be connected to the Imbim network via cable to print using these printers. If you're not, use the central printing system for the university, eduPrint!

Remove an old printer
  • Click on "System Preferences..." in the Apple menu.
  • Click on "Printers & Scanners"
  • Click on the printer you wish to delete on the left side.
  • Click on the minus sign in the down left corner and click on "Delete Printer".
Install printer drivers
Install a new Imbim printer
Click on a link below to download an installation package for all or individual Imbim printers. Run the installation package by double clicking it and follow the on screen instructions. Change default settings for a printer
Select your computer's OS below to view instructions for how to change the default settings for a printer.



51. How do I change default settings for a printer in Windows?

Do this to change the default settings to duplex and black and white:

  • Click on the Start button in the lower left hand corner.
  • Start writing "Control Panel" (without quotation marks) and click on "Control Panel" when it's shown in the list.
  • Change from "Category to "Large icons" where it says "View by:" in the top right corner.
  • Click on "Devices and printers".
  • Right click on the printer and choose "Printing Preferences".
  • Change the option "Duplex:" to "Open to Left".
  • Change the option "Color/Black and white:" to "Black and White".
  • Click on "OK" and you have changed the default settings for the printer.





52. How do I install PyMOL?

See also: How do I create binary packages with MacPorts?
PyMOL is computer software, a molecular visualization system created by Warren Lyford DeLano.
Read about PyMOL at Wikipedia.

Commercial version

First option is to buy the commercial version. Read the PyMOL - Academic and Non-Profit Price List. The current price at 2018 is 99 USD/year.

Open source version

The source code is available (not all features but usually good enough). You can download the source and install your self.

There are prepackaged solutions, either with prebuilt binaries or from source.

  1. Linux install
  2. macOS install
  3. Windows install

Status of PyMOL on macOS

For macOS we have tried (at 2018-03-28) the MacPorts, Homebrew and Fink distributions of PyMOL. Only PyMOL in Fink works. The MacPorts and Homebrew distributions of PyMOL are broken. This may change.

Other software

Also take a look at UCSF Chimera or read about UCFS Chimear on Wikipedia.

UCSF Chimera (or simply Chimera) is an extensible program for interactive visualization and analysis of molecular structures and related data, including density maps, supramolecular assemblies, sequence alignments, docking results, trajectories, and conformational ensembles.




53. What is ransomware and CryptoLocker?

See also: Help me I get so much spam! What can I do?
See also: My computer has got a virus! What do I do?
See also: How to use the IBM Spectrum Protect (Tivoli Storage Manager aka TSM)
See also: How do I use an Apple AirPort Time Capsule?
CryptoLocker is a ransomware trojan that targets computers running Microsoft Windows.
- Wikipedia on CryptoLocker

CryptoLocker and TorrentLocker infects computers running Windows via seemingly innocent email with links or attachments. There has appeared other ransomwares attacking Mac too.

Read more about ransomware, TorrentLocker and CryptoLocker on Wikipedia.

To be infected, the receiver has in most cases actively tried to open and execute the payload. The payload may be disguised as a Word-document, a script or something that give the impression that it is innocent. Do not open files or attachments you have not requested!

This (the example above in Microsoft Word) is not safe! Please be careful with Office files that require you to Enable Content. Enabling content may make it possible for evil macros to execute in Office allowing the attacker to take control of your computer.

This (the example above from Windows File Explorer) is an example of an opened .zip-file. .zip-files are in itself not dangerous it is just a way of storing one or many files into one compressed file, but it may be a way to bypass other simple security checks. For example the anti virus software may warn when downloading an .exe-file but may not warn when downloading a .zip-file.

This (the icon above) is an example of how an .js-file look like in the File Explorer. This file will run with the Windows Script Host (wscript/cscript) and execute and may download further potentially evil binaries. Windows Scripting Host also will run .jse and .wsf-files. Also note that a long file name like faktura.pdf.js may hide the real extension in File Explorer and show up as faktura.pdf which is a bit misleading. The real file name extension is hidden.

Even though a ransomware in itself easily can be removed, the files stay encrypted, waiting for a ransom to be payed in order to get the decryption key.

How to not get infected

  • Do not execute programs or even open attachments that random people have sent you.
  • Please don't do it.
  • If you have any suspicions regarding something you received via mail contact helpdesk@bmc.uu.se (BMC-IT).
  • Please forward the evil mail to no-spam@uu.se. Then the Uppsala University Security Division may adjust the rules for the mail filter and network firewall.

What to do if infected

  1. Turn the computer off.
  2. Contact your local IT (helpdesk@bmc.uu.se) for help.
  3. Forward the evil mail to no-spam@uu.se so that the Uppsala University Security Division may adjust mail filter and network firewall rules.
  4. Change your passwords at the university. Change all passwords for all sites that you have automatically saved in your browser.
  5. In general, reinstall computer and restore data from backups or snapshots.

Lessons to be learned from CryptoLocker

  • Use a file server with snapshots for storing data you do not want to lose. For example the central university HNAS file server store snapshots up to a month per default.
  • Everything locally on the computer running in the same security context as the user is not safe.
    • This means that local previous versions / snapshots are not safe, if the users can turn them off. But to have these are better than not.
    • This also means that backups like Time Machine, Cobian or similar where the system stores a copy of the files on another storage place is not safe, unless the backup storage in is snapshotted outside of the users security context.
    • If you store extra backups of your files on external USB-attached storage, do not keep it plugged in all the time. Keep a couple of them and in rotation so that you can go back to an older version.
  • Already taken backups should not be allowed to be overwritten from the client. This can be accomplished by for example using snapshots on the backup storage, like on a file server.
  • Even more advanced backup systems like TSM may not be safe since it only stores a limited number of versions of each file. If the ransomware encrypt the files and then make some small updates to the file each day, then after the limited number of days have passed, all old uncorrupted versions will be gone.

Also read more

Read more from Europol's European Cybercrime Centre with friends at the No More Ransom! website.

The Uppsala University Security Division has courses in basic information security (in Swedish). Every chapters just takes 2-4 minutes. There are 16 chapters in total.



54. How do I buy a new computer?

See also: What are the different PC form factors?
See also: After my employment at the university has finished, may I bring home my old computer?
See also: My computer was stolen! What should I do?
See also: My harddrive broke! Do you have any spare parts?
See also: How do I order computer accessories and peripherals?
See also: How do I order a standard computer?

Short story

Contact BMC-IT at helpdesk@bmc.uu.se and describe what you need. We have prepared a couple of standard models.

Long story

Be aware of that Uppsala University is a government facility. This means we have to obey LOU, Swedish Public Procurement Act / Lagen om offentlig upphandling / SFS 2016:1145. This means we are not allowed to go down town in Uppsala to any shop and buy a computer. Or to any web-shop.

Please read the Procurement guide.

The university has a procurement division that have prepared a web site called Produktwebben with many different computers and models. Not all are appropriate to buy even if they are listed there. Technically any group/department can order from Produktwebben, but there may be other policies at the group/department, like wanting all computers to be pre-installed or of certain models to save time (and money). Please check first.

Please note! Contact your LocalIT first! Contact helpdesk@bmc.uu.se! If you do not know what you are doing and do not follow the procedures at your LocalIT / campus / department it is up to you to solve the problems this may create. It may not even be allowed.

Over time, some things have shown to be of extra importance when considering which computer to buy:

  1. The manufacturer should have at least three years support but up to five year support.
  2. The manufacturer should have next-business-day on-site-service. If the computer breaks down it is the responsibility of the manufacturer to come to us. We do not have to send the computer in to them via mail to fix it or pay for this service. This saves a lot of time and money.
  3. The computers should not be of cheapest consumer grade but built to work for a couple of years with replacement parts available. Usually all computers with three year support (or more) are not consumer grade.
  4. Windows Home edition is not supported. We prefer reinstalling computers with Windows Enterprise. Windows Pro may be acceptable if reinstalling is not possible.

At BMC-IT we have prepared some models that we find reasonable and have tested. This means we can quickly install them with operating system (multi language Windows Enterprise or macOS), all drivers, the department printers and common applications like Microsoft Office, Adobe Photoshop, Adobe Illustrator, Adobe Acrobat, EndNote, MATLAB, Symantec Endpoint Protection, ZENworks etc.

New odd PC models (like any PC model from produktwebben) that have not been tested first cannot be expected to be easily reinstalled right away. New Mac models are fine when running the latest macOS.

More information

You can read more about purchasing equipment here:
Purchase of goods and services
Direct Award Contracts (DACs)





55. How do I use AddPrinterGUI to add printers in Windows 7/8/10 x64?

See also: How do I map a network drive via SMB on Windows?
See also: What should I think about when adding my own network printer?
See also: How do I mount SMB share in Linux?
See also: How do I connect to a file server via SMB on macOS?

If you have ZENworks on the computer

Look for the app PrintGUI in the ZENworksapplication Window and start it.

Continue below with installing the printers.

If you do not have ZENworks

  1. Access the share:

    • If the computer is connected to the Active Directory at Uppsala University (USER-AD) then go to the share \\user.uu.se\BMCI\Common
    • If the computer is NOT connected to the Active Directory then the same share can be reached at \\bmcit-common.files.uu.se\BMCIT-Common or \\uuit-nasutus.its.uu.se\BMCIT-Common
  2. Either map the drive in Windows or navigate to the paths in File Explorer.

    Here is an example from Windows 10 when we navigated to \\bmcit-common.files.uu.se\BMCIT-Common:

    Here is an example from Windows Server 2008 when we navigated to \\bmcit-common.files.uu.se\BMCIT-Common:

    Here is an example how it looks like in Windows 7 when we navigated to \\user.uu.se\BMCI\Common:

  3. Enter the directory called Apps_Printers_PC. There should be a file called AddPrinterGUI.exe. Open it.

  4. You really want to start it.

Installing the printers

The application shows a list of printers. The list is different depending on what subnet (department) your computer currently is located (or computer name). To view all printers in the application click on All but usually you don't need to since all printers you have access to should show up in the list.

Choose your printer and install it by double clicking. Wait a moment for it to install.

You have to be local administrator to add a printer.

If your printer do not show up in the list

If you want printers added to the list, look in the file PrinterList.txt to understand the format, then e-mail the printers you want added to helpdesk@bmc.uu.se or tobias.holm@bmc.uu.se.

AddPrinterGUI and the drivers installed with AddPrinterGUI are only available in English.

The full list of printers

The full list of printers that AddPrinterGui is using is stored in the file PrinterList.txt in the same folder.



56. Please help with installing the software Origin!

See also: What software applications do the university have that I can install?
Origin is a proprietary computer program for interactive scientific graphing and data analysis. It is produced by OriginLab Corporation, and runs on Microsoft Windows.

Read more about Origin (software) at Wikipedia.

Uppsala University has (via the Department for Chemistry, the Department of Physics and Astronomy and the Department of Engineering Sciences) a floating site-license for Origin for 200 simultaneous users.

Download for Uppsala university, go to http://www.uu.se/goto/origin.

For questions or support contact support@angstrom.uu.se.

The easiest way to install is using Zenworks Applications.






57. How do I access PCFS over SMB using smbclient?

See also: What is the point with the zone files.uu.se?
See also: What is Rrsync (restricted rsync)? How do I access PCFS storage over rsync?
See also: How do I map a network drive via SMB on Windows?
See also: How do I connect to a file server via SMB on macOS?
See also: How do I mount SMB share in Linux?

The normal way is connect using the operating systems normal SMB-client.

However when you are on a server where that is not possible (like on HPC-clusters running Linux) you can use the command line SMB-client like this:

Please note - you have to use your own username at Uppsala University. Do not use your username at UPPMAX. This username is the same one you use for your mail, the central weblogin, UpUnet-S and EduRoam.

[jerker@rackham1 ~]$ smbclient -W USER -U jny25782 '\\imb-genomicsklt2.files.uu.se\imb-genomicsklt2' Enter USER\jny25782's password: Kinit for jny25782@USER to access imb-genomicsklt2.files.uu.se failed: Cannot find KDC for requested realm Domain=[USER] OS=[Windows 6.1] Server=[Samba 4.6.2] smb: \> dir . D 0 Thu Dec 7 15:15:46 2017 .. D 0 Mon Aug 21 15:32:43 2017 .snapshots DH 0 Thu Dec 7 15:02:19 2017 GenomicsKLT2 D 0 Wed Mar 8 14:33:25 2017 tmp D 0 Thu Dec 7 15:16:35 2017 31249987584 blocks of size 1024. 31247872768 blocks available smb: \> cd tmp\ smb: \tmp\> mkdir tmp smb: \tmp\> dir . D 0 Thu Dec 7 15:19:02 2017 .. D 0 Thu Dec 7 15:15:46 2017 tmp D 0 Thu Dec 7 15:19:02 2017 31249987584 blocks of size 1024. 31247872768 blocks available smb: \tmp\> exit [jerker@rackham1 ~]$ _





58. What is my computer name in Windows?

See also: How do I change the Mac computer name, host name and NetBIOS-name?
See also: Why did my Adobe licenses stop working?

Here are three ways of finding the computer name in Windows. On Windows this is called both PC name, computer name and hostname.

  1. Find the PC name in Preferences
  2. Find the hostname using the command line
  3. Find the computer name in the System view in the old Control Panel

Find the PC name in Preferences

  1. Click on Start button.
  2. Click on the Settings Button.
  3. Click on System
  4. Click on About
  5. Read the computer name called PC name here.

Find the hostname using the command line

  1. Click on Start button.
  2. Enter cmd and press Enther
  3. Enter hostname and press Enter
  4. The command will print the computer name.

Find the computer name in the System view in the old Control Panel

  1. Open File Explorer.
  2. Right click on This PC and choose Properties
  3. View the Computer name here.





59. After my employment at the university has finished, may I bring home my old computer?

See also: After my employment at the university has finished, may I keep my old e-mail address?
See also: How do I buy a new computer?
See also: What do I do with old computers or phones?

Unfortunately no. The computer belongs to the university even if you bought it with your research money through the university. This is the general rule.

In certain cases, if you move your employment to another government facility, like another university, it may be ok if all of the following rules match:

  1. It has to be a government facility (like a university). The computer may not be brought to a private company even if the private company do research.
  2. There has to be an agreement (understanding) between the old employer (head of department) and the new employer.
  3. The equipment has to be removed from the university (department) inventory and added to the new employers (department) inventory. The equipment will not belong to the individual but follow the normal rules of the new employer.

Also be aware that the storage of the computer usually contain sensitive data. Before scrapping or repurposing equipment you have two options;

  1. Remove the permanent storage and send it to destruction. Permanent storage may be a hard drive (HDD), a solid state drive (SSD) etc.
  2. Overwrite the whole of the permanent storage with other data on the block level. (This may take a couple of hours.)

    Please note that even block level wipe of the storage does not delete bad blocks. If the data is so sensitive that this is not acceptable the storage has to be destroyed and cannot be repurposed.

Contact BMC-IT for help with this.

From time to time, the department, campus or university may sell old equipment to the employees. But it has to be sold at market value and the costs involved have to be covered. All software licensed to the university have to be removed. For example all our versions of Windows and Office have to be removed. Instead of Windows for example Ubuntu or any other free operating system or software may be installed. In practice all of this makes it very hard to sell old equipment in an usable state at a reasonable price.

Read more in Regler för försäljning av inventarier UFV 2008/159 (local copy)


Old equipment may sometimes be valuable in itself. The computer in the picture is a PDP-12 belonging to the Update computer club at Uppsala University.






60. How do I uninstall the Zenworks agent?

See also: What is ZENworks? How to I install applications via ZENworks application window?

Zenworks is used for these major reasons:

  1. Do automatic installation of software and settings when the computer is deployed. Some of the effort in this is shared all over the university.
  2. May be used for remote interactive control by user request.
  3. Self-service installation of software by the users, even without local administrator privileges, and far away from the university network over the Internet.
  4. Do inventory. This may save a lot of time when we really need to find out exactly how many copies of a certain program are installed on the computers.

The Zenworks agent load on the computer is not much on a modern computer, but if the computer is very old and slow there are a chance to notice a performance impact. In this case you might want to uninstall the Zen agent even though this will increase the load of your local IT-support. There are often other better ways of speeding up the computer:

  1. Make sure the computer has enough RAM. Upgrade to at least 8 GB RAM so that all programs fit in memory.
  2. Replace HDD with SSD. Solid state drives are a lot faster than rotating hard disk drives.
  3. Reinstall Windows. Windows-computers seem to get slower and slower over time. An extreme example was Windows Update in Windows XP that got glacially slow over time. This has been improved with later versions of Windows but it still exists.

In the Zenworks console

Anyway. The Zenworks agent is protected from uninstallation by the settings in Zenworks. A system administrator (contact helpdesk@bmc.uu.se) has to open the client in the Zenworks console, open Settings, open Device Management, open Zenworks Agent, choose Override the System settings and enable the option Allow users to uninstall the ZENworks Adaptive Agent.

On the computer

  1. You have to be local administrator on the computer.
  2. Refresh the Zenworks agent in the task bar.

  3. Then on the computer open Programs and Features

  4. Find the Zenworks client and choose uninstall.

  5. Check the box Local uninstallation only.

  6. Do not keep anything. Do not retain CASA.

  7. Ok, go ahead...

  8. Wait for the Zenworks Uninstaller to complete.

  9. It will probably complain about not being able to remove everyting, but just go ahead and restart when done.

  10. Uninstall done.




61. What is the point with the zone files.uu.se?

See also: What is Rrsync (restricted rsync)? How do I access PCFS storage over rsync?
See also: How do I access PCFS over SMB using smbclient?
See also: How do I mount my home directory or shared storage at HNAS?

The initiative for the domain files.uu.se was taken in 2015-05 by BMC in order to get an aliases to file server shares with unique names.

For example, the file server share is named with the TLA-SHARENAME, like INV-Common. Then the CNAME will be TLA-SHARENAME.files.uu.se or INV-Common.files.uu.se pointing to the current file server where the share is located.

The reasoning behind this is the following:

  1. Get a unique name in DNS to each file server share. This will faciliate migration of file server shares to new servers.

    We (the university) had a lot of troubles with migration from the old NetApp file server to the new HNAS file servers. This zone with an extra level of abstraction in front of the real file server names was intended as a proactive way of eliminating one part of the problem in preparation for the next file server migration. It also makes it easier for those users users (research groups or department) that wish to or have to move their share from one storage system to another.

  2. Make it work for all operating systems. There is a function in the Microsoft Active Directory (with a similar goal) called the DFS that put all file server shares in a single name space. This however do not work all the time in all operating systems, like non-AD connected Windows-clients, macOS (not all of the time), Linux (it depends a lot on the configuration it do not work for example in Ubuntu out of the box).
  3. Network agnostic Get access to the servers even from other networks where needed when the USER-AD (user.uu.se) is not accessible due to using split DNS and access restrictions, like UAS, SLU, UPPMAX, HPC-centers in Sweden and maybe mobile data. It is also not a requirement to use the university resolvers, it should work even if the local resolvers are down.




62. Who is an employee and who is a student at the university?

See also: How do I activate group membership in AKKA?

There are three different major types of active identity categories at the university - students, employees and other active (övrigt verksamma).

  • A student is always a private individual and cannot act as part of the university authority (myndighet).
  • An employee is always a part of the university authority.
  • An other active is a person where the head of department (or similar) take responsibility for that the other active acts in the same way as an employee.

Persons who are students but are also working on behalf of the department should not use their Student ID but an Employee ID instead. This way the private use is separated from the use as an university employee or other active.

Persons using an Employee ID can via the catalogue get group embership controlling access to shared electronic resources belonging to the research group (file server shares, high-performance computing clusters) and other electronic resources at the university.

So why should a person use the role as an other active rather than a student?

  1. The research group leader can give the person group membership access to the shared electronic resources for the research group.
  2. The research group leader control start and stop date for the person getting acccess to the shared electronic resources.
  3. The responsibilites are clearly divided between technical access to the resource for the whole group (initially configured by a system administrator) and including the person in the shared resources for that research group (given by the research group leader).
  4. There is no additional administration by system administrators to manually provide access. This is done automatically via AKKA through the directory services (Active Directory (USER-AD) and LDAP) using groups from the catalogue.
  5. No person that has been given access is forgotten since the access is automatically removed.
  6. Depending on the computer systems that are used, a person using an employee ID and with group membership (access to shared electonic resources) will automatically get backup of important files (usually on Windows computers this includes Desktop and Documents).
  7. If a student (working on behalf of the university using their Employee ID as an other active) later will get employed all data is already at the right place and with correct ownership. Otherwise the data would have to be moved from their old place to the new and change ownership from the old Student ID to the new Employee ID.

Please read more:

Active category In AKKA controlled by department Type of ID Physical access to department Group membership in AKKA Visible in catalogue
Student No Student ID No No No
Employee Yes Employee ID Usually Yes Usually Yes Usually Yes
Other Active Yes Employee ID Yes or No Yes or No Usually No




63. My computer has got a virus! What do I do?

See also: What is ransomware and CryptoLocker?
See also: How do I install anti-virus software on macOS?

Contact helpdesk@bmc.uu.se for advice.

First, if the anti-virus program catches the virus, it is usually not a big problem and the infected file may have been put in quarantine.

These instructions are mainly meant for Windows.

Try to clean the computer with Symantec Endpoint Protection and McAfee Stinger

  1. Run LiveUpdate in SEP again. If there is a new definition now SEP might be able to clean up the file.
  2. Run Full Scan in SEP.

  3. If the files are in quarantine, open with View Quarantine in SEP.
  4. Delete permanently or clean the files
  5. Download another antivirus tool. We recommend McAfee Stinger. Download a new version directly from McAfee which includes updated virus definitions. Do not download tools from unknown sources if you do not trust them.

  6. Wait for it to complete.

  7. We seem to be safe.

How do I enable and test the Symantec Endpoint Protection?

  1. Open Symantec Endpoint Protection
  2. Make sure the Status is green like this:

  3. Test by going to EICAR site and download a test-virus. You may have to download the Zip to even be able to get it to your computer.
  4. SEP should print a warning message when trying to run the test-virus.

  5. And also show a detection result window:

How to fix the computer to be safe?

Computers that have been running with a virus or trojan usually download a lot more trojans and viruses. It is really hard to clean them all. To be sure, reinstall computer.

  1. Contact helpdesk@bmc.uu.se for advice. How to do this the most efficient way depend on the computer and environment. For example, if all files are on the file servers then just reinstall computer.
  2. Get a new (or an other unused) harddrive.
  3. Replace the old harddrive with the new one.
  4. Install operating system and applications on the computer using the new hard drive.
  5. Copy files from the old hard drive to the new computer while checking them for viruses.




64. My Windows 7 computer is stuck in a Windows Update loop!

See also: How do I temporarily disable an update in Windows 10?

Windows 7 in particular sometimes get stuck during updates. Windows will try to install the updates, then revert, and they try again. After a few iterations in this loop it will allow the user to login.

Microsoft has the following instructions regarding how to try to fix problems with Windows Update: How do I reset Windows Update components?

The easy way out is just to temporarily block the offending update. This will give you some time until the next cumulative update shows up. Hopefully Microsoft has fixed the problem then.

  1. Start Windows Update.

  2. Check for Updates

  3. Select the important updates.

  4. Hide the problematic update.

  5. It will be grey in the list...

  6. ...and show up in Restore hidden updates.





65. How do I temporarily disable an update in Windows 10?

See also: My Windows 7 computer is stuck in a Windows Update loop!
Please read more at Microsoft about: How to temporarily prevent a Windows Update from reinstalling in Windows 10
To temporarily prevent the update from being reinstalled until an updated fix is available, a troubleshooter is available that provides a user interface for hiding and showing Windows Updates and drivers for Windows 10. You can obtain and run the "Show or hide updates" troubleshooter by downloading it from the Microsoft Download Center:

Download it here: http://download.microsoft.com/download/f/2/2/f22d5fdb-59cd-4275-8c95-1be17bf70b21/wushowhide.diagcab




66. How do I merge PDF documents with PDF-Xchange in Windows?

See also: What software applications do the university have that I can install?
See also: How much do Adobe Photoshop and Illustrator cost?
See also: How do I merge documents with Preview in macOS?
See also: How do I convert EPS to PDF in Windows and macOS?
See also: What about the quality of a created PDF document?
  1. Install PDF-Xchange PRO via the ZENworks Application Window:

  2. Wait for it to install.

  3. Opening the Zenworks Progress window by right clicking on the ZENworks icon in the mini-taskbar show the installation progress. This is optional.

  4. PDF-XChange will launch directly when installation is done. It will ask you if you want to use it as a default PDF application. You can do that, but it is optional.

  5. Start from the menu File (Fil) - New document (Nytt dokument) - Combine Files into a single PDF...

  6. Pick Add Files (Lägg till filer...). You can choose several at the same time.

  7. Press OK. You now have the new document in PDF-Xchange.
  8. Click the Save icon or Save as... (Spara som...) in the menu.

  9. Pick a name and click Save (Spara). The documents should now be merged in the new file.
  10. Done!




67. How much memory does my Mac have? Can I get more? How much do I need?

See also: How do I find the serial number on macOS?
See also: Should I upgrade to the latest version of macOS?
  1. Go to the Apple menu and go to About this computer or Om den här datorn.

  2. Check Memory in GB too see what is currently have. Example with macOS Yosemite and 16 GB.

  3. Open the Memory tab to see how the memory banks are populated:

  4. The more memory the better:
    Tasks
    Memory Writing, Web browsing, Mail Running Virtual Machines with Windows Several Virtual Machines, MATLAB with large datasets, Photoshop with very large images, building large apps locally etc
    2 GB RAM Upgrade (works but very slowly - one task at a time) Upgrade (not possible) Upgrade (not possible)
    4 GB RAM Ok Upgrade (works but really slow hard to work in both at the same time) Upgrade (not possible)
    8 GB RAM Great Ok Upgrade (works but slow)
    16 GB RAM Great Great Ok
    32 GB RAM Great Great Great
  5. Find out what model you have. Example from above Mac mini (middle 2011)
  6. Send a message to helpdesk@bmc.uu.se. Supply the following information:
    1. What model the Mac is (see above)
    2. How much memory it currently have (see above)
    3. What room it is in. (Check your room number above the door)
    4. Payment details. (The research group leader and research group name)
    5. Your contact information (phone number) unless it is in the university catalogue.
  7. As Local IT (or interested user) Go to a website with all Apple models and their memory upgrades. Here are two examples from two memory manufacturers:

    At EveryMac you can also see the highest version of the operating system that is possible to run.

  8. As Local IT: Buy memory via produktwebben.

    Please note, this is done by the Local IT. Do not do this unless you really know what you are doing. And then you are on your own if the memory do not fit or something else goes wrong.

  9. As Local IT: Install memory on the Mac.

Troubleshooting

  1. Reset the Mac parameter memory. After rebooting try and hold down these four keys together until it reboots again:
    Cmd/Command/⌘-Alt/Option/⌥-P-R
  2. Change the order of the memory physically. This may just clean the oxide from the connectors.
  3. Remove the memory modules, one at a time, and run the computer with the remaining memory to see of this solves the problem. Replace the faulty memory module.




68. There is a problem with my screen

Regarding Apple products:

  1. About LCD display pixel anomalies for Apple products released in 2010 and later
  2. About LCD display pixel anomalies for Apple products released before 2010

Different type of problems:

Here are examples of screen problems picked from HP support. Visit their excellent guide for further information. Here are some highlights.

The screen is unsharp or stretched.

It may be so that the computer resolution do not match the screen resolution.

  • Restart computer
  • For Windows, change screen resolution to the one recommended for the screen by right clicking on background and pick the correct one.

  • For macOS, open system preferences and the screen tab and change resolution to the one recommended for the screen.

Some pixels are dead.

The vendors usually have certain amount of allowed dead pixels on a screen. In practice one often have to live with it if the number is low.

There are vertical or horizontal lines permanently on the screen.

This is a hardware problem that cannot be fixed without replacing the screen.

The screen is bleeding along the edges or corners

  1. This is a hardware problem that cannot be fixed without replacing the screen or parts of the screen. If it is really bothering then get a new screen.
  2. For old thick CRT-screens disconnecting the screen over the night could help. However, for modern LCD/LED-screens we have still not heard that that should help.

On Mac, colors in the background is bleeding through front window

The Yosemite GUI introduces transparency for window. For example here in Safari top of window (red) and right side (brown):

Fix by activating Reduce transparency in Accessibility preferences.





69. I cannot read my USB-drive. What do I do?

Drive is ok but has lost power a bit too much

If the drive can be seen (accessed) by the computer but cannot be read (open file system), I would try to check the file system of the drive.

I assume the drive is using a DOS or NTFS file system (this is the standard file system for Windows).

  1. Open Start-menu and click on Computer.
  2. Right-click the drive that you want to check and click Properties.
  3. In the Tools-tab, under Error checking, click Check now. Enter administrator password.

Cabinet is broken but drive is ok

Secondly, if the drive cannot be seen at all, maybe the electronics in the cabinet is broken but the drive is OK. Contact helpdesk@bmc.uu.se to get help.

  1. You can do this yourself too. Send a mail to helpdesk@bmc.uu.se and ask for a spare SATA-USB-adapter if you do not have one. The internal SATA-port and SATA-power in a PC might work too (only connect when the computer is turned off).

  2. Open the USB-drive cabinet and remove the drive.
  3. Insert the drive into the SATA-USB-adapter and connect the USB to the computer.
  4. Open file system and read your files.

Broken drive with bad blocks

If the drive has bad blocks and is generally messed up, reading the blocks one by one may help.

  1. Run Linux on a computer. Contact helpdesk@bmc.uu.se to get help if you cannot do this yourself.
  2. Use the tool ddrescue to create a block image of the drive.
  3. Also HDD Raw Copy Tool may be used to take a complete copy of the device.
  4. Take the file and write it to a disk or virtual device. (A copy of the file).
  5. Try to read the file system in Windows and perhaps check the file system.

Files has been erased by mistake

  1. The tool TestDisk (read about TestDisk on Wikipedia) can be useful for partition recovery and deleted files recovery.

Drive show transient errors

Some USB-drives with transient errors may not work in Linux or Mac but work in Windows. And where File Explorer in Windows times out and is amost unusable, RoboCopy may prevail.

Here is an example copying files from the D: drive into another directory, retrying a copyple of times and excluding the recycle bin.

robocopy d:\. c:\recover\. /E /R:10 /W:1 /XD "$RECYCLE.BIN"

Almost all hope is gone

Send it to a company that can rescue broken drives by for example changing the electronics from another identical drive. This does cost a lot of money. IBAS is one of them.

If the drive plate is confetti even these companies cannot help you.



70. How do snapshots in the HNAS file server work?

See also: We need more storage! Do you have a file server we can use?
See also: How do I mount my home directory or shared storage at HNAS?

The HNAS file server saves old versions of files so that any user can retrieve them.

The default snapshot time schedule looks like this: (2017-06-21)

  • Every 15 minutes for an hour
  • Every hour for a day
  • Every day for a week
  • Every month for two months

In Windows open Properties of a file or folder and then in the Previous versions tab pick an appropriate version.

In macOS mount with an extra /~snapshot in the path to access the snapshots folders. Use your own university account instead of the example below.

Then enter the appropriate folder to search for the lost version.





71. My Outlook do not start! What can I do?

See also: I have several employers at the university and I would like to change my primary email address!
See also: Troubleshooting mail - what can I do and whom do I ask?

Run Outlook in safe mode and will repair and start again.

You can also hold down ctrl when starting Outlook or you can start Outlook with the argument /safe like this:

Follow the instructions from Microsoft on how to Open Office apps in safe mode on a Windows PC.



72. What is the cost of a PC file server?

See also: How do the different types of storage compare to each other?
See also: We need more storage! Do you have a file server we can use?
See also: What service levels does BMC-IT have compared to others at the university?
See also: We have a server, where should we put it?

Please note! BMC-IT has a PC storage solution service. Read more in the SOP - Common service PC file server. Also note that for home directories we recommend using the IT-division HNAS file server.

These are examples of the costs of buying and maintaining a PC file server. The example below includes a server from Supermicro and one from HP. HP includes on-site support, Supermicro do not. Please note that TSM-backup is not included in these figures! (Prices updated in September 2016.)

  • Very cheap Good for lots of data when the price has to be low.
  • Acceptable speed Good bandwidth - can receive and send 1 Gbit/s (or 10 Gbit/s with appropriate network and multiple clients). Since the drives are rotating HDD, relative SSD the latency is high and IOPS are lower. But it works fine with large files.
  • Low availability BMC-IT in general only do support during office hours. If the PC server totally breaks down (it may happen!) it will take some time to get service or spare parts or restoring from backups. Compare this with the IT-division HNAS file server which has built in redundancy.
  • Linux and Active Directory These examples uses Linux (preferably CentOS 7) as an operating system and connects to the university Active Directory and works as a file server using Samba. More complex setups than this may need extra time to set up and maintain. For example running a Windows server instead of Linux requires extra costs for licenses.

This is a Supermicro file server with enterprise drives. Includes ship-in support from Southpole.

Normal HP file server with enterprise drives, three year next business day on-site support from HP.

This is a Supermicro file server with archive drices.

Cost of a rack unit per year: 1250 (full rack) or 2000 (single machine) SEK
Number of rack units in the server room:
(If no new space is needed, set a 0 here)
U
Cost for the server with no drives: SEK
The number of drives: drives
Size of the drives: TB
Number of years to run the server
(warranty)
years
Cost of each drive: SEK
The number of working hours spent each year:
(system administration and support)
h/year
The cost of a working hour: SEK/h
The part of the raw storage that is usable:
(RAID6 (two parity drives) on five drives equals 0.6.)
usable storage factor

Purchase cost SEK.

Raw storage TB.

Usable storage TB.

Yearly cost SEK/year over years (includes everything)

Cost for raw disk SEK/TB/year.

Cost for usable storage SEK/TB/year.

Two identical file servers (one for backup using snapshots / shadow copy) would cost SEK/TB/year

Two servers (as above) and a cold standy (no drives) would cost SEK/TB/year





73. How do I change Windows offline files disk usage?

See also: How do I use offline files?
  1. Start Manage Offline Files from the Start menur via Sync Center.

  2. Open the Disk Usage tab:

  3. Open Change limits. You have to be local administrator in order to do this.

  4. Change the settings.





74. How do I use offline files?

See also: How do I access my home directory?
See also: How do I change Windows offline files disk usage?

What are offline files?

Short story: It lets you always have access to your files even when not connected to the file server at the Uppsala University network.

Long story: Windows has a feature for making files on a file server available offline even when the connection to the file server is lost. The client stores the files in a offline cache. Changes in the file when offline is stored locally. When the computer or server is back online the data is synced to the server. This works well on files a single user changes but not so well on shared folders where different users make changes on the same files.

Enable offline files

  1. New computers installed and maintained by BMC-IT has offline files already enabled.

  2. In the start-menu, type offline to find and start Enable offline files On this computer the administrator (BMC-IT) has already activated it.

  3. In the Offline Files window, click on Enable offline files.
  4. Restart computer for the changes to take effect.

Make files or folders available offline

  1. The default settings make the folder redirected folders always available offline. This includes Desktop, My documents, AppData etc. For normal use when all data is saved in these locations.

  2. It is possible to get other folders in the home directory available offline. In Explorer, right click on a folder or file and then choose Always available offline.
  3. The shared folders with other users should not be used with offline files. It is technically possible but may lead to conflicts.

View offline files

  1. In the window Offline files (see above) choose the button View your offline files.

  2. Here is a representation of all files available offline. Enter the different directories to see what has been picked up.

Keeping an eye on what's going on

  1. Open the task bar notification window for offline files. It looks like a green recycle circle.

  2. Right click to for example View conflicts

  3. Since the notification did not show a warning there are no conflicts:

Conflicts and how to handle them!

  1. However, we can provoke a conflikt.
    1. Go offline by pressing Work offline in the file explorer.

    2. Change a file on your computer.
    3. Change the same file on another computer.
    4. Then Work online again on your computer.

    5. The status notification should now show a conflict:

    6. Thge View Conflicts dialog now show the file where there is a conflict:

    7. By right-clicking on the file and show View options to resolve... Windows try to help with what to do:

    8. Keeping both versions make both show in the file explorer:





    75. How do I use Eduroam, the wireless network, in Windows?

    See also: What Internet bandwidth does the university have?
    See also: Connect to eduroam using iPhone with iOS 10

    For manual installation follow this guide.

    With ZENworks you do like this.

    1. Start ZENworks application window and open Eduroam

    2. Wait for installation. It will not take long.
    3. Windows will ask for user and password

    4. Enter your username followed by @user.uu.se and your password B. This is not the password you use for logging in to your computer but the other one.

    5. If you have disconnected from Eduroam and want to connect again open the wireless connections in the taskbar and click on Eduroam.





    76. How to use WinSCP to access files over SCP on Windows

    SCP is encrypted making this a relatively secure way to access files even from home or over WLAN (wireless network).

    1. Download and install WinSCP from http://winscp.net/eng/download.php or open it in ZENworks application Window.
    2. Login on the server, in this example neuro-l2.neuro.uu.se using your username and password A.

    3. Accept the host key.

    4. Access your files. This is your home directory. If this is on a file server where the group store data. you should not put stuff here.

    5. Change directory into the share for your group. On this particular server the shares are located in /data/hl, /data/kl2 etc. Go here by clicking on the / in the location and then on data.

      Or click on this little icon first and then on data.





    77. How do I look in the event log in Windows?

    In the event log Windows stores events that happened on the computer. For example - who has logged into your computer and when.

    First start Event Viewer.

    Then find the Security log and scan for interesting events.

    Using the Filter Current Log... feature it is possible to only display events of a certain type.

    To catch all logon events there is a setting in the group policy to activate auditing of these. Start up gpedit and change Computer Configuration / Windows Settings - Security Settings - Local Policies - Audit Policy - Audit login events. This is the setting you wish to change:

    Audit both Success and Failure.

    It should look like this after you are done:





    78. How do I activate my Office using KMS?

    See also: How do I start an elevated command prompt (as administrator) in Windows?
    See also: How do I force activation of Windows 10 using KMS?

    Microsoft Office 2010, 2013 or 2016 on Windows 7 or Windows 10 connected to the USER-AD, the university Active Directory (using the university accounts), should automatically activate on the university network.

    If it does not work or if the computer is not part of the Active Directory, follow these steps:

    1. Connect computer to the wired network at your department.
    2. Start an elevated command prompt window - run cmd (command prompt) as administrator. Please see the FAQ How do I check if I am a local administrator in Windows? on how to do this.
    3. Enter the Office installation directory (
      Office 2010 (32-bit)
      Enter the Office installation directory with typing cd c:\Program Files (x86)\Microsoft Office\Office14
      Office 2013 (32-bit)
      Enter the Office installation directory with typing cd c:\Program Files (x86)\Microsoft Office\Office15
      Office 2016 (32-bit)
      Enter the Office installation directory with typing cd c:\Program Files (x86)\Microsoft Office\Office16
      Office 2016 (64-bit)
      Enter the Office installation directory with typing cd c:\Program Files\Microsoft Office\Office16
    4. Run the activation script:
      1. First try to run the command cscript ospp.vbs /act. (Read more about this here: Tools to manage Office 2013 volume activation.)
      2. If the computer cannot find the KMS-server (you may be behind NAT in a virtual machine) you can try the command: slmgr /skms kms.user.uu.se first and then the command slmgr /ato to activate (Windows) or cscript ospp.vbs /act (just Office).

        To find the correct host (currently 2016-05-30 kms.user.uu.se) follow these instructions: How to discover Office and Windows KMS hosts via DNS and remove unauthorized instances

    5. Close the command prompt window.

    If an old version if Windows in some way managed to block the new installation, then run the EasyFix uninstall tool from Microsoft

    1. Uninstall Office 2016, Office 2013, or Office 365 from a PC using the easy fix tool (Really useful if you have an Surface Pro or any other new computer with pre-installed Office 365 that you want to get rid of!)
    2. Uninstall or remove Office

    It is possible to do a manual uninstall of Office





    79. How to downgrade to Java 7 for Windows

    See also: How do I downgrade to Java 6 for Mac?

    Some applications at the university (like Raindance and NyA) do only work with the soon obsolete Java 7 and not the current (2015) Java 8.

    1. First go to Programs and Features.
    2. Uninstall Java 8

    3. Go to the download Java 7 page.
    4. Save as.

    5. Save as File Name with .exe in the end

    6. View downloads, open folder, run and install.
    7. Remember to not install the Ask tool bar. Uncheck it.

    8. Done.




    80. How do I access my home directory?

    See also: How do I mount my home directory or shared storage at HNAS?
    See also: How do I use offline files?
    Open the Explorer in Windows and look for X: and P:. Store your personal stuff on the file server in X:. The P: is used for shared (public) storage between members in a group or at the university.

    If should look like this:

    On some computers (all the new ones) the desktop is also stored on the file server. Check if you put stuff on the desktop it also shows up on X:\Desktop.



    81. My Save as dialog doesn't show the desktop!

    In Windows, sometimes some of the favourite save as locations may have been removed. This is how to restore them:

    1. Right click on Favorites

    2. Choose Restore favourite links

    3. Now the Desktop should be back.




    82. How do I overwrite deleted data in Windows?

    See also: How do I take backup of the data on my computer?
    See also: How to use the IBM Spectrum Protect (Tivoli Storage Manager aka TSM)

    Microsoft Windows has a tool called cipher which can erase (fill with zeroes) unused space on the harddrive, including already removed files.





    83. How do I install EndNote?

    See also: What is the cost for EndNote? What is Zotero? And Pages?

    To do a manual installation of EndNote, contact helpdesk@bmc.uu.se. Also get approval from the one with the money.

    EndNote can be installed via ZENworks in Windows, just click on icon in ZENworks application window like this. An email will be sent to helpdesk@bmc.uu.se who will arrange licensing.

    Accept the cost:





    84. How do I access my work-computer from home?

    See also: How to connect with VPN using AnyConnect in Windows
    See also: How do I mount my home directory or shared storage at HNAS?
    1. Find out if you need access to the files or the actual computer running programs on it.
    2. If you only need access to the files, then it might be easier to store the files on a file server. Access the files in a secure way from home over VPN connecting to the file server.
    3. If you need access to the computer to be able to run programs on the computer, then:
      1. Allow someone to connect to your computer using Remote Desktop Connection. (Read HOWTO in Swedish or Read HOWTO in English)
      2. Lock the computer to a specific IP (Contact your Local IT, computer name, your current IP and MAC-address)
      3. .. and open in the router filter so that you can run remote desktop from the VPN to the computer. (This is also done by your Local IT.)

    Mac

    In Mac, get Microsoft Remote Desktop which is free in the App Store.

    Add a new host hosts with login (with the windows domain) and password and then Start!

    Remember to add the Windows domain in for example the format username@domain, if the host is connected to a Windows domain.

    Windows

    In Windows, start Remote Desktop Connection and enter the details and then Connect.

    Linux Ubuntu

    Install rdesktop and run for example this command:

    rdesktop -p MySecretPassword -u _jny25782-T -d USER -x 0x80 -g 1800x1100 -k sv dcts.user.uu.se
    





    85. How do I start Primula? (or install a new version)

    1. Open Zenworks Application Window

    2. Find the Pimula Icon in the ZENworks Window

    3. Doubleclick to start. If this is a new version you have to wait a bit for it do download and install first.

    4. Next time, Primula can be started from the Start Menu in Windows. Primula has an automatic upgrade function, but it does not always seem to work. To install a new version, follow this instruction again.





    86. Print using locked print on Windows

    See also: Print using locked print on macOS
    See also: Print using UserCode for Ubuntu
    1. Open print dialog for a Ricoh printer.
    2. Open preferences.
    3. Chose Locked Print at Job Type.

    4. Open Details...
    5. Enter user-ID (your own) and password (unique)

    6. Print using these settings.
    7. Go to printer and enter the password to get the printer to print.




    87. How to create a local Windows user

    1. You need to be local administrator on the computer for this to work. If you are not then contact helpdesk@bmc.uu.se for help.


      Please note local accounts with local files will not be backed up!

    2. Start computer management:

    3. Go to System Tools and Local Users and Groups and create a New User...

    4. Enter the details. Use a password with more than 10 characters.

    5. Now the user is created.

    6. Opening Properties for the user and add the user to the local group Administrators:

    7. Find the administrators group by typing administrators, press Check Names and then confirm with OK.

    8. It should look like this - the user is member of the local administrators group:

    9. Logout and login with .\labuser (Not the .\ in the beginning so it is a local login and not a Windows-domain user) and the new password.

    This documentation is covered by GNU Free Documentation License. 222 ms