DO THE FOLLOWING:

1.  Enable Automatic Updates and Check for Updates Now:  Go to the start menu, click on “All Programs” and choose “Windows Update.”  A window will open, and on the left side click on “Change settings.”  Select “Install Updates Automatically” and set it to “Everyday.”  (Pick a time of day when your computer will be on but you will not need to use it).  Check the boxes for “Recommended Updates” and “Update Service.”  Hit the “OK” button at the bottom.  On the Windows Update screen, click on “Check for Updates” and install anything it says you need.

2.  Install Anti-Virus Program (if you have none currently):  Go to http://home.purchase.edu/departments/CTS/enterprise/symantec.aspx.  At the bottom of the page, you will find free anti-virus downloads.  You will need to log in with your Purchase College username and password in order to download a copy.  Be sure to download the version that corresponds to your computer, run it, choose to install the “Symantec Endpoint Protection” and then choose all the default options.  You will need to restart the computer after it finishes.

3.  Check the Version of Vista:  Right click on “My Computer”, and a drop down menu will appear.  Choose “Properties” which will be the bottom option.  A new window will appear, and under the “System” section there is a “System Type:” field.  If the system type is “64-bit Operating System” you will need to bring it down to CTS in order to fully pass.  Our office is located in the basement of the Social Science building, room 0025.  Office hours are Monday-Thursday from 8 am to 10 pm and Friday 8 am to 7 pm.  “32-bit Operating System” will be able to pass without direct CTS involvement as long as you follow the instructions.

If you’ve done the steps above and Still Secure gives you an error message, solutions to most common problems are listed below.

TROUBLESHOOTING:

• Missing Service Pack 1
- Windows Updates may not automatically suggest installing SP1.  Ttherefore, it must be manually downloaded from Microsoft’s site: http://www.microsoft.com/Downloads/details.aspx?familyid=B0C7136D-5EBB-413B-89C9-CB3D06D12674&displaylang=en.
- Make sure the power adapter is plugged in.
- If SP1 fails to install, often times the problem is that certain anti-virus/spyware programs block registry entry changes.  Uninstall “Spybot” / “SpySweeper” if present, and try again.

• Missing Anti-Virus Software
- Check your current software, and if there is another anti-virus program present (some other version of Norton/Symantec, McAfee or AVG trial versions, or something else that doesn’t qualify for Still Secure), uninstall it, uninstall any “Live Update” component as well, restart the computer ,then install the Purchase College version of SYMANTEC ENDPOINT PROTECTION.  The installer is a self extracting executable file called “SYMANTEC ENDPOINT PROTECTION32.exe” that can be downloaded from the student services page.  (~20 minute install)
- It’s possible some Norton products will fail to uninstall.  You can go to http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039 and download the Norton Removal Tool and run that.  You will need to download new copies often as any previously downloaded removal tool expires after a week or so.

• Windows Defender is Present, but a Scan Has Never Been Performed
- Open Windows Defender, and on the little down arrow next to the “Scan” button, choose “Full Scan.”  (Just hitting the scan button does a “Quick Scan” which does not work).

• Anti-Spyware Software is not Installed
- Ensure SYMANTEC ENDPOINT PROTECTION is installed and running.

• Windows Hotfix 936782 is Missing
- This is a Vista hotfix for Windows Media Player.  It cannot be installed.  Still Secure should “fail” but grant a temporary pass if this is the only problem left. 

• Unable to Install the Still Secure (NAC) Agent
- Put https://10.0.248.195:89/setup.exe in the browser, and it will download the agent directly.  Then launch the installer.  Once it is installed, try retesting.
- You already have the agent installed, but it keeps trying to reinstall it instead of testing.  Go to Add/Remove programs, uninstall NAC Agent.  Go to “Windows Firewall”, make sure it is turned on, go to Advanced tab and reset it to the default settings.  Reinstall the agent, and try testing again.

NOTE: If you are unable to obtain Internet access after completing steps above, please contact CTS at 914-251-6465 Monday-Thursday 8am-10pm and Friday 8am-7pm.  Please be sure to have the following information available before calling:
 
IP or IPv4 address: ____________________________

MAC or Physical  Address: ______________________

Default Gateway:_____________________________
Port/Jack Label: ______________________________

To find the requested information, do the following:
Go to the Start menu, and in the search box at the bottom of the menu ,type in cmd and hit enter.  A black command prompt window will open.  Type in ipconfig/all then hit enter.  A list of information will appear on the screen.  The information you need to provide is listed under the header “Ethernet adapter Local Area Connection:”  

Please also provide the port/jack label of the Internet jack you’re plugged into in your room as well.  There should be a little sticker on the panel itself with numbers, letters and dashes.  You will need to provide this number to CTS.

Preparing Windows XP for Still Secure

DO THE FOLLOWING:

1.  Enable Automatic Updates:  Right-click on “My Computer” and select “Properties” from the drop down menu.  When that new window opens, click on the “Automatic Updates” tab and enable automatic updates to happen “Everyday.”  (Pick a time of day when your computer will be on but you will not need to use it).

2.  Run a Windows Update Now:  Go to the “Start” menu, click “All Programs” then choose “Windows Update.”  It will open an Internet Explorer window on Microsoft’s site.  You may need to enable “Active X Control” at the top of the Web page.  Choose “Express install” and click “Install Updates” for anything it wants to install.  You may need to restart the computer afterwards.

3.  Install Anti-Virus Program (if you have none currently):  Go to http://home.purchase.edu/departments/CTS/enterprise/symantec.aspx.  At the bottom of the page, you will find free anti-virus downloads.  You will need to log in with your Purchase College username and password in order to download a copy.  Be sure to download the version that corresponds to your computer, run it, choose to install the “Symantec Endpoint Protection” and then choose all the default options.  You will need to restart the computer after it finishes.

If you’ve done the steps above and Still Secure gives you an error message, solutions to most common problems are listed below.

TROUBLESHOOTING:

• Missing Service Pack 3
- Make sure laptop (if you are using one)  is plugged into the power adapter, and install SP3 (~1 hour)
- If SP3 fails to install, often times the problem is that certain anti-virus/spyware programs block registry entry changes.  Uninstall “Spybot” / “SpySweeper” if present, and try again.

• Missing Anti-Virus Software
- Check your current software, and if there is another anti-virus program present (some other version of Norton/Symantec, McAfee or AVG trial versions, or something else  that doesn’t qualify for Still Secure), uninstall it, uninstall any “Live Update” component as well, restart the computer, then install the Purchase College version of SYMANTEC ENDPOINT PROTECTION.  The installer located at http://home.purchase.edu/departments/CTS/enterprise/symantec.aspx at the bottom of the page.  Be sure to download the version that corresponds to your computer, run it, choose to install the “Symantec Endpoint Protection” and then choose all the default options.  You will need to restart the computer after it finishes.  (~20 minute install)
- It’s possible some Norton products will fail to uninstall.  You can go to http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039 and download the Norton Removal Tool, and run that.  You will need to download new copies often as any previously downloaded removal tool expires after a week or so.

• Windows Defender (Anti-Spyware Program) is Present but a Scan has Never Been Performed
- Open Windows Defender, and on the little down arrow next to the “Scan” button, choose “Full Scan.”  (Just hitting the scan button does a “Quick Scan” which does not work).

• Anti-Spyware Software is not Installed
- Ensure Symantec Endpoint Protection is installed and running.

• Windows Hotfix 950760 is Missing
- This hotfix is not available via Windows Update.  It must be manually downloaded from Microsoft’s site at http://www.microsoft.com/downloads/details.aspx?FamilyId=2D8957C2-E473-4DCA-8D68-19FDAEA36E26&displaylang=en.   

• Unable to Install Still Secure (NAC) Agent
- Put https://10.0.248.195:89/setup.exe in the browser, and it will download the agent directly.  Then launch the installer.  Once it is installed, try retesting.
- If agent is already installed but it keeps trying to reinstall it instead of testing, go to Add/Remove programs, and uninstall NAC Agent.  Go to “Windows Firewall”, make sure it is turned on, go to Advanced tab and reset it to the default settings.  Reinstall the agent, and try testing again.

NOTE:  If you are unable to obtain Internet access after completing steps above, please contact CTS at 914-251-6465 Monday-Thursday 8am-10pm and Friday 8am-7pm.   Please be sure to have the following information available before calling:

IP address: __________________________________
MAC or Physical  Address: ______________________
Default Gateway:_____________________________
Port/Jack Label: ______________________________

To find the requested info, do the following:
Go to the start menu, click on “Run” and type cmd then hit enter.  A black command prompt window will open.  Type in ipconfig/all then hit enter.   A list of information will appear on the screen.  The information you will need is listed under the header “Ethernet adapter Local Area Connection:”  
 
Please also provide the port/jack label of the Internet jack you’re plugged into in your room as well.  There should be a little sticker on the panel itself with numbers, letters and dashes.  You will need to provide this number to CTS.

Preparing MAC OS X for Still Secure

DO THE FOLLOWING:

1.  Check for Updates and Schedule Automatic Updates:  Go to the little apple icon in the top left corner of the screen.  Click on it and choose “Software Updates.”  It will open a window and start checking for updates.  Once it finishes, choose to download and install everything it suggests.  You may need to restart your computer.  Click on the “Software Update” dropdown menu at the top left of the screen while the Software Update window is active.  Choose “Preferences” and when that window opens, check the boxes for “Daily” updates and download them.

2.  Install Anti-Virus Software (Yes, Macs get viruses.):  Go to https://studentservices.purchase.edu and scroll down to the bottom of the page.  Click on the link that says “Symantec Anti-Virus.”  After logging in with your Purchase username and password, you will be directed to a page with links to download a free copy of Symantec Endpoint Protection.  Download the Mac OS version that corresponds to your computer, run it, choose to install the “Symantec Endpoint Protection” and then choose all the default options.  You will need to restart the computer after it finishes.

If you’ve done the steps above and Still Secure gives you an error message, solutions to most common problems are listed below.

TROUBLESHOOTING:

MAC OS X:
• Almost all Macs “should” pass as long as you have done all your Apple Updates and have an anti-virus program installed.
• Most Mac problems you will see are:
- “Please Begin Testing” or “Please Install Agent” page keeps refreshing every time you try to test or install.
- Install the NAC Agent package located at https://10.0.248.195:89/OSXNACAgent.zip
- Retest

- “Please Begin Testing” . . . followed by the pinwheel spinning for 1-5 minutes.   Followed by a white Internet page with an error message to the effect of “The server timed out” or “The server couldn’t be reached.”
- This is actually Still Secure passing the Mac.  It just doesn’t give a success message.  You get a 10.200 IP address, and if you to go to an Internet page from that error page, it will work.

- Sometimes the test will loop and/or not run.  Usually this is because there is not an exception for Still Secure in the firewall, and it is blocking the communication.  Go to System Preferences > Security > Firewall and disable the firewall temporarily, then run test.  (In 10.4 it is System Preferences > Sharing > Firewall.)

MAC OS 9 :
• Computer should be upgraded to Mac OS X if the hardware allows it, and follow instructions for Mac OS X.
• If not, then bring laptop to CTS (Social Science building, room 0025).  Hours are Monday-Thursday from 8 am to 10 pm and Friday 8 am to 7 pm.

NOTE: If you are unable to obtain Internet access after completing steps above, please contact CTS at 914-251-6465 Monday-Thursday 8am-10pm and Friday 8am-7pm.  Please be sure to have the following information available before calling:
IP address:________________________________
Default Gateway:__________________________
Choose the “Ethernet” tab and provide the following:
MAC or Ethernet ID:____________________
Port/Jack Label:________________________

To find the requested info, do the following:
Go to the apple in the upper left corner, and choose “System Preferences.”  Open “Network” and on the “Show” dropdown menu, choose “Built in Ethernet.”  Down below, choose the “TCP/IP” tab. 

Please also provide the port/jack label of the Internet jack you’re plugged into in your room as well.  There should be a little sticker on the panel itself with numbers, letters and dashes.  You will need to provide this number to CTS.