Pelco dx8100 manual Operating System Security, Windows Operating System Updates

OPERATING SYSTEM SECURITY

Upon a successful boot procedure, the DX8100 will automatically load the Windows® 2000 or Windows XP Embedded operating system. These operating systems are specifically tailored for use on the DX8100. It does not have the standard feature set found in the commercially available version of the Windows 2000 or Windows XP Embedded operating system. This means that services that are not needed for the correct operation of the DX8100 have been removed to eliminate potential vulnerabilities.

Only two user accounts are available in the DX8100’s operating system software. These user accounts should not be confused with the accounts assigned by the DX8100 application software. An administrator account allows a designated user to make changes to the registry and security settings to accommodate the requirements of the specific site.

In finding a balance between security and functionality, Pelco has consistently opted for security but leaves it up to the administrator to unlock features that might be useful if the administrator has determined that the additional security of the lockdown is not needed. A typical example of this is the capability of the DX8100 to use dynamic IP addresses. Because IP addresses can change over time, clients must use a different mechanism to connect to the server than by simply providing an IP address. The additional use of NetBIOS protocol services allows the computer to find IP addresses on the local LAN by system name; it should be noted that this also creates a known vulnerability. To allow the end user to use the NetBIOS feature, the services are activated at the factory, but they can be disabled by an administrator when needed. When NetBIOS services are activated, the administrator needs to apply alternative means to protect against hackers and viruses such as a firewall. Please check with your information technology specialist or contact Pelco Product Support for further instructions.

WINDOWS OPERATING SYSTEM UPDATES

Due to the lockdown of nonessential services on the DX8100, administrators are advised against installing every operating system upgrade published by Microsoft®. The majority of these updates are not applicable to the DX8100. Pelco will provide a list of approved updates upon request.

WINDOWS 2000: CHANGING THE ADMINISTRATOR PASSWORD

This section describes how to change the Windows administrator password. The DX8100ADM password should be changed immediately upon installation of the DX8100 DVR. If the DX8100ADM account is not properly password protected, your system will be highly vulnerable to damage and improper use from a variety of security threats.

Before attempting to access or change the DX8100ADM account, be aware that only authorized personnel with advanced technical experience working with the Windows 2000 operating system should log on to or change the DX8100ADM account. Damage to the DX8100, its system and application software, and loss of critical data may result from improper use of the DX8100ADM account. You must have the Windows password to exit from the DX8100 application to the Windows operating system. The Windows default password is dx8100.

To change the Windows 2000 DX8100ADM password:

1.Exit the DX8100 application if it is running, and return to the Windows operating system.

2.Click Start > Settings > Control Panel. The Windows Control Panel opens.

Figure 5. Users and Passwords Icon in Control Panel

3. Double-click the Users and Passwords icon. The User and Passwords dialog box opens.

C2641M-A (9/07) 9