The following instructions outlines the procedure for setting up Windows 7 to use the College and University network. It assumes that Windows 7 is set up and working correctly, including the drivers for your network adapter. If Windows 7 has not yet been installed, please see the documentation which came with Windows 7 or with the computer.
You must not attempt to set up your computer on the network until you have registered for, and received, an IP address from the Computing Support Office. You will receive the IP address (together with all the other network addresses and information that you need) on a pink notification form when you arrive at College.
Setting up Windows 7 to use the Internet
The procedure to set up your computer is as follows:
- Log in to your computer as administrator, or another user who has administrative rights.
- Go to the "Network and Sharing Center" Control Panel (which in "Category View" is labelled "View network status and tasks"), and click the "Local Area Connection" icon. Note that there may also be icons labelled "Wireless Network Connection" or "1394 Connection"; these should be left alone. The network cable must be plugged in at this point. In the "Connection Status" dialog box which appears, click the "Properties..." button to bring up the "Properties" dialog box. When the properties dialog box appears, you may be prompted (again) for your administrative password.
- The "Properties" dialog box shows all installed clients, services and protocols. Make sure that the Client for Microsoft Networks is in the list (as for technical reasons it must be installed, even if you choose to disable it later on). If for some reason it is not there, you should click the "Install..." button, select "Client" and click "Add...", then select "Client for Microsoft Networks" from the resulting list. This done you should untick all the items in this list except "Internet Protocol Version 4 (TCP/IP v4)" (and except "Client for Microsoft Networks" if you intend to set up your computer to use the College fileservers as described in the next section of these instructions), unless you know that you need them.
- Select the "Internet Protocol Version 4 (TCP/IP v4)" option from the list (you may need to scroll down the list to find it), and click "Properties...". (The TCP/IP version 4 protocol is installed automatically when you install a network interface card. If for some reason it is not there (e.g. if it has been removed), you should click the "Install..." button, select "Protocol" and click "Add...", then select "Internet Protocol Version 4 (TCP/IP v4)" from the resulting list.)
- There are a number of settings to make on the resulting "TCP/IP properties" dialog box. Care should be taken to enter the values correctly in this area, as incorrect numbers can cause network problems which will be traced back to you. In particular, Windows will suggest a value for the subnet mask which is wrong for the network at Churchill, so be sure to change its suggested value to the correct value as specified on your pink form. You should start by selecting the option marked "Use the following IP address", and entering the IP address, subnet mask and default gateway addresses which are specified on the pink notification form. Then click the "Advanced..." button.
- Select the "DNS" tab of the "Advanced TCP/IP Settings" dialog box. Click the "Add..." button in the "DNS server addresses" area (which will bring up the "TCP/IP DNS Server" dialog box), and enter the first of the DNS servers specified on the pink notification form. Click the "Add" button on the "TCP/IP DNS Server" dialog box to confirm this entry. Repeat this procedure for the remaining DNS servers specified on the pink notification form.
- Uncheck "Register this connection's addresses in DNS", and leave checked the options marked "Append primary and connection specific DNS suffixes", and "Append parent suffixes of the primary DNS suffix".
- You should now be back at the "Local Area Connection Properties" dialog box. Click on "Close" and if you are asked "Do you want to restart your computer now?" select "No". Click on "Close" in the "Local Area Connection Status" window.
- Go to the System Control Panel (again, if you are using "Category View" you may need to start by clicking on "System and Security" in the main control panel, and then clicking on "See the name of this computer"). In the "Computer name, domain, and workgroup settings" section, click the "Change settings" link. Click the "Change..." button on the "System Properties" dialog box. You may be prompted again for your administrative password. If the "Domain" option is selected, skip to step 11 and seek further advice. Otherwise, enter your Computer Name, ensure "Workgroup" is selected and enter "CHURCHILL" as the workgroup name. (The name for your computer is specified on your pink form and is probably the name which you requested for your computer when applying for an IP address, but this is not guaranteed. It is important that you enter the name specified on your pink form.)
- Click on the "More..." button and enter "chu.cam.ac.uk" as the primary DNS suffix. Also uncheck the box marked "Change primary DNS suffix when domain membership changes". Click OK to confirm these settings, and OK again to confirm the changes to the Computer Name and Workgroup name.
Assuming that the workgroup name was not already set to CHURCHILL, a message should appear saying "Welcome to the CHURCHILL workgroup". Click OK to dismiss this message. You will then be informed "You must reboot this computer for the changes to take effect", so click on OK to dismiss this message. Click the "OK" button on the "System Properties" dialog box to confirm all the changes you have made. If you are prompted "Do you want to restart your computer now?" answer "Yes", otherwise click on the "Start" button, click the arrow next to "Shut Down" and select "Restart".
- Now that your computer is connected to the Internet, you must immediately check for updates by running the Windows Update application (available on the Start Menu under "All Programs" and ensure that you have downloaded and installed all of the critical security updates listed for your machine. This may require checking more than once.
Once you have installed all the security updates, go back to the Windows Update application and check the line half way down the page where it starts "You receive updates:". If it reads "For Windows only", we recommend that you upgrade to use Microsoft Update since this will provide you with updates for many other Microsoft products as well as Windows. Many of these updates will be important security updates. To upgrade to Microsoft Update, click on the "Get updates for other Microsoft products. Find out more" link, and follow the instructions on screen. Once you have upgraded to Microsoft Update, you should check for critical updates (again, since you will now be checking for critical updates for many more Microsoft products), and download and install any further critical updates that may now be offered to you.
Click on "Change settings" in the left hand pane. Make sure that the drop-down box under "Important updates" is set to "Install updates automatically (recommended)". Click OK and close the Windows Update application.
- Go to the Windows Firewall Control Panel (in "System and Security" if using "Category View") in the main control panel and make sure it is switched ON. Click on "Advanced settings" in the left hand pane. Click on "Inbound Rules" in the left hand pane in the new window. Right click on the "File and Printer Sharing (Echo request - ICMPv4-in)" rule with Profile "Private, Public", and click "Properties". Tick "Enabled" under the "General" tab, and click "Any IP address" in the "Remote IP address" of the "Scope" tab. Click OK. This done, close the "Windows Firewall with Advanced Security" and "Windows Firewall" windows.
- You must also ensure that your anti-virus software is working and up to date. If you do not have any anti-virus software (or if you have some old anti-virus software for which you are no longer eligible for updates), it is imperative that you obtain some up-to-date software immediately. The University Computing Service have a web page at http://www.ucs.cam.ac.uk/support/anti-virus/ where you can find links to the University's recommended anti-virus software, which is available free of charge for use by members of the University. In addition, DVDs containing anti-virus software and security updates are available for loan from the Computing Support Office.
Further information about security updates and about anti-virus software can be found in the University Computing Service's leaflet IS28, which should be included with these instructions.
Connecting to DS-Filestore CIFS Service.
The University Computing Service (UCS) provides members with a personal space on the DS-Filestore. You can use the DS-Filestore CIFS Service to connect your personal machine to this space directly. This is particularly recommended for backing up your work.
Connecting to DS-Print.
The College uses DS-Print, also provided by the UCS, to enable members to use the College printers.
Using College printers
Ban on use of Peer-to-peer (P2P) filesharing software.
Please remember that you are NOT allowed to use peer-to-peer filesharing programs such as BitTorrent, KaZaA, eDonkey, Gnutella, Limewire or Direct Connect on the College network. The use of all such programs has been banned by the College Council.