Computer Laboratory

Information for Windows users

Integrating private machines

There are two classes of private machine, a workstation or a laptop. Workstations can be added to the domain and should then function as normal windows machines. It is generally better to leave laptops not domain joined becuase of issues with connecting to a domain controller when away from the department.

Network access

Normally we would expect users to use the Eduroam wireless access within the building. Some users may require a wired connection which can be requested, for this you need to know:-

  • the machine's MAC address (see below)
  • whether the connection you're after is wired or wireless (wireless connections are not available to visitors)
  • the floor-box port you hope to use for connection (if appropriate)
  • the machine's "reference name"
  • the operating system the machine runs

This is conveniently done via the form to request a connection.

Finding the MAC address

A MAC address is a 48-bit number, quoted as 6 octets (bytes) written as hex values.

Windows tells you the value, when the machine and its network card are running, via the netstat command. Bring up a shell window (also known as a DOS box), by Start-> Run, and then typing cmd (or possibly command). In the window, type netstat -r; the "interface list" gives the MAC address for any physical interface that is active.

Set up your machine to use DHCP, and connect

Most ISPs use DHCP, so most machines will be configured to use DHCP before they even arrive in the laboratory. The system administrators will tell you when they have acted on your request for connection, and you can then plug your computer into the designated network socket.

To verify that the DHCP system has correctly configured your machine try to connect to the Lab home page (www.cl.cam.ac.uk)?

If this does not work, the chances are that your network connection is not set up to use DHCP, so you have to change that: On a Windows 7 machine, go to the network icon in the taskbar (bottom right area), right click and select Open Network and Sharing Centre, the select Change Adapter Settings in the left pane then click on Local Area Connection, which pops up a small dialogue box.

Click Properties, which brings up another dialogue box with a list of protocols.

Select Internet Protocol (TCP/IP) in the list, and again select Properties for yet another dialogue box.

On the radio buttons at the top of the dialogue box, select "Obtain an IP address automatically"; this selects DHCP. Press OK. This should leave you with a working setup. If not (after at least one iteration to ensure no typos have crept in), seek help via win-admin.

File servers access

If you have a laptop then you should access the lab filespace using WebDAV as this will then be available from any network.

If you have a wired connection you can connect to your lab based file space by mapping a network drive using your Windows domain credentials

Then click to "Connect using a different user name."

Please note that you should quote your full name preceded by the domain.

Your windows and unix files both reside on a NetApp fileserver. To connect to your Unix files you should map \\elmer.cl.cam.ac.uk\userfiles\CRSID\unix_home. and similarly for your Windows files replace the last component in the above path with windows_home

Connecting to printers

Windows machines should use the Unix printer spooling mechanism directly.

Trusted Root Certificate for the ComputerLaboratory CA

The Windows world in the department runs a certificate authority. You should obtain the root certificate and install it into the Trusted Root Certificates store on your machine. To do this visit the certificate server and select Download a CA certificate, certificate chain, or CRL, on that page choose Download CA certificate and Open the certificate than downloads.

On the certificate page that is displayed click on Install Certificate and follow the wizard until prompted as to which certificate store to use, select Place all certificates in the following store and click on the Browse button, form the window that appear select Trusted Root Certification Authorities.

Anti-viral software policy

It is university policy that any machine connected to the university computer network must run up-to-date anti viral software. Members of the University can download this from the Computing Service site details of which are given in the Computing Service Anti-Virus Information page.

Lab-internal resources via VPN

This DHCP connection provides network connectivity to the outside world and limited access to internal machines. Things like file space (for your windows or unix account), and printers are available from eduroam and most internal networks directly without needing to use a VPN.

To gain the privilege to access other internal things you may need to run a VPN to vpdn-pptp.cl.cam.ac.uk. You need a Windows domain account to authenticate your access to this service.

If you are running a VPN to access other resources then add one of the following Active Directory related DNS servers to the DHCP-provided information or to the VPN configuration:

  ad-dns0: 128.232.13.18
  ad-dns1: 128.232.13.20