User's Manual

C2641M-B (4/08) 9
OPERATING SYSTEM SECURITY
Upon a successful boot procedure, the DX8100 will automatically load the Windows
®
2000 or Windows XP Embedded operating system. These
operating systems are specifically tailored for use on the DX8100. It does not have the standard feature set found in the commercially available
version of the Windows 2000 or Windows XP Embedded operating system. This means that services that are not needed for the correct operation
of the DX8100 have been removed to eliminate potential vulnerabilities.
Only two user accounts are available in the DX8100’s operating system software. These user accounts should not be confused with the accounts
assigned by the DX8100 application software. An administrator account allows a designated user to make changes to the registry and security
settings to accommodate the requirements of the specific site.
In finding a balance between security and functionality, Pelco has consistently opted for security but leaves it up to the administrator to unlock
features that might be useful if the administrator has determined that the additional security of the lockdown is not needed. A typical example of
this is the capability of the DX8100 to use dynamic IP addresses. Because IP addresses can change over time, clients must use a different
mechanism to connect to the server than by simply providing an IP address. The additional use of NetBIOS protocol services allows the computer
to find IP addresses on the local LAN by system name; it should be noted that this also creates a known vulnerability. To allow the end user to use
the NetBIOS feature, the services are activated at the factory, but they can be disabled by an administrator when needed. When NetBIOS
services are activated, the administrator needs to apply alternative means to protect against hackers and viruses such as a firewall. Please check
with your information technology specialist or contact Pelco Product Support for further instructions.
WINDOWS OPERATING SYSTEM UPDATES
Due to the lockdown of nonessential services on the DX8100, administrators are advised against installing every operating system upgrade
published by Microsoft
®
. The majority of these updates are not applicable to the DX8100. Pelco will provide a list of approved updates upon
request.
WINDOWS 2000: CHANGING THE ADMINISTRATOR PASSWORD
This section describes how to change the Windows administrator password. The DX8100ADM password should be changed immediately upon
installation of the DX8100 DVR. If the DX8100ADM account is not properly password protected, your system will be highly vulnerable to damage
and improper use from a variety of security threats.
Before attempting to access or change the DX8100ADM account, be aware that only authorized personnel with advanced technical experience
working with the Windows 2000 operating system should log on to or change the DX8100ADM account. Damage to the DX8100, its system and
application software, and loss of critical data may result from improper use of the DX8100ADM account. You must have the Windows password
to exit from the DX8100 application to the Windows operating system. The Windows default password is dx8100.
To change the Windows 2000 DX8100ADM password:
1. Exit the DX8100 application if it is running, and return to the Windows operating system.
2. Click Start > Settings > Control Panel. The Windows Control Panel opens.
Figure 5. Users and Passwords Icon in Control Panel
3. Double-click the Users and Passwords icon. The User and Passwords dialog box opens.