Customizing Connection Manager

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Use the CMAK wizard to create a custom service profile. You then distribute this .exe file to your users. When they double-click the file, it installs a service profile customized with the information you entered in the CMAK wizard. The Connection Manager client then allows users to dial in to your organization directly or to complete a VPN connection, based on the information provided in the CMAK wizard. Figure 9.3 shows steps in the process for customizing your service profile.

Tip

  • You can install the CMAK wizard from Management and Monitoring Tools details in the Windows Components Wizard. For more information about installing the CMAK wizard, see "The Connection Manager Administration Kit Wizard" in Help and Support Center for Windows Server 2003.

Figure 9.3   Customizing Connection Manager

Customizing Connection Manager

Before you run the CMAK wizard, make sure you know the following information, which is required to complete the wizard:

  • The service name and a file name that you will use for the new profile and related files.

  • A realm name, if your service requires it. A realm name is a prefix or suffix that Connection Manager automatically adds to the user name.

  • Any existing service profiles that you plan to merge into the new profile. For more information about merging service profiles, see "Merging Service Profiles" later in this chapter.

  • VPN Support information, including: the VPN server address(s) and whether or not the client will use the same passwords for the dial-up and VPN connection in a double-dial situation. For an example of configuring VPN Support information, see "Example: Deploying Remote Access Clients" later in this chapter. For information about configuring a VPN-only profile, see "Implementing VPN support" in Help and Support center for Windows Server 2003.

  • VPN Entries network and security information. For more information about networks and security, see "Configuring Network and Security Settings" later in this chapter.

  • Preshared key information, if needed for L2TP/IPSec VPN connections. If you are using a preshared key, encrypt it with a PIN that follows strong password rules. Strong passwords include a combination of uppercase and lowercase letters, numbers, and special characters so the password is protected from a dictionary attack or a database of popular passwords.

  • The location of the phone book file that was created by PBA to include in this service profile and any text that should appear in the More access numbers box in the Phone Book dialog box.

  • Phone book file name for downloading updates and the update URL to point to on the phone book server, if applicable.

  • Dial-up Networking Entries and security information. For more information about networks and security, see "Configuring Network and Security Settings" later in this chapter.

  • Routing table update information, if you are planning to implement split-tunneling where users can connect to both your internal network and the Internet simultaneously.

  • Automatic Proxy Configuration settings, if you want Connection Manager to automatically update proxy settings for this connection.

  • Custom Actions, which are any programs you want to start automatically before, during, or after users connect to your service. For more information about custom actions, see "Incorporate Custom Actions" later in this chapter.

  • Branding information, including custom graphics, icons, menu items for the notification area shortcut, custom Help, and support information, if applicable. For more information about including branding information in your service profile, see "Branding Your Connection Manager Client" later in this chapter.

  • Whether to include the latest version of Connection Manager with your service profile. This is a small file, so if you are not sure that all clients have the latest version of CM, include the latest version with your profile.

  • A custom license agreement, if applicable. For more information about including a custom license agreement in your service profile, see "Branding Your Connection Manager Client" later in this chapter.

  • Any additional files you want to include in this service profile.

  • Any information you require for advanced customization, if applicable. For more information about advanced customization, see "Providing Advanced Customization" later in this chapter.

For a worksheet to assist you in completing the CMAK wizard, see "Preparation for Running the CMAK Wizard" (DNSRAC_1.doc) on the Microsoft® Windows® Server 2003 Deployment Kit companion CD (or see "Preparation for Running the CMAK Wizard" on the Web at https://www.microsoft.com/reskit).

For more specifics about customizing Connection Manager using CMAK, see "Preparing to run the CMAK wizard" and "Connection Manager Administration Kit" in Help and Support Center for Windows Server 2003.