Tweak GeoVision
October 5, 2008
Someone sent me a PM asking about this so I decided to make it public.
I dont do much CCTV these days so this is primarily from memory.
First I would create an Nlite setup with no Internet Explorer installed, among other things; keep the IE core though. No browser should be on the DVR at all, even though they can still use explorer but you can turn on content adviser and at least trojans that are typically poorly written will fail when directly trying to open IE, or to hijack it. They wont be able to access the web anyway using some of the tweaks below, but you will still be able to get in to view video using Geo software.
No need for antivirus or anything else.
Enable Windows Firewall - add the Geo Ports.
Enable TCP/IP Filtering - select permit only for each one, in TCP add the Geo Ports.
If you must use AVG turn off the Update service under Windows services, after doing all the updates. Also disable shell extension inside AVG and check the box for each features properties to ignore faulty condition. Disable the default scheduled task also. Sorry I cant assist with other AVs at this time.
Nlite: (I only used this once testing a Geo DVR but it DID work)
http://www.bahamassecurity.com/software/utilities/nlite.asp
Its pretty heavily tweaked and components removed, adjust to your needs if required.
I use it primarily for the Eee PC. Read the notes carefully, especially the bit about the removed components, and the ones in red.
Reg Tweaks: (Post Install, designed to be used along with the above Nlite setup)
Download (ver. 2.0) (332 downloads)
Services:
This was from my test Nlited DVR with GV-650
http://www.bahamassecurity.com/dl/?q=Dvrserv.pdf
Do all these then restart, then continue below.
Manual Tweaks:
-Control Panel, System, Hardware, Hardware Profiles, Select the first profile listed if I dont select a profile in ... 0 seconds.
-Control Panel, System, Hardware, Driver Signing, Ignore.
-Control Panel, System, Hardware, Windows Update, Never Search.
-Control Panel, System, Advanced, Performance, Settings, Visual Effects, Adjust for best performance.
-Control Panel, System, Advanced, Startup and Recovery, Settings, Time to Display list of Operating Systems, 3 seconds
-Control Panel, System, Advanced, Error Reporting, Disable
-Control Panel, System, Remote, Uncheck both
-Control Panel, System, Automatic Updates, Turn Off
-Control Panel, System, System Restore, Turn Off
-Control Panel, Display, Theme, Windows Classic
-Control Panel, Display, Desktop, Background, None
-Control Panel, Display, Desktop, Color, Black
-Control Panel, Display, Screen Saver, None
-My Computer, Right Click System Drive C:, Uncheck Indexing, Ignore.
DVR Menu: (example only, shortcuts will need customizing for your PC)
http://www.bahamassecurity.com/dl/?q=DVRMENU.zip
DVR Desktop: (example only, shortcuts will need customizing for your PC)
http://www.bahamassecurity.com/dl/?q=Desktop.zip
Miscellaneous:
http://www.cctvforum.com/viewtopic.php?t=10575
http://www.cctvforum.com/viewtopic.php?t=9766
http://www.cctvforum.com/viewtopic.php?t=9764
More Free Software: BootTimer - get your boot up times
http://www.bahamassecurity.com/software/utilities/boottimer.asp
Slow boot times?
Run this script to check start up items and post the log here.
http://www.bahamassecurity.com/software/vbscripts/startupreport.asp
Geo or Hardware issues?
Run this hardware Report (Motherboard and Video info) then post the log here.
http://www.bahamassecurity.com/dl/?q=DVRReport.exe
Having major issues? Try the following.
Send us some reports:
-Goto Start, Run, msconfig, Boot.ini - check /BOOTLOG and click apply then Restart
-Download HiJackThis from TrendMicro, run a scan and save the report (dont send to Trend Micro)
-Goto the Control Panel, Administrative Tools, Event Viewer, and Right click save log file for both Application and System.
-Goto the Services and Export the list.
-If you used Nlite, save the Nlite Session file somewhere (not the _U one).
-the Boot log file will be called: NTBTLOG.TXT and is in the Windows Folder
-Also check the Setup Error log and if not empty, save that - C:\Windows\setuperr.log
-Zip and upload these files
After all is said and done and Geo is installed, Close Geo then Defrag.
Most startup items can be removed from Windows start up also,
just run MsConfig, Startup, and uncheck everything - if you have Tweakui installed leave that.
Ofcourse also leave the Geo software and IR Remote (if it exists).
If using an AV you will need to leave that as well.
Scanners and/or All in one printers will need to stay on start up.
As to users, I disable the welcome screen and use tweakui's login page to set the default user to login.
And whatever I do, I never install .NET, there are other options.
I use my TaskAdmin program linked above to lock down the PC DVR.
Run CCleaner to cleanup temp files and fix any registry issues.
Optionally run CleanUp for a more thorough cleaning.
That should all help, make sure to make an image of the drive also.
If anyone is interested in how to create a Recovery CD/DVD let me know.
If anyone is interested in me doing this as a service for them let me know.
October 5, 2008
Someone sent me a PM asking about this so I decided to make it public.
I dont do much CCTV these days so this is primarily from memory.
First I would create an Nlite setup with no Internet Explorer installed, among other things; keep the IE core though. No browser should be on the DVR at all, even though they can still use explorer but you can turn on content adviser and at least trojans that are typically poorly written will fail when directly trying to open IE, or to hijack it. They wont be able to access the web anyway using some of the tweaks below, but you will still be able to get in to view video using Geo software.
No need for antivirus or anything else.
Enable Windows Firewall - add the Geo Ports.
Enable TCP/IP Filtering - select permit only for each one, in TCP add the Geo Ports.
If you must use AVG turn off the Update service under Windows services, after doing all the updates. Also disable shell extension inside AVG and check the box for each features properties to ignore faulty condition. Disable the default scheduled task also. Sorry I cant assist with other AVs at this time.
Nlite: (I only used this once testing a Geo DVR but it DID work)
http://www.bahamassecurity.com/software/utilities/nlite.asp
Its pretty heavily tweaked and components removed, adjust to your needs if required.
I use it primarily for the Eee PC. Read the notes carefully, especially the bit about the removed components, and the ones in red.
Reg Tweaks: (Post Install, designed to be used along with the above Nlite setup)
Download (ver. 2.0) (332 downloads)
Services:
This was from my test Nlited DVR with GV-650
http://www.bahamassecurity.com/dl/?q=Dvrserv.pdf
Do all these then restart, then continue below.
Manual Tweaks:
-Control Panel, System, Hardware, Hardware Profiles, Select the first profile listed if I dont select a profile in ... 0 seconds.
-Control Panel, System, Hardware, Driver Signing, Ignore.
-Control Panel, System, Hardware, Windows Update, Never Search.
-Control Panel, System, Advanced, Performance, Settings, Visual Effects, Adjust for best performance.
-Control Panel, System, Advanced, Startup and Recovery, Settings, Time to Display list of Operating Systems, 3 seconds
-Control Panel, System, Advanced, Error Reporting, Disable
-Control Panel, System, Remote, Uncheck both
-Control Panel, System, Automatic Updates, Turn Off
-Control Panel, System, System Restore, Turn Off
-Control Panel, Display, Theme, Windows Classic
-Control Panel, Display, Desktop, Background, None
-Control Panel, Display, Desktop, Color, Black
-Control Panel, Display, Screen Saver, None
-My Computer, Right Click System Drive C:, Uncheck Indexing, Ignore.
DVR Menu: (example only, shortcuts will need customizing for your PC)
http://www.bahamassecurity.com/dl/?q=DVRMENU.zip
DVR Desktop: (example only, shortcuts will need customizing for your PC)
http://www.bahamassecurity.com/dl/?q=Desktop.zip
Miscellaneous:
http://www.cctvforum.com/viewtopic.php?t=10575
http://www.cctvforum.com/viewtopic.php?t=9766
http://www.cctvforum.com/viewtopic.php?t=9764
More Free Software: BootTimer - get your boot up times
http://www.bahamassecurity.com/software/utilities/boottimer.asp
Slow boot times?
Run this script to check start up items and post the log here.
http://www.bahamassecurity.com/software/vbscripts/startupreport.asp
Geo or Hardware issues?
Run this hardware Report (Motherboard and Video info) then post the log here.
http://www.bahamassecurity.com/dl/?q=DVRReport.exe
Having major issues? Try the following.
Send us some reports:
-Goto Start, Run, msconfig, Boot.ini - check /BOOTLOG and click apply then Restart
-Download HiJackThis from TrendMicro, run a scan and save the report (dont send to Trend Micro)
-Goto the Control Panel, Administrative Tools, Event Viewer, and Right click save log file for both Application and System.
-Goto the Services and Export the list.
-If you used Nlite, save the Nlite Session file somewhere (not the _U one).
-the Boot log file will be called: NTBTLOG.TXT and is in the Windows Folder
-Also check the Setup Error log and if not empty, save that - C:\Windows\setuperr.log
-Zip and upload these files
After all is said and done and Geo is installed, Close Geo then Defrag.
Most startup items can be removed from Windows start up also,
just run MsConfig, Startup, and uncheck everything - if you have Tweakui installed leave that.
Ofcourse also leave the Geo software and IR Remote (if it exists).
If using an AV you will need to leave that as well.
Scanners and/or All in one printers will need to stay on start up.
As to users, I disable the welcome screen and use tweakui's login page to set the default user to login.
And whatever I do, I never install .NET, there are other options.
I use my TaskAdmin program linked above to lock down the PC DVR.
Run CCleaner to cleanup temp files and fix any registry issues.
Optionally run CleanUp for a more thorough cleaning.
That should all help, make sure to make an image of the drive also.
If anyone is interested in how to create a Recovery CD/DVD let me know.
If anyone is interested in me doing this as a service for them let me know.