Installing Insight Pro with Security Suite

(Local Computer Installa on)

Basic PC Prerequisites:
• A computer supports to install 64-bit windows 10(Build 1607 or above) or Windows 11 opera ng
systems.
• Windows 10/11 Enterprise and Windows 10/11 Professional are recommended Windows versions.
Minimum hardware configura on:
Intel Core i5 (6 cores, 3.3 GHz)
8 GB RAM with system managed memory enabled
500 GB Hard Drive
• Minimum computer resolu on display 1366 × 768.
• Current user has administra ve privilege to install system and services. Please contact your IT
administrator for helps if you don’t have administra ve privilege.

Pre-installa on Tasks:
The following tasks should be completed before installing the Insight Pro so ware on a single computer.

• Save your works and close all other running applica ons
• Uninstall any previous version of Insight so ware
• Create a dedicated windows local user account to run the Audit Log service
(See Appendix A below for instructions to establish this account and setting it’s policies. Once
that has been created, return to the next step)

To proceed you will need the “log-in” creden als to that service account.

Installing any version of Insight Pro prior to version 1.8 will require internet access for the PC for the
install. This can be disconnected a er the installa on if desired.

8/18/2023
So ware Installa on:
1) Logged in as a Local Admin, insert the DVD or USB drive and open to the root directory. Double
click on Start to begin the installation.

2) An installation screen will be prompted as below. Click Install

3) When this second screen appears Click>Software

Note: Drivers will be installed with the software. The option in this screen is for installing/re-
installing drivers if needed at some point, but should not be needed for the initial software
installation.

8/18/2023
 4) A screen will appear with the License Agreement. Accept the license and proceed

5) A screen will appear with Customer info. Enter User and Company names. Select Typical install
as the Installation Option which will install all the components of the Suite.

8/18/2023
 6) The next screen to appear allows for the choice of a Network installation of the Security Suite or
Local PC installation. Choose Local PC Installation by clicking on the picture

7) When this below Data Storage Service Configuration screen appears enter the name of the
Service account you set up previously.Type the account or Click Browse and locate the service
account. Enter the Password twice. Click >Next

Note: For Insight Pro, entering the credentials here does not set anything up for Insight Pro. This
Security Suite is used in a number of applications and most of those, use this Data Storage Servie
configuration. However, you cannot proceed with this installation without populating these
fields.

8/18/2023
 8) Click “Next >” button.

9) Wait for software installation to complete. When the Audit Log Service Database Configuration
screen appears, Leave the Database dropdown as the default (SQLite) Click>Edit

10) Click on Browse to select the Service account from the next screen.

8/18/2023
 11) Type the name of the service account in the “Enter the object name to select field”, the click on
check names. The field should then populate with the PC Name and service account name.
Click>OK

12) Back at this screen, enter the password for that account twice, then Click>OK

13) Once back to this screen, clcik on Apply. You should see the word “Succeeded” appear indicating
this was setup correctly.

8/18/2023
 14) You should see the word “Succeeded” appear indicating this was setup correctly. Click on the
“X” upper right of this dialog box to close and the installation should indicate it is complete. This
will take a few minutes to wrap up as the software finishes the setup

15) When the software is finished setting up, Thermo Security Administration will automatically
open and prompt for credentials. (current admin log in). Enter those and review the present
settings. (The password cannot be blank / empty)

Note: By default, the Security Policies will all be in their selected state and access will be such
that any authenticated user log in in will be able to run Insight Pro logging into it with their PC
log in credentials. With respect to the Thermo Security Administrator program, by default
anyone who is an Administrator on the PC will be able to log in an open that program

Once in Thermo Security Administrator Click File->Exit menu or Close bu on at the top right-hand
corner of main window.
Note: This step is mandatory to run Insight Pro so ware with local security. Otherwise, you will see
the message “The security server has not been configured for this applica on.” when you try to log
in Insight Pro so ware.

** At this point, you should Restart the PC **

8/18/2023
 16) To open Insight Pro, double click on the Thermo Insight Pro icon on the desktop

The following splash screen will appear. Enter the credentials for the currently logged on user.
Remember: This Security Suite utilizes the name and password of the current user. If another
user is presently logged in that wishes to use Insight Pro, the current user will need to log off
and the next user log in and then they will then be able to use their credentials to log into the
program.

TIP: Users should always be “Logging off / Signing out” when fishished with the PC or when
another user needs to log on. Never use “Switch User” feature of Windows. This can result in
multiple instances of these programs being open under different users resulting in performance
issues.

8/18/2023
 Appendix A:
Service Account Setup
Security Suite requires a service account to store audit trail informa on in a secure manner.

This account is setup just like any other user account in Computer Management or Local Users and
Groups management console.

This account should:

1. Have password expiration disabled

These steps (account Crea on & Configuring Log on Rights for the account) are detailed below

Account Creation
1. Open the Local Users and Groups management console:
a. Press +R
b. Type lusrmgr.msc

c. Click OK

2. Single click on the Users folder

8/18/2023
 3. Click Action (menu item)New user…
4. Set up the Secure Data Storage service account:
a. Enter the User name (e.g. audit.log.service, insightSVC, etc.)
b. Enter the Password and Confirm password
c. Uncheck User must change password at next logon

d. Check Password never expires

5. Click Create
6. Click Close
7. Close the Local Users and Groups window

8/18/2023
Configure Log on Rights
1. Open the Local Group Policy Editor management console:
a. Press +R
b. Type gpedit.msc

c. Click OK

8/18/2023
 2. Navigate to Computer ConfigurationWindows SettingsSecurity SettingsLocal
PoliciesUser Rights

3. Select Log On As A Service and open its properties

4. Click Add User or Group…

8/18/2023
 5. Enter the account name(s) you created previously separated by a semicolon

6. Click OK

7. Click OK
8. It is recommended that you Repeat Steps 2 through 7 for Deny Log On Through Remote
Desktop Services and Deny Log On Locally
9. Close the Local Group Policy Editor window

8/18/2023