CareTV Windows Standard Setup v001
=================================

CURRENT TEMPORARY FILE SERVER
  \\LIVING-ROOM\CareTV-SSD-Pool

NORMAL USE
  Put all files from this ZIP in one folder.
  Double-click:
    Run-CareTV-Standard-Setup-v001-Admin.bat

  Windows will request Administrator permission automatically.

RUN THE SAME PACKAGE ON
  - LIVING-ROOM (currently the emergency DrivePool file server)
  - BEDROOM
  - future CareTV Windows nodes

STANDARD ACCOUNTS
  caretv-admin
    Local Administrator.
    On the file server: Full Control across the CareTV pool tree.

  caretv-service
    Standard/non-administrator account.
    On the file server: Modify access across the CareTV pool tree for
    recording, indexing, automation, camera/audio/video jobs, etc.

  caretv-mom
    Standard/non-administrator interactive account.
    On the file server: Modify access to Users\Mom.

PASSWORDS
  Setup ALWAYS prompts for all three passwords.
  For easy Windows local-account pass-through networking, use the same
  corresponding account password on each CareTV Windows machine.

NETWORKING
  The All setup permanently enables:
    - Private Windows network profile
    - Network Discovery
    - File and Printer Sharing firewall rules
    - Function Discovery services
    - SMB client/server services

  SMB1 is NOT enabled.

MOM DATA TREE
  \\LIVING-ROOM\CareTV-SSD-Pool\Users\Mom\Audio
  \\LIVING-ROOM\CareTV-SSD-Pool\Users\Mom\Video
  \\LIVING-ROOM\CareTV-SSD-Pool\Users\Mom\Screens
  \\LIVING-ROOM\CareTV-SSD-Pool\Users\Mom\Photos
  \\LIVING-ROOM\CareTV-SSD-Pool\Users\Mom\Documents
  \\LIVING-ROOM\CareTV-SSD-Pool\Users\Mom\CareTV-Captures

  caretv-mom automatically maps M: to:
    \\LIVING-ROOM\CareTV-SSD-Pool\Users\Mom

DRIVEPOOL SAFETY
  The setup does not format, initialize, add, remove, rebalance, or otherwise
  manipulate physical disks or the StableBit DrivePool configuration.

PERMISSION SAFETY IN v001
  The script ADDS the CareTV permissions described above.
  It intentionally does not delete/reset existing DrivePool/share ACLs.
  This avoids unexpectedly locking out existing administrators.