Index: trunk/docs/HOWTO-samhain-on-windows.html
===================================================================
--- trunk/docs/HOWTO-samhain-on-windows.html	(revision 1)
+++ trunk/docs/HOWTO-samhain-on-windows.html	(revision 18)
@@ -135,5 +135,6 @@
 <b>Cygwin</b> POSIX emulation layer, and how to install it as a service. 
 These instructions have been written by Kris Dom,
-who has tested this on WinXP Professional.
+who has tested this on WinXP Professional, with additions by Geries Handal
+and Jorge Morgado.
 </p>
 <div class="block">
@@ -150,5 +151,6 @@
 logging) because Interix does not provide some of the required functionality 
 to build the email module. This issue should be fixed as of samhain 
-version 2.0.7 (not tested).<br />[Based on information kindly provided by Geries Handal].
+version 2.0.7 (not tested).<br />
+[Based on information kindly provided by Geries Handal].
 </p>
 </div>
@@ -192,4 +194,21 @@
 </li>
 </ul>
+<div class="block">
+<p>
+You don't need to download and install All packages. It is enough to keep
+the Default and then add the following additional packages:
+</p>
+<p>
+  Category Devel -> gcc: C compiler upgrade helper<br/>
+  Category Devel -> make: The GNU version of the 'make' utility<br/>
+  Category Libs  -> minires: A simple synchronous non caching stub resolver<br/>
+</p>
+<p>
+When selecting these packages, Cygwin installer will automatically add
+other packages based on their dependencies.
+The package minires is only necessary for a minimal Cygwin installation
+(below). [Kindly pointed out by Jorge Morgado].
+</p>
+</div>
 
 <h3>Cygwin installation</h3>
@@ -301,4 +320,28 @@
  </li>
  </ul>
+</li>
+<li>
+Files needed from c:\Cygwin\bin to create the /etc/passwd and /etc/group files:
+ <ul>
+ <li>
+ mkpasswd.exe
+ </li>
+ <li>
+ mkgroup.exe
+ </li>
+ </ul>
+<p>
+To generate these files on a minimal Cygwin installation execute - on a
+Windows Command Prompt:
+</p><p>
+&nbsp; &nbsp;<tt>mkdir c:\etc</tt><br />
+&nbsp; &nbsp;<tt>path\to\mkpasswd.exe -l > c:\etc\passwd</tt><br />
+&nbsp; &nbsp;<tt>path\to\mkgroup.exe -l > c:\etc\group</tt>
+</p><p>
+IMPORTANT NOTE: You should re-create these two files, each time the
+Windows users and groups accounts database changes. Failing to do this
+might generate critical log messages (depending on your configuration
+file).
+</p>
 </li>
 <li>
@@ -331,6 +374,6 @@
   </li>
   <li>Under the newly created &quot;Parameters&quot; key, add a new String 
-  value called &quot;Applications&quot;.<br />
-  &nbsp; &nbsp;The value for &quot;Applications&quot;
+  value called &quot;Application&quot;.<br />
+  &nbsp; &nbsp;The value for &quot;Application&quot;
   should be &quot;c:\usr\local\sbin\samhain.exe&quot;.</li>
   </ul>
@@ -348,4 +391,8 @@
 </li>
 </ul>
+<p>
+Also see <a href="http://support.microsoft.com/kb/q137890/">http://support.microsoft.com/kb/q137890/</a> for information regarding the creation of a 
+user-defined service.
+</p>
 <p>
 Note: the first time I tried to install samhain as an NT service, I first
@@ -354,4 +401,44 @@
 Samhain as a service.
 </p>
+
+
+<h2>Troubleshooting samhain</h2>
+
+<p>
+[Tip from Jorge Morgado] If you, like me, have a Windows server not part of any domain and (for
+security reasons) you even turn off DNS resolution, you might probably get
+the following error when initializing the baseline database:
+</p>
+<pre>
+  ---------   sh_unix.c  ---   1487 ---------
+  According to uname, your nodename is yourcomputername, but your resolver
+  library cannot resolve this nodename to a FQDN.
+  Rather, it resolves this to yourcomputername.
+  For more information, see the entry about self-resolving under
+  'Most frequently' in the FAQ that you will find in the docs/ subdirectory
+  ----------------------------------------------
+</pre>
+<p>
+To fix this problem open the Registry Editor and create the following
+entries under the key
+HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
+</p>
+<p>
+<tt>
+Name: Domain<br/>
+Type: REG_SZ<br/>
+Data: your.domain.name
+</tt>
+</p><p>
+<tt>
+Name: NV Domain<br/>
+Type: REG_SZ<br/>
+Data: your.domain.name
+</tt>
+</p><p>
+The NV Domain registry value contains the computer's primary DNS suffix
+while the Domain registry value contains the computer's primary DNS
+domain. This will make the warning message go away.
+</p>
 </div>
 </body>