Do you need to install a our system inside your network domain?  No.  It will function perfectly well outside the domain. However, your IT policies may require it being inside your domain.  If you need to have it running inside your domain, please read on.



See also these related topics: 

Configuring Windows 10 for Xitron Navigator

Configuring Windows 11 for Navigator and K2



Key steps will be bullet pointed.  All of the bullet points are imperative for the various software components of the Xitron software to run properly.


  • First, and possibly most importantly,  Choose your Domain and join it FIRST.  Then  run the installer.  Don't install and then move your PC into the domain or you will experience trouble.  This is chiefly due to some components that are stored in %appdata%.  Those paths become garbled and inaccessible if you do this in the wrong order.
  • Only one user account can be used for the Server.  Set that up next.  
  • The user account has to be set up as a local account profile with administrative rights (versus a roaming account profile).  The syncing that occurs with a roaming account profile can prevent the system from working.
  • The software has to be installed from within the user account that will be used.
  • Navigator should be installed into C:\Navigator.
  • K2 should be installed into C:\K2
  • Write access to %PROGRAMDATA%\Xitron has to be enabled for the domain account.
  • Antivirus software has to be disabled for the installation to work as expected. Various antivirus programs may cause an installation to fail.
  • The following paths and subfolders contained within have to be completely whitelisted:

C:\K2   or    C:\Navigator

%APPDATA%\Xitron

%PROGRAMDATA%\Xitron

 C:\Program Files (x86)\Common Files\SafeNet Sentinel

  • Valid sharing permissions are necessary for several folders created by our installer in order for our software to operate. (Refer to the Windows 11 prep guide for more information.)
  • Hot Folders, monitored as inputs, which are pointed to network shares must allow for reading, writing, and viewing of files without restriction from the domain user account. The Hot Folder function will read, write and delete files from the path that each Hot Folder is mapped to. Ideally (and by default), Hot Folders would exist in the Workflows share that is created when the software is installed.
  • Any file maintenance software that deletes files and/or folders should not alter the following folders:

                C:\Navigator or C:\K2

                %APPDATA%\Xitron
%PROGRAMDATA%\Xitron
                C:\Program Files (x86)\Common Files\SafeNet Sentinel


  • The system should not have continuous backup software running (BackBlaze, Carbonite, iDrive, etc).
  • The system should not have other production software installed, including office suites, OneDrive, etc.
  • The system shouldn’t have any software that loads the Service Location Protocol (SLP) service installed.


Side notes for those who may be struggling or attempting shortcuts:

  • The %APPDATA%\Xitron folder should not be copied or moved from another account. If a different user account is used, a reinstallation should be performed from within that account to ensure that the system will work as expected.
  • If the machine has been added to a domain, and then the domain information changes, or the system is removed from the domain, that may require reinstallation. 


Related topic: Running Navigator in a standard user account (not local admin)