FARONICS WINSELECT ENTERPRISE, Manual

Page 1: ......

Page 2: ... This page has been left blank intentionally ...

Page 3: ...s Faronics delivers market leading solutions that help manage simplify and secure complex IT environments Our products ensure 100 workstation availability and have dramatically impacted the day to day lives of thousands of information technology professionals Fueled by a customer centric focus Faronics technology innovations benefit educational institutions healthcare facilities libraries governme...

Page 4: ... This page has been left blank intentionally ...

Page 5: ...ole 14 Retrieving Settings from the Workstation 14 Applying Settings in the Faronics WINSelect Enterprise Console 15 WINSelect Enterprise Console 15 System 16 Control Panel 17 Desktop Windows Taskbar 17 Drives and File Extensions 18 Start Menu 19 Network Restrictions 20 Hotkeys 21 Applications 22 Microsoft Office 23 Menu 24 Internet Browser 25 Printers 27 Acceptable Use Policy 28 Administrator 29 ...

Page 6: ... This page has been left blank intentionally ...

Page 7: ...Select Enterprise Edition provides centralized installation deployment administration and control for multiple workstations on your network About Faronics Core Faronics Core supports the monitoring and management of multiple workstations from a central location The Faronics Core displays the current status of managed workstations and allows commands to apply to one or more of those workstations Ad...

Page 8: ...ed The administrator will have to disable WINSelect to use these tools If a removable drive is connected during the WINSelect install it is assigned a drive letter It is recommended that removable drives be disconnected during installation to avoid unintentionally applying WINSelect settings If Windows Group Policies are set on a workstation andWINSelect sets the same policy WINSelect will take pr...

Page 9: ...ation and the License Key Select the Use Evaluation check box to install the evaluation version The evaluation version will expire in 30 days 4 Specify the install location and click Next The default is C Program Files Faronics Faronics Core Loadins WINSelect Click Change to change the location ...

Page 10: ...INSelect select a single workstation or multiple workstations click Configure Workstations in the right pane and select Advanced WINSelect Install Upgrade WINSelect The WINSelect dialog appears Enter and confirm the Password Click Install WINSelect Applying the License on a Workstation via Faronics Core Console If you are using the evaluation version of WINSelect you can apply the license and conv...

Page 11: ...workstation installer files are unpacked in the C Program Files Faronics Faronics Core Loadins WINSelect Workstation Installer directory To install WINSelect on a workstation double click WINSelect_Ent_32 bit msi on a 32 bit operating system To install WINSelect on a workstation manually do the following 1 Double click on the msi file to begin the installation process Click Next to continue ...

Page 12: ...me Organization and License Key If you do not have a License Key select the Use Evaluation check box The evaluation version will stop functioning after 30 days If you have already purchased WINSelect you can get the License Key by logging into www faronicslabs com Click Next to continue ...

Page 13: ...cation and click Next The default is C Program Files Faronics WINSelect 5 Enter a WINSelect Administrator Password Enter the password again to confirm Click Next to continue 6 Click Next Click Install to complete the installation ...

Page 14: ... Licensing If no License Key is available use the evaluation version of WINSelect The evaluation version is valid for 30 days To upgrade to the full version of WINSelect enter a valid Licence Key in the About node If no Key is entered after 30 days WINSelect is disabled on the workstation Configuring the WINSelect Loadin in the Faronics Core Console To configure the WINSelect for a workstation in ...

Page 15: ...ps The System node contains options which protect the computer and prevent unauthorized access to key Windows settings Here the administrator can prevent changes to system wide Windows components The Applications node allows the administrator to customize the software found on the WINSelect workstation Use the Applications node to permit and restrict access to applications like Microsoft Office an...

Page 16: ...ble UNC Uniform Universal Naming Convention Paths to prevent users from accessing shared network resources Select Disable Folder Manipulation to prevent the renaming moving or deleting folders This prevents users from renaming or changing the location of folders through Windows Explorer Select Disable Drag and Drop to prohibit users from moving files and folders to different locations This option ...

Page 17: ...plets and Hide all Applets do not allow for specific applets to be allowed or restricted To specify specific applets click Hide selected Applets and select the check box next to the applet to be restricted A cleared check box next to the applet signifies a displayed and accessible applet To add an applet to the list enter the applet name in the Specify Applet field and click Add To delete an apple...

Page 18: ... next to each one Use the Select All or Deselect All options if required Files and directory structures are not visible once this feature is enabled For example if all drives are selected exploring the directories contained within is not permitted If there is no drive selected but a file extension is selected then the file extension will be disabled across all drives If the system drive is disable...

Page 19: ... menu by selecting one or more options Enable Start button when selected allows the user access to the workstation s Start button Disable all Start menu items prevents the user from accessing the Start menu Disable selected Start menu items by selecting the specific items in the list The selected options will not be available the next time the Start menu is opened SelectingtheDisableright clickonS...

Page 20: ...ed and click Add The addresses appear in the listbox If a range of addresses is specified each individual address within the range is either restricted or allowed depending on the radio button selected Allow selected or Disallow selected Select the Allow selected or Disallow selected radio buttons to specify the list behavior Restrict or permit selected ranges or domain names based on which entrie...

Page 21: ... regardless which application is enabled on the workstation Select the hotkeys on the list that will be disabled on the workstation Click Select All or Deselect All to select or deselect all hotkeys Hotkeys not listed can be added by entering the key combination and clicking the Add to List Button The Remove option only removes custom key combinations added by an administrator ...

Page 22: ...remove applications from the list To add an individual application click the Add button Browse to the desired application s exe file and click Open Allowonlyspecificapplicationstorunortopreventspecificapplicationsfromrunning Eachapplication must have a selected check box next to it to dictate the list behavior If an allowed application opens a second application the second application must also be...

Page 23: ...nu items from the list and click Apply The following Microsoft Office programs can be disabled by selecting the check box next to it Disable Macros disables macros and the shortcut keys displayed Disable VB Editor disables the macros Visual Basic editor and the shortcut keys displayed Disable Templates and Addins disables the Templates and Addins for Microsoft Office Disable execution of Visual Ba...

Page 24: ...tructure Menus of products having a different menu structure will not be recorded properly To record a menu to be restricted 1 Select a specific application by clicking Record and browse to the executable file exe In the example below the Wordpad application was selected 2 Open the menus to be restricted one at a time The WINSelect Menu Recorder records the selected menu 3 Close the application ...

Page 25: ... will not be able to use them Changes cannot be made to a set of menu commands once they have been selected The exe file must be deleted from the menu list and the process repeated Menu commands for Microsoft Office cannot be recorded Internet Browser The Internet Browser node provides options for restricting access to Internet browser functions and menus Enable these features when users are requi...

Page 26: ...r is opened This overrides the home page specified within the Internet browser Select a browser from the list and select the menu items to be disabled in that browser Menus such as File View and Favorites can be selected which prevents the user from accessing them Entire menus can be disabled along with individual commands within menus Select the check box next to the top level to disable an entir...

Page 27: ...obs Select one of the three options available for configuring printer access Enable print quota does not disable any printing capabilities It only places a restriction on the number of pages a user can print from the workstation If you choose to specify a printing quota enter the number of pages per session in the box provided Entering 0 zero denotes no limit Disable all restricts printing from ea...

Page 28: ...t accept this policy before using the workstation There is no file size restriction and only files with the rtf extension can be imported To enable this feature select Display AUP at workstation start up Once this setting is enabled the user will not be able to access the workstation without accepting the policy Click Import and browse to the location of an rtf file that has the AUP text WINSelect...

Page 29: ...Click Apply to apply the new password The password initially set following the WINSelect install is replaced by the new one Only one administrator password can be set Protection Choose Enable WINSelect to enable WINSelect on the workstation and if WINSelect is disabled for administrators If Disable WINSelect for Administrators is selected the restrictions specified in WINSelect will not apply to u...

Page 30: ...t Select Import to add an adm file Windows Vista users can import admx files as well Importing an adm or admx template creates a WINSelect adm file located in C WINDOWS inf Once an adm file has been opened select Configure to open the Group Policy Editor where changes can be made Deleting the ADM template does not remove the applied settings It only removes the template from the WINSelect Control ...

Page 31: ...warning select the Show warning message x minutes before the session expires check box Specify a value for x between 1 and the lowest user session 1 For example if you have selected three sets of user sessions with duration 15 30 and 60 minutes the warning must be between 1 and 14 4 To reboot the computer after the user session select the Reboot computer after user session finishes check box 5 Cli...

Page 32: ... screen If the Show warning message x minutes before the session expires check box is selected in the User Session node a warning is displayed x minutes before the expiry of the session Click Snooze and select the number of minutes from the drop down Click OK The warning will be displayed again after the selected duration If you do not want the warning to appear again click Do not show message aga...

Page 33: ...is saved as a proprietary file format and can only be opened by WINSelect To create a WINSelect template select all the settings that are to be part of the template in the list of WINSelect nodes Use the Select All or Deselect All options as required Click Export browse to a location to save the template and save it with a unique name To import a WINSelect template click Import and browse to the l...

Page 34: ...t the Exclude automatically launched applications from Kiosk Launcher check box to exclude certain applications from the Launcher Select the Maintain current size and position for application windows check box to specify the window size and desktop placement for enabled applications If this option is selected the specified applications will open immediately and the administrator can set the size a...

Page 35: ...anager is disabled Right click is disabled on Taskbar and Start Menu Taskbar icons are hidden System Tray clock Start button is completely disabled Applications are disabled All UNC Universal Naming Convention paths are disabled Printing is blocked on Internet Explorer and Firefox Click Apply to save the changes and create the Kiosk settings A logoff is required for changes to take effect WINSelec...

Page 36: ... the right pane and choose the preferred action from the menu as shown Alternatively right click on the selected workstation select Schedule Action in the contextual menu and select the preferred action Each schedule option has different configuration options depending on the frequency of the action as shown To execute a task one time only choose the One Time radio button Enter the time and date w...

Page 37: ...with a generated set of access codes Users can print only a specified number of pages per session Enable printer restrictions and set a specific limit on the pages printed User 2 Corporate IT Administrator Workstation Functionality Suggested Configuration Users require access to Microsoft Office suite Configure System node to prevent access to the Task Manager and to disable UNC path Users require...

Page 38: ...exec q i path WINSelect_Ent_32 bit msi WSADMINPSW password WSADMINCONFIRMPSW password WSPIDKEY License key Silent install Evaluation version msiexec q i path WINSelect_Ent_32 bit msi WSADMINPSW password WSADMINCONFIRMPSW password WSUSEEVAL 1 Silent uninstall msiexec q x path WINSelect_Ent_32 bit msi Activate License Key WINSelect exe NoGui Password password License license key path location of the...

Page 39: ...e Console 2 Click on Workstations Managed Workstations in the left pane of the Console 3 Right click on the workstation s from which WINSelect will be removed 4 Click on Configure workstations Advanced Uninstall WINSelect Uninstalling on an Individual Workstation Using the Uninstall Wizard To perform a WINSelect uninstall click the Administrator node and ensure the Enable box is not selected WINSe...