FARONICS WINSELECT STANDARD, Manual

Page 1: ......

Page 2: ... This page has been left blank intentionally ...

Page 3: ...s Faronics delivers market leading solutions that help manage simplify and secure complex IT environments Our products ensure 100 workstation availability and have dramatically impacted the day to day lives of thousands of information technology professionals Fueled by a customer centric focus Faronics technology innovations benefit educational institutions healthcare facilities libraries governme...

Page 4: ... This page has been left blank intentionally ...

Page 5: ...rol Panel 13 Desktop Windows Taskbar 13 Drives and File Extensions 14 Start Menu 15 Network Restrictions 16 Applications 17 Microsoft Office 18 Menu 19 Internet Browser 20 Hotkeys 22 Printers 23 Acceptable Use Policy 24 Administrator 25 Passwords 25 Protection 25 ADM Templates 26 User Session 27 WINSelect Templates 29 Using the WINSelect Kiosk Mode 30 WINSelect Kiosk Panel 31 Using the WINSelect W...

Page 6: ... This page has been left blank intentionally ...

Page 7: ...Windows operating system features Start menu functionality Internet Explorer capabilities and Windows Explorer options can all be heavily customized to suit organizational needs WINSelect Editions Standard WINSelect Standard Edition runs on a standalone workstation Enterprise WINSelect Enterprise Edition provides centralized installation deployment administration and control for multiple workstati...

Page 8: ...he End User License Agreement appears Select I accept the terms in the License Agreement followed by Next 3 Enter the User Name Organization and License Key If you do not have a License Key select the Use Evaluation check box The evaluation version will stop functioning after 30 days If you have already purchased WINSelect you can get the License Key by logging into www faronicslabs com 4 The appl...

Page 9: ...le box is not selected 1 Launch the WINSelect installer WINSelect_Standard_Installer32 exe The uninstall wizard appears asking for confirmation of the uninstall 2 Restart the workstation to complete the uninstall The administrator must log out of Windows and log back in at least once to complete the uninstall ...

Page 10: ...ick OK The Wizard mode is used to quickly create a Kiosk and has a limited set of guided configuration options The first time the Login window appears the option to access the Wizard Mode is enabled The option to access the Administrative Console will appear following the completion of Wizard Mode steps The WINSelect icon in the System Tray indicates if WINSelect is enabled When WINSelect is disab...

Page 11: ...able key WINSelect features in only a few short steps The System node contains options which protect the computer and prevent unauthorized access to key Windows settings Here the administrator can prevent changes to system wide Windows components The Applications node allows the administrator to customize the software found on the WINSelect workstation Use the Applications node to permit and restr...

Page 12: ...niform Universal Naming Convention Paths to prevent users from accessing shared network resources Select Disable Folder Manipulation to prevent the renaming moving or deleting folders This will prevent users from being able to rename or change the location of folders through Windows Explorer Select Disable Drag and Drop to prohibit users from moving files and folders to different locations This op...

Page 13: ...plets and Hide all Applets do not allow for specific applets to be allowed or restricted To specify specific applets click Hide selected Applets and select the check box next to the applet to be restricted A cleared check box next to the applet signifies a displayed and accessible applet To add an applet to the list enter the applet name in the Specify Applet field and click Add To delete an apple...

Page 14: ...xtensions will be disabled by selecting the check box next to each one Use the Select All or Deselect All options if required Files and directory structures are not visible once this feature is enabled As an example if all drives are selected exploring the directories contained within is not permitted If there is no drive selected but a file extension is selected then the file extension will be di...

Page 15: ... for restricting access to the workstation s Start menu Customize access to the Start menu by selecting one or more options Enable Start button when selected allows the user access to the workstation s Start button Selecting Disable all Start Menu items prevents the user from accessing the Start menu Selecting Disable selected Start Menu items by selecting the specific items in the list The select...

Page 16: ...ided and click Add The addresses appear in the listbox If a range of addresses is specified each individual address within the range is either restricted or allowed depending on the radio button selected Allow selected or Disallow selected Select the Allow selected or Disallow selected radio buttons to specify the list box behavior Restrict or permit selected ranges or domain names based on which ...

Page 17: ...rograms from the list To add an individual application click the Add button Browse to the desired application s exe file and click Open Allowonlyspecificapplicationstorunortopreventspecificapplicationsfromrunning Eachapplication must have its corresponding check box selected to dictate the list behavior If an allowed application opens a second application the second application must also be listed...

Page 18: ...nu items from the list and click Apply The following Microsoft Office programs can be disabled by selecting the check box next to it Disable macro disables macros and the shortcut keys displayed Disable VB Editor disables the macros Visual Basic editor and the shortcut keys displayed Disable Templates and Addins disables the Templates and Addins for Microsoft Office Disable execution of Visual Bas...

Page 19: ...structure Menus of products having a different menu structure will not be recorded properly To record a menu to be restricted 1 Select a specific application by clicking Record and browse to the executable file exe In the example below the Notepad application is selected 2 Open the menus to be restricted one at a time The WINSelect Menu Recorder records the selected menu 3 Close the application ...

Page 20: ...ut will not be able to use them Changes cannot be made to a set of menu commands once they have been selected The exe file must be deleted from the menu list and the process repeated Menu commands for Microsoft Office cannot be recorded Internet Browser The Internet Browser node provides options for restricting access to Internet browser functions and menus Enable these features when users are req...

Page 21: ...e browser is opened This overrides the home page specified within the Internet browser Select a browser from the list and select the menu items that will be disabled in that browser Menus such as File View and Favorites can be selected which prevents the user from accessing them Entire menus can be disabled along with individual commands within menus Select the check box next to the top level to d...

Page 22: ...less of which application is enabled on the workstation Select the hotkeys on the list that will be disabled on the workstation Use the Select All or Deselect All buttons to select or deselect all hotkeys Hotkeys not listed can be added by entering the key combination and clicking the Add to List Button The Remove option only removes custom key combinations added by an administrator ...

Page 23: ...inting capabilities It only places a restriction on the amount of pages a user can print from the workstation If choosing to specify a printing quota enter the number of pages per session in the box provided Entering 0 zero denotes no limit Disable all restricts printing from each printer that has been added to the workstation If choosing to disable selected printers only select the specific print...

Page 24: ...t accept this policy before using the workstation There is no file size restriction and only files with the rtf extension can be imported To enable this feature select Display AUP at workstation start up Once this setting is enabled the user will not be able to access the workstation without accepting the policy Click Import and browse to the location of an rtf file that has the AUP text WINSelect...

Page 25: ...password Click Update to update the new password The password initially set following theWINSelect install is replaced by the new one Only one administrator password can be set Protection Choose if WINSelect is enabled on the workstation and if WINSelect is disabled for administrators If Disable WINSelect for Administrators is selected the restrictions specified in WINSelect will not apply to user...

Page 26: ...ment Select Import to add an adm file Windows Vista users can import admx files as well Importing an adm or admx template creates a WINSelect adm file located in C WINDOWS inf Once an adm file has been opened select Configure to open the Group Policy Editor where changes can be made Delete the ADM template by clicking the Delete button Deleting the ADM template does not remove the applied settings...

Page 27: ...arning select the Show warning message x minutes before the session expires check box Specify a value for x between 1 and the lowest user session 1 For example if you have selected three sets of user sessions with duration 15 30 and 60 minutes the warning must be between 1 and 14 4 To reboot the computer after the user session select the Reboot computer after user session finishes check box 5 Clic...

Page 28: ...e x minutes before the session expires check box is selected in the User Session node a warning is displayed x minutes before the expiry of the session Click Snooze and select the number of minutes from the drop down Click OK The warning will be displayed again after the selected duration If you do not want the warning to appear again click Do not show message again and click OK Administrators can...

Page 29: ...rietary file format and can only be opened by WINSelect To create a WINSelect template select all the settings that are to be part of the template in the list of WINSelect nodes Use the Select All or Deselect All options as required Click Export browse to a location to save the template and save it with a unique name To import a WINSelect template click Import and browse to the location of the pre...

Page 30: ...pplication windows to specify the window size and desktop placement for enabled applications If this option is selected the applications will open immediately and the administrator can set the size and position by clicking and dragging window frame edges Desktop shortcuts cannot be added to the list of applications the executable itself must be added There are three ways which a WINSelect Kiosk ca...

Page 31: ...y clock Start button is completely disabled Applications are disabled All UNC Universal Naming Convention paths are disabled Printing is blocked on Internet Explorer and Firefox Click Apply to save the changes and create the Kiosk settings A logoff is required for changes to take effect WINSelect Kiosk Panel When theWINSelect Kiosk is active on a workstation the selected applications appear in the...

Page 32: ...mited options to lock down a workstation TheWizardisbestusedwhenanadministratorwishestoquicklycreateaKioskorwhenanadministrator wants to restrict access to Windows features such as the Start menu Task Manager and Windows Explorer The first screen of the Wizard appears as below The Kiosk Mode screen appears To skip this step leave the Enable box blank and click Next ...

Page 33: ...pears 4 Select one of the three options available for configuring the Start menu The Start menu can be displayed completely with each feature found within If users are permitted to access features such as Search Run and Set Program Access and Defaults etc those can be selected from the list To prevent access to the Start Menu entirely select Disable all Start Menu items 5 Choose if the right click...

Page 34: ... Alt Delete check box disables the Ctrl Alt Delete hotkey which prevents the user from accessing the Task Manager or restarting the machine Selecting the Disable Right click check box prevents the user from exploring the workstation s directories If Kiosk mode is enabled Disable Task Manager and Disable UNC paths are unavailable 8 Click Next The Control Panel screen appears These options can also ...

Page 35: ...fy Applet field and click Add To delete an applet select it from the list and click Delete 11 Click Finish The following dialog is displayed Click Yes to launch the Administrative Console Since the Wizard offers only typical configuration options the Administrative Console can then be launched to configure all options All options that have been configured in the Wizard are carried over to the Admi...

Page 36: ...ith a generated set of access codes Users can print only a specified number of pages per session Enable printer restrictions and set a specific limit on the pages printed User 2 Corporate IT Administrator Workstation Functionality Suggested Configuration Users require access to Microsoft Office suite Configure System node to prevent access to the Task Manager and to disable UNC path Users require ...