Installing Faronics Core Console ..........................8 Installing WINSelect Loadin ............................8 Installing/Upgrading WINSelect on a Workstation via Faronics Core Console..........10 Applying the License on a Workstation via Faronics Core Console ..............10 Installing WINSelect Manually on a Workstation ....................11 WINSelect Licensing ............................14 Configuring the WINSelect Loadin in the Faronics Core Console ..............14 Retrieving Settings from the Workstation ......................14...
Page 6
This page has been left blank intentionally...
IT administrators want a solution that allows them to easily manage user access to certain applications, web sites, and menu options so that they can influence how a workstation is used. Faronics WINSelect protects a computer’s purpose by empowering administrators with full control over a workstation’s abilities.
Deploying the WINSelect workstation installer file Installing Faronics Core Console For information on installing the Faronics Core Console and generating and deploying the Workstation Agent installer, see the Faronics Core Console user guide. Prior to installing WINSelect, the Fast User Switching options for Windows XP, Vista, and Windows 7 must be disabled.
Page 9
Enter the User Name, Organization and the License Key. Select the Use Evaluation check box to install the evaluation version. The evaluation version will expire in 30 days. Specify the install location and click Next. The default is C:\Program Files\Faronics\Faronics Core\Loadins\WINSelect. Click Change to change the location.
An immediate Faronics Core Console restart is recommended following installation. Installing/Upgrading WINSelect on a Workstation via Faronics Core Console You can install WINSelect on a workstation via Faronics Core Console. If you recently purchased an upgraded version of WINSelect, you can upgrade via Faronics Core Console. To install/upgrade WINSelect, select a single workstation or multiple workstations, click Configure Workstations in the right pane and select Advanced >...
Installing WINSelect Manually on a Workstation When installing the WINSelect Loadin, the WINSelect workstation installer files are unpacked in the C:\Program Files\Faronics\Faronics Core\Loadins\WINSelect\Workstation Installer directory. To install WINSelect on a workstation, double-click WINSelect_Ent_32-bit.msi on a 32-bit operating system. To install WINSelect on a workstation manually, do the following: Double-click on the .msi file to begin the installation process.
Page 12
Read and accept the License Agreement. Click Next to continue. Enter the User Name, Organization and License Key. If you do not have a License Key, select the Use Evaluation check box. The evaluation version will stop functioning after 30 days. If you have already purchased WINSelect, you can get the License Key by logging into www.faronicslabs.
Page 13
Specify the install location and click Next. The default is C:\Program Files\Faronics\WINSelect. Enter a WINSelect Administrator Password. Enter the password again to confirm. Click Next to continue. Click Next. Click Install to complete the installation.
If no Key is entered after 30 days, WINSelect is disabled on the workstation. Configuring the WINSelect Loadin in the Faronics Core Console To configure the WINSelect for a workstation in the Faronics Core Console, click on Workstations > Managed Workstations and the workstation(s) for which you want to configure WINSelect, and click Configure WINSelect.
Applying Settings in the Faronics WINSelect Enterprise Console When the administrator modifies settings in the WINSelect Enterprise Console, the text for the node turns red to indicate that the administrator has made changes. To apply changes, click Apply, and then apply the settings only to the edited panes or to all the panes.
System The System node allows you to configure the system-wide options. To disable the Task Manager, select Disable Task Manager. This prevents the user from accessing the Task Manager and ensures currently running tasks and processes can only be ended by an authorized user.
Control Panel The Control Panel node provides options for restricting the display of Windows Control Panel applets. Windows Control Panel can be accessed but the icons may be selectively hidden. Some Control Panel settings can still be accessed and changed via a command line or the Run dialog. To permit access to the entire Control Panel, select Show Applets.
Disable Right-click on Desktop prevents the user from right-clicking on the desktop. They will not be able to access the right-click menu and commands such as New and Properties. Disable Right-click on Desktop icons prevents the user from right-clicking on desktop icons. They will not be able to access commands such as Open.
Once enabled, this feature prevents access to or creation of files with the specified extension. If a removable drive is connected during the WINSelect installation and configuration, it is assigned a drive letter. It is recommended that removable drives be disconnected during installation and configuration to avoid inadvertently applying WINSelect settings to the removable drive.
Network Restrictions The Network Restrictions node provides network restriction options. Administrators can limit access to specific web sites with these options. To apply network restrictions on the workstation, select Enable. To restrict a specific domain name, enter it in Specify the URL and click Add. The name appears in the list.
Hotkeys The Hotkeys node provides options for restricting the use of specified hotkeys at the system level. Key combinations that work in multiple applications can be disabled regardless which application is enabled on the workstation. Select the hotkeys on the list that will be disabled on the workstation. Click Select All or Deselect All to select or deselect all hotkeys.
Applications The Applications node allows customizing of applications. This option is unavailable when Kiosk mode is enabled. If administrators wish to create a Windows environment featuring only specific applications, but do not wish to create a WINSelect Kiosk, they can specify the desired applications on this node.
Microsoft Office The Microsoft Office node provides options for restricting access to Microsoft Office menu items. The administrative features of Microsoft Office are listed to allow the administrator to prevent users from unauthorized manipulation of these settings. Select the menu items from the list that will restrict menu items of Microsoft Office applications on the workstation.
Menu The Menu node provides options for restricting access to specific menu items within selected applications. WINSelect will record the menu only for products that adhere to Microsoft’s menu structure. Menus of products having a different menu structure will not be recorded properly.
WINSelect displays the .exe file selected on the left and the menu items the administrator opened on the right. Click on specific menu commands within the tree structure to restrict individual commands within those menus. Once enabled, the user will be able to access the commands within the application but will not be able to use them.
Page 26
Disable right-click functionality by selecting the Disable right-click check box. This prevents the user from accessing right-click menus and prevents the saving of links or the copying of addresses. To prevent access to files stored on a network, choose Prevent opening of files or folders from address bar. This prevents the user from opening documents on local drives or Internet directory locations.
Printers The Printers node provides options for restricting access to any available printers connected to the workstation. The list of printers for the workstation is displayed. Use this feature to restrict printers entirely, or to permit users to print a specific amount of material on one or more selected printers. Access to offline printers can be restricted.
Acceptable Use Policy The Acceptable Use Policy node allows for display of an Acceptable Use Policy (AUP) at the start up of the workstation. This feature allows the administrator to specify the conditions of use each time a user logs into a workstation. The user must accept this policy before using the workstation. There is no file size restriction and only files with the .rtf extension can be imported.
Administrator The Administrator node is used to change passwords required by administrators, and to enable or disable WINSelect. Passwords To set a new password, type the new password in the New password field. Enter and confirm the new password. Click Apply to apply the new password. The password initially set following the WINSelect install is replaced by the new one.
ADM Templates The Active Directory Management (ADM) Template node provides the option to import and configure .adm templates. Since WINSelect provides administrators with an interface to edit Group Policy settings, administrators can create their own .adm templates to supplement WINSelect’s features. For more information consult the Microsoft support article regarding Active Directory Management.
User Session The User Session node provides the option to create user sessions that are limited in duration. This allows the administrator to specify the amount of time a user can spend logged into a workstation. To enable the User Session feature, ensure Enable is selected and perform the following steps: Choose the Duration of User Session in minutes for the session from the drop-down.
Page 32
If you are the administrator, you can select the Administrator check box. The WINSelect login screen is displayed. You can enter the administrator password to launch WINSelect in Administrator mode. If you are logged in as the workstation user, and the session reaches its allotted time, a dialog will appear asking for a new code to be entered.
WINSelect Templates The WINSelect Templates node provides the option to export all configured WINSelect settings as a WINSelect template. This template can then be deployed to any number of workstations protected by WINSelect. It is saved as a proprietary file format and can only be opened by WINSelect. To create a WINSelect template, select all the settings that are to be part of the template in the list of WINSelect nodes.
Using the WINSelect Kiosk Mode This setting allows administrators to create a kiosk type workstation where only specified executables can be run. It also disables access to the Start button and Windows Taskbar. To access the Kiosk mode, click on the Kiosk node in the left pane of the Administrative Console. To create a Kiosk workstation, select Enable in the WINSelect Kiosk Panel.
• Applications selected, size specified, and placed by the administrator: Configure by selecting a series of applications and selecting the Maintain current size and position box for application windows check box. The Kiosk panel is minimized to the Taskbar upon startup. To remove an executable from the Kiosk list, select it and click Remove.
Scheduling Actions WINSelect actions can be scheduled through Faronics Core Console to occur on one or many workstations on a one-time, daily, weekly, or monthly basis. Actions that can be scheduled are: Shutdown, Restart, Wakeup, Enable Protection and Disable Protection. To choose an action, click Schedule Action in the right pane and choose the preferred action from the...
Appendix A: User Scenarios The following two user scenarios outline possible WINSelect configurations according to the tasks the workstation will be used to accomplish. Other scenarios are possible as well. User 1—Library System Administrator Workstation Functionality Suggested Configuration Users are provided to access the Internet, the Enable Kiosk mode with the following applications: library card catalog, and limited word processing Internet Explorer (IEXPLORE.EXE).
The WINSelect Loadin can be uninstalled through Add or Remove Programs. To do so click on Start>Control Panel> Add or Remove Programs > Faronics WINSelect Loadin > Remove. Uninstalling the WINSelect Loadin will remove all WINSelect management capabilities from Faronics Core Console.