IT administrators want a solution that allows them to easily manage user access to certain applications, web sites, and menu options so that they can influence how a workstation is used. Faronics WINSelect protects a computer’s purpose by empowering administrators with full control over a workstation’s abilities.
A dialog appears stating that the system must be restarted for the configuration changes to take effect. Click Yes to restart or No to restart later. Passwords cannot be retrieved by Faronics. The password must be recorded and guarded with care.
Uninstalling WINSelect To perform a WINSelect uninstall, click on the Administrator node and ensure the Enable box is not selected. Launch the WINSelect installer WINSelect_Standard_Installer32.exe. The uninstall wizard appears, asking for confirmation of the uninstall. Restart the workstation to complete the uninstall. The administrator must log out of Windows and log back in at least once to complete the uninstall.
Launching WINSelect Following Installation To launch WINSelect, use one of the two following options: • Use hotkey Ctrl + Alt + Shift + F8 • Shift + double-click the WINSelect System Tray icon The WINSelect Login window appears: Enter the administrator password set during the WINSelect install. There are two options available from the Login window: •...
Administrative Console To access the Administrative Console, Shift + double-click the WINSelect icon located in the Windows System Tray or use the Ctrl + Alt + Shift + F8 hotkey. Enter an active password and ensure the Wizard Mode check box is not selected. If the Wizard Mode is used before the Administrative Console is accessed, all configuration choices made in the Wizard are carried over.
System The System node allows configuring the system-wide options. To disable the Task Manager, select Disable Task Manager. This prevents the user from accessing the Task Manager and ensures currently running tasks and processes cannot be ended by an unauthorized user.
Control Panel The Control Panel node provides options for restricting the display of Windows Control Panel applets. Windows Control Panel can be accessed but the icons may be selectively hidden. Some Control Panel settings can still be accessed and changed via a command line or the Run dialog. To permit access to the entire Control Panel, select Show Applets.
Disable Right-click on desktop prevents the user from right-clicking on the desktop. They will not be able to access the right-click menu and commands such as New and Properties. Disable Right-click on Desktop Icons prevents the user from right-clicking on desktop icons. They will not be able to access commands such as Open.
To disable file extensions from being used, select the desired extension. To add another file extension to the list, enter the extension in the field provided and click Add Extension. Once enabled, this feature prevents access to or creation of files with the specified extension. If a removable drive is connected during the WINSelect install and configuration, it is assigned a drive letter.
Network Restrictions The Network Restrictions node provides network restriction options. Administrators can limit access to specific web sites with these options. To apply network restrictions on the workstation, select Enable. To restrict a specific domain name, enter it in the field labelled Specify the URL and click Add. The name appears in the list box.
Applications The Applications node allows for further customizing of applications. This option is unavailable when Kiosk mode is enabled. If administrators wish to create a Windows environment featuring only specific available applications, but do not wish to create a WINSelect Kiosk, they can specify the applications on this node.
Microsoft Office The Microsoft Office node provides options for restricting access to Microsoft Office menu items. The administrative features of Microsoft Office are listed to allow the administrator to prevent users from unauthorized manipulation of these settings. Select the menu items from the list that will restrict menu items of Microsoft Office applications on the workstation.
Menu The Menu node provides options for restricting access to specific menu items within selected applications. WINSelect will record the menu only for products that adhere to Microsoft’s menu structure. Menus of products having a different menu structure will not be recorded properly.
WINSelect now displays the .exe file selected on the left and the menu items the administrator opened on the right. Click on specific menu commands within the tree structure to restrict individual commands within those menus. Once enabled, the user will be able to access the commands within the application but will not be able to use them.
Page 21
Disable right-click functionality by selecting the Disable Right click check box. This prevents the user from accessing right-click menus and prevents the saving of links or the copying of addresses. To prevent access to material stored on a network, choose Prevent opening of files or folders from address bar.
Hotkeys The Hotkeys node provides options for restricting the use of specified hotkeys at the system level. Key combinations that work in multiple applications can be disabled regardless of which application is enabled on the workstation. Select the hotkeys on the list that will be disabled on the workstation. Use the Select All or Deselect All buttons to select or deselect all hotkeys.
Printers The Printers node provides options for restricting access to any available printers connected to the workstation. Use this feature to restrict printers entirely, or to permit users to print a specific amount of material on one or more selected printers. Access to offline printers can be restricted.
Acceptable Use Policy The Acceptable Use Policy node allows for display of an Acceptable Use Policy (AUP) at the start up of the workstation. This feature allows the administrator to specify the conditions of use each time a user logs into a workstation. The user must accept this policy before using the workstation. There is no file size restriction and only files with the .rtf extension can be imported.
Administrator The Administrator node is used to change passwords required by administrators, and to enable or disable WINSelect. Passwords To set a new password, type the new password in the New password field. Enter and confirm the new password. Click Update to update the new password. The password initially set following the WINSelect install is replaced by the new one.
ADM Templates The Active Directory Management (ADM) Template node provides the option to import and configure .adm templates. Since WINSelect provides administrators with an interface to edit Group Policy settings, administrators can create their own .adm templates to supplement WINSelect’s features. For more information consult the Microsoft support article regarding Active Directory Management.
User Session The User Session node provides the option to create user sessions that are limited in duration. This allows the administrator to specify the amount of time a user can spend logged into a workstation. To enable the User Session feature, ensure Enable is selected and perform the following steps: Choose the Duration of User Session in minutes for the session from the drop-down.
Page 28
If you are the administrator, you can select the Administrator check box. The WINSelect login screen is displayed. You can enter the administrator password to launch WINSelect in Administrator mode. If you are logged in as the workstation user, and the session reaches its allotted time, a dialog will appear asking for a new code to be entered.
WINSelect Templates The WINSelect Templates node provides the option to export all configured WINSelect settings as a WINSelect template. This template can then be deployed to any number of workstations protected by WINSelect. It is saved in a proprietary file format and can only be opened by WINSelect. To create a WINSelect template, select all the settings that are to be part of the template in the list of WINSelect nodes.
Using the WINSelect Kiosk Mode This setting allows administrators to create a kiosk type workstation where only specified executables can be run. It also disables access to the Start button and Windows Taskbar. To access the Kiosk mode, click on the Kiosk node in the left pane of the Administrative Console. To create a Kiosk workstation, select Enable in the WINSelect Kiosk Panel.
The Kiosk panel is minimized to the Taskbar upon startup. To remove an executable from the Kiosk list, select it and click Remove. When Kiosk Mode is enabled the following settings are automatically applied and cannot be disabled: • Task manager is disabled •...
Using the WINSelect Wizard Mode The Login window offers the option to enter Wizard Mode. The Wizard is a condensed version of the Administrative Console offering limited options to lock down a workstation. The Wizard is best used when an administrator wishes to quickly create a Kiosk or when an administrator wants to restrict access to Windows features such as the Start menu, Task Manager, and Windows Explorer.
Page 33
Select Enable to create a Kiosk. If Enable is selected, click Add to list any executables that can be added to Kiosk mode. Customize the desktop view by selecting the Maintain current size and position for application windows check box. This feature immediately opens selected Kiosk applications which the administrator can then size and place.
Page 34
Click Next. The Task Manager/Windows Explorer screen appears. These options can also be found in the System node of the Administrative Console. Choose the options to be disabled in the Task Manager and Windows Explorer. Selecting the Disable Task Manager (Ctrl+Alt+Delete) check box disables the Ctrl+Alt+Delete hotkey which prevents the user from accessing the Task Manager or restarting the machine.
Page 35
Select one of the three available options for configuring Control Panel. If you choose to disable selected applets only, select the specific applets to be disabled from the list. 10. To add an applet to the list, enter the name in the Specify Applet field and click Add. To delete an applet, select it from the list and click Delete.
Appendix A: User Scenarios The following two user scenarios outline possible WINSelect configurations according to the tasks the workstation will be used to accomplish. Other scenarios are possible as well. User 1—Library System Administrator Workstation Functionality Suggested Configuration Users are allowed to access the Internet, the Enable Kiosk mode with the following applications: library card catalog, and limited word processing Internet Explorer (IEXPLORE.EXE).
Need help?
Do you have a question about the WINSELECT STANDARD and is the answer not in the manual?
Questions and answers