FARONICS WINSELECT ENTERPRISE User manual

is page has been le blank intentionally

3
ContactInformation
Web: www.faronics.com
Email: [email protected]m
Phone: [phone] or 604-637-3333
Fax: [phone] or 604-637-8188
Hours: 7:00am to 5:00pm (Pacific Time)
Address: Faronics Technologies USA Inc.
2411 Old Crow Canyon Road, Suite 170
San Ramon, CA 94583
USA
Faronics Corporation
609 Granville Street, Suite 620
Vancouver, BC V7Y 1G5
Canada
TechnicalSupport
Every effort has been made to design this soware for ease of use and to be problem free. If problems
are encountered, contact Technical Support:
Email: [e-mail]
Phone: [phone] or 604-637-3333
Hours: 7:00am to 5:00pm (Pacific Time)
AboutFaronics
Faronics delivers market-leading solutions that help manage, simplify, and secure complex IT
environments. Our products ensure 100% workstation availability, and have dramatically impacted the
day-to-day lives of thousands of information technology professionals. Fueled by a customer-centric
focus, Faronics’ technology innovations benefit educational institutions, healthcare facilities, libraries,
government organizations and corporations.
Last Modified: January 2010
© 1999 - 2010 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Faronics Core Console, Faronics Anti-Executable,
Faronics Device Filter, Faronics Power Save, Faronics Insight,Faronics System Profiler, and WINSelect are trademarks and/or registered
trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.

is page has been le blank intentionally

5
Contents
Faronics WINSelect Overview...........................................................................................................................7
WINSelect Editions........................................................................................................................................................7
Standard.......................................................................................................................................................................7
Enterprise ....................................................................................................................................................................7
System Requirements.....................................................................................................................................................7
Soware .......................................................................................................................................................................7
Supported Programs ..................................................................................................................................................7
Faronics Core Console Requirements .........................................................................................................................7
WINSelect Installation Overview......................................................................................................................8
Installing Faronics Core Console.............................................................................................................................8
Installing WINSelect Loadin ....................................................................................................................................8
Installing/Upgrading WINSelect on a Workstation via Faronics Core Console..............................................10
Applying the License on a Workstation via Faronics Core Console..................................................................10
Installing WINSelect Manually on a Workstation ...............................................................................................11
WINSelect Licensing .......................................................................................................................................14
Configuring the WINSelect Loadin in the Faronics Core Console................................................................14
Retrieving Settings from the Workstation ......................................................................................................14
Applying Settings in the Faronics WINSelect Enterprise Console.................................................................15
WINSelect Enterprise Console........................................................................................................................15
System ............................................................................................................................................................................16
Control Panel............................................................................................................................................................17
Desktop & Windows Taskbar .................................................................................................................................17
Drives and File Extensions......................................................................................................................................18
Start Menu.................................................................................................................................................................19
Network Restrictions ...............................................................................................................................................20
Hotkeys......................................................................................................................................................................21
Applications...................................................................................................................................................................22
Microso Office........................................................................................................................................................23
Menu ..........................................................................................................................................................................24
Internet Browser.......................................................................................................................................................25
Printers...........................................................................................................................................................................27
Acceptable Use Policy ..................................................................................................................................................28
Administrator................................................................................................................................................................29
Passwords ..................................................................................................................................................................29
Protection..................................................................................................................................................................29
ADM Templates........................................................................................................................................................30
User Session ..............................................................................................................................................................31
WINSelect Templates...............................................................................................................................................33
Using the WINSelect Kiosk Mode ...................................................................................................................34
WINSelect Kiosk Panel................................................................................................................................................35
Scheduling Actions ..........................................................................................................................................36
Appendix A: User Scenarios ............................................................................................................................37
User 1—Library System Administrator .....................................................................................................................37
User 2—Corporate IT Administrator ........................................................................................................................37
Appendix B: Command Line Installation Options.........................................................................................38
Appendix C: Uninstalling WINSelect ............................................................................................................39

is page has been le blank intentionally

7
FaronicsWINSelectOverview
AboutWINSelect
Controlling user activity on public use and kiosk computers is a problem that IT personnel continually
face. IT administrators want a solution that allows them to easily manage user access to certain
applications, web sites,and menu options so that they can influence how a workstation is used.Faronics
WINSelect protects a computer’s purpose by empowering administrators with full control over a
workstation’s abilities. Windows operating system features, Start menu functionality, Internet Explorer
capabilities, and Windows Explorer options can all be heavily customized to suit organizational
needs.
WINSelectEditions
Standard
•WINSelect Standard Edition runs on a standalone workstation.
Enterprise
•WINSelect Enterprise Edition provides centralized installation, deployment, administration,
and control for multiple workstations on your network.
AboutFaronicsCore
Faronics Core supports the monitoring and management of multiple workstations from a central
location.e Faronics Core displays the current status of managed workstations and allows commands
to apply to one or more of those workstations. Advanced features include the ability to shutdown or
restart computers, and centralized control over workstation protection settings.
SystemRequirements
Software
•Windows 2000 Professional SP4, Windows XP Professional SP3 (32-bit), Windows Vista (32-
bit) or Windows 7 (32-bit)
Supported Programs
•Microso Office 2000, XP, 2003, and 2007
•Internet Explorer 8
•Mozilla Firefox
Faronics Core Requirements
Information on Faronics Core system requirements can be found in the Faronics Core user guide. e
latest user guide is available at http://www.faronics.com/library.

8
WINSelectInstallationOverview
Installation and configuration of WINSelect involves the following steps:
Installing Faronics Core Console and generating/deploying the Workstation Agent installer•
Installing and configuring the WINSelect Loadin•
Deploying the WINSelect workstation installer file•
InstallingFaronicsCoreConsole
For information on installing the Faronics Core Console and generating and deploying the Workstation
Agent installer, see the Faronics Core Console user guide.
Prior to installing WINSelect,the Fast User Switching options for Windows XP,Vista,and Windows
7 must be disabled. Refer to http://support.microso.com/kb/279765 for more information.
WINSelect must be disabled during the creation of a new User Profile. As part of WINSelect
protection, the registry editing tools and command prompt will be disabled. e administrator
will have to disable WINSelect to use these tools.
If a removable drive is connected during the WINSelect install, it is assigned a drive letter. It is
recommended that removable drives be disconnected during installation to avoid unintentionally
applying WINSelect settings.
If Windows Group Policies are set on a workstation and WINSelect sets the same policy, WINSelect
will take precedence. If WINSelect does not duplicate the Group Policy setting, the Group Policy
will not be affected.
InstallingWINSelectLoadin
e WINSelect Loadin is installed into Faronics Core Console using the WINSelect_Console_Loadin_
Installer.exe file. e WINSelect Loadin cannot be installed on a system that does not already have
Faronics Core Console installed.
To Install the WINSelect Loadin, complete the following steps:
1. Insert the CD-ROM from the Media Package into the CD-ROM drive. If WINSelect has been
downloaded via the Internet, double-click the .exe file to begin the installation process.
Click Next to continue.

9
2. Read and accept the License Agreement.
Click Next to continue.
3. Enter the User Name, Organization and the License Key. Select the Use Evaluation check box to
install the evaluation version. e evaluation version will expire in 30 days.
4. Specify the install location and click Next. e default is C:\Program Files\Faronics\Faronics
Core\Loadins\WINSelect. Click Change to change the location.

10
4. Click Install to complete the installation.
An immediate Faronics Core Console restart is recommended following installation.
Installing/UpgradingWINSelectonaWorkstationviaFaronicsCoreConsole
You can install WINSelect on a workstation via Faronics Core Console. If you recently purchased an
upgraded version of WINSelect, you can upgrade via Faronics Core Console.
To install/upgrade WINSelect, select a single workstation or multiple workstations, click Configure
Workstations in the right pane and select Advanced > WINSelect>Install/Upgrade WINSelect.
e WINSelect dialog appears. Enter and confirm the Password. Click Install WINSelect.
ApplyingtheLicenseonaWorkstationviaFaronicsCoreConsole
If you are using the evaluation version of WINSelect, you can apply the license and convert it to a full
version.
To apply license, select a single workstation or multiple workstations, click Configure Workstations in
the right pane and select Advanced > WINSelect>Apply WINSelect License.

 11
e license dialog appears. Enter the License Key in the License Key field and click Apply.
InstallingWINSelectManuallyonaWorkstation
When installing the WINSelect Loadin, the WINSelect workstation installer files are unpacked in the
C:\Program Files\Faronics\Faronics Core\Loadins\WINSelect\Workstation Installer directory. To install
WINSelect on a workstation, double-click WINSelect_Ent_32-bit.msi on a 32-bit operating system.
To install WINSelect on a workstation manually, do the following:
1. Double-click on the .msi file to begin the installation process.
Click Next to continue.

12
2. Read and accept the License Agreement.
Click Next to continue.
3. Enter the User Name, Organization and License Key. If you do not have a License Key, select the
Use Evaluation check box. e evaluation version will stop functioning aer 30 days. If you have
already purchased WINSelect, you can get the License Key by logging into www.faronicslabs.
com.
Click Next to continue.

 13
4. Specify the install location and click Next. e default is C:\Program Files\Faronics\WINSelect.
5. Enter a WINSelect Administrator Password. Enter the password again to confirm. Click Next to
continue.
6. Click Next. Click Install to complete the installation.

14
Once the Loadin has been successfully installed and Faronics Core Console restarted, a list of
WINSelect-specific actions are displayed in the Actions pane when one or more workstations have
been selected.
e WINSelect actions are also available by selecting one or more workstations and using the right-
click contextual menu.
Console Tree• : e pane that allows you to select the Faronics Core Console node,workstations
and groups, schedules tasks, and view generated reports.
Workstation List• : e pane that allows you to list workstations currently communicating
with Faronics Core Console. is list also displays columns regarding workstation-specific
information.
Actions Pane• : e pane that allows you to enable, disable, and configure WINSelect .
WINSelectLicensing
If no License Key is available, use the evaluation version of WINSelect. e evaluation version is valid
for 30 days. To upgrade to the full version of WINSelect enter a valid Licence Key in the About node.
If no Key is entered aer 30 days,WINSelect is disabled on the workstation.
ConguringtheWINSelectLoadinintheFaronicsCoreConsole
To configure the WINSelect for a workstation in the Faronics Core Console, click on Workstations >
Managed Workstations and the workstation(s) for which you want to configure WINSelect, and click
Configure WINSelect. e Faronics WINSelect configuration screen appears.
RetrievingSettingsfromtheWorkstation
To retrieve settings from a selected workstation, click Retrieve. Only settings from a single workstation
can be retrieved.
To configure multiple workstations with similar settings, import a WINSelect template from the
Administrator node. For more information, refer to the section on WINSelect Templates.

 15
ApplyingSettingsintheFaronicsWINSelectEnterpriseConsole
When the administrator modifies settings in the WINSelect Enterprise Console, the text for the node
turns red to indicate that the administrator has made changes. To apply changes, click Apply, and then
apply the settings only to the edited panes or to all the panes.
WINSelectEnterpriseConsole
e About node of the WINSelect Enterprise Console appears as below:
e Console is comprised of a series of nodes grouped by common function allowing the administrator
to customize the Windows environment and functionality.
e Kiosk node allows administrators to create a workstation with limited Windows functionality and
enable key WINSelect features in only a few short steps.
e System node contains options which protect the computer and prevent unauthorized access
to key Windows settings. Here, the administrator can prevent changes to system-wide Windows
components.
e Applications node allows the administrator to customize the soware found on the WINSelect
workstation. Use the Applications node to permit and restrict access to applications like Microso
Office and various Internet browsers.
e Printer node allows administrators to disable local and network printers.
e Acceptable Use Policy node allows administrators to set Acceptable User Policy and display it to
workstation users.
e Administrator node allows users to enable and disable WINSelect, customize WINSelect settings
such as the creation of user sessions, and add or change passwords. WINSelect templates can also be
created.
Click on any node to configure the workstation.
To apply any new changes configured in the Console, click Apply.

16
System
e System node allows you to configure the system-wide options.
To disable the Task Manager, select Disable Task Manager. is prevents the user from accessing the
Task Manager and ensures currently running tasks and processes can only be ended by an authorized
user.
Select Disable right-click to prevent users from accessing commands such as View, Paste, Copy, and
Properties in Windows Explorer.
Select Disable UNC (Uniform/Universal Naming Convention) Paths to prevent users from accessing
shared network resources.
Select Disable Folder Manipulation to prevent the renaming, moving, or deleting folders. is prevents
users from renaming or changing the location of folders through Windows Explorer.
Select Disable Drag-and-Drop to prohibit users from moving files and folders to different locations.
is option also disables selecting text and images by dragging the mouse pointer in all applications.
e Disable Task Manager and UNC paths options are automatically enabled and
cannot be configured when Kiosk mode is enabled.

 17
ControlPanel
e Control Panel node provides options for restricting the display of Windows Control Panel applets.
Windows Control Panel can be accessed but the icons may be selectively hidden.
Some Control Panel settings can still be accessed and changed via a command line or the Run dialog.
To permit access to the entire Control Panel, select Show Applets. is displays each applet found in
the workstation’s Control Panel. To prevent access to every Control Panel applet select Hide all Applets.
Show Applets and Hide all Applets do not allow for specific applets to be allowed or restricted.
To specify specific applets click Hide selected Applets and select the check box next to the applet to be
restricted. A cleared check box next to the applet signifies a displayed and accessible applet.
To add an applet to the list, enter the applet name in the Specify Applet field and click Add.
To delete an applet, highlight it in the list and click Remove. A deleted applet still appears in Control
Panel. It has only been removed from WINSelect’s list of Control Panel applets.
Desktop&WindowsTaskbar
e Desktop & Windows Taskbar node provides options for restricting the use of the workstation
desktop and Windows Taskbar.

18
Disable Right-click on Desktop prevents the user from right-clicking on the desktop. ey will not be
able to access the right-click menu and commands such as New and Properties.
Disable Right-click on Desktop icons prevents the user from right-clicking on desktop icons. ey will
not be able to access commands such as Open. e user will also not be able to delete shortcuts or
rename them.
e two radio buttons Hide all icons and Hide selected icons dictate the desktop icons that can be
hidden. WINSelect recognizes the desktop icons on the workstation and lists them. Hide selected by
selecting the Hide selected Icons radio button and selecting the check box for each icon to be hidden.
If Kiosk mode is enabled, changes to this node are not possible. Disabling right-click
in the System node also disables the two Disable Right-click options in the Desktop
& Windows Taskbar node.
DrivesandFileExtensions
e Drives and File Extensions node provides options for restricting access to drives and specified file
extensions for each application installed on the workstation.
Choose the available drives and file extensions to be disabled by selecting the check box next to each
one. Use the Select All or Deselect All options if required.
Files and directory structures are not visible once this feature is enabled. For example, if all drives are
selected, exploring the directories contained within is not permitted. If there is no drive selected but a
file extension is selected, then the file extension will be disabled across all drives.
If the system drive is disabled, access to the user’s directory is not disabled by default. Select Disable
access to user’s directory to prevent access. For example, if C: is listed as the system drive, selecting the
check box next to C: makes the Disable access to user’s directory check box available. e administrator
can now choose to restrict the user to access the directory C:\Documents and Settings\User folder by
selecting the check box. e user will be able to access only the Desktop. is option is only made
available when the system drive letter check box is selected. Clear the check box to allow users to save
and create files within their own directory.
To prevent access to removable drives, select the check box for removable drives. is feature prevents
the user from seeing any removable drives connected. To disable file extensions from being used, select
the desired extension. To add another file extension to the list, enter the extension in the field provided
and click Add Extension.

 19
Once enabled, this feature prevents access to or creation of files with the specified extension.
IfaremovabledriveisconnectedduringtheWINSelectinstallationandconfiguration,
it is assigned a drive letter. It is recommended that removable drives be disconnected
during installation and configuration to avoid inadvertently applying WINSelect
settings to the removable drive.
StartMenu
e Start Menu node provides options for restricting access to the workstation Start menu. Customize
access to the Start menu by selecting one or more options.
Enable Start button, when selected, allows the user access to the workstation’s Start button. Disable all
Start menu items prevents the user from accessing the Start menu.
Disable selected Start menu items by selecting the specific items in the list. e selected options will not
be available the next time the Start menu is opened.
Selecting the Disable right-click on Start Menu items option prevents a user from accessing the secondary
menu.
Selecting the Enable classic style Start Menu option enables the classic style Start menu with the look
and feature-limited behavior of the Windows 2000 Start menu.
Each Start menu option is automatically disabled while Kiosk mode is enabled.

20
NetworkRestrictions
e Network Restrictions node provides network restriction options. Administrators can limit access
to specific web sites with these options.
To apply network restrictions on the workstation, select Enable.
To restrict a specific domain name, enter it in Specify the URL and click Add. e name appears in the
list.
To restrict an IP address or a range of IP addresses,enter the addresses in the field(s) provided and click
Add. e addresses appear in the listbox.
If a range of addresses is specified, each individual address within the range is either restricted or
allowed depending on the radio button selected (Allow selected or Disallow selected).
Select the Allow selected or Disallow selected radio buttons to specify the list behavior. Restrict or permit
selected ranges or domain names based on which entries are selected. If Allow selected is selected, the
selected list entry will be allowed. If Disallow selected is selected, the selected list entry will not be
allowed.
To remove an item from the listbox, select the item and click Remove.