FARONICS WINSELECT STANDARD User manual

is page has been le blank intentionally

3
ContactInformation
Web: www.faronics.com
Email: [email protected]m
Phone: [phone] or 604-637-3333
Fax: [phone] or 604-637-8188
Hours: 7:00am to 5:00pm (Pacific Time)
Address: Faronics Technologies USA Inc.
2411 Old Crow Canyon Road, Suite 170
San Ramon, CA 94583
USA
Faronics Corporation
609 Granville Street, Suite 620
Vancouver, BC V7Y 1G5
Canada
TechnicalSupport
Every effort has been made to design this soware for ease of use and to be problem free. If problems
are encountered, contact Technical Support:
Email: [e-mail]
Phone: [phone] or 604-637-3333
Hours: 7:00am to 5:00pm (Pacific Time)
AboutFaronics
Faronics delivers market-leading solutions that help manage, simplify, and secure complex IT
environments. Our products ensure 100% workstation availability, and have dramatically impacted the
day-to-day lives of thousands of information technology professionals. Fueled by a customer-centric
focus, Faronics’ technology innovations benefit educational institutions, healthcare facilities, libraries,
government organizations and corporations.
Last Modified: January 2010
© 1999 - 2010 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Faronics Core Console, Faronics Anti-Executable,
Faronics Device Filter, Faronics Power Save, Faronics Insight,Faronics System Profiler, and WINSelect are trademarks and/or registered
trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.

is page has been le blank intentionally

5
Contents
WINSelect Program Overview ..........................................................................................................................7
WINSelect Editions........................................................................................................................................................7
Standard.......................................................................................................................................................................7
Enterprise ....................................................................................................................................................................7
Program Requirements..................................................................................................................................................7
Soware .......................................................................................................................................................................7
Supported Programs ..................................................................................................................................................7
Installing WINSelect..........................................................................................................................................8
WINSelect Licensing......................................................................................................................................................8
Uninstalling WINSelect.....................................................................................................................................9
Launching WINSelect Following Installation.................................................................................................10
WINSelect Layout ........................................................................................................................................................10
Administrative Console...................................................................................................................................11
System ............................................................................................................................................................................12
Control Panel............................................................................................................................................................13
Desktop & Windows Taskbar .................................................................................................................................13
Drives and File Extensions......................................................................................................................................14
Start Menu.................................................................................................................................................................15
Network Restrictions ...............................................................................................................................................16
Applications...................................................................................................................................................................17
Microso Office........................................................................................................................................................18
Menu ..........................................................................................................................................................................19
Internet Browser.......................................................................................................................................................20
Hotkeys......................................................................................................................................................................22
Printers...........................................................................................................................................................................23
Acceptable Use Policy ..................................................................................................................................................24
Administrator................................................................................................................................................................25
Passwords ..................................................................................................................................................................25
Protection..................................................................................................................................................................25
ADM Templates........................................................................................................................................................26
User Session ..............................................................................................................................................................27
WINSelect Templates...............................................................................................................................................29
Using the WINSelect Kiosk Mode ...................................................................................................................30
WINSelect Kiosk Panel................................................................................................................................................31
Using the WINSelect Wizard Mode.................................................................................................................32
Appendix A: User Scenarios ............................................................................................................................36
User 1—Library System Administrator .....................................................................................................................36
User 2—Corporate IT Administrator ........................................................................................................................36

is page has been le blank intentionally

7
WINSelectProgramOverview
Controlling user activity on public use and kiosk computers is a problem that IT personnel continually
face. IT administrators want a solution that allows them to easily manage user access to certain
applications, web sites,and menu options so that they can influence how a workstation is used.Faronics
WINSelect protects a computer’s purpose by empowering administrators with full control over a
workstation’s abilities. Windows operating system features, Start menu functionality, Internet Explorer
capabilities, and Windows Explorer options can all be heavily customized to suit organizational
needs.
WINSelectEditions
Standard
•WINSelect Standard Edition runs on a standalone workstation.
Enterprise
•WINSelect Enterprise Edition provides centralized installation, deployment, administration,
and control for multiple workstations on your network.
ProgramRequirements
Software
•Windows 2000 Professional SP4, Windows XP Professional SP3 (32-bit), Windows Vista (32-
bit) or Windows 7 (32-bit)
Supported Programs
•Microso Office 2000, XP, 2003, and 2007
•Internet Explorer 8
•Mozilla Firefox

8
InstallingWINSelect
Prior toinstallingWINSelect,theFast User Switchingoptions forWindowsXP,Vista, and Windows
7 must be disabled. Refer to http://support.microso.com/kb/279765 for more information.
WINSelect must be disabled during the creation of a new User Profile. As part of WINSelect
protection, the registry editing tools and command prompt will be disabled. e administrator
will have to disable WINSelect to use these tools.
If a removable drive is connected during the WINSelect install, it is assigned a drive letter. It is
recommended that removable drives be disconnected during installation to avoid unintentionally
applying WINSelect settings.
If Windows Group Policies are set on a workstation and WINSelect sets the same policy, WINSelect
will take precedence. If WINSelect does not duplicate the Group Policy setting, the Group Policy
will not be affected.
To install WINSelect, complete the following steps:
1. Insert the CD-ROM from the media package into the CD-ROM drive. If WINSelect has been
downloaded via the Internet, double-click the application file named WINSelect_Standard_
Installer32.exe.
e Installation Wizard appears.
2. e End User License Agreement appears. Select I accept the terms in the License Agreement
followed by Next.
3. Enter the User Name, Organization and License Key. If you do not have a License Key, select
the Use Evaluation check box. e evaluation version will stop functioning aer 30 days. If
you have already purchased WINSelect, you can get the License Key by logging into www.
faronicslabs.com.
4. e application is installed by default to C:\Program Files\Faronics\WINSelect.
Click Browse to choose a different location. If choosing to install to a different location other
than Program files, be sure to remember this new location.
5. Click Next.
Specify the WINSelect Administrator Password. Click Next.
6. Click Install. Once the installation is complete, click Finish.
7. A dialog appears stating that the system must be restarted for the configuration changes to
take effect. Click Yes to restart or No to restart later.
Passwords cannot be retrieved by Faronics. e password must be recorded and
guarded with care.
WINSelectLicensing
If no License Key is available, use the evaluation version of WINSelect. e evaluation version is valid
for 30 days. To upgrade to the full version of WINSelect, enter a valid Licence Key in the dialog box
launched when you click the Set button in the About node.
If no Key is entered aer 30 days,WINSelect is disabled.

9
UninstallingWINSelect
To perform a WINSelect uninstall, click on the Administrator node and ensure the
Enable box is not selected.
1. Launch the WINSelect installer WINSelect_Standard_Installer32.exe. e uninstall wizard
appears, asking for confirmation of the uninstall.
2. Restart the workstation to complete the uninstall.
e administrator must log out of Windows and log back in at least once to complete
the uninstall.

10
LaunchingWINSelectFollowingInstallation
To launch WINSelect, use one of the two following options:
•Use hotkey Ctrl + Alt + Shi + F8
•Shi + double-click the WINSelect System Tray icon
e WINSelect Login window appears:
Enter the administrator password set during the WINSelect install. ere are two options available
from the Login window:
•To access the WINSelect Administrative Console click OK to log in. e Control Panel allows
administrators to customize a workstation’s abilities and operating features to a high level of
detail.
•To access the Wizard Mode, select the Wizard Mode check box and click OK. e Wizard
mode is used to quickly create a Kiosk and has a limited set of guided configuration options.
e first time the Login window appears, the option to access the Wizard Mode is enabled. e option
to access the Administrative Console will appear following the completion of Wizard Mode steps.
e WINSelect icon in the System Tray indicates if WINSelect is enabled. When WINSelect is
disabled the icon is covered by a red X: .
WINSelectLayout
WINSelect is comprised of a series of nodes that appear in the le pane of the Administrative Console.
Clicking on a node displays a set of options in the right pane of the Administrative Console. Nodes that
contain more than one sub-node can be expanded by clicking on the icon next to the node name in the
le pane of the Administrative Console.

 11
AdministrativeConsole
To access the Administrative Console, Shi + double-click the WINSelect icon located in the
Windows System Tray or use the Ctrl + Alt + Shi + F8 hotkey. Enter an active password and ensure the
Wizard Mode check box is not selected. If the Wizard Mode is used before the Administrative Console
is accessed, all configuration choices made in the Wizard are carried over.
e About node of the Administrative Console appears as below:
e Administrative Console is comprised of a series of nodes grouped by common function which
allow the administrator to customize the Windows environment and functionality.
e Kiosk node allows administrators to create a workstation with limited Windows functionality and
enable key WINSelect features in only a few short steps.
e System node contains options which protect the computer and prevent unauthorized access
to key Windows settings. Here, the administrator can prevent changes to system-wide Windows
components.
e Applications node allows the administrator to customize the soware found on the WINSelect
workstation. Use the Applications node to permit and restrict access to applications like Microso
Office and various Internet browsers.
e Printer node allows administrators to disable local and network printers.
e Acceptable Use Policy node allows administrators to set Acceptable User Policy and display it to
workstation users.
e Administrator node allows users to enable and disable WINSelect, customize WINSelect settings
such as the creation of user sessions, and add or change password. WINSelect templates can also be
created.
Click on any node to configure the workstation.

12
System
e System node allows configuring the system-wide options.
To disable the Task Manager, select Disable Task Manager. is prevents the user from accessing the
Task Manager and ensures currently running tasks and processes cannot be ended by an unauthorized
user.
Select Disable Right Click to prevent users from accessing commands such as View, Paste, Copy, and
Properties in Windows Explorer.
Select Disable UNC (Uniform/Universal Naming Convention) Paths to prevent users from accessing
shared network resources.
Select Disable Folder Manipulation to prevent the renaming, moving, or deleting folders. is will
prevent users from being able to rename or change the location of folders through Windows Explorer.
Select Disable Drag-and-Drop to prohibit users from moving files and folders to different locations.
is option also disables selecting text and images by dragging the mouse pointer in all applications.
e Disable Task Manager and UNC paths options are automatically enabled and
cannot be configured when Kiosk mode is enabled.

 13
ControlPanel
e Control Panel node provides options for restricting the display of Windows Control Panel applets.
Windows Control Panel can be accessed but the icons may be selectively hidden.
Some Control Panel settings can still be accessed and changed via a command line or the Run dialog.
To permit access to the entire Control Panel, select Show Applets. is displays each applet found in
the workstation’s Control Panel. To prevent access to every Control Panel applet select Hide all Applets.
Show Applets and Hide all Applets do not allow for specific applets to be allowed or restricted.
To specify specific applets click Hide selected Applets and select the check box next to the applet to be
restricted. A cleared check box next to the applet signifies a displayed and accessible applet.
To add an applet to the list, enter the applet name in the Specify Applet field and click Add.
To delete an applet, highlight it in the list and click Remove. A deleted applet still appears in Control
Panel. It has only been removed from WINSelect’s list of Control Panel applets.
Desktop&WindowsTaskbar
e Desktop & Windows Taskbar node provides options for restricting the use of the workstation
desktop and Windows Taskbar.

14
Disable Right-click on desktop prevents the user from right-clicking on the desktop. ey will not be
able to access the right-click menu and commands such as New and Properties.
Disable Right-click on Desktop Icons prevents the user from right-clicking on desktop icons. ey will
not be able to access commands such as Open.
e two radio buttons Hide all Icons and Hide selected Icons dictate the desktop icons that can be
hidden. WINSelect recognizes the desktop icons on the workstation and lists them. Hide selected by
selecting the Hide selected Icons radio button and selecting the check box for each icon to be hidden.
If Kiosk mode is enabled, changes to this node are not possible.
Disabling right-click in the System node also disables the two Disable Right-click
options in the Desktop & Windows Taskbar node.
DrivesandFileExtensions
e Drives and File Extensions node provides options for restricting access to drives and specified file
extensions for each application installed on the workstation.
Choose which of the available drives and file extensions will be disabled by selecting the check box next
to each one. Use the Select All or Deselect All options if required.
Files and directory structures are not visible once this feature is enabled.As an example, if all drives are
selected, exploring the directories contained within is not permitted.
If there is no drive selected but a file extension is selected then the file extension will be disabled across
all drives.
If the system drive is disabled, access to the user’s directory is not disabled by default. Select Disable
access to user directory to prevent access.As an example, if C: is listed as the system drive, selecting the
check box next to Cmakes the Disable access to user directory check box available. e administrator
can now choose to restrict the user to access the directory C:\Documents and Settings\User folder by
selecting the check box. e user will be able to access only the Desktop. is option is only made
available when the system drive letter is selected. Clear the check box to allow the user to save and
create files within their own directory.
To prevent access to removable drives, select the Disable removable drives check box. is feature
prevents the user from seeing any removable drives connected during a user session.

 15
To disable file extensions from being used, select the desired extension. To add another file extension
to the list, enter the extension in the field provided and click Add Extension.
Once enabled, this feature prevents access to or creation of files with the specified extension.
If a removable drive is connected during the WINSelect install and configuration, it
is assigned a drive letter. It is recommended that removable drives be disconnected
during installation and configuration to avoid inadvertently applying WINSelect
settings to the removable drive.
StartMenu
e Start Menu node provides options for restricting access to the workstation’s Start menu.Customize
access to the Start menu by selecting one or more options.
Enable Start button, when selected, allows the user access to the workstation’s Start button. Selecting
Disable all Start Menu items prevents the user from accessing the Start menu.
Selecting Disable selected Start Menu items by selecting the specific items in the list.e selected options
will not be available the next time the Start menu is opened.
Selecting the Disable Right click on Start menu items option prevents a user from accessing the secondary
menu.
Selecting the Enable classic style Start menu option enables the classic style Start menu with the look
and feature-limited behavior of the Windows 2000 Start menu.
Each Start menu option is automatically disabled when Kiosk mode is enabled.

16
NetworkRestrictions
e Network Restrictions node provides network restriction options. Administrators can limit access
to specific web sites with these options.
To apply network restrictions on the workstation, select Enable.
To restrict a specific domain name, enter it in the field labelled Specify the URL and click Add. e name
appears in the list box.
To restrict an IP address or a range of IP addresses,enter the addresses in the field(s) provided and click
Add. e addresses appear in the listbox.
If a range of addresses is specified, each individual address within the range is either restricted or
allowed depending on the radio button selected (Allow selected or Disallow selected).
Select the Allow selected or Disallow selected radio buttons to specify the list box behavior. Restrict
or permit selected ranges or domain names based on which entries are selected. If Allow selected is
selected, the list entry selected will be allowed. If Disallow selected is selected then each list entry that
is selected will not be allowed.
To remove an item from the listbox, select the item and click Remove.

 17
Applications
e Applications node allows for further customizing of applications.
is option is unavailable when Kiosk mode is enabled. If administrators wish to create a Windows
environment featuring only specific available applications, but do not wish to create a WINSelect Kiosk,
they can specify the applications on this node.
To populate the list with all available .exe files found within the Program Files folder, select List All
Programs. Use the Select All or Deselect All buttons to select or deselect all programs. Click Add or
Remove to add or remove programs from the list.
To add an individual application, click the Add button. Browse to the desired application’s .exe file and
click Open.
Allow only specific applications to run or to prevent specific applications from running.Each application
must have its corresponding check box selected to dictate the list behavior. If an allowed application
opens a second application, the second application must also be listed.
A disallowed application is recognized by name,not location.If an application is specified as disallowed,
then moved to a different folder, WINSelect will still prevent it from being opened.
Selecting Applications from the Windows system folder can cause system instability.
To remove an application, select the application from the list and click the Remove button.

18
MicrosoftOfce
e Microso Office node provides options for restricting access to Microso Office menu items. e
administrative features of Microso Office are listed to allow the administrator to prevent users from
unauthorized manipulation of these settings.
Select the menu items from the list that will restrict menu items of Microso Office applications on the
workstation. Select the menu items from the list and click Apply.
e following Microso Office programs can be disabled by selecting the check box next to it:
Disable macro disables macros and the shortcut keys displayed.
Disable VB Editor disables the macros,Visual Basic editor and the shortcut keys displayed.
Disable Templates and Addins disables the Templates and Addins for Microso Office.
Disable execution of Visual Basic Applications disables the execution of Visual Basic programs.
Disable Web disables the Web toolbar in Microso Office.
Disable Detect and Repair disables the Detect and Repair option in the Help menu.

 19
Menu
e Menu node provides options for restricting access to specific menu items within selected
applications.
WINSelect will record the menu only for products that adhere to Microso’s menu
structure. Menus of products having a different menu structure will not be recorded
properly.
To record a menu to be restricted:
1. Select a specific application by clicking Record and browse to the executable file (.exe). In the
example below, the Notepad application is selected.
2. Open the menus to be restricted one at a time. e WINSelect Menu Recorder records the
selected menu.
3. Close the application.

20
WINSelect now displays the .exe file selected on the le and the menu items the administrator
opened on the right. Click on specific menu commands within the tree structure to restrict individual
commands within those menus.
Once enabled, the user will be able to access the commands within the application but will not be able
to use them.
Changes cannot be made to a set of menu commands once they have been selected.
e .exe file must be deleted from the menu list and the process repeated.
Menu commands for Microso Office cannot be recorded.
InternetBrowser
e Internet Browser node provides options for restricting access to Internet browser functions and
menus. Enable these features when users are required to access the Internet, but are not permitted to
save locations, print pages, access the favorites menu, etc.