Common Questions About SecurDesk
How may I protect particularly sensitive files or programs?
- SecurDesk! allows you to hide directories and files from low-level users (and from most applications). For complete security, however, you should encrypt files to prevent them from being accessed by unauthorized users.
Can I administer desktops from a central location?
- Yes. Once set up, security permissions may reside on a server, allowing you to change a single file which is used for all networked users.
You may prefer, however, to distribute individual security permissions files. Depending on the networking software you use, you may need to use a batch or script to fetch or copy desktop or security permissions files onto local machines.
If your systems are somewhat standardized, you may also copy the desktop itself to local machines. Note, however, that the person who makes changes to the desktop must know the directory structure of the target system. Also, your alterations may overwrite changes made by individual users in those situations where they are allowed to configure their own desktop environments.
Are there measures I need to take outside SecurDesk!?
- In many situations, you will probably want to purchase some basic physical security (many computer-supply catalogs carry these devices) to prevent someone from booting from a floppy, stealing drives, or draining the CMOS battery. You will also want to change some Windows settings to keep a user from bypassing your security measures (a list appears in an appendix to SecurDesk!’s manual).
Is it possible to recover encrypted files from a crashed system?
- If the file is intact, it may be recovered simply by moving it to a system which is running SecurDesk! and logging onto that system with the correct password/security level clearance.
How do I install the Task Manager replacement?
- Rename or delete the existing TASKMAN.EXE applet in the Windows folder, then simply copy TASKMAN.EXE from SecurDesk!’s folder into the Windows folder (you may also automatically replace this during SecurDesk!’s setup). If you are not an experienced user or if you are simply evaluating SecurDesk!, we do not recommend that you delete or replace the existing Windows TASKMAN.EXE until you become more familiar with SecurDesk!. You may still run the SecurDesk! Task Manager, even without replacing TASKMAN.EXE.
I’m selling a system, how do I remove SecurDesk!?
- To remove the SecurDesk! from your system, first use ADMAN.EXE to unencrypt any files which you've encrypted. Next, use ADMAN.EXE and un-check the Enable Security Features box at the top of the Group Profiles screen. Finally, go to the Windows Control Panel applet and use its "Add/Remove Programs" feature to remove SecurDesk! (note: users of the Windows 3.1x versions should run the UNINST.EXE program in SecurDesk!'s directory, then use the Windows filemanager to delete the SecurDesk! directory folder contents).
How can stop Windows’ Internet Explorer from allowing users to run programs on the local file system through the URL Address field?
- Open SecurDesk!’s Administration Manager (ADMAN.EXE) and click on the Limit Features tab. At the bottom of the listing, click on the Browse Local File System option and set the Security Level for this item. Users having a lesser Security Level will not be able to run local files from Internet Explorer’s URL Address field. You should test this, since in some situations the Registry will not recognize the change. Contact Technical Support if you find your system does not recognize this restriction.
How do I allow people with top security levels to switch between the SecurDesk! and Explorer interfaces?
- Here is the method you would use if you are also encrypting Explorer.exe to prevent users from accessing programs through dialog boxes.
- Click on SecurDesk!’s Desktop menu (or right-click the desktop if you have the menu switched off), and choose Setup;
- Click on the Button icon from the tools;
- Use the tool to drag out a button/icon on the desktop;
- At the top of the Icon/Control Attributes dialog, click to checkmark the Software option;
- You may assign the button a Title, etc.;
- Click on the Action Scripts button, and select UnEncrypt File. This will place [U,FileName,Password] into the Command field. Replace FileName with C:\Winnt\Explorer.exe (this example is on an NT system, under Win 95/98 Explorer is usually located in C:\Windows\Explorer.exe) and replace Password with a password (be certain to remember this). Example with My333 as password:
[U,C:\Winnt\Explorer.exe,My333]
- Go to the next line in the Command field and click on Action Scripts then choose System Access/Switch between the SecurDesk! desktop and Windows. This will place <SWITCHSHELL> into the Command field. The Command field should look like this:
[U,C:\Winnt\Explorer.exe,My333]
You may set the button/icon appearance, a different password, etc. using the tabs along the bottom. Click OK to place the button on the desktop.
<SWITCHSHELL>
Be certain that this button may only be accessed by users who have a top security clearance (e.g., 1000), either by placing it on a passworded page, or by assigning a password to the button itself.
To re-encrypt Explorer.exe, you must now make another button. To do this, use this procedure:- Click on the Button icon from the tools;
- Use the tool to drag out a second button/icon on the desktop;
- At the top of the Icon/Control Attributes dialog, click to checkmark the Software option;
- You may assign the button a Title, such as Encrypt Explorer, etc.;
Click on the Action Scripts button, and select Encrypt File. This will place [N,FileName,Password] into the Command field. Replace FileName with C:\Winnt\Explorer.exe (this should be the location of Explorer) and replace Password with a password (be certain to make this exactly the same as the Password used for the other button/icon which you created to switch to the Windows desktop shell above). Example with My333 as password:
[N,C:\Winnt\Explorer.exe,My333]
Again, the password must be the same for the two buttons. - You may set the button/icon appearance, a different password, etc. using the tabs along the bottom. Click OK to place the button on the desktop.
for answers to other questions, you may wish to also examine the main CursorArts FAQ page
Other SecurDesk! Topics:
