Windows Enforcer, Version 6.1, 2001 Windows Enforcer protects systems that are accessible to many people and require a consistent configuration and a consistent, limited selection of services such as public displays or computer labs. It is also great for limiting users to the webpages you approve such as on a VPN or for childproofing individual systems. It is easy to configure and requires little to no modifications to your current system configuration. Windows 95/98/Me or NT/2000 required. Enforcer is being used successfully by school systems and corporations, big and small, around the world to effectivily protect their investment and keep their support costs low. System Requirements: Windows 95/98/Me or Windows NT/2000. Previously Registered users *** NOTE: *** If you are upgrading from a previous version of Enforcer, you will need a new registration number. This means that installing the new version over the old version will result in the software running in it's unregistered state until you enter the new registration number. We recommend that registered users obtain their new registration number before installing the latest version. To get your new registration number, simply email Posum at support@posum.com and send us the following information. Full name: Postal address: Registration number for previous version: Once we verify your registration for the previous version, we will email you a new registration number for version 6.1. *** NOTE: *** If you used Enforcer 6.0 to restrict website access, you may notice different behavior from version 6.1. The ability to partial match tasks for exceptions to a must never run task (Example #3 and #4 in the Task Definition Utility helpfile) was added in 6.1 as the default. If you experience any difference in the behavior from 6.0 to 6.1, you can either modify your task lists to take advantage of this new feature (recommended) or you can run enfrun.exe with the -m command line option to get the same behavior as version 6.0 (enfrun.exe -m). Quick Start for Enforcer I) How to install Enforcer II) How to register Enforcer III) How to set up Enforcer IV) How to start Enforcer (enfrun.exe) when Windows starts I) How to install Enforcer If you are reading this file, you have successfully opened the ZIP file or expanded the self-extracting executable to a folder on your system. In the folder with this ReadMe.txt file, you will see a file named setup.exe. This file starts the installation process. To install Enforcer, run this file, setup.exe. You may run it by double clicking on it in Explorer or using the Start->Run command. When you run setup.exe, it will walk you through the necessary steps to install Enforcer on your system. II) How to register Enforcer First, visit our website at https://posum.com/enfordr.html and order your copy(s) of Enforcer. Once we receive and process your order, we will email you a registration number. To register your copy of Enforcer after you obtain your registration number from Posum, perform the following steps. 1) Run enfset.exe. This will require that enfrun.exe is not running. 2) Select the Help->Register menu item on the main dialog. 3) When the Registration dialog appears, type in your registration number. To avoid re-typing it just cut and paste it from your email message you received from us. Select OK. 4) If you have any problem registering the software, make sure that the registration number is entered exactly as you received it. The number is case sensitive. Also, make sure there are no spaces at the beginning, middle, or end of the number and all the dashes must be present. 5) Enforcer is now registered. III) How to set up Enforcer These are two simple examples. The first demonstrates how to prevent access to a single task, "Display Properties", while allowing anything else to run. The second demonstrates how to allow access to only a single task, Notepad, while preventing anything else from running. An extensive set of examples is included in the helpfiles. Please look there for an example that more closely matches what you wish to do. To prevent access to "Display Properties" 1) If enfrun.exe is running, stop it with the password. 2) Bring up Display Properties using the right mouse click somewhere on your desktop and keep it displayed. 3) Run enfset.exe and press the Add Task button. The Add Task dialog will appear. 4) Press the Browse button at the end of the Task name field. From the Task Browser dialog select the task name "Display Properties" and press OK to return to the Add Task dialog. 5) Make sure the "Prohibit task" radio button is checked then press OK. This will return you to the main dialog of enfset.exe and the task name for "Display Properties" will show up in your Task List. 6) Since all this example does is make sure "Display Properties" does not run, make sure the "Options->Prohibit all tasks except those specified" menu item IS NOT checked. 7) Define a password you haven’t already 8) Press OK to exit enfset.exe and save the changes. 9) Run enfrun.exe. To only allow access to Notepad 1) If enfrun.exe is running, stop it with the password. 2) Bring up Notepad (Start->Run notepad.exe) and keep it running. 3) Run enfset.exe and press the Add Task button. The Add Task dialog will appear. 4) Press the Browse button at the end of the Task name field. From the Task Browser dialog select the task name that goes with Notepad and press OK to return to the Add Task dialog. 5) Make sure the "Ignore task" radio button is checked then edit the task name to be just "Notepad". Press OK. This will return you to the main dialog of enfset.exe and the task name "Notepad" will show up in your Task List. 6) Since all this example does is to allow the user to run Notepad and nothing else, make sure the "Options->Prohibit all tasks except those specified" menu item IS checked. 7) Define a password you haven’t already 8) Press OK to exit enfset.exe and save the changes. 9) Run enfrun.exe. IV) How to start Enforcer (enfrun.exe) when Windows starts Enforcer will not automatically start up when Windows starts. When you are satisfied with the configuration of Enforcer, use the "Options->Start Enforcer at Windows startup" menu item in Enforcer Setup to configure your system's registry to execute Enforcer (enfrun.exe) when Windows 95/98/Me or NT/2000 starts. Registration Windows Enforcer is Shareware (see the Legal Stuff below). If you feel that this software will be useful to you, please print the order form (see the registration section of enfrun.hlp), fill it out and send it along with your registration fee or credit card information to the following address. Posum LLC PO Box 21015 Huntsville, AL 35824 USA For a fax number (http://posum.com/contact.html), secure online ordering (https://posum.com/enfordr.html), and the latest ordering information, visit our web site at: http://posum.com. We accept US and international credit card orders. See the order form in the Windows helpfile. If you are paying with a check or money order it must be in US dollars on a US or Canadian bank, payable to: Posum, LLC. Site licenses (multiple licenses ) are available at a discount. If you are interested in a site license and have any questions, please fill out our online Site license request form at http://posum.com/sitequot.html. Please report any bugs, suggestions for improvement or new features you would like to see. We can be reached through email at support@posum.com or at our web site at http://posum.com. - Version 1.0 - Initial Release - Version 1.1 - Corrected a bug that allowed shutdown during error dialog. - Version 2.0 - Added the Execution Optional task setting and removed the 50 task limit on the number of tasks that could be defined. - Version 2.1 - Enforcer (enfrun.exe) now runs from the system tray instead of the Taskbar and a conflict with Windows Task Lock was corrected. - Version 3.0 - Optional user specified wav files for the Startup and Access Denied events. Protection against multiple copies of enfrun.exe running, task name matching from the beginning or at the end, a few bugs fixed and better performance when used with WorkStation Lock. - Version 3.0b - Corrected a bug that disabled the screen saver on some systems and a bug that truncated longer program filenames on the Add Task dialog. - Version 3.0c - Command line arguments now allowed on Must Run tasks. - Version 4.0 - Added an optional command line argument to enfrun.exe for task execution. This argument specifies a delay between the time a task is executed and it is checked for. This delay is in seconds and is useful in requiring execution of programs located on CD-ROM or that take a few seconds to initialize. A horizontal scroll bar was also added to enfset.exe and the product was fitted with an install program. - Version 4.1 - Added the ability to disable CTRL+ALT+DEL and Windows Shutdown when Enforcer is running, added some additional command line arguments, and corrected a small bug In the Task Browser in enfset.exe. - Version 5.0 - New Features Hot Key and Stealth Mode options. Secure you wallpaper from being changed. Increased Task name length to 256 characters. Added a sound event for bad passwords. Administrator functions for site licenses. - Fixes Improvements for securing Internet Explorer 4.0. Security improvements for CTRL+ALT+DEL on Windows 95. Improved encryption. Corrected a small NT bug. - Version 5.1 - New Features Disable registry editing. Disable DOS prompt and DOS apps. Disable Windows Update (Windows 98). Alphabetized task list. Log File support. Expanded help resources. - Fixes Corrected a bug with folders on Windows 98. Corrected an F1 bug in enfrun.exe. - Version 5.2 - New Features Added an option to start Enforcer (enfrun.exe) from the registry at Windows start up. Disable ESC key in enfrun.exe when dialog displayed. Updated and expanded help resources. Added user designation for logfile. Added optional warning dialog. - Fixes Corrected a bug in setup (enfset.exe) in NT. Corrected a bug in the -t command line option. - Version 5.2.1 - New Features Added warning.exe - Fixes Corrected a bug in enfrun.exe involving the multiple execution of prohibited tasks. - Version 6.0 - New Features Added the Task Definition Utility Added the ability to open and save task files Improved the usability of Setup Added uninstall support Moved command line options into Setup Expanded log file options Added Hide desktop feature for site licenses - Version 6.1 - Added the capability to do wild card exception matching to never run tasks. This was to improve Enforcer's ability to restrict websites. LEGAL STUFF: DEFINITION OF SHAREWARE Shareware distribution gives users a chance to try software before buying it. If you try a Shareware program and continue using it, you are expected to register. Individual programs differ on details -- some request registration while others require it, some specify a maximum trial period. With registration, you get anything from the simple right to continue using the software to an updated program with printed manual. Copyright laws apply to both Shareware and commercial software, and the copyright holder retains all rights, with a few specific exceptions as stated below. Shareware authors are accomplished programmers, just like commercial authors, and the programs are of comparable quality. (In both cases, there are good programs and bad ones!) The main difference is in the method of distribution. The author specifically grants the right to copy and distribute the software, either to all and sundry or to a specific group. For example, some authors require written permission before a commercial disk vendor may copy their Shareware. Shareware is a distribution method, not a type of software. You should find software that suits your needs and pocketbook, whether it's commercial or Shareware. The Shareware system makes fitting your needs easier, because you can try before you buy. And because the overhead is low, prices are low also. Shareware has the ultimate money-back guarantee -- if you don't use the product, you don't pay for it. DISCLAIMER - AGREEMENT Users of Windows Enforcer must accept this disclaimer of warranty: "Windows Enforcer is supplied as is. The author disclaims all warranties, expressed or implied, including, without limitation, the warranties of merchantability and of fitness for any purpose. The author assumes no liability for damages, direct or consequential, which may result from the use of Windows Enforcer." Windows Enforcer (hereby known as "the software") is a "shareware program" and is provided at no charge to the user for evaluation. The "shareware", unregistered, version of the software can be freely distributed, but it cannot be altered in any way or distributed as part of another system. If you find the software useful, you must make a registration payment to Posum LLC to obtain a personalized registration number. The registration fee for a single copy will license one copy of the software for use on any one computer at any one time. Each license of the software purchased grants the licensed individual the privilege to use a single copy of the software. Once a license is granted, it cannot be transferred to another individual. The purchase of a license or licenses does not bestow the right to distribute, resell, or in any way disseminate registered versions of the software or registration numbers for the software. After being approved, resellers may purchase licenses of the software for customers, but the licenses will be granted to the customers directly and not to the reseller. Resellers are not granted rights to distribute, resell, or in any way disseminate registered versions of the software or registration numbers for the software except through specific purchasing agreements with Posum LLC. See our reseller page at http://posum.com/reseller.html. Anyone distributing the software for any kind of remuneration must first contact Posum LLC for authorization and the terms for distributing the software. enfset.exe enfrun.hlp enfrun.exe lockctrl.exe tskutil.exe tskutil.hlp uninstall.exe dsplyenf.exe warning.exe warning.txt example1.etk example2.etk iexplore3.etk iexplore4.etk netscape3.etk netscape3.etk Q1.etk Q3.etk Q4.etk boom.wav tada.wav ding.wav readme.txt upgrade.txt qstart.txt help.ico Copyright (c) 2001 Posum LLC http://posum.com