
Restrictions are separated into different tabs. Check the desired restrictions and click Apply to activate them.
Policies
The Policies tab includes different sets of restrictions to protect the desktop, Windows Explorer, system settings, Internet Explorer, and others.
- Desktop : Restrictions to lock desktop files protecting them from tampering, hide the desktop and others
- Windows Explorer : Block Windows Explorer or disable certain settings, such as the context menu and special folders
- Internet Explorer : Restrictions to protect the Internet Explorer and disable certain features such as address bars, context menu, downloads, options, and others
- Privacy : Options to restrict access to USB drives, copy and paste, autoplay, and others. Note that enabling Manual Windows Login forces users to enter username and password. If you don't know your username or password, do not enable this option.
- Start Menu : Restrictions to disable different Start Menu elements. On Windows 8.1 the Start charm (button) and charm menu are disabled, instead.
- System : Restrict access to the Control Panel and other critical system settings, such as shutdown, user switching, browser settings and others.
- Taskbar : Restrictions to disable different taskbar elements, such as the clock, taskbar buttons, properties, and others. Note that disabling the taskbar also disables the Start Menu and the Winkey.
- Drives : Disable access to selected drives on Windows Explorer
Keys
The Keys tab includes options to disable system keys, mouse buttons and custom keys.
- Key Options : Options to disable different system hotkeys. Note that disabling Ctrl-Alt-Del disables also the Alt key and Alt combinations. Disabling Alt Gr may be also required to fully disable Ctrl-Alt-Del.
- Mouse Options : Options to disable mouse buttons. Note that the left mouse button cannot be disabled unless the maintenance key is active.
- Custom Keys : Shows the list of keys, or key combinations, added by the user. Right-click on the tab area to add/delete custom keys.
Start Menu
The Start Menu tab allows you to build your own Start Menu, while hiding and preserving the original Start Menu.
- Safe Start Menu : Check this option to enable the Safe Start Menu
- Custom Logo : Check this option to show your registered company name and your company logo in the Start Menu header. The logo must be in PNG or JPG format. The expected image size is 54x54—it'll be cropped otherwise. Right-click and select Add Custom Logo to update your logo.
- Log off : Check this option to show the Log Off option in the Start Menu
- Restart : Check this option to show the Reboot option in the Start Menu
- Shut down : Check this option to show the Shut Down option in the Start Menu
- Sleep : Check this option to show the Sleep option in the Start Menu
Right-click on the tab area to manage safe Start Menu applications.
Apps
The Apps tab allows you to capture the list of running programs and make sure no other applications are executed.
- Block Applications : Check this box to capture running applications and block unknown executables
- User Notification : A message will pop up every time a restricted program is executed
- Allowed Applications : List of captured executables that will be permitted
Right-click on the tab area to add/refresh running applications, to add a single application, to add a folder or to clear the list.
Adding a folder will permit all executables in the folder. For example, adding "c:\program files" would permit all installed applications. Adding "c:\windows" would permit all system programs.
Web
The Web tab allows you to filter web browsing. All websites will be closed, except for the ones that are specifically allowed by using keywords. Enter a list of keywords -one, at least- to enable the web filter. Press Ctrl+A
to add/change keywords.
- Basic Web Filter : Check this box to enable the web filter. Upon activation access to Internet Explorer, Chrome and Firefox settings will be protected.
- User Notification : Check this option to inform the user whenever a browser tab is closed
- Web Filter Keywords : Enter keywords that represent the websites that should be allowed. Keywords are, in this case, words or phrases included in the title/tab of the website to be allowed
The web filter works with Internet Explorer 8 (and higher), Firefox and Chrome. Only web browsing is affected — all network connections and services remain untouched: mail, ftp, vpn, etc. are not affected.
Web Keywords
Right-click on the tab area to open the Web Keywords window.
Pick a distinctive word -or phrase- from the title (tab) of the website to be allowed and enter it as a keyword. Multiple keywords can be entered, comma separated.
Keywords can include wildcards, by using the * (asterisk). See some keyword examples:
gmail
allows sites that have the word "gmail" in their title*mail*
allows sites that have words containing "mail" in their title, such as "email, emailer, mails, gmail..."
Some tips when using keywords:
- Get keywords —word or phrase— from the title on the browser tab. Usually, things like company, school, service—some trial and error may be required
- Use words that are consistently included in the title of the website to be permitted
- Be specific. Use keywords that only allow access to the desired websites: if you enter something like "net" or "google" you will allow lots of websites
- Try Deskman Network if you need advanced web filtering options
Taskman
The Taskman tab allows you to build your own Safe Task Manager. The Safe Task Manager substitutes the original Task Manager. It only shows running applications, everything else is hidden. The Safe Task Manager automatically appears when the user presses Ctrl-Shift-Esc
, or whenever the Windows Task Manager is executed. Enabling the Safe Task Manager is highly recommended for protecting Deskman and other critical system processes.
- Safe Task Manager : Check this option to enable the Safe Task Manager
- End Task : Check this option to allow users to terminate running apps
- New Task : Check this option to allow users to run new apps
- Log off : Check this option to show the Log Off option in the Start Menu
- Restart : Check this option to show the Reboot option in the Start Menu
- Shut down : Check this option to show the Shut Down option in the Start Menu
- Sleep : Check this option to show the Sleep option in the Start Menu
- Public icons : If you check this options, users will be able to open desktop icons —but only those available to all users— via the Icons tab in the Safe Task Manager, even if the desktop is hidden
- Personal icons : If you check this options, users will be able to open desktop icons, via the Icons tab in the Safe Task Manager, even if the desktop is hidden
In addition, the Safe Task Manager will block access to the following critical system tools: Task Manager, Regedit, Command Prompt, PowerShell, Cygwin, Microsoft Management Console.