Copyright: (c)1997-2002 SmartLine, Inc. All rights reserved.
Citation: DeviceLock for Windows NT/2000/XP. (c)1997-2002 SmartLine, Inc. All rights reserved.


Contents
Help Contents

DeviceLock™

for Windows NT 4.0, Windows 2000 and Windows XP

General Information:

•	Introduction

•	License

•	How To Register

•	Technical Support

•	Frequently Asked Questions

•	SmartLine's Software

Dialogs:

•	Main Dialog

•	Set Permissions

•	Batch Permissions

•	Select Computers

•	About


Introduction

DeviceLock™ gives network administrators control over which users can access what devices (floppies, serial and parallel ports, Magneto-Optical disks, CD-ROMs, ZIPs, etc.) on a local computer. Once DeviceLock is installed, administrators can control access to floppies, CD-ROMs or any other device, depending on the time of day and day of the week. DeviceLock enhances access control for Windows System Administrators and helps control removable disk usage. It can protect network and local computers against viruses, trojans and other malicious programs often injected from removable disks. Network administrators can also use DeviceLock to flush a storage device's buffers. Remote control is also available.

With DeviceLock you can:

•	Control which users or groups can access devices

•	Control access to devices depending on the time of day and day of the week

•	Protect disks from accidental or intentional formatting

•	Flush unsaved file buffers (very useful for removable media)

•	Control all functions remotely

•	Install it automatically, without an user intervention

•	And much more


License

    END-USER LICENSE AGREEMENT FOR DeviceLock™:

•	All copyrights to DeviceLock are exclusively owned by SmartLine, Inc.

•	Anyone may use this software during a trial period of 30 days only, on one computer of a local network, at any single time. Following this trial period of 30 days, if you wish to continue to use DeviceLock then you MUST register.

•	A registered user is granted a non-exclusive license to use DeviceLock on one computer at a time, for any legal purpose. The registered DeviceLock software may not be rented nor leased, but may be permanently transferred, if the person receiving it agrees to the terms of this license. If the software is an update, the transfer must include all updates and all previous versions of the DeviceLock software.

•	An unregistered, evaluation version of DeviceLock may be freely distributed, provided the distribution package is not modified. No person nor company may charge a fee for the distribution of DeviceLock without written permission from the copyright holder SmartLine, Inc.

•	To register, you must complete the registration form and send it, with the registration fee, to one of the authorized registration sites.

•	DeviceLock IS DISTRIBUTED "AS IS". NO WARRANTY OF ANY KIND IS EXPRESSED OR IMPLIED. YOU USE IT AT YOUR OWN RISK. THE AUTHOR OR SMARTLINE, INC. WILL NOT BE HELD LIABLE FOR DATA LOSS, DAMAGES, LOSS OF PROFITS NOR ANY OTHER KIND OF LOSS AS A RESULT OF OR WHILE USING OR MISUSING THIS SOFTWARE.

•	You may not use, copy, emulate, clone, rent, lease, sell, modify, decompile, disassemble, otherwise reverse engineer, nor transfer the licensed program, nor any subset of the licensed program, except as provided for in this agreement. Any such unauthorized use shall result in immediate and automatic termination of this license and may result in criminal and/or civil prosecution. All rights not expressly granted here are reserved by SmartLine, Inc.

•	Installing and using DeviceLock signifies acceptance of these terms and conditions of the license.

•	If you do not agree with the terms of this license you must remove DeviceLock files from your storage devices and cease to use the product.


How to register

Why You Need to Register

A registered user may use DeviceLock™:

•	in any environment including commercial

•	on two or more computers in your network, depending on registration type

•	without nag screens

•	with access support and assistance

•	including ALL updates that will be released within 1 year from the date of purchase

What it Costs to Register

Following is the payment schedule to register your DeviceLock software with SmartLine, Inc.:

•	Single license (ID #151781) - $35

•	Site license (ID #102238) - $1500

•	World license (ID #102239) - $4500

•	World license - $3375 (for educational institutions only!)

•	Access to Source Code - $120000

(the difference between a Site and World license is described in FAQ.)

Prices are in US dollars and subject to change without notice.

1. Order Through the World Wide Web

http://www.ntutility.com/dl/register.html

IMPORTANT! Be sure to give us the correct e-mail address when filling out the order form. We are unable to process incomplete order forms.

All registrations use SECURE protocols making it impossible for a third party to intercept your credit card information.

2. Invoices/Purchase orders

US and Canadian customers: You can fax a Purchase Order to us at (724) 850-8187, or send it to:

element 5 Inc.

P.O. Box 844

Greensburg PA 15601

USA

European customers: You can fax a Purchase Order to us at +49 (0) 221-31088-29, or send it to:

element 5 AG

Vogelsanger Strasse 78

50823 Koeln

Germany

IMPORTANT! We accept orders on account only from established companies that have faxed us a signed Purchase Order on their company letterhead. We allow an established customer a payment deadline of 30 days from purchase.

3. Fax And Phone Orders

US and Canadian customers: You can place an order by calling our toll-free order number 1-800-903-4152 (available weekdays from 9am to 5pm EST). Orders may also be sent by fax to (724) 850-8187.

European customers: You can fax your order to us at +49 (0) 221-31088-29, or call us at +49 (0) 221-31088-30.

IMPORTANT! Please make sure to have the program ID for DeviceLock ready (see table).

4. Check And Cash Orders

If you prefer to pay by cash or check, please send payment to:

US and Canadian customers:

element 5 Inc.

P.O. Box 844

Greensburg PA 15601

USA

IMPORTANT! Please make U.S. checks payable to element 5 Inc.

European customers:

element 5 AG

Vogelsanger Strasse 78

50823 Koeln

Germany

IMPORTANT! Please make checks payable to element 5 AG (Note: do not send eurocheques in US dollars. We can only accept eurocheques in DM.)


Support

Please give the following info:

•	Product's version (see the About dialog)

•	Product's serial number (if you're a registered user)

•	Windows version (including service packs and other installed fixes or patches), US or International

•	Your computer information: CPU type and speed, installed memory

•	Description of the problem (as much detail as possible so we can duplicate the problem)

Please send your questions, comments and bug reports to:

•	dl@protect-me.com

Internet distribution:

•	http://www.nyutility.com/dl/ - DeviceLock home page

•	http://www.ntutility.com - SmartLine, Inc. home page

We strongly recommend that you read these Frequently Asked Questions:

•	FAQ

If you have any comments or suggestions for future releases, please don't hesitate to e-mail us.


SmartLine's Software

The software development company SmartLine Incorporated, is dedicated to providing effective and economical solutions to small, medium and large-scale business. Our products help network administrators and systems integrators with their job of providing well-integrated and cost-effective network management solutions:

•	DeviceLock Me™ gives network administrators control over which users can access what removable devices (floppies, Magneto-Optical disks, CD-ROMs, ZIPs, etc.) on a local Windows 95/98/Me computer. Once DeviceLock Me is installed, administrators can control access to floppies, CD-ROMs or any other device, depending on the time of day and day of the week. DeviceLock Me enhances access control for Windows System Administrators and helps control removable disk usage. It can protect network and local computers against viruses, trojans and other malicious programs often injected from removable disks. Network administrators can also use DeviceLock Me to flush a storage device's buffers. Remote control is also available. More information is available at http://www.ntutility.com/dlme/

•	Remote Task Manager™ is a systems control interface that can be run from any remote Windows 2000/NT computer. This enables a Systems Administrator to control most aspects of a remote environment. The simple-to-use, tabbed interface separates applications, services, devices, processes, events, shared resources and performance monitor, making each of these very easy to control. A Systems Administrator can start or stop services or devices, add new services or devices, manage the run level and adjust the security (permissions, auditing and owner). The Process Function and the Task Manager allows remote termination and adjusting of priority. An Event Viewer lets the Administrator view all events as though they were being run on the host computer. The Performance Monitor displays a dynamic overview of the computer's performance (CPU and memory usage). RTM even supports remote installs, enabling a Systems Administrator to set up a service on remote machines without ever having to physically go to them. RTM adds the ability to lock/shutdown/reboot and to create processes on remote computers. More information is available at http://www.ntutility.com/rtm/


Main Dialog

To access a remote computer, it needs to have DeviceLock Service installed and running, and it needs to have a connection to your computer. To access a remote computer, simply select it from the computer tree. DeviceLock Manager automatically connects to the computer immediately after it has been selected. You can use a mouse to select the computer or you can use the keyboard's arrow keys and press Enter on a selected computer. Alternatively, you can type in the computer's name in the field above the computer tree, then press Enter.

The left side of the Main dialog shows a list of the computers available in your network. This listing is called the computer tree. Each computer that is running DeviceLock Service has an icon of a computer. Each computer without DeviceLock Service running on it has an icon of a computer overlaid by a red circle containing a white X, indicating the computer is inactive. A computer will also show as inactive if you do not have the system privileges to connect to it.

If you want a listing of only active computers - computers with running and accessible DeviceLock Service, you need to check Hide Inactive Computers in the Options menu. If you do not want the computer tree to be automatically expanding, you should uncheck Expand Network Tree in the Options menu. To refresh a list of computers, press F5 or select Refresh Network Tree from the View menu. Also, you can refresh the state (whether active or inactive) of a selected computer by pressing Shift-F5 or selecting Refresh Selected Computer from the View menu.

To connect to the local computer, do not specify a computer name. If Connect to Local Computer at Startup is enabled in the Options menu, DeviceLock Manager automatically connects to the local computer each time it starts up.

DeviceLock Service should be installed on the computer so you can control the access to devices on that computer. DeviceLock supports remote installing. This lets a Systems Administrator set up a service on distant machines without having to physically go to them. If the DeviceLock Service isn't installed on the remote system you are trying to connect to, DeviceLock Manager will suggest that you install the service. Select the DeviceLock Service executable file (dlservice.exe) and DeviceLock Manager will copy it to the remote computer's Windows system directory (e.g. c:\winnt\system32). If the service is on the client system but is outdated, DeviceLock Manager replaces it.

If you successfully connect to a computer, its name appears in the status bar of DeviceLock Manager. The list of device types (floppy, removable, serial port, etc.) appears at the top-right side of the Main dialog. If Display Available Devices Only is enabled in the Options menu, DeviceLock Manager shows only those types of devices that are currently available from your computer. Otherwise, you will see every type of device that DeviceLock supports. When a device type is selected, the following functions become available:

•	Set Permissions – shows a dialog that allows you to set permissions to selected device type(s).

•	Flush Buffers – saves a disk's cache and unsaved buffers to selected device(s).

Select Set Permissions from the File menu or press F2 to access the Set Permissions function. Or, you can press the appropriate button at the top-right side of the Main dialog box. More...

To flush the buffers, select Flush Buffers from the File menu or press F6. Also, you can press the appropriate button at the bottom-right side of the Main dialog. More...

You do not need to connect to any computer directly to use Batch Permissions. This function is available for use right after DeviceLock Manager is loaded. To access Batch Permissions you should select the Batch Permissions item from the File menu or press Shift-F2. Also, you can press the appropriate button at the top-right side of the Main dialog. More...

You can select Always on Top from the Options menu to keep the DeviceLock Manager on top (above) any other applications.

To close this dialog and exit DeviceLock Manager, select Exit DeviceLock from the File menu.


Flush Buffers

Flush Buffers is very useful for removable medias, i.e. floppies, ZIPs, Magneto-Optical disks, etc. It can prevent your data from being lost because of a write-behind cache. Windows gives you the option to use write-behind caching to improve the performance of removable disk drives but sometimes it may be a reason for data loss on those drives. It is recommended to force the flushing of a disk's cache from time to time, especially before ejecting disks.

Flush Buffers is available only for devices that support write-operations, e.g. floppies, ZIPs, JAZZs, etc. Flush Buffers cannot be used for devices such as CD-ROMs.

Note that if you select a device with a removable media, you have to make sure that this device has the media inserted and it isn't marked as read-only.


Set Permissions

This dialog lets you control the access to devices. You can set permissions to a device type or to a group of types and define the users and times (day of the month and/or day of the week) each can be accessed.

Please note that when you set permissions for the device's type, you set these permissions for all devices which belong to this type. It is impossible to set different permissions for two different devices if they have the same type (e.g. floppy).

The names of the users and user groups assigned to a device type are shown in the list of accounts at the left-hand side of the Permissions dialog.

To add a new user or user group to the list of accounts, click on the Add button. You can add several accounts simultaneously.

To delete a record from the list of accounts, use the Delete button. Using Ctrl and/or Shift you can highlight and remove several records simultaneously.

Use the Set Default button to set default permissions for devices. Default permissions are enabled by using the following access selections:

•	The Everyone account has Full access rights except for the Allow Format privilege.

•	Members of the Administrators group and the SYSTEM account have Full access rights including the Allow Format and Allow Eject privileges.

Using special time control you can define a time when a selected user or user group will have or will not have access to a device or group of devices. Time control appears at the top-right side of the permissions dialog. Use the left mouse button and select the allowed time. To select a denied time, use the right mouse button. Also, you can use the keyboard to set times - arrow keys for navigation and the spacebar to toggle allowed/denied time. Note that each user can have his/her own allowed/denied time.

To define which actions on devices are to be allowed for a user or user group, set the appropriate rights and privileges:

•	Full access – to enable the reading, writing, deleting, executing, etc. of files and directories.

•	Allow Format – to enable the formatting, checking and any other direct access of drives. Please note that you can enable this privilege only if Full access right is selected. This privilege is not available for CD-ROMs, DVDs, serial and parallel ports, tape devices and RAM disks.

•	Allow Eject – to enable ejection of the media. Please note that you can enable this privilege only if Full access right is selected. This privilege controls only ejection via software. Hardware ejection using the Eject button on a device's front panel cannot be safeguarded against.

•	No access – user cannot access a device.

If you want to deny all actions for a selected user or user group, you must select the No access right. Also, to deny all actions you can set the denied time for all periods.

To deny access to devices for all users and user group, add only the one Everyone user to an account's list and select the No access right or set the denied time for all periods. Also, you can remove all records from an account's list and set empty permissions so nobody can access devices.

To assign permissions to a device type or to a group of types, press either the OK or Apply button. To close this dialog and reset all changes, press the Cancel button.

DeviceLock Service automatically detects when new devices arrive and set permissions (if any) for them. DeviceLock Service recognizes devices not by their user-mode names or letters (such as A:, COM1) but by their internal names (such as \Device\Floppy0, \Device\Serial0) so it works even with unnamed devices.


About

Displays the DeviceLock version and your registration information.

Please include this information when reporting any problems to SmartLine's technical support service.


Batch Permissions

Batch Permissions is one of the most powerful and useful functions. Usually, midsize and large networks contain many similar computers with similar devices (e.g. all computers have floppy drives and CD-ROMs) and network administrators can set permissions for each of them very quickly by using the batch mode.

Please note that any permission you set using Batch Permissions, will overwrite all previously assigned permissions on those same devices.

First, you need to select the computers that you want to include in the batch processing. To add computers to the list, press the Add button. This opens a dialog with the computer tree where you can select any computer that is available on your network. More...

Also, you can load computers from an external file. Press the Load button and select a file that contains the list of computers. Two file formats are supported - text file (.txt) and comma separated values (.csv). A text file must contain each computer's name on separate lines. Computer names in a .csv file must be separated by commas or semicolons. To save a computer listing to an external file, press the Save button. Select the type of the file - .txt or .csv.

Then add users or users group to the account's list. Define allowed/denied times on the time control and set the appropriate rights and privileges for each user and users group as described in the documentation for Set Permissions.

The final step is selecting the devices you want to process. There are few types of devices available in the DeviceLock Manager: Floppy, Removable, CD-ROM, and so on. Each of these types represents all the devices of this category, i.e. Floppy represents all floppy drives that are available on the computer, Removable - all removable drives, and so on.

To start batch processing, press the Set Permissions button. To close this dialog and return to the Main dialog, press the Close button.


Enter Network Password

The "Enter Network Password" dialog appears when you attempt to connect to a computer, but the domain controller (DC) does not recognize the user account you have used to log on. This often occurs when you are logged on as the administrator of a local computer and attempt to access domain resources. To access the domain resources, you must provide a valid user name and password that the domain recognizes.

•	Connect As: - provides a space for you to type the account name for another user account. User accounts are a domain name followed by a backslash (\) and the user name, e.g. D1\John.

•	Password: - provides a space for you to type the password for the user account name entered in the Connect As: box.

Type your domain and user name in the format as described above, then press the OK button. If you do not know your domain or user name, contact your system administrator.

If you press the Cancel button, you may not be able to connect to a computer.


Select Computers

Use this dialog to select the computers that you want to include in the batch processing.

Double click on the computer name in the computer tree to add this computer or type the computer's name manually and press the OK button to include selected computers to the list.