User manual FARONICS ANTI-EXECUTABLE ENTERPRISE SERVER

[. . . ] | 1 Anti-Executable Enterprise User Guide 2 | Last modified: December, 2009 © 1999 - 2009 Faronics Corporation. Faronics, Deep Freeze, Faronics Core Console, Faronics Anti-Executable, Faronics Device Filter, Faronics Power Save, Faronics Insight, Faronics System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners. Anti-Executable Enterprise User Guide | Contents 3 Preface . 21 Installing or Upgrading Anti-Executable on a Workstation via Faronics Core Console . [. . . ] If a White List has been set as Active, it is also included in the configuration export. To save an Anti-Executable configuration file, click Export in the Status tab after making selections. The configuration file is saved in a proprietary format (. aecfg) to prevent tampering. To open a previously defined configuration file (. aecfg), click Import and browse to a configuration file. Saving a configuration to XML only allows for viewing of the configuration settings. Any changes made to the Anti-Executable settings will not take affect until you click Apply. Anti-Executable Enterprise User Guide Status Tab | 37 Retrieving settings from Faronics Core Console The Status pane retrieves and displays all the settings of a single workstation. When a single workstation is selected and Anti-Executable is launched via Faronics Core Console, the workstation settings are retrieved automatically. The status can only be retrieved when a single workstation is selected. Anti-Executable Enterprise User Guide 38 | Using Anti-Executable White List Tab Anti-Executable allows the launch of any executable on the Active White List when Protection is set to Enable. Also included are White Folders--folders and their sub-folders from which any executable can be launched. Refer to the section titled Creating a New White List for information on creating the first White List. Executables installed on a remote workstation cannot be added to the Active White List unless the remote workstation is visible through the file browser in the Anti-Executable Scan dialog. White Lists can be applied and deployed to workstations via Faronics Core Console or manually on each workstation. White List Management through Faronics Core Console To configure Anti-Executable White Lists through Faronics Core Console, click Properties in the Actions pane on the right. Or, right-click Faronics Core Console in the left pane and select Properties from the contextual menu. To access the Properties option, the user must be in the top level node. Anti-Executable Enterprise User Guide White List Tab | 39 The White List tab can also be used to open or create White Lists. For more information consult the Using The Anti-Executable White List Editor section of this guide. Using The Anti-Executable White List Editor The White List Editor is opened by clicking on the White List tab and selecting New, Open, or Edit. The White List Editor also appears when an individual White List file is opened in Windows Explorer. · · · New -- Opens the White List Editor and creates a new White List. Edit -- Opens the White List editor to add or remove executables and/or folders to the Active White List. Anti-Executable Enterprise User Guide 40 | Using Anti-Executable Creating a New White List Only Anti-Executable Administrators and Trusted Users can access the White List editor on a workstation. A clean computer is a system that has the Operating System and all the required applications installed for day-to-day operations. Creating a White List before the computer is handed over to the user will ensure that the White List contains only the files required for the computer to work properly. -- To launch Anti-Executable via Faronics Core Console, select a workstation, right-click and select Anti-Executable > Configure Anti-Executable. Click the White List tab after the workstation status has been retrieved. -- To launch Anti-Executable on the workstation, Shift+ double-click the Anti-Executable icon in the System Tray. The White List editor appears: Anti-Executable Enterprise User Guide White List Tab | 41 3. [. . . ] The following commands are available: Use the /PW=<password> switch to execute the command on computers where a password has been set. Specify the password for the Administrator or the Trusted User as applicable. Black Lists have the extension . aebl. Function Add a folder or file to a White List or Black List Add a folder or file to Active Black List Add a folder or file to Active White List Anti-Executable version Command [path]AEC AddToList <List path and name. aebl or . aewl> <file or folder name and path> /PW=<password> [path]AEC AddToActiveBlackList <file or folder name and path> /PW=<password> [path]AEC AddToActiveWhiteList <file or folder name and path> /PW=<password> [path]AEC version /PW=<password> Note that Command Line Interface does not display the License Key (if it exists), while the User Interface does. [path]AEC applyBlackList <Black List path and name. aebl> /PW=<password> [path]AEC applyWhiteList <White List path and name. aewl> /PW=<password> [path]AEC changePassword <AEAdmin|AETrustedUser> /PW=<password> Changing a password, if one exists, requires the old password. [. . . ]