Home

Desktop Surveillance Help

1. 48 Desktop Surveillance Client Installation Wizard 13 14 Authentication Enter user credentials for Client installation User name User password Domain NOTE If you leave the Domain box empty the entered credentials will be used as credentials of a local user of the target computer and the Client will be installed under the lt target PC name gt lt user name gt account Package creation starts As soon as the package is created it is deployed on the selected host computers and the Client is installed on them Wait for the wizard to complete the installation and click Finish Installing Clients via Installation Package You can install Desktop Surveillance Clients via the installation package in 2 ways e via the administrative panel using the formerly created package e by copying the package to the remote computer and starting it there To create an installation package NOTE Steps are the same as steps 5 9 of the remote Client installation instructions Start the Desktop Surveillance Administrative Panel Select Desktop Surveillance Clients in the navigation pane or details pane Click Action and select Install Desktop Surveillance Client or right click and select Install Desktop Surveillance Client The Desktop Surveillance Client Installation Wizard opens Click Next on the Welcome page On the Desktop Surveillance Client Package Mode page select Create Desktop Surveillance Client package and cli
2. 76 3 7 The Desktop Surveillance Properties window opens Desktop Surveillance Properties Storage Storage location Firebird only Database gramData CensorNet Desktop Surveillance DesktopSurveillanceActvityDB fdb Storage cdeanup Define date period Start date 19 09 2013 E End date 19 09 2013 E Remove data Database automatic deanup F Turn on automatic Server storage deanup 0 00 00 Wiss T PA Shrink database MSSOL only Select the Turn on automatic Server storage cleanup check box Define the number of days to store data before deleting Define the time to execute the clean up operation Click View to define the host exceptions Hosts in the exceptions list will not have their sessions deleted from the database Click OK to accept the changes and close the window Automatic database clean up will be performed with the defined interval at the selected time Shrinking Database The database shrinking feature allows you to shrink the size of the MS SQL database to the actual amount of the data stored in it by cutting the space reserved by the database but which is not used by it NOTE The database shrinking procedure may take some time up to several hours and cause performance slowdown To shrink a database do the following 1 Start the Administrative Panel Select the Desktop Surveillance node 2 Select Action gt Properties or right click on the Desktop Surveillance and selec
3. 12 NOTE If you select MS SQL Server the screenshots will be stored in the database on MS SQL Server computer if you select the Firebird embedded the screenshots will be stored in Cache folder on computer on which the Server and Administrative Panel are installed fer Desktop Surveillance 2 0 0 Setup Database Type Choose type of the database you want to use Database type Firebird embedded no third party software required MS SOL Server installed MS SQL Server 2008 2012 required emacs Back Cancel 7 If you have selected MS SQL Server on the MS SQL Server Database Configuration page define the following connection parameters and then click Next Define the MS SQL Sever instance name defined during its installation Define the Database name for Desktop Surveillance database Define the User name and Password of a user account for authentication on the MS SQL Server NOTE Each time you install Server and Administrative Panel you need to define a new database 13 fe Desktop Surveillance 2 0 0 Setup MS SQL Server Database Configuration Configure the connection to MS SQL Server and database Server instance Database name DesktopSurveillanceActivityDB User name Password 8 If you have selected Firebird embedded on the Database Location page enter the database path or click Browse to navigate to the database folder Click Next fei Desktop Surveillance 2 0 0 Setup
4. 63 Administrative Panel Administrative Panel Properties CensorNet Desktop Surveillance Administrative Panel properties define main properties of data storage To define CensorNet Desktop Surveillance properties 1 Select Action gt Properties or right click on the Desktop Surveillance node and select Properties 2 The Desktop Surveillance Properties window opens Desktop Surveillance Properties Storage location Firebird only Database qramData CensorNet Desktop Surveillance DesktopSurveillanceActvi Storage cdeanup Define date period Start date 19 09 2013 alr End date 19 09 2013 alr Database automatic deanup Turn on automatic Server storage cdeanup 0 00 00 LW ral F ie F anna Shrink database MSSQL only 3 Define the following settings e Click Browse and navigate to the new storage path for screen captures saving e Select the dates in the Start date and End date fields and click Remove data to delete all screen captures created between the specified dates e Select the Turn on automatic Server storage cleanup check box to enable automatic database cleanup Define the following parameters e The period for data to be stored before cleaned up automatically e The time for cleanup operation execution 64 1 e Host exceptions list is used to define the computers with Corporate Security Monitor Clients installed whose data will not be deleted during the automatic Server storage cleanup
5. NOTE The exceptions are not available during manual Server storage cleanup 4 Click OK to accept the changes and close the window The following properties are available Storage location This option defines where created screen captures will be saved and also allows you to move the database to another location Please make sure that you have enough free space at the selected location Storage cleanup This option allows you to delete stored data manually or automatically not to run out of disk space Database automatic cleanup This option allows you to delete stored data from the defined hosts automatically with the defined frequency Administrative Panel interface Administrative Panel Interface CensorNet Desktop Surveillance Administrative Panel interface includes the following parts Navigation pane Console tree This pane includes the tree with one main node CensorNet Desktop Surveillance and three main sub nodes Roles Alerts and Desktop Surveillance Clients The Roles node gives you access to the list of users that can use the Desktop Surveillance Viewer The Alerts node allows you to manage the Alerts notifications about potentially harmful or forbidden actions on the investigated computers The Desktop Surveillance Clients node allows you to manage the Clients installed on host computers The Navigation pane can be hidden by selecting View gt Customize and clearing the Console tree box Details pane This pane dis
6. Report d User n Host name Type Start Last activity Finish Export video file DEV af Aleks A PC Live 14 03 2013 12 53 07 14 03 2013 13 12 31 N A Exit Le Activitytime Activity title Application name Keystrokes es a 13 03 45 14 03 Untitled Paint mspaint exe RAPER SEE NG cor Eto 13 03 45 14 03 Untitled Paint mspaint exe HS 13 04 00 14 03 Untitled Paint mspaint exe 13 04 00 14 03 Untitled Paint mspaint exe 2 13 04 01 14 03 localhost Desktop Surveillance DesktopSurveillance a 4 m b Z Show only text characters I gt I Mm 4 b gt e io E O A Stopped 00 00 00 00 19 26 Number of screen captures 339 2 The CensorNet Desktop Surveillance Login window opens Enter the following parameters and click OK Server Enter the server name It can be the IP address name or localhost if the server is installed on the local computer Login Enter the login name It can be lt usernames gt if it is the local user and lt domainname username gt if the user is added to the domain NOTE If there is no network connection you need to enter the login name as follows lt name of the computer gt lt username gt Password Enter the Windows user password 89 CensorNet Desktop Surveillance Login Server localhost Login ginger Password eeeccecs x Gea The user is changed and connected to the CensorNet Desktop Surveillance Viewer interface Viewe
7. 9 Navigate to the folder with exported data NOTE If there was a change of resolution on the Client computer display or change of bit depth several video files can be exported Sa Saving Screen Captures You can save the required screen capture to a file on your computer Screen captures are saved in the png format To save the screen capture do the following 1 Inthe Player pane in the list of screen captures select the required screen capture fe localhost Desktop Surveillance Viewer E File View Help Q 5 History X Results 1 session s found x ay Search list User n Host name Type Start Last activity Finish E SS SEEN DEV af Aleks A PC Live 14 03 2013 12 53 07 14 03 2013 13 12 31 N A gt Saved searches Activitytime Activity title Application name Keystrokes p 13 29 11 14 03 trunk explorer exe 13 29 11 14 03 trunk explorer exe 13 29 12 14 03 trunk explorer exe 13 29 15 14 03 Desktop Surveillance Properties mmc exe ue P V Show only text characters gt i om 4 b gt lt 4 gt gt PES Stopped 2 Itis displayed in the Player window 3 Right click the screen capture and select Save screen capture or in the main menu select File Save screen capture 4 Inthe Save As window define the name and location for the screen capture Click Save 5 The screen capture is saved 6 Navigate to the folder with screen capture NOTE You cannot save t
8. Advanced settings E Launch folder windows in a separate process E Restore previous folder windows at logon Show drive letters Show encrypted or compressed NTFS files in color Show pop up description for folder and desktop items Show preview handlers in preview pane E Use check boxes to select items Wj Use Sharing Wizard Recommended When typing into list view Automatically type into the Search Box Select the typed item in the view 4 Clear the Use Sharing Wizard check box 5 Click Apply and OK to close the window Checking System Services 36 To check that the Server and Remote Procedure Call RPC system services are running 1 Right click Computer and select Manage Computer Management opens 2 Expand the Services and Applications node and select Services 3 Find the Server service and the Remote Procedure Call RPC service in the list of services Make sure both services are running they status is displayed as Started w Computer Management File Action View Help dol BA En Computer Management Local Name Description Status Startup Type a if aaa PP Remote Desktop Services UserMode Allows ther Manual i s cc ee Remote Procedure Call RPC The RPCSSs Started Automatic gt fee i SS aa ee an d ae Call RPC Locator ai o Pa oe gt Local Users and Groups anes eee T aa W F Pe S Routing and Remote Access Offers routi Disabled ha Performance Bh
9. Device Manager eg RPC Endpoint Mapper Resolves RP Started Automatic E Storage a Secondary Logon l start Manual i Disk Management Sf Secure Socket Tunneling Protocol Se Provides su Manual is Services and Applications i Security Accounts Manager The startup Started Automatic Ea Services SA Security Center The WSCSV Started Automatic D F3 WMI Control TE Server Supports file Started Automatic gt E SOL Server Configuratic ck Shell Hardware Detection Provides not Started Automatic a Skype Updater Enables the Automatic 4 li mn 4 If one or both services are not running start them manually To start the service right click it and select Start from the context menu The selected service is started To quickly access Windows Services press Windows R type services msc in the Run text box and press Enter Disabling Windows XP Vista Firewall To disable Windows XP Firewall 1 Select Start gt Control Panel gt Windows Firewall 2 The Windows Firewall window opens 37 k Windows Firewall General Exceptions Advanced i x Your PC is not protected turn on Windows Firewall Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the lnternet or a network 9 On recommended This setting blacks all outside sources from connecting to this computer with the exception of those selected on the Exceptions tab
10. Search management area History X Results 1 session s found x Search list User n Host name Type Start Last activity Finish x Current search DEV af Aleks A PC Live 14 03 2013 12 53 07 14 03 2013 12 53 30 N A 4 Saved searches History pane Results pane lt Wi t Activitytime Activity title Application name Ke 12 53 11 14 03 Desktop Surveillance Administr mmc exe 12 53 11 14 03 localhost Desktop Surveillance DesktopSurveillance 12 53 11 14 03 NO TITLE explorer exe 4 dii p Player pane x Z Show only text characters gt Wm 4 b gt lt 4 gt gt TES Stopped 10 00 00 00 00 Number of screen captures 15 The Search management area This area includes parameters for the search in the Desktop Surveillance sessions The History pane In this pane the Search list tree view structure is displayed e Current search This folder contains the parameters and results of the current search e Saved searches This folder contains the saved user search parameters The Results pane In this pane the search results are displayed The search results fields are filled when the search finishes The results are displayed in a grid with the following columns e User name The name of the Desktop Surveillance user e Host name The name of the computer on which the Client is installed e Type The search type It can be Finished Live and Non Licens
11. Select this when you connect to public networks in less secure locations uch as airports You will not be notified when Windows Firewall blocks programs Selections on the Exceptions tab will be ignored Avoid using this setting Turning off Windows Firewall may make this computer more vulnerable to viruses and intruders What else should know about Windows Firewall Cancel Select Off not recommended and click OK To disable Windows Vista Firewall Select Start gt Control Panel gt Security gt Windows Firewall Click Turn Windows Firewall on or off Enter your administrator password if prompted to do so 38 ep Turn Windows Firewall on or Tf Windows Firewall Windows Firewall can help prevent hackers or malicious software from gaining access to your iy Allow a program through computer through the Internet or network Windows Firewall How does a firewall help protect my computer Windows Firewall is on Ee a a Windows Firewall Settings OA J Windows Frewal is helning to protect your computer Windows Firewall can help prevent hackers or malicious software from gaining to your computer through the Internet or a network V On recommended 7 This setting blocks all outside sources from connecting to this computer except for those unblocked on the Exceptions tab Block all incoming connections Select this option when you connect to less secure networks All exceptions
12. NOTE The keystrokes are not logged in a virtual machine session To log keystrokes from a virtual machine session you need to install a Client on the virtual machine Click Save A new configuration will be immediately applied to the host Export CensorNet Desktop Surveillance Administrative Panel allows you to export the list of roles and or hosts to the txt and csv format To export data In the Navigation pane expand the category to be exported e g Hosts to export the lists of all hosts connected to the Administrative Panel or Administrator to export the list of all Windows users to whom the Administrator role is assigned Select Action gt Export List or right click and select Export List Select the name of the file to which data is to be exported and its format Data is exported 88 Viewer Connecting Disconnecting from Desktop Surveillance Server Disconnecting from the Desktop Surveillance allows you to change the user Only users to which Administrator or Auditor roles are assigned in the Desktop Surveillance Administrative Panel part of the Desktop Surveillance Server can connect to the Desktop Surveillance Viewer To change the user do the following 1 Inthe main menu select File Change user or press Ctrl D fer localhost Desktop Surveillance Viewer File View Help Change user n equal to mspaint QO k F ESEE en Results 1 session s found
13. Remote Volume Manageme Routing and Remote Access GRE In Routing and Remote Access Th a 5 The Remote Service Management RPC Properties window opens 40 6 T Remote Service Management RPC Properties This is a predefined rule and some of its properties cannot be modified Name Remote Service Management RPC Description Inbound rule for the local Service Control Manager to be remotely managed via RPC TCP Enabled Action 6 Allow the connection O Allow the connection if it is secure Leam more about these settings In the General tab select Enabled under General and click Allow the connection under Action In the Advanced tab under Profiles select the profile of the network used for connecting remote computers and the Desktop Surveillance Server 41 Remote Service Management RPC Properties Specify profiles to which this rule applies l Domain Private Public Intertace types T sqm the interface types to which this Edge traversal Edge traversal allows the computer to accept un inbound packets that have passed through an edge Bar such as a Network Address Translation NAT router or Frevent applications from receiving unsolicited traffic from the Intemet through a NAT edge device Leam more about these settings 8 Click Apply and then OK to save the settings and close the Properties window 9 Close the Windows Firewall window 10 Create an inb
14. but you don t get the ping reply check the firewall on the remote computer Disable the firewall on the target remote computer e lf you are receiving ping replies but the administrative share is still unavailable check that the Sharing Wizard or the Simple file sharing are disabled e lf you are receiving ping replies and the sharing options are good but you still cannot access the administrative shares check that the Server system service is running on the remote computer e f none of the mentioned helps to solve the problem contact your System Administrator 62 If you get a login error after performing step 3 try the following e Make sure that the credentials you enter are correct You have to enter the credentials of a Domain Administrator or a local Administrator account on the remote computer e Verify that the account password is not empty Accounts with empty passwords cannot be used for remote connection e Try typing the username as lt domain_name gt lt username gt if the remote computer is in a domain or lt computer_name gt lt username gt if the PC belongs to a workgroup e f none of the mentioned helps to solve the problem contact your System Administrator DNS Try using the remote computer s IP address if you cannot access it by the name DNS service may be unavailable in your network UAC If you access the administrative shares normally on the remote PC running Window Vista or Windows 7 but th
15. Connected w Troubleshoot my network 0 Public networks Not Connected v See also Action Center Network and Sharing Center 3 Click Advanced settings The Windows Firewall with Advanced Security window opens 4 Click Inbound Rules and then double click the Remote Service Management RPC rule in the rules list a Windows Firewall with Advanced Security File Action View Help AlL l u A P Windows Firewall with A Eaei U ee EA Inbound Rules R 7 Na LE G J E3 Outbound Rules ane Group AL Connection Security iG Remote Scheduled Tasks Management Remote Scheduled Tasks M New Rule b IB Monitoring io Remote Service Management NP In Remote Service Managemen Filter by Profile iG Remote Service Management NP In Remote Service Managemen i Remote Service Management RPC Remote Service Managemen heii hema Remote Service Management RPC Remote Service Managemen Filter by Group v Remote Service Management RPC EPM Remote Service Managemen View Remote Service Management RPC EPM Remote Service Managemen Refresh Export List Remote Volume Management Virtual D Remote Volume Manageme Remote Volume Management Virtual D Remote Volume Manageme Remote Volume Management Virtual D Remote Volume Manageme Remote Volume Management Virtual D Remote Volume Manageme Remote Volume Management RPC EPM Remote Volume Manageme Remote Volume Management RPC EPM
16. anes Exporting Video Saving Screen Captures About ConsorNet Welcome to CensorNet Desktop Surveillance CensorNet Desktop Surveillance is an application that allows you to record the activity of the target computers with installed Clients and to view the screen captures from these computers in the form of video What s New Desktop Surveillance v 2 2 introduces the following changes Licensing process became easier and more user friendly Now you have to purchase serial keys and activate them via Internet After this simple action you ll be able to assign licenses to Clients for working with them Offline activation is supported for users that don t have Internet on their Desktop surveillance Server computer NOTE If you already have the licensed Desktop Surveillance you need to receive new serial keys from your vendor and activate them The minimal screenshot color depth is 4 bit grayscale Screenshots created with such color depth require less space for storing database size reduces by more than 20 without information value loss Windows 8 1 support is added The Desktop Surveillance Remote Clients installation wizard is changed to make Client installation process more transparent and allow a user to avoid possible problems Desktop Surveillance Client and Server logs are optimized Out dated logs are automatically removed a computer Client work is less noticeable to the user Desktop Surveillance perform
17. clicking the View in the Desktop Surveillance Viewer link in the pop up notification from the Viewer Tray Or this information can be received from the Tray Notifications Journal called from the Viewer Tray context menu 103 fe Desktop Surveillance Alert Facebook alert Aleks A PC Activitytime Activity title Application name Ke 13 05 58 14 03 Error Messages Mozilla Firefox firefox exe fac 13 06 02 14 03 NO TITLE explorer exe 13 06 03 14 03 Desktop Surveillance Alert DesktopSurveillance 13 06 03 14 03 Desktop Surveillance Alert DesktopSurveillance aipua beast echo nae 13 06 06 14 03 Desktop Surveillance Administr mmc exe barmi Pan ame sha meh imn At 13 06 07 14 03 NO TITLE explorer exe oe caret 13 06 07 14 03 Welcome to Facebook Log In firefo 13 06 07 14 03 NO TITLE explorer exe 13 06 10 14 03 Desktop Surveillance Alert DesktopSurveillance 13 06 10 14 03 localhost Desktop Surveillance DesktopSurveillance imags he Ht Z Show only text characters gt Wm b gt gt PS Stopped 00 Number of screen captures 251 Reports About Reports The investigator can generate a report to export search results to a separate file The report is generated in the xls format The following two types of reports are available e Search Results report This type of report includes information on all found sessions The following data is included number of found sessions search typ
18. correctly 6 Click OK to add the user To add a user automatically do the following Select a role Administrator or Supervisor in the Navigation pane or Details pane Select Action gt Add new user or right click and select Add new user A Desktop Surveillance Administrative Panel fer File Action View Window Help H60 s B m fei Desktop Surveillance Roles sh Roles i Administrator Add new user group b je Desktop Si ea New Window from Here Help Add a new user 3 The Select Users window opens 69 Select Users Select this object type dev local Enter the object names to select examples 4 Click Advanced 5 The secondary dialog window opens Select Users Users From this location Days since last logon e Name RDN E Mail Address 6 Define the query for User search In Folder 70 e Inthe Name field define the user name condition Select the comparison operator from the drop down list Starts with or Is exactly E g the User Name starts with An This will find users Andrew Ann and Angele e Inthe Description field define the user description condition Select the comparison operator from the drop down list Starts with or Is exactly E g the User Description is exactly John Doe This will find a user with description John Doe e Select the Disabled accounts options to select only users with disabled accounts 7 Cl
19. date change 12 Click Close in the Desktop Surveillance Serial Keys Management window Desktop Surveillance Client License Management Desktop Surveillance client license management is performed in the Administrative Panel You can assign a license to a Client or unassign it manually any time The license can be assigned to an off line Client and it will be applied after the Client is on line The license can be moved from one Client to another If the Client is uninstalled its license becomes free and can be assigned to another Client NOTE When the trial serial key expires the corresponding number of licenses is automatically unassigned from Clients Information about the number of used and free licenses of each type is displayed in the status bar of the Administrative Panel and in the Desktop Surveillance Serial Keys Management window You can manage either licenses for a single Client or licenses for multiple clients To assign the license to one Client do the following 1 Start the CensorNet Desktop Surveillance Administrative Panel 2 Select Desktop Surveillance Clients in the navigation pane or details pane 58 3 Navigate to the Client to which the license should be assigned Right click and select Add Workstation License Add Server License 4 The license is added to the Client and it starts session monitoring To unassign the Client license do the following 1 Start the CensorNet Desktop Surveillance Administra
20. gt Ale is Be fe Desktop Surveillance Desktop Surveillance Cli ee 3 Aleks A PC offline gt g Administrator R Supervisor gt Alerts A Desktop Surveillance Cliente Install Desktop Surveillance Clients Uninstall Desktop Surveillance Clients Manage Licenses Refresh View gt New Window from Here Export List Help Install client 4 The Desktop Surveillance Client Installation Wizard opens Click Next on the Welcome page 5 On the Desktop Surveillance Client Package Mode page choose the Select Desktop Surveillance Client package option and click Browse 50 Desktop Surveillance Client Installation Wizard Desktop Surveillance Client Package Mode Choose client installation package location C Program Files CensorNet Desktop Surveillance Adminis Browse Select Desktop Surveillance Client package lt Back Next gt Cancel Navigate to the formerly created package and select it Click Next Continue the installation as described in common remote installation To install Desktop Surveillance Client using the installation package on the target computer Copy the package to the remote computer and start it under the Administrator account By default the created package is saved to the following directory lt Desktop Surveillance installation folder gt Administrative Panel Package After the package is deployed the na
21. if the Desktop Surveillance Client is installed on the investigated computer in one of the following ways e Two DesktopSurveillanceService exe processes are started on computers with x86 architecture Two DesktopSurveillanceService exe processes and one DesktopSurveillanceServicex86 exe process are started on computers with x64 architecture e The DesktopSurveillanceClient and DesktopSurveillanceController services are present TEBE TITRE REE SRE N TENET TOE TET ET 4 A o pe s a Z i s TIPORTA OVIE T AERODEN l Pra Ce nputer Management o f n i o xX a Oe File Action View Help e A0E anl BA gt a n p A Computer 4 if Systerr _ D Tas gt f Eve gt ga Shz Stop the service gt Je Loc Restart the service A DesktopSurveillanceClient Name Description a ei DCOM Server Process Launcher The DCOM m CE Desktop Window Manager Session Ma Provides De Per yy Desktopsurveillance lient il De S DesktopSurveillanceController DesktopSur Description DHCP Client Regist s lien egisters an a E3 Storag DesktopSurveillanceClient a Di ic Policy Servi sk Di f Dis S5 Diagnostic Policy Service e Diagno 4 Fa Service 7 T P i Extended 4 Standard e There is a lt system disk gt Program Files CensorNet Desktop Surveillance Client folder with executable files 60 GORE dettop surcitonce ciem vi Searches A Organize Inc
22. need 4 Click Save button 5 The edited parameters are saved Viewing Alerts Alerts are displayed in the tree view pane to the left The Alerts node is displayed in the tree view between the Roles and the Desktop Surveillance Clients nodes Alerts are displayed as sub nodes of the Alert node Each alert sub node is named with a unique Alert name When an alert node is selected its parameters are displayed in the pane to the right and can be edited 80 fA Desktop Surveillance Administrative Panel fc File Action View Window Help AEH fet Desktop Surveillance gt B Roles p Alerts Yp Facebook b ky Desktop Surveillance Clients W Enable Alert W Send email ronald ccorp com M Show warnings in Viewer tray Deleting Alerts To delete an alert do the following 1 Right click an alert sub node in the tree view and select Delete Alert 81 uy I foi Desktop Surveillance Administrative Panel Lo jam fei File Action View Window Help 2 fe Desktop Surveillance My Im Roles V Enable Alert 4 Alerts Alert Info k ee nr TSE Alen name NewAlert fy Deskto Disable alert Delete alert pam View gt New Window from Here Y to Browse Help Actions Send email Show warnings in Viewer tray Rules Parameter Comparsion operator Value Edit 2 The confirmation message appears 3 Click Yes 4 The alert is deleted
23. the following 1 Inthe Results pane select the required session 2 The list of all screen captures from the session are displayed in the form of grid in the right part of the Player pane fe localhost Desktop Surveillance Viewer File View Help History jults 1 session s found a Search list User n Host name Type DEV af Aleks A PC Live Start 14 03 2013 12 53 07 Selected session Activity time 12 53 11 14 03 12 53 11 14 03 12 53 11 14 03 12 53 12 14 03 12 53 12 14 03 12 53 12 14 03 Activity title Desktop Surveillance Administr localhost Desktop Surveillance NO TITLE Start menu NO TITLE Start menu _ V Show only text characters gt Wm 4 b gt 4 gt PS Stopped 3 The Player is not playing by default Do one of the following e Inthe list of screen captures select the required screen capture It area Last activity Finish 14 03 2013 13 09 50 N A Application name Keystrokes mmc exe DesktopSurveillance explorer exe explorer exe List of screencaptures explorer exe explorer exe M AN 7 00 00 00 00 16 40 Number of screen captures 305 is displayed in the Player 101 e Inthe list of screen captures select the screen capture starting from which you want the video to be streamed In the Player area click Play Screen captures are displayed in order one by one To pause stop the video use the correspo
24. tray icon opens the context menu It contains the following options Disable enable tray notification Disables or enables the pop up notifications from the Windows tray Open tray notifications journal Opens the journal containing the records of the latest notifications on alerts on the investigated computers Stop viewer tray service Terminates the work of the utility NOTE To enable automatic launch of the Viewer Tray service at system startup you need first to log in to the Viewer at least once Tray Notifications Journal Tray Notifications Journal keeps the records of the latest alert notifications from the investigated computers The maximum number of the records in the Tray Notifications Journal is defined by the investigator in the Alert Global Settings in the DestopSurveillance Administrative Panel When it is reached the latest records are removed from the journal The records can be cleared by clicking the Empty Journal button NOTE Information removed from the journal is not deleted from the database Information is displayed in the grid containing such columns Alert Displays the Alert name Host Displays the name of the computer on which the Alert event occurred Time Displays the time when the Alert event occurred on the investigated computer Activity Title Displays the name that appeared in the title of a window when the Alert event occurred on the investigated computer Application Displays the name of the sta
25. will be ignored and you will not be notified when Windows Firewall blocks programs x Off not recommended Avoid using this setting Turning off Windows Firewall will make this Secunty Center computer more vulnerable to hackers or malicious software See also Network Center Tell me more about these settings rT 3 Inthe Windows Firewall Settings window select Off not recommended and click OK Setting Up Windows 7 8 Firewall It is not necessary to disable the Windows Firewall in Windows 7 and Windows Server 2008 For successful remote installation of Desktop Surveillance Clients you have to allow inbound connections in the Remote Service Management RPC rule for the remote computers To enable inbound connections for the Remote Management Service RPC do the following 1 Select Start gt Control Panel gt System and Security gt Windows Firewall 2 The Windows Firewall window opens 39 Control Panel Home a Help protect your computer with Windows Firewall Allow a lee gia feature Windows Firewall can help prevent hackers or malicious software from gaining access to your through Windows Firewall computer through the Internet or a network Change notification settings How does a firewall help protect my computer Turn Windows Firewall on or What are network locations off Restore defaults m v Domain networks Not Connected w Advanced setting P 7 i oo m v Home or work private networks
26. 11 14 03 localhost Desktop Surveillance DesktopSurveillance 12 53 11 14 03 NO TITLE explorer exe pir p V Show only text characters gt I Mm 4 b gt b gt PS Stopped 00 00 00 00 00 41 Number of screen captures 15 3 By default there is only one search condition To add another condition click on the plus button The new condition line will be displayed below the first one NOTE Search conditions of different types are connected with AND logic Search conditions of the same type are connected with OR logic 4 Define the search parameters 5 When adding the Start Finish time or Last Activity time condition the Now option is available Select this option to perform the search till the current computer date 6 Click on the Search button or press Enter 7 The search starts When the process of searching finishes the results are displayed in the Results pane Parameterized Search Parameters The parameterized search condition consists of the Parameter box Comparison operator box and the Value box You can add up to 10 conditions To add the condition click the plus icon To delete the condition click on the minus icon The conditions of different types are connected with AND logic it means that each specified condition will be TRUE for each found session in the Results pane The conditions of the same 95 type are connected with OR logic it means that at least one of the specif
27. 4 03 trunk explorer exe 13 29 11 14 03 trunk explorer exe 13 29 12 14 03 trunk explorer exe 13 29 15 14 03 Desktop Surveillance Properties mmc exe A 4 TT x W Show only text characters 44 b gt 44 gt gt ES 00 36 06 00 36 06 Number of screen captures 596 Stopped 2 The Session Activity Report window opens Session Activity Report Report options V Open on finish D Detailed information for sults Reports oniy Report location D Test data Session activity report xls Browse 106 3 Select the Open on finish option to automatically open the report after the generation process finishes 4 Inthe Report location box do one of the following e Enter the path to the generated report manually e Click Browse and define the location for the file with generated report 5 Click Generate to generate the report 6 When the generation process finishes click Finish The report will open automatically if the corresponding option was selected Exporting Video Exporting video means exporting screen captures of the session in the video format to your computer Video is exported in the avi format Video resolution will be the same as the resolution of screen captures received from the Client computer To export video do the following 1 Inthe main menu select File Export video file or right click the session in the Results pane and select Export video file or right click the Player Manag
28. 5010 Intemet Control Message Protocol ICMP settings Leam more about protocol and ports 12 In the Protocols and Ports tab do the following e Inthe Protocol Type list select TCP e Inthe Local port list select Specific Ports Type the port numbers 3346 3347 3349 in the box below NOTE These rules will be added to Windows Firewall automatically if Windows Firewall is enabled during Desktop Surveillance Server installation If you use any other Firewall these ports and executable must be added to it as well 13 Click Apply to save changes Click OK to close the window 14 Close the Windows Firewall window NOTE Unique static external IP addresses should be used for cloud based servers 22 Updating Desktop Surveillance Server The updating of the Desktop Surveillance Server is performed via the Desktop Surveillance installation file of a newer version During an update you may select to update the existing database to a newer version or simply reinstall it To update the Desktop Surveillance Server do the following 1 Start the Desktop Surveillance setup wizard 2 Onthe Welcome page click Next 3 On the Already Installed page select Update Add Remove components and click Next Ac Desktop Surveillance 2 2 1607 Setup Already Installed Choose how you want to install The CensorNet Desktop Surveillance of the older version 2 1 1578 is already installed Select the operation you want to perform
29. Alert Parameters The Alert editing pane allows you to define the Alert settings and rules To edit the Alert Parameters do the following 1 Select the required Alert from the Alerts node in the tree view pane to the left 2 The Alert editing pane opens to the right 3 Enable disable the selected Alert by checking clearing the Enable Alert check box If the Alert is disabled you will not receive notifications on it the screen captures will not be marked as Alerts in Viewer as well 4 Create a unique name for the created Alert and enter a description to this Alert in the Description field if necessary 5 Click Browse to select hosts to which the Alert will be applied 6 The Host Assigning window appears 82 7 Check the check boxes near the target clients Click Check all to apply the Alert to all clients Click Uncheck all to clear all check boxes 8 To receive email notifications on alert events check the Send email check box and enter the email address to which the notifications will be sent You can enter several email addresses separating them with semicolon 9 Check the Show warnings in Viewer tray check box to activate the tray notifications The Alert notifications will then pop up from the tray on all computers with started Viewer 10 In the Rules group click Edit to define the rules for the created Alert At least one rule has to be defined 11 Click Save to save the changes AH Desktop Surveillance Admi
30. Alerts To add an alert do the following 1 Right click the Alerts node and select Add New Alert fe Desktop Surveillance Administrative Panel fo File Action View Window Help Alpi is B Lo jee ge eee i se Desktop Surveillance Roles x ce R Administrator gt Add new alert upervisor Enable all Disable all Refresh New Window from Here Help 1 j A new alert sub node appears in the tree view Define alert parameters Define at least one rule Click Save to save the created Alert The Alert appears in the tree view ae oS EA Editing Alerts To edit an alert do the following 1 Left click an alert sub node in the tree view 2 The Alert editing area for the new alert opens to the right The Alert editing area for the new alert opens to the right Enter a unique alert name and alert description optional Click Browse and select hosts to which the Alert will be assigned 19 A Desktop Surveillance Administrative Panel Ti File Action View Window Help e 74 Om re Desktop Surveillance ie R sig V Enable Alert 4 Y Alerts Alert Info p NewAlert Alert name NewAlert gt A Desktop Surveillance Clients Description a Assign to Browse Actions Send email Show warnings in Viewer tray Rules Parameter Comparsion operator Value 3 Edit the parameters you
31. Database Location Choose the folder in which database will be installed Database folder Cs ProgramData CensorNet Desktop Surveillance 9 Onthe Choose Start Menu Folder page define the name of the folder in the start menu to which the shortcuts will be placed Click Install 10 Installation starts 14 11 After the installation finishes click Finish 12 In Windows Firewall you must allow Desktop Surveillance Server executable to accept TCP connections via ports 3346 3347 3349 These rules will be added to Windows Firewall automatically if Windows Firewall is enabled during Desktop Surveillance Server installation NOTE To start working with Desktop Surveillance you need the Administrator and the Supervisor accounts It is recommended to assign roles to users immediately after installing the Server and the Administrative Panel Adding Server Executable to Windows Firewall To add Desktop Surveillance Server executable to the Windows Firewall 1 Select Start gt Control Panel gt System and Security gt Windows Firewall 2 The Windows Firewall window opens Control Panel Horn i i oe Help protect your computer with Windows Firewall Allow a program or feature Windows Firewall can help prevent hackers or malicious software from gaining access to your through Windows Firewall computer through the Internet or a network Change notification settings How does a firewall help protect my computer HI Turn Windows
32. Desktop Surveillance Help Table of Contents PD OUI aioa a E a a E e E 5 WV VAG SING WW orire a a aa a a a E 6 SyS mREdUrEME MS Saa e E E A E A E E A A EAAS 7 POO MANNS ULC UNG sos scelecectsdacet ace roaa sA aaea aE aE Sa Naa EEE OEE RESE Nii 8 Programm ONUC WON Ce a ats ba a a a a E AT 8 121672 E Y erana a r eee E r 9 Viewer AY sociedad atte a a a a a S 9 AHOULE VIG WER TAV orua an a aT e aa E A a A aE A 9 Tray NOTE AU OMS OWN aussir a E a a ecole teateeocoarae 9 Deployment and Administration ioccsscccscwsecces ozs senses raced ssenevcnssavecnsesceeecusseeucsseacasscnseeeccudes ces senacewanudccenstensetesenceoes 11 About Program INStANAtiON wisiscosd2scetcosdssiecscdensdensecdeaengactededadeehssicdebidesddeieaczcdabsianedstiessidehiiodddsbezesddeseeaiodateansddeds 11 Installing uninstalling updating Desktop Surveillance Server cecccecceceeeeeeeeeeeeeeeeeeeaeaeeeeeesaaaeeeeeesaaneeeeeeeas 11 Installing Desktop Surveillance Server and Administrative Panel ccccccsseeseeeeeeeeeeeeeeaeeeeeeeesaeaeeeees 11 Adding Server Executable to Windows Firewall ccccccssseeceeeeeeeeeeeeceeeeeeeeeeueeseeeeeseeeseeeessaaeseeeessaaeeeees 15 WUpdatmo Desktop Surveillance SErVer seccina eiia a oala a e laaa a aaa AAE REAR 23 Database Types COmpParS ONerioia n a a EN 25 Uninstalling Desktop Surveillance Server and Administrative Panel cccccccesseeeeeeeeseeeeeeeeeaeeeeeeeeeas 26 Installing uninstalling updating De
33. Firewall on or What are network locations off Restore defaults v Domain networks Not Connected w Advanced settings v Home or work private networks Connected y Troubleshoot my network v Public networks Not Connected Action Center Network and Sharing Center 3 Click Advanced settings The Windows Firewall with Advanced Security window opens 4 Right click Inbound Rules and select New rule 15 gar Windows Firewall with Advanced Security File Action View Help e gt af 3 1 Bl 4 Inbound F ns F Outboun E fi Connecti Filter by Profile E Monitori i by aver Exe Filter by State gt Ft Office Outlook Filter by Group ermanent protection ermanent protection a HT MIL y AT MAL View mander 32 bit mander 32 bit ie otal Commander 32 bit 5 The New Inbound Rule Wizard opens On the Rule Type step select Program and click Next 16 gP New Inbound Rule Wizard Rule Type Select the type of firewall rule to create Steps eS ese What type of rule would you like to create Program Action Program Profil Rule that controls connections for a program Name Port Rule that controls connections fora TCP or UDP port Predefined BranchCache Content Retrieval Uses HTTP Rule that controls connections for a Windows expenence Custom rule Leam more about rule types 6 On the Program step select This program path then click Browse and
34. INE SOFTWARE CensorNet Desktop Surveillance a 61 Clients Installation Issues The common reasons of issues with remote installation or uninstallation of Desktop Surveillance Clients are the inadequate network configuration or system settings For successful remote installation Desktop Surveillance needs to access the administrative shares on the target computers To check the administrative shares availability do the following 1 Open Windows Explorer 2 Inthe address bar type lt target_computer_IP gt admin and press Enter JO B 122 168 100 100 2dmins Organize New library Ur Favorites Libraries ME Desktop Open a library to see your files and arrange them by folder date and other properties a Downloads E Recent Places Documents p Music lt p ery BV vy lt Pictures ee Subversion _ Library lt gt Library jE Computer lt F E Videos ti Network wa a Libra ry Libraries 5 tems 3 When the Enter Network Password window opens enter Administrator credentials and click OK 4 Ifthe login credentials are accepted the system folder opens by default C Windows If you get an error after performing step 2 try the following e Open the Command Prompt cmd exe Enter and execute the ping lt target_computer_name or IP gt command Check the following 1 If you do not get ping replies network may be down Check the network connection and try again 2 If the network is up
35. Minimal interval between the same alert events on one session min 10 H Send notification on every alert event Send batch notification every jo a hours E a minutes Tray notifications journal Maximum number of alert events displayed in the journal The E mail settings group allows you to define a sender of the email alert notifications e Define an existing SMTP mail server NOTE The delivery of email notifications via mail servers with only NTLM authentication such as Microsoft Exchange Server is not supported e Define the number of the Port via which the emails will be sent e Define the login details User and Password of an existing email account from which the email notifications will be sent The Frequency settings group allows you to define how frequently the Alert notifications will appear in the Viewer Tray and be sent via email Define the Minimal interval between notifications sent for the same alert event This option defines how frequently the notifications about the same alert event will appear For example if this parameter is set to 10 minutes and a user has started Skype and works in it the investigator will receive one notification every 10 minutes instead of receiving 10 notifications every minute or even more Define the way in which the notifications will be sent e Select Send notifications on every alert event for the notification on every alert event to be sent to the investigator e Select Send b
36. Net Desktop Surveillance of the older version 2 1 1578 is already installed Select the operation you want to perform and cick Next to continue Update Add Remove components NOTE If you have Desktop Surveillance Server and Administrative Panel installed on the same computer you will need to select to update them as well otherwise they will be removed 4 Onthe Choose Components page select Desktop Surveillance Viewer and click Next 30 AY Desktop Surveillance 2 2 1607 Setup Components Choose which features of Desktop Surveillance 2 2 1607 you want to install Check the components you want to install and uncheck the components you don t want to install Click Next to continue Select the type of install Desktop Surveillance Viewer z Or select the optional Desktop Surveillance Server and Administrative Panel u nna you wish to Desktop Surveillance Viewer update to 2 2 1607 Space required 16 2MB The update process starts If the update process finishes successfully you will see the last page of the wizard Click Finish to exit the wizard Uninstalling Desktop Surveillance Viewer Uninstallation of the Desktop Surveillance Viewer can be performed in 2 ways e Via the Desktop Surveillance setup wizard by choosing Add Remove components This method should be used when Desktop Surveillance Viewer is installed together with any other Desktop Surveillance components e Through Programs and C
37. a weee es 14 03 2013 13 12 31 N A Application name Keystrokes mmc exe DesktopSurveillance explorer exe explorer exe V Show only text characters gt i E b gt 4 gt gt EE S Stopped 2 Click the Save search icon 3 The Saved Search window opens 4 Enter the name for the set of the search parameters and click OK Saved Search Search name My Search Ga 5 The search parameters are added to the Saved searches folder You can view it in the History pane Number of screen captures 494 98 ibe 2 fe localhost Desktop Surveillance Viewer File View Help Application name equalto User name equalto Histoy 6 Results 1 session s found Search list E Current search Saved searches ae Type Live User n Host name DEV af Aleks A PC Activity time 12 53 11 14 03 12 53 11 14 03 12 53 11 14 03 12 53 12 14 03 an raana aans skype exe v Andrew Start 14 03 2013 12 53 07 Activity title Desktop Surveillance Administr localhost Desktop Surveillance NO TITLE Start menu reina eer es 4 V Show only text characters Last activity 14 03 2013 13 12 31 Finish N A Application name Keystrokes mmc exe DesktopSurveillance explorer exe explorer exe Number of screen captures 494 NOTE When opening search parameters that include dates Finish time Start or Last activity ti
38. an use the Check All Uncheck All buttons to select disselect all Clients Click Next 6 The uninstallation process starts After the uninstallation finishes click Finish to exit the wizard NOTE You can uninstall a single client by clicking Uninstall Desktop Surveillance Client in its context menu 53 To uninstall a single Client Start the Administrative Panel Select Desktop Surveillance Clients list in the navigation pane Right click the target Client and select Uninstall Desktop Surveillance Client fe Desktop Surveillance Administrative Panel mmm m File Action View Window Help e gt il s fer Desktop Surveillance b A Roles p Alerts ji Desktop Surveillance Clients Desktop Surveillance Cli Uninstall Desktop Surveillance Client Add Workstation License Add Server License Remove License New Window from Here Help Uninstall Desktop Surveillance Client Confirm the Client uninstallation If the Client had transferred any user activity records before it was removed the corresponding host remains in the list of Corporate Security Monitor Clients marked as uninstalled The respective user activity records are kept stored on the Corporate Security Monitor Server 54 si Desktop Surveillance Administrative Panel fA File Action View Window Help Aj a H Desktop Surveillance Desktop Surveillance Cli A Roles E Aleks A PC p Alerts 4 m amp Desktop Surveillance Clients E A
39. ance Clients About Desktop Surveillance Clients Installation During Desktop Surveillance deployment remote installation of Desktop Surveillance Clients is used Remote installation of Desktop Surveillance Clients is performed via Administrative Panel To ensure successful remote installation of Desktop Surveillance Clients you have to set up the network environment beforehand If your computers belong to a workgroup but not a domain you need to know the administrator account credentials for each remote computer Otherwise knowing the Domain Administrator credentials is enough Desktop Surveillance also features installing Clients either local or remote via the installation package generated in the Administrative Panel Thus you can distribute the installation package of the Client with predefined settings among the network computers and install it This kind of installation is useful when you experience difficulties with installing Desktop Surveillance Clients remotely via Administrative Panel or the computers in your network are part of a workgroup and do not have the same administrative account for each computer NOTE The Desktop Surveillance Client installed locally via setup wizard is only capable of interacting with the local Desktop Surveillance Server For Desktop Surveillance deployment use other installation methods Client Installation prerequisites Setting up Environment for Client Remote Installation You might need to make
40. ance is improved Desktop Surveillance Server and Viewer work quicker now The help file format has been changed to PDF Now you can easily print a user manual Overall stability is improved Possible minor problems with processing large amounts of data are fixed System Requirements Desktop Surveillance claims different system requirements for each of its components Make sure your hardware and software meet the Desktop Surveillance system requirements to avoid possible component malfunctions Desktop Surveillance Server requirements e 2 GHz or higher CPU e 1024Mb or more RAM e 100 Mbit s network adapter 1 Gbit s is recommended e Microsoft Windows XP Vista 7 any edition except Home 8 8 1 Microsoft Windows Server 2003 2008 2012 Both x86 and x64 platforms are supported Desktop Surveillance Viewer requirements e 2 GHz or higher CPU e 1024Mb or more RAM e 100 Mbit s network adapter e Microsoft Windows XP Vista 7 8 8 1 Windows Server 2003 2008 and newer Both x86 and x64 platforms are supported Desktop Surveillance Client requirements e 1 GHz or higher CPU e 512 Mb or more RAM e 100 Mbit s network adapter e Microsoft Windows XP Vista 7 8 8 1 Windows Server 2003 2008 and newer Both x86 and x64 platforms are supported NOTE When Desktop Surveillance Client is installed to the terminal server hardware requirements depend on the number of active user sessions and may increase drastically For exam
41. and cick Next to continue Update Add Remove components 4 Onthe Choose Components page select Desktop Surveillance Server amp Administrative Panel and click Next 23 EB Desktop Surveillance 2 2 1607 Setup Choose Components Choose which features of Desktop Surveillance 2 2 1607 you want to install Check the components you want to install and uncheck the components you don t want to install Click Next to continue Select the type of install lesktop Surveillance Server and Administrative Panel Or select the optional Desktop Surveillance Server and Administrative Panel u E you wish to Desktop Surveillance Viewer update to 2 2 1607 Space required 131 6MB NOTE If you have Desktop Surveillance Viewer installed on the same computer you will need to select to update it as well otherwise it will be removed On the Database Update page if you want to keep the existing database select Update database to a new version otherwise select Reinstall the database Click Next 24 ArH Desktop Surveillance 2 2 1607 Setup Database Update Select either to update the database to a new version or to reinstall it 5 Update the database to a new version the database type can t be changed WARNING If you use the MS SOL database it s strictly recommended to backup it before updating Reinstall the database all data will be lost NOTE To change the typ
42. atch notification every for information on all alert events during defined time interval to be sent to the investigator e f Send batch notification every is selected then define time interval in hours and minutes Time counting starts when Server starts if this option is selected Notifications are then sent with the defined frequency The Tray Notifications Journal group contains only one parameter that allows the investigator to define the maximum number of events displayed in the Tray Notification Journal When it is reached the oldest records are removed from the journal of all Desktop Surveillance Viewers but not from the database 86 Desktop Surveillance Client Configuration Hosts are computers on which CensorNet Desktop Surveillance Client installed After the Client is installed on the computer it appears in the Hosts list of the Administrative Panel to which it connects Desktop Surveillance Client configuration is defined during installation or after the installation through editing the Desktop Surveillance Client configuration To edit the Desktop Surveillance Client configuration 1 Select the required host under Desktop Surveillance Clients 2 The configuration options are displayed in the Details pane fei Desktop Surveillance Administrative Panel y fA File Action View Window Help fer Desktop Surveillance A Roles p Alerts 4 amp Desktop Surveillance Clients 3 Aleks A PC offline Screen cap
43. box the keystrokes lines having the same Title Application pair will be put together fei localhost Desktop Surveillance Viewer File View Help Application name v equal to mspaint Ar a P History X Results 1 session s found x a t Search list User n Host name Type Start Last activity Finish Ponies DEV af Aleks A PC Live 14 03 2013 12 53 07 14 03 2013 13 12 31 N A ye Saved searches 4 Activity time Activity title Application name Keystrokes E EE 13 03 45 14 03 Untitled Paint mspaint exe N E aa CCT ater 13 03 45 14 03 Untitled Paint mspaint exe i a s o 13 04 00 14 03 Untitled Paint mspaint exe gt Found results amp ro 13 04 00 14 03 Untitled Paint mspaint exe s 13 04 01 14 03 localhost Desktop Surveillance DesktopSurveillance 4 pi gt V Show only text characters 5 gt Wm ad p gt gt gt i S Stopped 00 00 00 00 19 26 Number of screen captures 339 Viewing Live Sessions Desktop Surveillance Viewer allows you to view screen captures in a Live session i e the monitoring of the Client computer is still in progress If the session has the Live status the list of screen captures is refreshed each second and new screen captures are added to the table if any are available 102 fei localhost Desktop Surveillance Viewer File View Help Keystrokes equalto corporate policy Histor
44. ce Administrative Panel A Client can be installed on any computer in the network Desktop Surveillance Clients collect user activity data and send it to the Server 4 Activating serial keys adding activated serial keys To be able to use Desktop Surveillance you need to license it by activating purchased serial keys 5 Assigning licenses to Desktop Surveillance Clients Licenses are to be assigned to Desktop Surveillance Clients for the Desktop Surveillance to start receiving data from them Clients that don t have an assigned license do not collect any user activity data even if they are installed and launched on the computers 6 Installing Desktop Surveillance Viewer The Desktop Surveillance Viewer is used to review user activity records stored on the Desktop Surveillance Server The Viewer can be installed on any computer in the network A connection with the Desktop Surveillance Server is required for the Desktop Surveillance Viewer to operate After installing all Desktop Surveillance components and assigning roles and licenses Desktop Surveillance is considered deployed and all its features become available Installing uninstalling updating Desktop Surveillance Server Installing Desktop Surveillance Server and Administrative Panel To install the CensorNet Desktop Surveillance Server and Administrative Panel do the following Start the CensorNet Desktop Surveillance setup wizard Click Next on the Welcome page Caref
45. changes to your network configuration for successful Desktop Surveillance installation and for its components normal interaction The majority of Clients installation uninstallation issues are caused by incorrect system or network settings The following conditions have to be met for successful Desktop Surveillance Client installation e The remote computer has to be online and accessible via network e Shared folders have to be accessible on the remote computer Simple file sharing Sharing Wizard has to be disabled e You need to know the domain administrator or local administrator account credentials for the remote computer e The Server and the Remote Procedure Call RPC system services have to be running on the remote computer e Windows XP and Vista Firewall has to be disabled on the remote computer during the Clients remote installation 34 e In Windows 7 and Server 2008 Firewall allow inbound connections in the Remote Service Management RPC rule for the remote computers in this case it is not necessary to disable Windows Firewall e In Windows Firewall on the Server side allow Desktop Surveillance Server executable to accept TCP connections via ports 3346 3347 3349 NOTE These rules will be added to Windows Firewall automatically if Windows Firewall is enabled during Desktop Surveillance Server installation Make sure the conditions mentioned above are met to avoid possible problems with Client remote installatio
46. ck Browse to select a folder to which it will be saved and then click Next 49 6 On the Screen capture color settings page select the color depth for the created screen captures and click Next 7 Onthe Screen capture creation settings page define the frequency with which the screen captures will be created Click Next 8 On the Server Name page type the name or the IP address of the computer on which the Desktop Surveillance Server and Administrative Panel are installed Clients will connect to this server and the received screen captures will be stored on its computer Click Next NOTE The server IP address has to be static for Clients to connect to it successfully Unique external IP addresses should be used for cloud based servers 9 On the Further Actions page check the location to which the installation package will be saved and clear the I want to install the configured Client automatically on remote computers option Click Next 10 Package creation starts As soon as the package creation is finished click Finish To install Desktop Surveillance Client via Administrative Panel using installation package do the following 1 Start the Desktop Surveillance Administrative Panel 2 Select the Desktop Surveillance Clients node to the right of the window 3 Right click and select Install Desktop Surveillance Client fr Desktop Surveillance Administrative Panel fe File Action View Window Help al gt
47. e date of the report generation types of sessions host names activity time and number of screen captures Report can also include detailed information on each found session e Session Activity report This type of report includes information on the user activity in one or more sessions Search Results Report Search Results report includes information on all found sessions The following information is included to the report date of report generation path to the report type of the search number of found sessions types of sessions live or finished names of the investigated computers activity time etc If the investigator used parameterized search search parameters and their values are also included to the report The report can also include detailed information for each found session Information on each session is displayed in a separate tab named lt numbersSession It includes general information on the session and the table with the names of screen captures and their creation date and time as it is displayed in the list of screen captures in the Player pane To generate the Search Results report do the following 1 Inthe main menu select File Report Search Results Report or right click the session in the Results pane and select Report Search Results Report 104 r fei localhost Desktop Surveillance Viewer Lo 2 k File View Help Application name v equal to v skype exe Q X w P User name equa
48. e Desktop Surveillance Client remote installation fails make sure the User Account Control is disabled on the remote computer Remote Client Installation Issues If you encounter problems with remote installation of Desktop Surveillance Clients in a workgroup under Windows 7 Vista try enabling the Local Account Token Filter Policy NOTE This is a known Windows issue that might block remote application installation To enable Local Account Token Filter Policy 1 Open the Windows Registry Editor 2 Inthe Registry Editor window select the following key HKEY LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Policies System 3 Double click the LocalAccountTokenFilterPolicy value or select it and click Modify in the right click menu In the Value data box type 1 and then click OK Close the Windows Registry Editor Deploy Desktop Surveillance Client Open the Windows Registry Editor In the Registry Editor window select the following key HKEY LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Policies System 9 Double click the LocalAccountT okenFilterPolicy value or select it and click Modify in the right click menu 10 In the Value data box type 0 and then click OK OO On e lf the LocalAccountTokenFilterPolicy registry value does not exist follow these steps 1 Inthe Windows Registry Editor in the Edit menu click New and then click DWORD Value 2 Type LocalAccountTokenFilterPolicy and then press ENTER
49. e of a database you need to reinstall the Desktop Surveillance The update process starts lf the update process finishes successfully you will see the last page of the wizard Click Finish to exit the wizard Database Types Comparison When installing Desktop Surveillance Server and Administrative Panel you can choose between the two types of databases MS SQL database and Firebird database These databases have the following differences Feature MS SQL Database Firebird Database Free No has a limited free Yes version Remote access to database Yes Requires additional software Yes No installation 25 Sd Screenshots storage Database on MS SQL lt Desktop Surveillance Server computer installation folder gt Server Cache Uninstalling Desktop Surveillance Server and Administrative Panel Uninstalling Desktop Surveillance Server causes installed Desktop Surveillance Administrative Panel to be removed from the current computer as well The Desktop Surveillance database containing all the user activity records is removed too This operation is irreversible Warning During Desktop Surveillance Server uninstallation the database is removed without any user confirmations NOTE If you reinstall the Server and there are serial keys activated online you need to have an active Internet connection after the Server is reinstalled to synchronize the activated serial keys If you have added activated serial keys after the Server
50. e of a launched application Title The name that appears in the title of a window Set this parameter Facebook type for Alert to be activated whenever the specified value is identified in any title on the screen The name of the Windows user whose work is monitored by John CensorNet Desktop Surveillance Set this parameter type for Alert to be activated whenever the specified user uses the computer on which the Client is installed Comparison operators for text data e Equal to The defined value fully corresponds to the found result e g John will find John but will not find Johny e Like The found result includes the defined value e g John will find Johny Johnatan but will not find Johan Examples of Rules 1 To setup the alert notification about any user opening Facebook on the investigated computer enter the following parameters Rules Parameter Operator Value Tite hd Like Y facebook 2 To setup the alert notification about a specific user e g Stefan opening Facebook on the investigated computer enter the following parameters Rules Parameter Operator Value Title Like facebook User name Equal to Stefan 84 lf you enter more than one name the alert notification will then appear if any of them Stefan or Rick opens Facebook 3 To setup the alert notification about any user launching skype exe application on the investigated compute
51. ect this option to enable the searching till the current date Comparison operators for dates e equal to the specified date fully corresponds to the found result e g 12 12 2009 will find 12 12 2009 but will not find 12 11 2009 e before the found results will match all the dates till the specified one e g 12 12 2009 will find 07 08 2009 but will not find 12 12 2010 e after the found results will match all dates after the specified one e g 12 12 2009 will find 12 12 2010 but will not find 12 12 2008 Saving Search Parameters You can save the search parameters to make it easier to perform further searches The search parameters will be saved in the Saved searches folder in the History pane The saving of search parameters Is available only for the parameterized search To save the search parameters do the following Define the search parameters 97 fe localhost Desktop Surveillance Viewer File View Help Application name equalto skype exe User name equalto z Andrew Q ie save sere History X Results 1 session s found Search list User n Host name Type Start Last activity Finish DEV af Aleks A PC ne Activity time 12 53 11 14 03 12 53 11 14 03 12 53 11 14 03 12 53 12 14 03 anraanaasoann 14 03 2013 12 53 07 Activity title Desktop Surveillance Administr localhost Desktop Surveillance NO TITLE Start menu reim
52. ed e Start The date when the session started e Last activity The date of the last made screen capture e Finish The date when the session finished If the session has the Live status this field is empty The Player pane 91 The Player pane is divided into two areas the list of screen captures to the right and the player itself to the left The list of screen captures is displayed in a grid with the following columns e Alert icon If the screen capture matches the alert criteria an alert icon representing a bell will be displayed here e Activity time The date and time when the screen capture was made e Activity title The name that is associated with the screen capture e Application name The name of the application that was started on the Client computer e Keystrokes The content of the keystrokes log associated with the selected screenshot NOTE The keystrokes are not logged in a virtual machine session To log keystrokes from a virtual machine session you need to install a Client on the virtual machine You can change the size of the columns Data is sorted by the time of the screen capture creation Main Menu The main menu of the Desktop Surveillance Viewer provides the access to the features of the program The main menu consists of three parts e File menu e View menu e Help menu File menu r 4 localhost Desktop Surveillance Viewer File View Help Change user Ctri D Q Save
53. eessaaeeeeeseageeeeeseas 58 FROUDE STOO UM Ch asso atest ae seen a sahil rch ences ahi elu a het ssa Breeches 60 Checking that the Client is Installed 0 0 0 ccccccccccsseeceeeeeeeeeeeeeeeeeeeceeeeeeeeeceeeeseaseeeeesseaeeeeeessaaeeesessaaeeeeessaaess 60 Cle MIS MSTA ANON NSSUCS sesa a ed a A E 62 Remote Client Installation ISSUCS c cccccccccccccececececcccccccececaceccacacececaceceaeauececaceceauauetetececeacsuenseneceavecs 63 AdmMiNIStTaUvVe PANO asics cieiiatu ciara E ENEA EE ted ealtavewmeusieedl 64 Administrative Panel Properties cccccccccsssececseseeeeceeeceeeseeeeeeeeeeeeeseaueeesseeeeeseaseeessaueeesseeeeeseeseeesseeeeessaeeees 64 Administrative Panel INTCM ACC sue cs ccredsancetovsacntveredabonesanct a E 65 Administrative Panel interlace ses taiced iw wiacceatactettindanwhaaebal E E adage 65 Administrative Fane l ODPUONS wates Gasca dac techn e a a a a EnO 67 ROE ea a A a em ance inna en 67 ADOULROIG S ronn e ee eae Ve ee a a a ee ne ee 67 ASSIGN ROSSIO U GiS aa E E E nem ee ae 68 Assigning Roles to User Groups sirecces sstevesieracdsctoas eanvercadentadesndetaenedsatadesleneteracawasvacedeeenactuatedeoestiuesemeenaens 71 Unassigning Roles trom Users User Groups ernieren E nee eee 73 VVOPIKING WILEY GANG a a a a a O a sects 74 Moving Desktop Surveillance Server Database cccccceecccecceeeeeeeeeeeeeeeeeeeeeeeeeeeeeseaaeeeeessseaeeeeeesaegeeeeeeeas 74 Deleting Dala rings Serre r ete ne mtr terre errr r
54. efine the destination folder e Enter the destination folder in the corresponding field 28 ey fei Desktop Surveillance 1 0 10 Setup Choose Install Location Choose the folder in which to install Desktop Surveillance 1 0 10 Setup will install Desktop Surveillance 1 0 10 in the following folder To install in a different folder dick Browse and select another folder Click Next to continue Destination Folder Program Files CensorNet Desktop Surveillance Browse Space required 5 6MB Space available 254 8GB On the Choose Start Menu Folder page do one of the following and click Install e Define the name for the program folder in the Start Menu e Select Do not create shortcuts to not create the program shortcuts The process of installation starts Its progress is displayed on the Installing page If the installation finishes successfully you will see the last page of the wizard Click Finish to exit the wizard Updating the Desktop Surveillance Viewer The updating of the Desktop Surveillance Viewer is performed via the Desktop Surveillance installation file of a newer version To update the Desktop Surveillance Viewer do the following Start the Desktop Surveillance setup wizard On the Welcome page click Next On the Already Installed page select Update Add Remove components and click Next 29 AY Desktop Surveillance 2 2 1607 Setup Already Installed Choose how you want to install The Censor
55. elect Remove user 13 e Select Action gt Remove user b ais fer Desktop Surveillance Administrative Panel fei File Action View Window Help ie Desktop Surveillance Desktop Surveillance Cli a amp Roles 8 Aleks A PC a amp Administrator BA Administratore l Supervisi Change role to Supervisor YP Alerts Remove user iw Desktop Sur New Window from Here Help Delete selected item be 3 The selected user or user group are removed from the node and deprived of the respective role Working with data Moving Desktop Surveillance Server Database For some reason you may need to change the location of the Desktop Surveillance Server database to another disk or directory To change the location for Desktop Surveillance Server database 1 Select Action gt Properties or right click on the Desktop Surveillance node and select Properties 2 The Desktop Surveillance Properties window opens 3 Inthe Storage location group of options do one of the following e Inthe Path box enter the path to the database manually e Click Browse and navigate to the destination folder 4 Click OK to accept the changes and close the window 74 Desktop Surveillance Properties storage Storage location Firebird only Database qramData CensorNet Desktop Surveillance DesktopSurveillanceActvityDB fdb Storage cleanup Define date period Startdate 19 09 2013 Enddate 19 09 2013 Database au
56. elect or dear the check boxes to show or hide items in the console window Standard menus Action and View Standard toolbar Status bar Description bar Taskpad navigation tabs Action pane Snap in Z Menus Toolbars 66 Administrative Panel Options To get access to options select File gt Options The Administrative Panel Options allow you to clean the personal settings file records When you modify the displaying of consoles for example by changing the size of a window or adding a new window MMC saves these settings in a file that preserves your personal settings The personal settings file records all changes that are made to a console in user mode Only the settings that are associated with your profile are deleted CensorNet Desktop Surveillance Administrative Panel will then display by using the default display settings This option is useful if you want to restore the default display settings or if disk space is low Disk Cleanup Changes to the view of a console file are saved in your profile The files in your profile that store these console changes are using the following amount of disk space on this computer 321 81 KB To permanently delete these files dick Delete Files Roles About Roles Roles define the sets of Windows users with certain permissions Two roles are available in CensorNet Desktop Surveillance e Administrator These users are allowed to start both the Desktop Surveil
57. ement panel and select Export video file NOTE You can export the whole session as well as a part of it To select screen captures for exporting use Ctrl and Shift keys 2 The Export Video window opens Export Video Export options Video codecs are required for video creation Video codec g BSi8 Race hd Configure Screen capture displaying period Seconds per lscreen capture 1 Original Export to D Test datais PC 7_4 20115 16 59 PM avi Browse Export video Cancel 3 Inthe Video codec drop down list select the required codecs with the help of which video will be created Please note that the list contains only the system codecs that will be used for video creation 4 Click Configure to configure the selected codec Configuration window depends on the selected codec 5 Inthe Screen capture displaying period group of options select the speed with which video will play The following options are available 107 e Seconds per 1 screen capture Define the time interval in seconds with which screen captures will change in the video file e Original Video will play with a real soeed depending on the frequency of created screen captures 6 Inthe Export to field do one of the following e Enter the path to the video file manually e Click Browse and navigate to the location fro the exported video file 7 Click Export video to export the session When the export process finishes click Finish
58. enu consists of two options e Help Provides you the access to this help file e About Provides you with information about the Desktop Surveillance Viewer application Search About Searching You can perform searches in the CensorNet Desktop Surveillance sessions Each session contains a set of screen captures made from the investigated computer during the specified period of time You can search by the following parameters name of the screen capture the application name user name of the computer 93 with installed Client date of the session start date of the session finish date of the last made screen capture and type of the session There are two types of searching e Quick Allows you to perform searching by the text data e Parameterized Allows you to perform searching using multiple parameters Quick Search The quick search allows the investigator to perform searches by the text data i e by the name of the application the screen capture title user name host name and the type of the session The quick search is enabled by default To perform a quick search do the following 1 Inthe Search management area under the Main menu click on the arrow near the Search button and select Quick search fet localhost Desktop Surveillance Viewer File View Help tad OE History x Results 0 x c Parameterized search a Search list User nam Type Start Last activity Finish In the Search field enter t
59. from C Program Files CensorNet Desktop Surveilance Nullsoft Install System v2 46 6 After the uninstallation finishes click Finish Installing uninstalling updating Desktop Surveillance Viewer Installing CensorNet Desktop Surveillance Viewer To install the CensorNet Desktop Surveillance Viewer do the following Start the CensorNet Desktop Surveillance installation application On the Welcome page click Next Carefully read the License Agreement and click I Agree On the Choose Components page do one of the following and click Next e Inthe drop down list select Viewer e Select Viewer in the box oe e ArH Desktop Surveillance 2 1 1578 Setup Components Choose which features of Desktop Surveillance 2 1 1578 you want to install Check the components you want to install and uncheck the components you don t want to install Click Next to continue Select the type of install Desktop Surveillance Viewer Or select the optional Desktop Surveillance Server and Administrative Panel na you wish to Desktop Surveillance Viewer Space required 16 2MB lt Back next gt J cancel NOTE If you have any other Desktop Surveillance components installed on this computer the setup wizard will offer to add or remove components and the installation procedure will differ a bit 5 Do one of the following to define the destination folder and click Next e Click Browse and in the Browse For Folder window d
60. g activated the subscription period is prolonged accordingly Please note if the current subscription period is longer than the one of a key being activated current subscription period doesn t change For example if you activate a key with 12 months subscription period after a key with 30 days subscription period the subscription end date will be set to 12 months since the activation date But if you activate a key with 30 days subscription period after a key with 12 months subscription period the subscription end date will not change If your Subscription expires you can purchase a special subscription extension serial key which does not contain any keys but extends your subscription period or you can activate any other serial key To view the subscription expiration date select Action gt Manage Serial Keys or right click the Desktop Surveillance node and select Manage Serial Keys Activating Serial Keys Online To activate purchased serial keys online do the following 1 Make sure you have an active Internet connection on the computer with installed Desktop Surveillance Server 2 Start the Desktop Surveillance Administrative Panel and select the Desktop Surveillance node 3 Select Action gt Manage Serial Keys or right click the Desktop Surveillance node and select Manage Serial Keys The Desktop Surveillance Serial Keys Management window opens Click Activate keys online The Desktop Surveillance Serial Keys Online Ac
61. he required data by which you want to perform searching Click on the Search button or press Enter The search starts When the search finishes the results are displayed in the Results pane Click the session in the Results pane to view the detailed information in the Player pane oo SS SY Parameterized Search The parameterized search allows the investigator to perform searching in the Desktop Surveillance sessions using multiple parameters To perform a parameterized search do the following In the Search management area under the Main menu click on the arrow near the Search button and select Parameterized search 94 r Ae localhost Desktop Surveillance Viewer File View Help w Quick search History Results 0 7 z Parameterized search i Search ist FA Parameterized search ia 2 The parameterized search area opens E fe localhost Desktop Surveillance Viewer File View Help User name equalto z e T a te User name Hi Host name Fsuts 1 session s found x Type Start time Iser n Host name Type Start Last activity Finish Last activity time Finish time Activity title Application name Alert name Keystrokes 4 ui j JEV af Aleks A PC Live 14 03 2013 12 53 07 14 03 2013 12 53 30 N A eaa ETT e Activitytime Activity title Application name Ke iam ae 1 per 12 53 11 14 03 Desktop Surveillance Administr mmc exe eee i SERS 12 53
62. he screen capture if the video is playing or if there is a full screen mode Number of screen captures 596 108
63. ick Find Now to start search 8 The users are found and displayed in the list Select the users to be added to CensorNet Desktop Surveillance and click OK 9 The selected users are displayed in the corresponding field of the main Select Users window Click OK Assigning Roles to User Groups There are two ways to define a user group e Enter a user group name manually e Select a user group automatically To add a user group manually do the following 1 Select a role Administrator or Supervisor in the Navigation pane or Details pane 2 Select Action gt Add new user group or right click and select Add new user group fer Desktop Surveillance Administrative Panel fer File Action View Window Help E e Alc e H a m Desktop Surveillance Roles f Administrator l Supervisi Add new user YP Alerts Add new user group A Desktop Sur New Window from Here Help Add a new user group 3 The Select Groups window opens 71 Select Groups Select this object type Groups or Builtin security principals From this location dev local Enter the object names to select examples 4 Enter the user group name 5 Click Check Names to check that the name is entered correctly 6 Click OK to add the user group To add a user automatically do the following 1 Right click on the Administrator or Supervisor node in the CensorNet Desktop Surveillance tree view and select Add new
64. ied conditions of the same type will be TRUE for each found session in the Results pane Text data parameters ee eee eee The name of the Windows user whose work is monitored by CensorNet Desktop Surveillance The name of the computer on which the Client is installed The type of the session The following types are Finished Live available Finished the session is finished Live the session is running Non Licensed the computer with the Client has no license Activity title The name associated with the screen capture It Start menu associates with the currently opened window on the investigated computer context menu etc Application The name of the started application on the explorer exe name investigated computer Alert name The name of the alert that occurred on the Facebook alert investigated computer Keystrokes A phrase or a word that was logged on the Corporate investigated computer security Comparison operators for text data e equal to the defined value fully corresponds to the found result e g John will find John but will not find Johny e like the found result includes the defined value e g John will find Johny Johnatan but will not find Johan Date parameters 96 1 Start time The date of the session start 9 13 2010 Last Activity The date of the last made screen 12 13 2009 time capture a The date of ihe session finieh 12 12 2008 Additional options e Now Sel
65. is reinstalled you need to add them again To uninstall the Desktop Surveillance Server and Administrative Panel from the local computer NOTE Before uninstalling the Desktop Surveillance Server make sure you have removed all Desktop Surveillance Clients from the remote computers If you don t remove the Clients they will remain installed on the remote computers and it will be impossible to remove them in a common way Start the Desktop Surveillance setup wizard by launching the setup executable e g DesktopSurveillance 1 0 10 exe or clicking Uninstall Change on the Desktop Surveillance application in the Programs and Features window of the Windows Control Panel The setup wizard opens Click Next on the Welcome page The Already Installed page opens Select Uninstall and click Next 26 fei Desktop Surveillance 1 0 10 Setup Already Installed PEL Choose the maintenance option to perform rs E CensorNet Desktop Surveillance 1 0 10 is already installed Select the operation you want to perform and dick Next to continue Add Remove components Nullsoft Install System v2 46 5 The Uninstall Desktop Surveillance page opens Click Uninstall Desktop Surveillance 1 0 10 Uninstall Uninstall Desktop Surveillance 1 0 10 Remove Desktop Surveillance 1 0 10 from your computer Desktop Surveillance 1 0 10 will be uninstalled from the following folder Click Uninstall to start the uninstallation Uninstaling
66. lance Administrative Panel and the Desktop Surveillance Viewer e Supervisor These users are allowed to start only the CensorNet Desktop Surveillance Viewer 67 The roles can be assigned both to users and local groups of the domain and the local computer on which the CensorNet Desktop Surveillance Server and Administrative Panel are installed Assigning Roles to Users There are two ways to assign a role to a user e Enter a user name manually e Select a user automatically To add a user manually do the following Select a role Administrator or Supervisor in the Navigation pane or Details pane Select Action gt Add new user or right click and select Add new user fei Desktop Surveillance Administrative Panel fer File Action View Window Help A0 fe Desktop Surveillance Roles 4 amp Roles i Administrator E Admini J Superv Add new user p Alerts Add new user group gt jy Desktop Si New Window from Here Help Add a new user 3 The Select Users window opens 68 Select Users Select this object type Users From this location bjec names to select exe amples lt 2 y 4 Enter the user name in one of the following formats e First Name Last Name e g John Doe e User name e g user_john e User name Domain name e g user_john domian1 e Domain name User name e g domain1 user_john 5 Click Check Names to check that the name is entered
67. leks A PC ee Uninstalled Client record Server is not licensed Licensing General Licensing Information To start receiving information from Desktop Surveillance Clients you have to assign licenses to them Two types of licenses are available e Workstation license Clients with this license monitor only one session either remote or local on the investigated computer NOTE Licenses of the workstation type cannot be assigned to a computer with Server OS e Server license Clients with this license monitor unlimited number of remote sessions and any local sessions on the investigated computer Remote sessions include Remote Desktop sessions terminal sessions etc Each client can have only one license assigned either workstation or server Initially when you start the Desktop Surveillance Server for the first time on a computer you have an embedded trial serial key which allows you to use 5 workstation licenses and 1 server license for 30 days To use the Desktop Surveillance permanently and with greater number of licenses you have to license it with purchased serial keys NOTE After activation of any serial key the embedded trial key expires Two types of serial keys are available e Standard serial keys These keys allow you to use licenses they contain during the unlimited period of time and allow you to update the product during 12 months from activation e Trial serial keys These keys allow yo
68. lto Andrew dp j STEER Wee es Vester History X Results 1 session s found se Bae Search list User n Host name Type Start Last activity Finish i Current search Dr e 4 03 2013 12 53 07 14 03 2013 13 12 31 Fee y Searc iii Export video file Session activity report Activitytime Activity title Application name Keystrokes i 12 53 11 14 03 Desktop Surveillance Administr mmc exe 12 53 11 14 03 localhost Desktop Surveillance DesktopSurveillance n ge 12 53 11 14 03 NO TITLE explorer exe 12 53 12 14 03 Start menu explorer exe p r i a lt 8 2 OEL AT El on R x J mG Ss Z Show only text characters gt Wn om 4 p gt lt p gt PS Stopped 00 00 00 00 34 31 Number of screen captures 557 j d NOTE The report can be generated for more than one session Multi selection is available in the Results pane 2 The Search Results Report window opens Search Results Report Report options V Open on finish V Detailed information for each session for Search Results Reports only Report location D Test data Search results report xls cane 3 Inthe Report Options select the required options The following options are available e Open on finish Select this option to automatically open the report after the generation process finishes e Detailed information for each session for Search Results Repor
69. lude in library Share with v New folder gzz E Desktop Name Date modified p Downloads 5 Recent Pla L ClientActivity_3268 log 7 26 2011 7 00 PM ecen ces ClientService log 7 26 2011 7 00 PM Controller log 7 26 2011 7 00 PM DesktopSurveillanceController exe 7 4 2011 8 21 PM Application DesktopSurveillanceService exe 7 4 2011 8 23 PM Application dsuddsh dll 7 4 2011 8 20PM Application ext amp icudt42 dll 7 4 2011 8 12PM Application ext icuucd2 dil 7 4 2011 8 12PM Application e _ TempRead dat 7 26 2011 7 00PM DAT File _ TempWrite dat 7 26 2011 7 00PM_ DAT File Libraries Documents dl Music Pictures Videos j Computer amp Local Disk C avamn ig AL 10 items e The HKEY_LOCAL_MACHINE SOFTWARE CensorNet Desktop Surveillance key has the following values File Edit View Favorites Help Name Type Data ab Default REG_SZ value not set ab AgentGUID REG_SZ a0e9842b cOf7 491d ed78 00000005000d ab AgentVersion REG_SZ 1 0 5 ColorDepth REG_DWORD 000000008 8 fs EnableActivity REG_DWORD 0x00000001 1 S EnableKBandMo REG_DWORD 000000001 1 9 EnableTimer REG_DWORD 000000000 0 3 EnableWndNm REG_DWORD 000000000 0 ab InstallDirAgnt REG _SZ C Program Files CensorNet Desktop Surveillance ab RemoteHost REG_SZ lis PC F RemotePort REG_DWORD 0x00000d13 3347 3 SmartScrlimer REG_DWORD 000002710 10000 3 Timer REG_DWORD 0x00000000 0 Computer HKEY_LOCAL_MACH
70. me with enabled Now option the date will be set as the current one Restoring Search Parameters You can restore the saved search parameters This makes it easier to perform further searches without defining the same parameters again To restore the search parameters do the following In the History pane navigate to the Saved searches folder in the Search list tree In the Saved searches folder select the required folder with saved search parameters 99 fe localhost Desktop Surveillance Viewer File View Help Application name equalto User name equalto stoy oo Results 1 session s found 5 Search list il Current search 425 Saved searches Type Live User n Host name DEV af Aleks A PC Activity time 12 53 11 14 03 12 53 11 14 03 12 53 11 14 03 12 53 12 14 03 an rnaana ann skype exe v Andrew Start 14 03 2013 12 53 07 Activity title Desktop Surveillance Administr localhost Desktop Surveillance NO TITLE Start menu ein Seer ms Last activity Finish 14 03 2013 13 12 31 N A Application name Keystrokes mmc exe DesktopSurveillance explorer exe explorer exe V Show only text characters gt i me bh gt iS Stopped Number of screen captures 494 The saved search parameters are displayed in the Search management area Click the search button or press Enter to start searching Examples of Search Pa
71. me of the required computer appears as a sub node of the Desktop Surveillance Clients node in the Desktop Surveillance Administrative Panel Updating the Desktop Surveillance Clients The Desktop Surveillance Client updating is performed automatically when a Client connects to the Server of a newer version As soon as updates are applied to a Client you ll see a warning icon and a non restarted status message near the Client name indicating that a reboot of the Client computer is required F void non restarted NOTE Not restarted Clients do not stop the monitoring and all features of the old Client are still available to them but new features will not be available until the Client computer is rebooted After a reboot you will also be able to access the monitored data of the old Client 51 In some cases if you install a newer version of the Desktop Surveillance Server Clients of very old versions will not be able to update and you will see the unable to update status message near the Client name In this case you need to uninstall the old Client and install a new version of a Client Cloning a Virtual Machine with Installed Client Each Client has its own unique ID which it receives when it connects to the Server When you prepare a virtual machine which is to be monitored by Desktop Surveillance for cloning you need to remove the Client ID to ensure the proper Client connection to Server To remove the Client ID Open the Window
72. n Disabling Simple File Sharing in Windows XP To disable Simple file sharing in Windows XP do the following 1 Open My Computer 2 Select Tools gt Folder Options in the menu 3 The Folder Options window opens Select the View tab Folder Options General View File Types Offline Files Folder views Tou can apply the view such as Details or Tiles that you are using for this folder to all folders Apply to All Folders __ Reset All Folders Advanced settings Do not show hidden files and folders Show hidden files and folders Hide extensions for known file types _ Hide protected operating system files Recommended Launch folder windows in a separate process Remember each folder s view settings Restore previous folder windows at logon Show Control Panel in My Computer Show encrypted ar compressed NTFS files in color Show pop up description for folder and desktop items Restore Defaults 35 4 Clear the Use simple file sharing check box 5 Click Apply and OK to close the window Disabling Sharing Wizard in Windows 7 To disable the Sharing wizard in Windows 7 do the following 1 Open Computer 2 Select Organize gt Folder and search options 3 The Folder Options window opens Select the View tab Folder Options You can apply the view such as Details or Icons that you are using for this folder to all folders of this type Appl to Folders Reset Folders
73. n er ieee eet ene Te ater terre e terre reer rer 75 SRINKNO AE MO AS Chg chet este isk nse Wi esa icon rn 2 ep caer me cence a eae 77 PANGS fcc aco es foe A a a aa s Sage Ga ect acetone a s onc ane Aa Ea a Sage da Ea a Ghee Neenen aoe 78 ABOTA O mepa an ev RE Or Pg CP OR gE CE TSE Cee RTO ete 78 PICS managemen orena a Wane a tu bed ieukieeae etl naa l a a A telly 79 PRAIA AIE S ses oe stor Gite tana esate ed aa sactice ugha espace eee tea ccs R eee east 79 BE OEIC AT a tee a tartan loner cetacean amma tinue eolnd a tacctau sateen sanan imitans ules embuctinanttaintasanstaeati 79 VIEwWnNg Aler asena aed cada a ici darainat tence sare aia ns O 80 DELUNA arerioa aa a a a a girs ie a 81 Alen ade 2 11 211 6 eee eee R NAA 82 RUES ei calc a ak ell a E i pai LN ce ete eee 83 Examples Ol RUES sinisa taWanatadeinons sie iiesdanctodd aa a aa adiis 84 Defining Alen Global Seting Seenen aa E 85 Desktop Surveillance Client Configuration ccccccssssececcceeseeceeecaeeseeeeeseauseeeeesausseeeesesaaeeeesesaaaeeeesssaageeeeseaas 87 EXPOR an E anaes 88 NMIGW GM nsore a aaa a O a aa 89 Connecting Disconnecting from Desktop Surveillance Server ccecccccecceeeeeeeeeeeeeeeeeeeaaeeeeeeeaaeeeesessaeeeees 89 Viewer interface a scctsavesronocelchsucredevaiatadeninerdiuainesiutaqeredabanaadatinastGaaenrensnd soveaanatabinavetuniianiduedaer ddvenmebadantaesetnns 90 Viewer INCI AC sarin aces chew resnnuia ate a a Suiiehs bouaiibiecas auevsea a atoms
74. navigate to the Desktop Surveillance Server executable The default path is C Program Files CensorNet Desktop Surveillance Server DesktopSurveillanceServer Click Next 17 a New Inbound Rule Wizard Program Specify the full program path and executable name of the program that this rule matches Steps Rule Type Program Action Al programs Proti Rule applies to all connections on the computer that match other rule properties Does this rule apply to all programs or a specific program Name This program path Example c path program exe Program Files 2 browser browser exe Leam more about fing programs 7 On the Action step select Allow the connection and then click Next 18 gP New Inbound Rule Wizard Action Specify the action to be taken when a connection matches the conditions specified in the rule Steps Rule Type What action should be taken when a connection matches the specified conditions Program i Allow the connection wt Action TE This includes connections that are protected with IPsec as well as those are not at A Profile Allow the connection if it is secure ae This includes only connections that have been authenticated by using IPsec Connections will be secured using the settings in IPsec properties and rules in the Connection Secunty Rule node Leam more about actions 8 On the Profile step select the profile of the network used for connecting remote compu
75. nd navigate to the Programs and Components page 2 Select Desktop Surveillance in the programs list and click Uninstall Change on the toolbar G ise gt Control Panel Programs Programs and Features Control Panel Home Uninstall or change a program View installed updates To uninstall a program select it from the list and then click Uninstall Change or Repair al Turn Windows features on or a Organize Uninstall Change Install a program from the a 7 network Name Publisher IE Desktop Surveillance 1 0 10 CensorNet Desktop Surveillance Client 1 0 10 CensorNet EVEREST Ultimate Edition v4 20 Lavalys Inc Intel R Graphics Media Accelerator Driver Intel Corporation a Microsoft NET Framework 4 Client Profile Microsoft Corporation Ca Microsoft Office Enterprise 2007 Microsoft Corporation Ca Microsoft Save as PDF or XPS Add in for 2007 Micros Microsoft Corporation 3 The Uninstall Desktop Surveillance page opens Click Uninstall Desktop Surveillance 1 0 10 Uninstall Uninstall Desktop Surveillance 1 0 10 Remove Desktop Surveillance 1 0 10 from your computer Desktop Surveillance 1 0 10 will be uninstalled from the following folder Click Uninstall to start the uninstallation Uninstalling from C Program Files CensorNet Desktop Surveillance 33 4 Wait for the setup wizard to complete uninstallation and click Finish Installing uninstalling updating Desktop Surveill
76. nding Pause and Stop control buttons in the Player area To move from one screen capture to the next one use the Previous Next control buttons To move to the full screen mode double click the screen capture in the Player area You can define the speed with which screen captures will change in the Player area To do this click Video speed and in the drop down list select Actual to change screen captures depending on the screen capture creation time select 1 fps to display one screen capture per second lf the search conditions included the Title and Application items the additional control buttons are displayed in the Player area They are marked blue and allow moving between the found search results When you select a screen capture the keystrokes associated with it are displayed in the box below the list of screen captures By default it displays only text characters you can enable displaying all keystrokes logged e g navigation buttons functions keys etc by clearing the Show only text characters checkbox Then any other keys and key combinations will be displayed in inequality sign brackets If a key was pressed repeatedly it will be displayed with an x sign and the number of reiterations e g lt F12 x 24 gt Please note that keystrokes are not logged from virtual machines NOTE If the Enter key was pressed during input the log will be split in the list of screen captures Though to maintain text integrity in the keystrokes
77. nistrative Panel ect File Action View Window Help e A H a 1 Desktop Surveillance R Ta W Enable Alert a Y Alerts Alert Info Y Facebook Alert name Facebook gt fm Desktop Surveillance Clients Description Browse ronald ccorp com if Show warnings in Viewer tray Rules Parameter Comparsion operator Value Title Like facebook Rules Alert rules allow the investigator to determine what events on the investigated computer will be considered alert Each alert has to have at least one rule Rules applied to one parameter are combined with OR logic rules applied to different parameters are combined with AND logic Rules are displayed in the grid in the Rules group in the Alerts editing pane Each rule consists of the Parameter Comparison Operator and Value to which the Parameter will be compared To edit the rules click the Edit in the Alert editing pane the Rules window appears To define a new rule in the Rules window do the following 83 1 Select Application Title or Name from the Parameter drop down list 2 Select the Comparison operator for the selected Parameter 3 Enter the Value To delete a rule clear the Value field in the Rules window The following parameters are available for the rules S er eee Application The name of the started application on the investigated computer skype exe Set this parameter type for Alert to be activated whenever the specified value is identified as the nam
78. nistrator account credentials for the remote computer Windows XP Vista Firewall has to be disabled on the remote computer during the Desktop Surveillance Client remote installation In Windows 7 8 Server 2008 and Server 2012 Firewall allow inbound connections in the Remote Service Management RPC rule for the remote computers in this case itis not necessary to disable Windows Firewall By default when you install Desktop Surveillance Clients on domain computers the damain onolicy should allow installing Clients without anv orohlems If wou 47 11 On the Add computers page select hosts on which Clients are to be installed Click Next Desktop Surveillance Client Installation Wizard 12 On Add computers Select computers on which Clients will be installed Network Selected computers Name Workgroup PAVL PODOBRY PODREZMAXx POLO PREPOD PRIHOD PC PYURAPC REMS PC the Authentication page enter the administrator credentials under which the Clients are to be installed and then click Next If the computers are in a domain enter the domain name and domain Administrator account credentials If the computers are in workgroup leave the Domain box empty and enter the credentials of a local Administrator for target computers NOTE All workgroup computers must have the same Administrator account credentials Otherwise use installation via installation package method to deploy Desktop Surveillance Clients
79. omponents in the Windows Control Panel If you want to remove only Viewer application use this method only when no other components are installed on the computer along with Desktop Surveillance Viewer This method is intended to remove all Desktop Surveillance components installed on the current PC To uninstall the Viewer that is installed along with the Desktop Surveillance Server Run the Desktop Surveillance setup package DesktopSurveillance 1 0 10 exe Click Next on the Welcome page On the Already Installed page select Add Remove components and click Next 31 fei Desktop Surveillance 1 0 10 Setup Already Installed Choose the maintenance option to perform CensorNet Desktop Surveillance 1 0 10 is already installed Select the operation you want to perform and dick Next to continue C Uninstall Nullsoft Install System v2 Check the components you want to install and uncheck the components you don t want to install Click Next to continue Select the type of install Desktop Surveillance Server and Administrative Panel Or select the optional Desktop Surveillance Server and Administrative Panel _ Desktop Surveillance Viewer Space required 131 5MB MullsoFt Install System v2 46 5 The setup wizard removes the unselected components 6 When uninstallation is complete click Finish 32 To uninstall the Viewer that is installed alone on a separate computer 1 Open the Windows Control Panel a
80. on date for deactivated keys only e Number of workstation licenses e Number of server licenses e Key state activated deactivated expired For a trial serial key an expiration date is displayed near the key state Deactivating Serial Keys If for some reason you ve decided to discontinue using Desktop Surveillance you can deactivate serial keys To deactivate a serial key do the following 1 Make sure you have an active Internet connection on the computer with installed Desktop Surveillance Server 2 Start the Desktop Surveillance Administrative Panel and select the Desktop Surveillance node 3 Select Action gt Manage Serial Keys or right click the Desktop Surveillance node and select Manage Serial Keys 4 The Desktop Surveillance Serial Keys Management window opens 5 Select a serial key to be deactivated and click Deactivate NOTE Expired serial keys can t be deactivated 6 Inthe confirmation message click Deactivate 7 Click Yes when asked to confirm the deactivation 8 The progress of serial key deactivation is displayed in the Desktop Surveillance Serial Key Deactivation window 9 Ifa serial key is successfully deactivated you will see a confirmation message Click Close in the message 10 The deactivated serial key is marked as Deactivated in the State column of the Desktop Surveillance Serial Keys Management window 11 The number of available server and workstation licenses and the subscription end
81. opsurveillance S DesktopsSurveillance Client 1 DesktopSurveillance Client 3 DesktopSurveillance Client 2 Server Tray The Server Tray application informs you about the Desktop Surveillance state Desktop Surveillance Server started BE El i le a IP It also automatically restarts the Desktop Surveillance Server in case of its failure The first three times the restart is performed automatically The user is informed about the Server failure in the notification area If the Server fails for the fourth time it does not restart You can start stop Desktop Surveillance Server or hide the tray icon from the notification area If you want to contact the Support you need to collect the Server log Y PROGRAMFILES CensorNet Desktop Surveillance Server ServerService log and attach it to the request Viewer Tray About Viewer Tray Desktop Surveillance Viewer Tray is a special utility that notifies the investigator about the alert events on the investigated computers The alerts are displayed in the pop up notifications from the Windows tray area The notifications may be set up to be displayed immediately or with a delayed response in the Alert Global Parameters accessible from the Administrative Panel Desktop Surveillance Alert 1 alert notification received a View in the Desktop Surveillance Viewer Left click on the tray icon opens the latest notification in the Viewer Right click on the
82. or click Browse and navigate to it 43 Desktop Surveillance Client Installation Wizard Desktop Surveillance Client Package Mode Choose cient installation package location C Program Files CensorNet Desktop Surveillance Adminis Select Desktop Surveillance Client package NOTE If you select the Select Desktop Surveillance Client package option steps 6 7 8 will be omitted On the Screen capture color settings page select the color depth for the created screen captures and click Next 44 Desktop Surveillance Client Installation Wizard Define color depth of Client screen captures 8 bits 4 bits Grayscale On the Screen capture creation settings page define the frequency with which the screen captures will be created Click Next Desktop Surveillance Client Installation Wizard Screen capture creation settings Define creation settings for Client screen capturing Capture screen on active window change Check changing of names of windows Capture screen on clicking and key pressing Enable keystrokes logging 45 8 Onthe Server Name page type the name or the IP address of the computer on which the Desktop Surveillance Server and Administrative Panel are installed Clients will connect to this server and the received screen captures will be stored on its computer Click Next Desktop Surveillance Client Installation Wizard Server Name Enter the name of the computer with installed Desktop Su
83. ound rule for Server executable Installing Desktop Surveillance Clients via Administrative Panel To perform the remote Client installation via Desktop Surveillance Administrative Panel do the following 1 Start the Desktop Surveillance Administrative Panel 2 Select Desktop Surveillance Clients in the navigation pane or details pane 42 3 Click Action and select Install Desktop Surveillance Client or right click and select Install Desktop Surveillance Clients fea Desktop Surveillance Administrative Panel e 20L B amp A Desktop Surveillance Desktop Surveillance Cli a amp Roles 7 3 Aleks A PC offline R Administrator R Supervisor k Alerts gt Ay Desktop Surveillance Cliente Install Desktop Surveillance Clients Uninstall Desktop Surveillance Clients Manage Licenses Refresh View b New Window from Here Export List Help Install client 4 The Desktop Surveillance Client Installation Wizard opens Click Next on the Welcome page 5 On the Desktop Surveillance Client Package Mode page select one of two options and click Next e Create Desktop Surveillance Client package Use this option if you haven t performed a remote installation yet Type the path to the newly created package or click Browse and navigate to it e Select Desktop Surveillance Client package Use this option if you have performed a remote installation already Type the path to the installation package
84. plays the contents of the node currently selected in the Navigation pane for Roles nodes and the Host configuration for Hosts nodes Data in the Details pane can be displayed in one of four standard representations Large icons Small icons List and Details Toolbar The toolbar allows you to navigate between the objects quickly and adjust program interface It includes Back Forward Up One Level Show Hide Console Tree Export List and Hide Main menu It includes four menus File Action View Window and Help 65 fea Desktop Surveillance Administrative Panel fea File Action View Window Help Main menu 9 E b H S Toolbar gt Roles p Alerts 4 A Desktop Surveillance Clients 3 Aleks A PC 83 Aleks A PC fe Desktop Surveillance q Surveillance Cli Navigation pane Details pane Used workstation licenses 0 50 Used server licenses 0 50 CensorNet Desktop Surveillance interface can be adjusted through the View menu The following commands are available e Add Remove Columns Defines the number of columns displayed in the Details pane e Large icons Small icons List and Details Data representation in the Details pane e Customize Defines interface elements to be visible You can enable disable displaying of the Navigation pane Console tree Toolbar Action and View menus the toolbar the status bar in the bottom the description bar above the Details pane etc Customize View S
85. ple hardware requirements for Desktop Surveillance Client deployed on the terminal server hosting 10 active user sessions will be as follows e Intel Core i3 or similar AMD CPU e 2048 Mb RAM Program structure Program Structure CensorNet Desktop Surveillance is an application specially designed to control user activity remotely CensorNet Desktop Surveillance includes the following components e Desktop Surveillance Administrative Panel Is the interface part of Desktop Surveillance Server used to manage the Desktop Surveillance system e DesktopSurveillance Server It is the main part of the CensorNet Desktop Surveillance used for storing the screen captures and associated information received from the Clients The work of the Server can be started or stopped via Server tray e DesktopSurveillance Viewer This part of the CensorNet Desktop Surveillance provides a usable interface for quick viewing and analyzing of the screen captures received from the Clients The alert monitoring function of the Viewer is accessible via Viewer tray e DesktopSurveillance Clients Being installed on host computers Clients create screen captures with certain quality and the defined frequency and send them to the server Clients screen captures creation configuration can be managed through the CensorNet Desktop Surveillance Administrative Panel DesktopSurveillance Viewer 2 DesktopSurveillance Viewer 3 DesktopSurveillance Viewer 1 Deskt
86. r enter the following parameters Rules Parameter Operator Value Application Equal to skype exe 4 To setup the alert notification about a specific user e g Stefan launching skype exe application on the investigated computer enter the following parameters Parameter Operator Value Application v Equalto skype exe User name Equal to Stefan l If you enter more than one name the alert notification will then appear if any of them Stefan or Rick launches skype exe Parameter Operator Value Application Equal to skype exe lUser name Equal to Stefan User name Equal to Rik 5 To setup the alert notification about a specific user e g Stefan using the investigated computer enter the following parameters Parameter Operator Value User name Equal to Stefan Defining Alert Global Settings Alert Global Settings define notification settings for all Alerts These settings are applied to all Alert and to all Desktop Surveillance Viewers connected to this Server 85 To define Alerts Global Settings click the Alerts node The Alert global settings pane will appear At Desktop Surveillance Administrative Panel _ Help AA Desktop Surveillance amp Roles gt Alerts E mail settings amp Desktop Surveillance Clients SMTP mail server Port 25 a User Password Frequency settings Alert global settings
87. r Interface fe localhost Desktop Surveillance Viewer File View Help History Results 1 sessic ind 5 Search list User n Host name Start Last activity Finish DEV af Aleks A PC Live 14 03 2013 12 53 07 14 03 2013 13 12 31 N A Activity time Activity title Application name Keystrokes i 13 03 45 14 03 Untitled Paint mspaint exe aa T Eon 13 03 45 14 03 Untitled Paint mspaint exe 13 04 00 14 03 Untitled Paint mspaint exe 13 04 00 14 03 Untitled Paint mspaint exe 13 04 01 14 03 localhost Desktop Surveillance DesktopSurveillance ma V Show only text characters gt i om 4 p gt 4 gt gt EE S Stopped By default the Desktop Surveillance Viewer interface is divided into the following areas e The Main menu Provides you the access to the features of the Desktop Surveillance Viewer program e The Search management area Allows you to perform quick and parameterized searches e The History pane In this pane the current and favorite searches are displayed e The Results pane In this pane the detailed results of the search are displayed e The Player pane In this pane the list of screen captures and the player window are displayed 90 Panes The Desktop Surveillance Viewer interface consists of five main areas e Search management area e History pane e Results pane e Player pane f fe localhost Desktop Surveillance Viewer File View Help Main menu Q
88. rameters 1 To find all screen captures connected with the work of explorer exe enter the following parameters a fe localhost Desktop Surveillance Viewer c ls Sa File View Help Application name equalto explorer exe 2 To find all finished Desktop Surveillance sessions enter the following parameters fe localhost Desktop Surveillance Viewer File View Help Finished Type equalto 3 To find all sessions started on September 1 2010 and finished on September 2 2010 enter the following parameters fe localhost Desktop Surveillance Viewer File View Help Start time equalto 7 9 1 2010 Ey 2 2010 Finish time equalto 4 Tofind all sessions connected with Facebook enter the following parameters 100 fe localhost Desktop Surveillance Viewer File View Help Activity title v like 5 To find all sessions connected with the discussion of corporate policy enter the following parameters fea localhost Desktop Surveillance Viewer File View Help Keystrokes equalto 7 facebook corporate policy Viewing monitored data Viewing Screen Captures The Desktop Surveillance Viewer allows you to view the screen captures made from the computer on which the Client is installed You can view them separately by selecting the required screen capture from the list or viewing all screen captures in the form of video To view the screen captures do
89. rted application on the investigated computer when the Alert event occurred on the investigated computer Hyperlink This column contains the link to the Alert screen capture in the Desktop Surveillance Viewer Left click on it automatically launches the Viewer and takes the investigator to the Alert screen capture Data in all columns can be sorted by clicking on the column header Desktop Surveillance Tray Notifications Journal Alert Host Time Activity Title Application Hyperlink Facebook Aleks A PC 0611 201212 49 31 Welcome to Facebook firefox exe View in the Desktop Survei 10 pe I Deployment and Administration About Program Installation The Desktop Surveillance installation consists of several steps Installing the Desktop Surveillance Server and Administrative Panel These components cannot be installed separately The Desktop Surveillance Server is used to store and process all records sent by the Desktop Surveillance Clients hosted on the remote computers The Desktop Surveillance Administrative Panel is used to manage Desktop Surveillance users and alerts and configure remote client settings 2 Assigning Desktop Surveillance System Administrator and Supervisor To start working with the Desktop Surveillance you have to assign Desktop Surveillance roles to Windows users 3 Installing Desktop Surveillance Clients Desktop Surveillance Clients are usually installed remotely via the Desktop Surveillan
90. rveillance Server to which Desktop Surveillance Clients will connect Name of the computer on which server is installed lt td Sara Note The server IP address has to be static for clients to connect to it successfully Unique external IP addresses should be used for cloud based servers 9 On the Further Actions page check the location to which the installation package will be saved and select the want to install the configured Client automatically on remote computers option Click Next 46 Desktop Surveillance Client Installation Wizard Further Actions Please define if the installation is required You have just completed the configuration of the installation package The installation package will be generated to C Program Files CensorWet Desktop Surveillance Administrator Panel Package setup e You can use this package to install a Client on the target computer locally 10 On the Remote Installation page read the information that will help you to install Clients on remote computers successfully and make sure that all conditions are met on computers on which Clients are to be installed Click Next Desktop Surveillance Client Installation Wizard Preliminary target computer configuration Domain Computer Client Installation a Please ensure that the following conditions are met for successful installation on domain computers You need to know the domain admi
91. s Registry Editor In the Registry Editor window select the following key HKEY LOCAL_MACHINE SOFTWARE CensorNet Desktop Surveillance Double click the AgentGUID value or select it and click Modify in the right click menu Remove the ID from the Value Data box Click OK Uninstalling Clients You can uninstall more than one Desktop Surveillance Client from selected hosi s To uninstall the Client Start the CensorNet Desktop Surveillance Administrative Panel Select Desktop Surveillance Clients in the navigation pane or details pane Select Action gt Uninstall DesktopSurveillance Client or right click and select Uninstall Desktop Surveillance Client 52 fe Desktop Surveillance Administrative Panel Lo e fer File Action View Window Help e9 e B E fe Desktop Surveillance Desktop Surveillance Cli gt EEE 85 Aleks A PC erts D ry oS a Install Desktop Surveillance Clients Uninstall Desktop Surveillance Clients Manage Licenses Refresh View New Window from Here Export List Help be 4 The Desktop Surveillance Client Uninstallation Wizard opens Desktop Surveillance Client Uninstallation Wizard Uninstall Desktop Surveillance Clients Select hosts from which you want to remove Desktop Surveillance Clients 7 Aleks A PC 5 Select the hosts from which Clients will be uninstalled Select the checkbox near the name of the corresponding host You c
92. sanaunccets 90 FLL MS Stee cat ct ta aaa ra eae Ma soc cheat sa ecm cata bee ata tls hea uate le tried aa awa e aed aateaneeises 91 AY FEU MONU Tae nee re es ea oe SC a ee Pe A eS een ree 92 SS A Cl os tasan sacs on eeecouncensuanenecaraiaeanesadanaces sanianes senayetad haath odenemes si endene sagteetasenaacs ode auecsendenes saeeieecodaseacos eemeesensenas 93 ADOULSENCHIN Merete ego ER ee ee 93 QUICK SCANC A i satssestctanacacoss a r a a E a a a E 94 Parameterized Sedi Conero aa aa ia a a aes aintou tase te 94 Parameterized Seadareh Parameters saisioreorsian iia a ies a A aaea aa NA SEEE ia 95 SAVING Search Parameter S oai E E A E eee 97 Restoring Seareh Parameters ossanesissernaboni eriin aE E ERTE 99 Examples of Search Paramete S nnn a E eel 100 Viewing Montorre dala sesca a a a ten a a a tend a a a 101 VIEWING SELES Capture Sa sineas n a a E as eemeed Saleh cet aaweee el ces 101 VIEWING IVE SESSIONS asarei yest aed evista eee ele ce eee en ed 102 Receiving Information on Alert Events cccccscccccssseecceesececceseeeeceuseeessaeeecseseeeseueeessageeessaneeesnsgeeesseass 103 FICDOMS cs suaccovadortavcumencua a a E seta tiunsn Masses lancia ta tetas dein Measanatau a a woot gual spend auaerenamase 104 FA 0 UIigl ani p gt ene ne a PE Oo PP CE en nC er eee 104 Search RESUS REDO nanana a ie a siete sno Gn collate ON aa a dun ieee cals 104 SESSION ACIVIY REPO a aad i ct corset cee tia thas ata eee acted a alas cate leeaae
93. screen capture 3 session s found a Search results report Export video file Session activity report lis PC Finist Exit lis PC Live The File menu consists of four options e Change user Allows you to change the Desktop Surveillance Viewer user e Save screen capture Allows you to save the selected screen capture to a file e Report Allows you to generate two types of reports e Export video file Allows you to export the screen captures from the session to a video file format e Exit Allows you to exit the Desktop Surveillance Viewer When disconnecting from the Desktop Surveillance Server the CensorNet Desktop Surveillance Login window opens Fill the Login and Password fields and click OK to connect to the CensorNet Desktop surveillance Server 92 CensorNet Desktop Surveillance Login Server localhost Login ginger Password eeeeeece View menu a fer localhost Desktop Surveil File View Help v History v Results Player Keystrokes The View menu consists of four options that allows you to enable disable panes e History Allows you to enable disable the History pane e Results Allows you to enable disable the Results pane e Player Allows you to enable disable the Player pane e Keystrokes Allows you to enable disable the keystrokes displayed in the Player pane Help menu zZ se localhost Desktop Surveillance File View Help Help F1 The Help m
94. sktop Surveillance ViWEL ccccccseeeeceeeeeeeeeeeeeeseeeeeeeesaaaeeeesessaneeeeeeeas 28 Installing CensorNet Desktop Surveillance ViIQWEL cccccseeecccecceeeeceeeceeeeseeeeeeeeeeeeeeeaaaeeceeesseaseeeeessaeeeees 28 Updating the Desktop Surveillance Viewer ccccccccccccccssseeeeeeeeeeeeeeeesseuseeeeeseeeeceeesseaeeeeeesseaeeeeesssageeeeeeeas 29 Uninstalling Desktop Surveillance ViGWEL ccccccssscccecceseeceeecaeeeeeeesaeuseeeeseaeueeeeessaaeeeesssaaeeeeesseageeeeesaas 31 Installing uninstalling updating Desktop Surveillance Cllents cece cece cece eee e ee eeee reese eeeaaaaeeeeeeeeeeaaaeeeey 34 About Desktop Surveillance Clients Installation cccccccssseecceeceeseeceeecaeeeeeeeeeeeeeeeeesaeeeeeeesseaeeeeesesaeeeees 34 Client Installation prerequisites sn ncivcenn8 aces ccecscesecencts leben toca slaccdl chev cesdecveddSacens doraieecsdl hacactattad le oan 34 Setting up Environment for Client Remote Installation ccccccccccsseeeecceeeeeeeeeeeeneeeeessaeeeeesaneeesaaaeees 34 Disabling Simple File Sharing in Windows XP ccccsssceccceseeecceeseecceeeeecseeeeeeeuseeeseseeessageeessegseeeseaes 35 Disabling Sharing Wizard in WiNdoOWwS oT jiievessdeecarerdeveresdandebansametensedebcnrsediewvardenionmeoruntedetabangeivasouetenenees 36 GAECKNO SYSlEM SEVICE Snp E A E E EEA TT 36 Disabling Windows XP Vista Firewall ectasiadeddsuedscsabccncate tense shanidusdeddiumelskea ycandadttetictesi
95. t Properties 3 The Desktop Surveillance Properties window opens 11 Desktop Surveillance Properties storage Storage location Firebird only Database qramData CensorNet Desktop Surveillance DesktopSurveillanceActvityDB fdb Storage cleanup Define date period Start date 19 09 2013 E End date 19 09 2013 E Remove data Database automatic deanup F Turn on automatic Server storage deanup 0 00 00 U ee ri FPH aoe Shrink database MSSQL only 4 Click Shrink database NOTE The progress of the database shrinking process is not displayed in the Administrative Panel and there is no indication of the process finishing Alerts About Alerts Alerts are instances that notify the investigator of a specific activity potentially harmful forbidden actions on the target computers on which Clients are installed and allow the investigator to respond to such activity quickly without performing searches The notifications can be received in email or tray Besides screen captures generated on alert events are marked as Alert in the Viewer Alert system can be used for two purposes Immediate response This allows the investigator to get immediate information about the forbidden action and respond to it quickly almost at once Delayed response This allows the investigator to get information on batch of forbidden actions on multiple clients analyze them and then respond 78 Alerts management Adding
96. ters and the Desktop Surveillance Server Click Next 19 ay New Inbound Rule Wizard Profile Specify the profiles for which this rule applies Steps Rule Type When does this rule apphr Proaram Action Domain Profil Applies when a computer is connected to its comorate domain Private Applies when a computer is connected to a private network location Name Public Applies when a computer is connected to a public network location Leam more about profiles 9 Onthe Name step define the Name of the rule Click Finish 20 New Inbound Rule Wizard Name Specify the name and description of this rule Steps Rule Type Program Action Profile Name Desktop Surveillance Name Description optional 10 The rule is created for the Desktop Surveillance Server application By default the rule allows any connections via all ports 11 To define the protocol and ports double click the Desktop Surveillance the name you defined in the previous step rule in the list in the Windows Firewall with Advanced Security window The Desktop Surveillance Properties window opens 21 Desktop Surveillance Properties Programs and Services Computers Protocols and Ports Scope Advanced Users p E cco E oria N Protocols and ports lt Protocol type Protocol number 3346 3347 3349 Example 80 443 5000 5010 Remote port All Ports X Example 80 443 5000
97. text box or click Browse and navigate to the required file 7 Click Add 8 The newly added serial keys are highlighted in bold in the Desktop Surveillance Serial Keys Management window 9 The number of available server and workstation licenses and the subscription end date change 10 Click Close in the Desktop Surveillance Serial Keys Management window Or a Viewing License State You can view the information on serial keys you have activated or added and license details in the Desktop Surveillance Serial Keys Management window To view the license state select Action gt Manage Serial Keys or right click the Desktop Surveillance node and select Manage Serial Keys The following information is displayed in the Desktop Surveillance Serial Keys Management window header e Subscription end date The subscription end date is taken from the serial key with the longest subscription end date e The number of workstation licenses used out of total number The number of workstation licenses is Summed up from all activated serial keys e The number of server licenses used out of total number The number of server licenses is summed up from all activated serial keys e The number of not licensed Clients Displays the number of installed Clients with no licenses assigned The following information is displayed in the Desktop Surveillance Serial Keys Management serial key table 57 e Serial key e Activation date e Deactivati
98. tivation window opens Enter serial keys to be activated separating them with spaces or paragraphs and click Activate The progress of serial key activation is displayed in the Desktop Surveillance Serial Key Activation window PO ee en 56 9 If serial keys are successfully activated you will see a confirmation message Click Close in the message 10 The newly activated serial keys are highlighted in bold in the Desktop Surveillance Serial Keys Management window 11 The number of available server and workstation licenses and the subscription end date change 12 Click Close in the Desktop Surveillance Serial Keys Management window Adding Activated Serial Keys Offline If you have no Internet connection on a computer on which the serial keys are to be activated you can activate them on the license site and then add the activated serial keys offline For more information send an email to sales censornet com To add activated serial keys in offline mode do the following 1 Start the Desktop Surveillance Administrative Panel and select the Desktop Surveillance node 2 Select Action gt Manage Serial Keys or right click the Desktop Surveillance node and select Manage Serial Keys The Desktop Surveillance Serial Keys Management window opens Click Add activated keys The Desktop Surveillance Activated Serial Keys Offline Adding window opens Enter the path to the activatedKeys txt file with activated serial keys in the empty
99. tive Panel 2 Select Desktop Surveillance Clients in the navigation pane or details pane 3 Navigate to the Client from which the license should be unassigned Right click and select Remove License 4 The license is removed the Client and it stops session monitoring NOTE To change the Client license type you don t need to unassign the current license This will be done automatically To manage licenses on several Clients do the following Start the CensorNet Desktop Surveillance Administrative Panel Select Desktop Surveillance Clients in the navigation pane or details pane Right click and select Manage Licenses The Desktop Surveillance Clients Licensing Wizard opens Ole ge eI ge In the Workstation Licenses list select the hosts to which the workstation license will be added Check the corresponding check boxes To select all hosts click Check All To clear selection for all hosts click Uncheck All 6 Inthe Terminal Server Licenses list select the hosts to which the server license will be added Check the corresponding check boxes To select all hosts click Check All To clear selection for all hosts click Uncheck All NOTE A client can t be selected in both lists Licenses from all hosts not selected in any list will be removed 5 Click Next The process of licenses adding removing starts When the process finishes click Finish 59 Troubleshooting Checking that the Client is Installed You can check
100. tomatic deanup F Turn on automatic Server storage deanup EN E a e ER fa aia Le aSVeC SESSIONS IM dat 10356 i Oa s I Time For cleanup operation execution 0 00 00 T View Shrink database MSSQL only Shrink database Deleting Data To delete data from Desktop Surveillance Server manually 1 Select Action gt Properties or right click on the Desktop Surveillance node and select Properties 2 The Desktop Surveillance Properties window opens 3 Inthe Database cleanup group of options select the date in the Start date and End date fields and click Remove data to delete all screen captures created earlier than the selected date 4 Click OK to accept the changes and close the window Desktop Surveillance Properties Storage location Firebird only Database gramData CensorNet Desktop Surveillance DesktopSurveillanceActivityDB fdb Storage cleanup Define date period Startdate 19 09 2013 H Enddate 19 09 2013 J Database automatic deanup F Turn on automatic Server storage deanup Leave sessions in database days Time For cleanup operation execution 0 00 00 Hosts exceptions list View Shrink database MSSQL only Shrink database To delete data from Desktop Surveillance Server automatically 1 Start the Administrative Panel Select the Desktop Surveillance node 2 Select Action gt Properties or right click on the Desktop Surveillance node and select Properties
101. ts only Select this option to include detailed information for each session to the report 4 Inthe Report location field do one of the following e Enter the path to the generated report manually e Click Browse and define the location for the file with generated report 5 Click Generate to generate the report 6 When the generation process finishes click Finish The report will open automatically if the corresponding option was selected 105 Session Activity Report The Session Activity report includes general information on the user activity in the session currently opened in the Player pane Also detailed information on the session activity is displayed in a separate tab named lt hostname gt lt date and time of the session start gt NOTE The investigator can use Ctrl and Shift keys to select more than one session in the Results pane In this case report will include detailed information on each selected session To generate the Session Activity report do the following 1 Inthe main menu select File Report Session Activity Report z eao f localhost Desktop Surveillance Viewer n File View Help E History X Results 1 session s found x t Search list User n Host name Type Start Last activity Finish amp Current search DEVaf Aleks A PC 7 2201 19 53 prey J i Saved searches Search results report SP My Search Activitytime Activity title Application name Keystrokes z 13 29 11 1
102. ture color settings Bit depth fa bits v Desktop Surveillance Client Settings Common Screen capture creation settings Capture screen periodically V Capture screen on active window change V Check changing of names of window V Capture screen on dicking and key pressing Keystroke Logging V Enable keystroke logging 3 Define the required screen capture quality This option allows you to define the color depth of the created screen captures 4 Define the screen captures creation frequency This option allows you to define how often the screen captures on the Client computer will be created Screen captures can be created by three parameters e Capture screen periodically Screen captures will be created with a certain time interval Irrespective to whether something changes on the screen or not 87 oo e Capture screen on active window change Screen captures will be created on the change of the active window For example a new window opens program starts a new tab in the browser opens any secondary window opens etc e Check changing of names of window Screen captures will be created on the change of the name of the active window influences the keystroke logging as well e Capture screen on clicking and key pressing Screen captures will be created on each mouse click or keyboard key pressing Define whether the keystroke logging must be enabled by selecting the Enable keystroke logging checkbox
103. u to use the licenses they contain during 30 days from activation and update the product during this period 55 Each serial key includes the following parameters e Subscription period e Server licenses for Desktop Surveillance Clients e Workstation licenses for Desktop Surveillance Clients You can either activate serial keys online or add activated serial keys if you have no Internet connection on a computer with installed Desktop Surveillance Server Contact your vendor for information on purchasing serial keys Please note after the activation serial keys are bound to a specific computer and cannot be used on another computer About Subscription A subscription is a period that defines what updates can be applied to your copy of the product Updates are defined by their release date After the subscription expires you can still assign licenses to Clients but you won t be able to update Desktop Surveillance to versions released after the subscription expiration date The subscription end date is defined during the serial key activation either via Desktop Surveillance Administrative Panel or on the vendor s site It is calculated using a serial key with the longest subscription period For example if you activate two keys one with a 30 days subscription period and one witha 12 months subscription period simultaneously the subscription end date will be set to 12 months from the activation date When a new serial key is bein
104. uatattientattanemiedttenliies 37 Setting Wi WINGOwWS 7 9 Firewall ion fa ccnrseeee toe telans e a a tetas E a 39 Installing Desktop Surveillance Clients via Administrative Panel ccccccecssseeeeeeeeeeeeeeeseeeeeeeeeeaaeeeeees 42 Installing Clients via Installation Package ccccccssscecccesececceesceeceesseecseseecseuecessageeeeseaseesseageeessaneeesseaes 49 Updating the Desktop Surveillance Clients cccccccccccccesseeceeeeeeeeeeeeeceeuseeeesseeusceeesseaeeeeessseaseeeessaageeeeeeaas 51 Cloning a Virtual Machine with Installed CHONt ccccccccccccssseececceeeeeceeecseeseceeseseaueeeeesseaeeessesaaeeeeessaages 52 UminstalmMmg GSTS sta esse veh cs eles iN a a ee RSE Ne od ie ies ec ae le 52 Hicens mo victacn ssicucu Soeiwtavemed btaclinluduenenanastsine tal arb neuilunina ual ctenakatna dian val ade anighensisa lial dda takatnasiiie ml ubvovetean ela gercimnaddnetwlavae 55 General LiGensing Mrormalofisnerssnss iaaa aa a 95 ADouUt SUDSCIPUON dessi a a ace taut eal 56 ACtiValing Seral KEYS ONING moriria sacs aTa p E E E N ARE NS 56 Adding Activated Serial Keys Offline sissioni anini aia an a aaa ana aa aani E 57 Viewing License Stale cecar ita a teen en ence a a 57 Deactivating Serial Keys ccccccccccccccsssseceeceeeeeeeeecseeeceeeseasseeeeesseaeeeeesseaseeeesseaaeeeeessaaeeeeeessaaeeeeessegeeeeseaas 58 Desktop Surveillance Client License Management cccccccsseseeeecceeeseeeeeeeeeceeesaeaeee
105. ully read the terms of the End User Licence Agreement and click I Agree On the Choose Components page do one of the following and click Next e Inthe drop down list select Server and Administrative Panel e Select Server and Administrative Panel in the box fe Desktop Surveillance 2 1 1578 Setup mpo 5 Choose which features of Desktop Surveillance 2 1 1578 you want to install components you want to install and uncheck the components you don t want to install Click Next to continue Select the type of install Desktop Surveillance Server and Administrative Panel Or select the optional Desktop Surveillance Server and Administrative Panel eae you wish to Desktop Surveillance Viewer Space required 131 5MB MullsoFt Install System ve 46 5 On the Choose Install Location page enter the installation path or click Browse to navigate to the server installation folder Click Next fei Desktop Surveillance 2 0 0 Setup Choose Install Location Choose the folder in which to install Desktop Surveillance 2 0 0 Setup will install Desktop Surveillance 2 0 0 in the following folder To install in a different folder dick Browse and select another folder Click Next to continue Destination Folder Space required 116 6MB Space available 198 6GB ee ey Tek Cee ene WAL AE Nullsoft Install System v2 46 6 On the Database Type page select the type of database you want to use for storing data Click Next
106. user group in the context menu fea Desktop Surveillance Administrative Panel fer File Action View Window Help e Ai fea Desktop Surveillance skh Roles lt gt Administrator R Supervisi Add new user YP Alerts Add new user group gt A Desktop Sur Roles amp Administrator New Window from Here Help Add a new user group 2 The Select Groups window opens 3 Click on the Advanced button 4 The secondary dialog window opens 72 Select Groups Select this object type roupa or Built in security principals Common Queries Name Starts with gt Starts with Disabled accounts Non expiring password Name RON Description Define the query for Groups search in the Name field define the user name condition Select the comparison operator from the drop down list Starts with or Is exactly E g the User Name starts with An This will find users Andrew Ann and Angele Click on the Find Now button to start search The user groups are found and displayed in the list Select the user groups to be added to CensorNet Desktop Surveillance and click OK The selected user groups are displayed in the corresponding field of the main Select Groups window Click OK Unassigning Roles from Users User Groups To remove a user or a user group role do one of the following Select a required user in the Navigation pane or Details pane Do one of the following e Right click and s
107. y X Results 1 session s found a Search list User n Host name Type Start Last activity f ie Current search DEV af Aleks A PC Live 14 03 2013 12 53 07 14 03 2013 12 53 30 4 Saved searches 4 al TTI Activity time Activity title Applicatior na A n 13 08 39 14 03 Welcome to Facebook LogIn firefox exe V Show only text characters Stopped 10 15 32 00 15 3 Number of screen captures 292 For Live sessions the additional button is available in the Player area When you click this button the real time monitoring is performed This means that screen captures appear in the Player area the moment the activity was performed on the investigated computer NOTE If you click this button you will not be able to navigate between screen captures in the list Receiving Information on Alert Events The investigator can receive information on Alert events in three ways e Inthe Viewer application when the investigator browses the screen captures The alert events are marked with a special icon e lf email notifications are enabled in the Alert Parameters the alert information can be received in the email alert notification that also contains the link for viewing this alert in the DesktopSurveillance Viewer NOTE You need the Viewer to be properly installed in order to activate links in the email notifications e lf the tray notifications are enabled in the Alert Parameters the information can be displayed by

Desktop Surveillance Help

Contents

Download Pdf Manuals

Related Search

Related Contents