
DeviceLock: readme
~~~~~~~~~~~~~~~~~~

Please read this file carefully (especially the "Installation" chapter)
before installing the program to your computer.

IMPORTANT! If you obtained DeviceLock not from our web page, but from another
source (CD or a software library), please visit our home page where you
might find a later version.


Contents
~~~~~~~~

 Program information
 Company information
 Description
 Installation (!)
 Registration
 Copyright and license
 Technical support


Program information
~~~~~~~~~~~~~~~~~~~

Program Name:
 DeviceLock
Program Version:
 5.72 Beta 1
Program Release Date:
 July 21, 2005
Target OS:
 Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003
Program Description:
 DeviceLock allows to control over which users can access what devices.


Company information
~~~~~~~~~~~~~~~~~~~

Company Name:
  SmartLine Inc
Contact E-mail Address:
  support@protect-me.com
Contact WWW URL:
  http://www.protect-me.com


Description
~~~~~~~~~~~

DeviceLock gives network administrators control over which users can
access what devices (floppies, USB, FireWire, Infrared, serial and parallel
ports, Magneto-Optical disks, CD-ROMs, WiFi, Bluetooth, etc.) on a local
computer. Once DeviceLock is installed, administrators can control access to
floppies, CD-ROMs or any other device, depending on the time of day and day of
the week. DeviceLock enhances access control for Windows System Administrators
and helps control removable disk usage. It can protect network and local
computers against viruses, trojans and other malicious programs often injected
from removable disks. Network administrators can also use DeviceLock to flush a
storage device's buffers. Remote control is also available.

With DeviceLock you can:

 - Control which users or groups can access floppies, CD-ROMs and other
   removable devices 

 - Control which users or groups can access USB, FireWire and Infrared ports

 - Control which users or groups can access WiFi and Bluetooth adapters

 - Control access to devices depending on the time of day and day of the week

 - Protect disks from accidental or intentional formatting

 - Audit user's activity for a particular device type

 - Control it remotely using centralized management console

 - Deploy permissions via Group Policy in an Active Directory domain

 - Install and uninstall it automatically.


Installation
~~~~~~~~~~~~

To install DeviceLock you MUST have administrative privileges.

Run "setup.exe" to install DeviceLock with two centralized management consoles:
DeviceLock Manager and DeviceLock Enterprise Manager. DeviceLock Manager is a
very simple tool and performs only basic tasks for individual computers. If you
need to manage many computers simultaneously and you don't have an Active
Directory domain in your network, use DeviceLock Enterprise Manager.

To manage DeviceLock's permissions and settings in an Active Directory domain,
use DeviceLock Group Policy Manager. Run "setup_gp.exe" to install DeviceLock
Group Policy Manager.


You'll need to select the target directory for the install.

If you install DeviceLock on an NTFS partition, Setup protects DeviceLock's
directory and files by allowing only members of the Administrators group or
the SYSTEM account to access DeviceLock's files or to uninstall DeviceLock.

If you wish to install DeviceLock without an user intervention you should run
DeviceLock Setup with the /s parameter (e.g. "c:\setup.exe /s"). This gives an
install that can be used from within a batch file. There is a special
configuration file for silent setup: devicelock.ini. With this file, you can
customize the DeviceLock installation parameters. For example:

 1. "Lock Devices" parameters. Only members of the special local group,
    the operating system and the local administrators will have access to
    the devices on the local computer if one of these parameters is enabled:

      Floppy    - floppy drive
      Removable - removable device
      CDROM     - CD-ROM, DVD-ROM
      Serial    - serial port (COM)
      Parallel  - parallel port (LPT)
      Tape      - tape device
      USB       - USB port
      IRDA      - infrared port
      FireWire  - IEEE 1394 port (FireWire)
      Bluetooth - bluetooth adapter
      WiFi      - WiFi (802.11) adapter

    If the parameter CreateGroups is enabled another special local group
    will be automatically created:

      Allow_Access_to_Floppy
      Allow_Access_to_Removable
      Allow_Access_to_CDRom
      Allow_Access_to_Serial
      Allow_Access_to_Parallel
      Allow_Access_to_Tape
      Allow_Access_to_USB
      Allow_Access_to_Infrared
      Allow_Access_to_FireWire
      Allow_Access_to_Bluetooth
      Allow_Access_to_WiFi

    Otherwise if a group does not exist on the local computer, only the
    operating system and the local administrators will have access to the
    device.

    If parameters CtrlUSBHID, CtrlUSBPrint or CtrlUSBBth are enabled,
    DeviceLock controls security for Human Input Devices (mouse, keyboard),
    printers/scanners or Bluetooth adapters plugged into the USB port. Also,
    if the CtrlFWNet parameter is enabled, DeviceLock controls FireWire and USB
    network cards. Otherwise, even if ports (USB and/or FireWire) are locked,
    these devices continue to function as usual.

    In the AccessTo... parameter, you can specify the account (user name, local
    or global group) that will have the access to a device (e.g. AccessToFloppy
    for floppy drives). Setup assigns the Full access right including the Allow
    Format and Allow Eject privileges for the account specified in this
    parameter. Please note that the account must exist before it can be
    assigned to a device type.


 2. "Install" parameters:

      Service    - DeviceLock Service and its related files will be installed
      Manager    - DeviceLock Manager and its related files will be installed
      Documents  - documentation (DeviceLock Manual.pdf) will be installed

    To specify a destination directory for DeviceLock, you can supply
    the parameter InstallDir

    If you have the registration key-file for DeviceLock, you can specify
    a directory with this file in the parameter RegFileDir


 3. "Misc" parameters:

      Run - this parameter is used to launch an application or execute a batch
            file after a successful install.


Registration
~~~~~~~~~~~~

See "register.txt" file.


Copyright and license
~~~~~~~~~~~~~~~~~~~~~

See "license.txt" file.


Technical support
~~~~~~~~~~~~~~~~~

See "contacts.txt" file.





                                         Copyright(c) 1997-2005 SmartLine Inc.
                                                          All rights reserved.
                        DeviceLock is a registered trademark of SmartLine Inc.
