|
In this topic:
|
Manage Computers
By default, the Client is configured to operate in stealth mode. The user is unable to
detect the program on the computer. You can disable stealth mode in the
Deployment Utility,
causing the recording Client to be visible in the Windows notification
area as a small red square. This Deployment setting is available at the
Security panel and in the
Build options.
To deploy the Client in stealth mode:
When the Client Security Settings panel has Set Spector Client to Stealth Mode enabled, the user will have no indication the Client Recorder is running. Running the Client Recorder service in stealth mode does not slow down the operation of the monitored computer unless the Client is taking a screen snapshot every 5 seconds or less.
The Client Recorder does not appear in the Windows notification area, Windows task list, or Windows Startup folder
The Client Recorder cannot be removed nor does it appear in Add/Remove Programs.
Client Recorder does not install any icons or entries in the Start > All Programs menu.
The Client Recorder Service runs "behind the scenes"; the program does not show in the Task Manager.
If you install the Client Viewer, the only way to access it is by using the Hotkey combination and entering the password.
To avoid discovery of Client program files:
For greater stealth, clear the option Use Fixed Filenames on the Deployment Utility Build Installation File options panel. The monitoring software filenames will change with each Client installation to prevent detection. Check this item to install the Client using the same filenames on all computers.
To avoid scanning by antivirus / anti-spyware programs:
SpectorSoft works diligently to maintain Client stealth as these programs evolve. However, if anti-spyware or antivirus software installed on the Client computer scans IP ports, it will detect the port opening to communicate with the Data Vault - TCP port 16769. In addition, these programs occasionally detect and quarantine Client Recorder files. If possible, exclude the SpectorSoft "risk" (as listed by the antivirus product), or install the Client with Fixed filenames and exclude those files from being scanned. If your software allows it, suppress anti-spyware popup messages at the Client. If this isn't possible, check the SpectorSoft Knowledge Base for the most up-to-date solutions for working with these third-party programs. SpectorSoft works diligently to maintain Client stealth as these programs evolve.
To avoid detection of Administrator User actions:
If the Administrator user name (profile) you are using to push out the installation does not exist on the Client, it will be created when the task is scheduled. A new profile will create certain folders on the client machine that may be visible to the current computer user. Use a shared administrator account already installed on the computer if you want to avoid detection on the Client computer.
To deploy the Client in visible mode:
If you clear the Set Spector Client to Stealth Mode option in the Security Settings panel, the Client will run in visible mode:
An icon appears in the computer's notification area indicating the Client Service is running.
The Client appears in the Task Manager and in Add/Remove programs.
You can still configure the Client to manually take Snapshots using a hotkey combination.
The Client will still send keyword alert email notification without interrupting the user (does not use the email application or leave traces of the email, and waits for Internet connection rather than actively connecting).
The Client Viewer is not installed unless you specifically request it. If you request the Client Viewer, in Visible Mode, just click on the red square icon in the System Tray and enter the password to open Viewer.
To display a log on warning (Deployment Build Options):
To provide a visible warning to users that they are being watched, check the Logon Warning option from the Client Security: Advanced settings. This displays a monitoring warning message each time someone either restarts Windows or a new user logs on to the computer. By default, the warning message not displayed. The warning message should inform the user that their computer activity is being monitored.
Stealth Mode