Security

The Spector Client (Client) security options are configured within the Security configuration tab. The Security configuration tab can be found when:

Pre-configuring a Client installation file using the Spector CNE Deployment Utility

Figure 1: Security Settings within Deployment Utility

Selecting a computer within the Configure Computers view of the Control Center, and then right click for Client Settings

Figure 2: Security Settings within Configure Computers View

Clicking the Settings button within the Spector Viewer when viewing the recordings of a computer from the Monitor Computers View of the Control Center

Figure 3: Security Settings within Viewer

Selecting the Settings button within the Spector Viewer if the Viewer was installed as part of the Client installation (only recommended for troubleshooting)

Password

The Password controls access to the Client installation when it is running on the monitored computer. If a password is configured, it will be required in order to:

Uninstall a Client installation
Re-Install a Client installation
Access the Viewer locally on a computer when Viewer is included as part of the Client installation

If the Client installation is remotely managed by the Spector CNE Control Center and the user of the Control Center has administrator permissions for the computer, then the Control Center will automatically retrieve the password configured for the Client and use it, allowing for remote installation and un-installation without the need to know the password. If the Control Center is unable to read the password from the registry of the Client, then the Control Center user will be prompted for the Client password.

Note: Though most Client installations that are remotely managed will NOT need to have their passwords remembered, SpectorSoft suggests using the same password for all Client installations. Passwords are case sensitive.

Hotkey

The Client Hotkey combination is used for gaining access to the Viewer user interface when it is installed as part of the Client installation. In general, most Client installations will NOT have the Viewer installed as part of the installation, so the Hotkey configuration is meaningless.

If the Viewer is to be configured as part of the Client installation and it will be running in Stealth Mode, it will be necessary to configure a Hotkey combination in order to invoke the Viewer user interface. This prevents other users who do NOT know the Hotkey from accessing the Viewer. (If they do know the Hotkey, they would need to know the Password as well.)

The default Hotkey combination is Ctrl+Alt+Shift+S. You must press and hold each character in the hotkey sequence at the same time on the computer.

If you wish to change the Hotkey sequence:

Click the Change button next to the box marked Hotkey
Place a check mark in each box that you wish to use for your hotkey. (It is recommended that you use a combination of keys: Ctrl, Alt, Shift, and a letter.)
To change the current letter key, click within the box where the letter is currently displayed
Type in the additional key for the hotkey sequence

Stealth Mode

Stealth Mode removes all indicators that the Client is running on the computer:

Client does not appear in the Windows system tray
Client does not appear in the Windows task list
Client does not appear in the Windows Startup folder
Client cannot be uninstalled from nor does it appear in Add/Remove Programs
Client does not install any icons or entries in the Start>Programs menu

Note: SpectorSoft recommends that all companies have a computer use policy in place that makes employees and other computer users aware that their computer use is subject to monitoring.

The Client is configured for Stealth Mode by default. If you wish to run in Visible Mode, simply remove the checkmark beside the Stealth Mode option. In Visible Mode, the Client will display a small red square in the Windows system tray when it is recording.

Data Files

All recorded events must first be stored locally on the computer. These events will be stored into hidden data files in a special Windows folder. If the Data Vault is configured to receive the recorded events from the computer, the events will be periodically moved from the computer's local data files into the network Data Vault. The computer's local data files will then be deleted.

Data File Folder This setting allows you to configure the Windows folder into which the recorded events will be stored locally on the computer. By default, the Client stores its data files in a sub-directory of the Windows System folder. In order to have the recorded events stored in a different Windows folder, specify the different folder here.

Note: Though all files that are created in the Data File Folder for locally storing recorded events will be marked as hidden; do not create a Data File Folder path that will be in plain view to the user. The Data File Folder should be created in a path that will not normally be perused by the casual user.

When remotely configuring the Data File folder, remember that the folder structure of the computer on which the Client is installed may be different from the folder structure of the computer from which you are performing the configuring functions. For this reason, you should not use the Browse button when configuring remotely.

In addition to accepting a standard Windows folder path specification, the Data File Folder configuration allows the following variables to be used:

%systemroot% will substitute the Windows system folder name on the computer. Example: %systemroot%\spectorhidden\ would translate to c:\windows\system32\spectorhidden on a Windows XP Professional computer and would translate to c:\winnt\system32\spectorhhidden on a Windows 2000 system
%user% will substitute the User logon name
%computer% will substitute the Windows computer name
The default Data File Folder path is %systemroot%\netext

The Data File folder that is configured for the local storage of recorded events should NOT be a network folder. While this will function in most installations, the configuration is prone to recording problems because the Client cannot recover from an error when writing an event to a network folder. If the Client encounters an error trying to store the recorded event in the configured Data File folder, all recording will be halted on the computer.

Data File Extension

Specify the file extension to be used for all files created in the Data File Folder. The default file extension is .SDF.

Logon Warning

Figure 4: Set Warning Text

Your company has the option of placing a warning message on the user’s screen every time they log on to a computer being recorded by the Client. By default, the Enable Logon Warning is turned off. However, you may wish to check the Enable Logon Warning box in order to inform users that their computer and Internet usage is subject to being monitored and reviewed.

You have the option of specifying the exact text of the warning message. SpectorSoft has created a standard warning message used by many government agencies. This text may be appropriate for your use, but by clicking on the Set Warning Text button, you may provide the exact text you wish to use as an alternate warning message.

Advanced

Figure 5: Advanced Security Dialog

Pressing this button will give you access to the Client’s advanced options. Most users will never need to use this button, unless instructed to do so by a SpectorSoft service technician. For more information about these options, click here.