- Overview
- Main Menu
- Analysis Parameters
- Tags
- Data Groups
- Client Control
- Calendar
This section overviews how to set Client reaction on Process Start event. It may be set for every launched process or you may set selection criteria for process setting Client reaction on launching specified process.
Selection criteria for process:
- Path - when this box is checked, you may specify path to executable file of process (program).
- Process - when this box is checked, you may enter executable file of process (program) or select it from the list (if the list is not empty).
- Window title - when this box is checked, you may enter process window title (for instance, window title of process set in Process field). You may also apply to this value logical condition: Contains, Matches, Begins and Ends.
Note: Path and Process should be entered evidently (i.e. without wildcard * or ?).
Below you may see possible reaction types on Process Start event.
- Reaction type - End Process
Selecting this reaction type you may set End Process option or End Task option on process launching (any process or determined by selection criteria). It may be set immediately after process launching or in time interval that is set in In field.
Example 1:
Process: Explorer
Window title: My Computer (Matches)
Reaction: End Task
Description: it forbids entering "My Computer".Example 2:
Process: Explorer
Window title: Explorer (Begins)
Reaction: End Task
Description: it forbids using Windows Explorer.Example 3:
Process: rundll32
Window title: Properties (Begins)
Reaction: End Task
Description: it forbids changing different Windows settings (including desktop settings).It is also possible to display a message about occurred event and/or reaction on that event on Client and send notification to Server.
- Reaction type - Nothing
Selecting this reaction type you may set displaying a message on Client (for instance, display a message about task to perform).
Besides, use this reaction type as a step of user permission administration.
- Reaction type - Exit Windows
Selecting this reaction type you may set Exit Windows option on process launching (any process or determined by selection criteria). It may be set immediately after process launching or in time interval that is set in In field.
Reaction options:
- Log Off - closes all open programs, logs off Windows session, does not shut down computer.
- Restart - closes all open programs, logs off Windows, shuts down Windows and restarts Windows.
- Shut Down - closes all open programs, logs off Windows, shuts down Windows. Whether to turn off the power depends on set power settings.
If Forced exit box is checked, then configured reaction is performed without warning of user.
It is also possible to display a message about occurred event and/or reaction on that event on Client and send notification to Server.
- Reaction type - Run Process
Selecting this reaction type you may set launching another process on initial process launching (any process or determined by selection criteria). It may be set immediately after process launching or in time interval that is set in In field.
To determine launching process, use following fields of Reaction section:
- Process - when this box is checked, you may enter executable file of process (program) or select it from the list (if the list is not empty).
- Path - when this box is checked, you may specify path to executable file of process (program).
It is also possible to display a message about occurred event and/or reaction on that event on Client and send notification to Server.
- Reaction type - Freeze computer
Selecting this reaction type you may stop computer activity on process launching (any process or determined by selection criteria). It may be stopped immediately after process launching or in time interval that is set in In field. To resume computer activity, user should either restart computer or turn off and turn on computer.
It is also possible to display a message about occurred event and/or reaction on that event on Client and send notification to Server.
- Reaction type - Command to Window
Selecting this reaction type you may send a command to process window on process launching (any process or determined by selection criteria). It may be sent immediately after process launching or in time interval that is set in In field.
Possible commands:
- Close - close launched process window.
- Move - move process window to a specified point (screen point with coordinates (X, Y)).
It is also possible to display a message about occurred event and/or reaction on that event on Client and send notification to Server.