User Manual

Chapter 9

Configuring NetSupport PC-Duo

---

The behavior of both Clients and Controls in NetSupport PC-Duo is determined by profiles. These give administrators a high degree of control over the actions that users can take, and the security measures employed on both Clients and Controls. Furthermore, because the system can support multiple profiles, they also give administrators the flexibility to define individual and group profiles, and so place restrictions only where they are needed. This first section in this chapter describes how to create and work with profiles for Clients; the following section describes how to create and apply profiles for Controls.

Client profiles always take precedence over Control profiles. This enables NetSupport PC-Duo to support users who handle sensitive information, without compromising their ability to maintain data security.

Configuring Clients

NetSupport PC-Duo Clients use a configuration file, called CLIENT32.INI, to store their settings. Use the NetSupport PC-Duo Client Configurator application to specify the Client settings.

Using the Configurator, you can specify the following Security features:

Use NT Security

Windows NT4, 2000 and XP Clients can be configured to ensure that Controls which want to connect to the Clients are valid users.

Security Keys

Given a compatible network transport, and the correct user name and password, a Control user may be able to access Clients on your network. However, a Security Key prevents any unauthorized Control from connecting to Clients. In its simplest form, the Client allows connections only from Controls which have a matching license serial number. Arbitrary Security Keys can also be applied.

Audit Trailing

All Clients can use the Client log file to record operations performed on them by Controls. Windows NT, 2000 and XP Clients can also record Control operations in the Application Event Log.

User Acknowledgement

The User Acknowledgement option enables Clients to approve attempted connections by Controls. This enables Client users to refuse connections when they are busy or working on sensitive data. Normally, this option also prevents Control users from accessing Client PCs when no user is present. However, it can be disabled when a Windows NT4, 2000 or XP Client is logged off.

Customizable Restrictions

You can customize Client Profiles to implement a wide variety of restrictions on the actions that Control users are allowed to perform. These include Disable Watch, Share, or Control of the Client, Blank Client Screen, Disable file transfer (while still allowing connecting and viewing), Restrict Drive / Directory / File Access, Keep connection indicator on top (ensures the connected indicator does not become obscured on the Client desktop) and Force Compression and Encryption to ensure connection security.

When you start the Client Configurator, you are prompted to use either the Basic Configurator or the Advanced Configurator:

The Basic Configurator

enables you to specify the Client's Connectivity, Security and Audio settings. Use this method if you are new to NetSupport PC-Duo, or if you want to specify only the network transports or basic security settings for a Client.

The Advanced Configurator

Provides full access to the Client configuration. Use the Advanced Configurator to create multiple Client Profiles, to set up access restrictions, or to configure advanced security options. You can also use the Advanced Configurator to specify the individual Client Parameters for a PC.

Starting the Client Configurator

If you have just installed the NetSupport PC-Duo Control application, you can start the Client Configurator at the end of the Installation Process (see "Completing the Installation Process"). Alternatively, you can start the Configurator at any time from the Start menu.

To Start the Client Configurator:

1. Click the Start button in the Windows Taskbar to display the Start menu, then display the contents of the Programs menu.
2. In the PC-Duo submenu, choose the Client Configurator command. The Client Configurator Welcome dialog is displayed.
3. Read the information in the dialog and click the Basic button or the Advanced button.

   Do not use the Basic Configurator when the Client is using multiple Client Profiles. A warning message is displayed if you start the Basic Configurator when the Client has multiple Profiles.

Using the Basic Configurator

The Basic Configurator allows you to view and amend the basic configuration settings for the Client. The information in the Basic Configurator dialog is contained in three folders:

Connectivity

Specifies the network transports on which Clients can communicate with Controls. When you specify the network transports, click the Test buttons to check the information is correct.

Security

Specifies passwords and other security options for the Clients using this configuration.

Audio

enables you to configure microphone and speaker volume levels for use in Audio Chats.

To Configure Clients using the Basic Configurator:

1. Choose Client Configurator in the PC-Duo Program Folder.
2. In the NetSupport PC-Duo Client Configurator dialog, click the Basic button to open the Basic Configurator dialog.
3. Specify the options and settings in the Connectivity, Security and Audio pages of the dialog.
4. When you have finished, click the OK button to save your settings and close the dialog.

   A message dialog is displayed asking if you want to restart the Client application on the PC. Click the Yes button to restart the application and apply the changes immediately. Click the No button to continue with the current settings.

Using the Advanced Configurator

The Advanced Configurator allows you to create multiple Client Profiles, set up Client access restrictions and configure advanced security options for Clients. Use the Toolbar of the Advanced Configurator window to create new configuration files, to open existing configuration files, and to save the current configuration file.

Clients can be set up with pointers to more than one configuration file. For example, they can reference a configuration file which is stored on a server by default, and access a local configuration file when the remote file is unavailable. This enables multiple Clients to share the same configuration file.

To specify which configuration files are referenced by Client PCs, use the Advanced Configurator to edit the Client Parameters. For more information, see "Selecting Configuration Files".

CLIENT32.INI configuration files are usually stored in the directory in which NetSupport PC-Duo was installed.

Working with Client Profiles:

• A configuration file consists of one or more sections known as Profiles. Each Profile contains configuration information for the Clients that use the configuration file.
• The Master Profile at the top of the list cannot be moved, as it contains the general settings for the Client. (The Master Profile contains more settings than other Profiles.)
• Other Profiles can be created, which contain different settings for specified Control users. By default, most editable settings are inherited from the Master Profile (for example, inherited check box settings are shown as a check with a gray background) so you need update only the settings you want to change.
• The Advanced Configurator window lists Client Profiles in priority order, with Profiles at the top having the highest priority. When a Control tries to connect to the Client, the Client starts from the top of the list and tests each Profile until it finds a Profile that permits access to that Control, or until it reaches the end of the list. (If the Client does not find a suitable Profile, the connection is denied.)
• To change the order of Client Profiles in the Advanced Configurator window, select a Profile and click the Move Up or Move Down button in the Toolbar.

Viewing and Editing Client Profiles

Use the Advanced Configurator to view and edit the individual Profiles that make up a configuration file. The Master Profile contains five folders, which are divided into separate pages:

Connectivity

Specifies the network transports with which Controls can connect to Clients. It also specifies the network protocol and security options for Clients that provide dialin access for Controls on remote networks, and the Web Extension settings that enable the Client to act as a simple Web Server.

Security

Specifies which users are able to access change and use this profile. The folder also contains pages that control the ability to log events transfer files and replay Control sessions, and that specify the access privileges of Control users who connect to Clients using this profile.

Remote Control

Specifies how the Client can be viewed and whether the Control screen can be displayed on Clients. It also enables you to configure volume levels for Audio Chats.

Client Interface

Controls the behavior of the Client application on the PC where it is installed. It also enables you to specify the messages displayed on Clients when a Control connects to them, and when the Client PCs are being viewed by a Control.

Profile Options

To specify when Controls can access these Clients with this profile.

To View or Edit a Client Profile:

1. In the Advanced Configurator window, select the Client Profile you want to work with, then click the Edit button in the Toolbar.

   The Profile dialog is displayed. Its title contains the path of the current CLIENT32.INI file, and the name of the Profile you are currently viewing. The dialog enables you to view and edit the various settings for this Client Profile.

2. Select the User Validation page in the User Validation folder.

3. If you want all Control users to be able to access Clients that use this profile, enter an asterisk ( * ) in the Usernames field.

   If you want to use Windows NT Security to control Client access, enter an asterisk ( * ) in the Usernames field, and select the Authenticate User and Password with NT check box. Any Control users attempting to connect to Clients using this profile must enter a valid NT username and password.

   Alternatively, to enter the names of NT groups, use the Restrict Access to Members of the following Groups field. Click the Browse button to select the groups.

   If you want to restrict the Profile to specific Control users, click the Change button to open the Valid Usernames dialog, and enter the names of users who can access Clients that use this Profile.

4. Use the other pages in the Profile dialog to control which features are available when the specified Controls connect to the Client.
5. When you have finished editing the Profile, click the OK button to return to the Advanced Configurator window.

The Copy button in the Toolbar enables you to create a copy of the currently selected Client Profile.

You can use the Rename button in the Toolbar to rename the currently selected Client Profile.

Configuring Clients for ActiveX Connections

In addition to communicating with Clients from the NetSupport PC-Duo Control, you can connect to them and control them through a Web page using ActiveX. You can connect to any PC running the NetSupport PC-Duo Client application using Internet Explorer 4.0 or later. You do not need to install the NetSupport PC-Duo Control application to connect to a Client using this method.

To enable Web Extensions on a Client:

1. Choose the Client Configurator command from the NetSupport PC-Duo Program folder, then click the Advanced button to open the Client Configurator dialog.
2. Double-click the Master Profile to open the settings dialog.
3. Click the Web Extensions page in the Connectivity folder and select the Enable Web Extensions check box.
4. By default, the ActiveX connection uses Server Port 80. If you are already using port 80 to run a personal Web server or IIS, type the next available port number in the Server Port field.
5. Click the OK button to close the dialog.
6. Save the Master Profile and close the Client Configurator window.
7. Restart all the Clients that you want to access using ActiveX.

For information on how to connect to a Client using ActiveX, see "Connecting to Clients using ActiveX".

Configuring Clients for Gateway Connections

Gateways enable Controls to access multiple Clients across the Internet. Each Gateway provides a single IP address through which Controls connect to Clients on an internal network, and a configurable port to listen for Client-Control communications. If you want to enable Controls to communicate with your Clients across a Gateway, the Client profile must specify the port that the Gateway is using, and a Gateway Key to identify which Controls are allowed to access the Clients.

To configure a Client profile for a Gateway connection:

1. Open the Client Configurator, and double-click the Master profile to open the settings dialog.
2. Click the HTTP page in the Connectivity folder and select the Use HTTP check box.

3. By default, PC-Duo uses port 3085 for communications between Controls and Clients. If you want to use a different port to transmit and receive data, enter the new port number in the Gateway Port field.
4. In the Gateway Address field, enter the Internet address of the Gateway you want to use.
5. Click the Set button to display the Security dialog. Enter the key. The key must be from 8 to 16 characters long and can contain any alphanumeric characters. Click the OK button to validate the key and save it.

   Gateway Keys control access to Clients. Any Control attempting to access a Client through a Gateway must be configured with a Gateway Key that matches the Gateway Key of the Client and one of the Keys defined for the Gateway itself.

6. Click the OK button to close the dialog.
7. Save the Master Profile and close the Client Configurator window.

   You can specify different Gateway Keys for different Clients by using separate CLIENT32.INI files. This enables you to create different Internet-Client groups and to assign different Controls to them.

Adding New Client Profiles

To Add a New Profile:

1. Open the Client Configurator from the Windows Start menu, then click the Advanced button to open the Client Configurator window.
2. In the Client Configurator window, select the entry in the profiles list below which you want to add the new Profile.
3. Click the Add button in the Toolbar.
4. In the Add New Profile or Include File dialog, ensure the Profile Name option is selected, then enter a name for the Client Profile in the text field.

5. Click the OK button to close the dialog and add the Profile to the Client Configurator window. Double-click the Profile to edit its settings.

   You can also add a new Client Profile by selecting an existing Profile and choosing the Profiles, Add menu command.

Deleting Client Profiles

To Delete a Client Profile:

1. Select the Client Profile you want to delete from the Client Configurator window.
2. Click the Delete button in the Toolbar.
3. In the confirmation dialog, click the Yes button to delete the Client Profile.

   You can also delete a Client Profile by selecting the Profile and choosing the Profiles, Delete menu command.

Selecting Configuration Files

By default, a separate CLIENT32.INI configuration file is stored on each PC when you install the Client kit. However, to reduce the maintenance overhead, you can use central configuration files to ensure that Clients use the same configuration parameters.

To create a centrally stored configuration file:

1. Create a share which can be accessed by all Clients that will use the central configuration file.
2. Save the configuration file (CLIENT32.INI) to the share.

To configure Clients to use a central configuration file:

1. Open the Client Configurator from the Windows Start menu, and click Advanced.
2. In the Client Configurator window, choose Client Parameters in the Profiles menu to open the Client Parameters for this Machine dialog.
3. If the central file is located on a PC running Windows NT4, 2000, or XP:
   1. Click Add to open the Add/Edit Client Parameter dialog.
   2. Select the User Credentials option, then enter the Username and Password details of the user account which this PC can use to access the central configuration file.
   3. Click the OK button to save your changes and close the dialog. The user details are displayed in the Client Parameters for this Machine dialog.

You do not need to supply user credentials when the configuration file is located on a PC running Windows 95, 98 or Me.

4. Click Add to open the Add/Edit Client Parameter dialog again.
5. Select the Configuration File option and enter the location and name of the configuration file, or click Browse to search for the file.
6. Click OK to save your changes and close the dialog. The location details are displayed in the Client Parameters for this Machine dialog.

7. Click the OK button to save your changes and close the dialog.

You can specify more than one configuration file parameter. This enables a networked Client to use a shared CLIENT32.INI file by default, and to use a local file if the server is not available when it starts.

Because the Client must open a session on the server before it can locate the configuration file, the user credentials parameter must always precede the associated location parameter if it is required. To reorder the list, select a parameter and click Move Up or Move Down.

Disconnecting Controls from Clients

If Clients need the ability to disconnect from connected Controls, you can remap the Client's Request Help hot key combination to disconnect it without warning. This removes the need to use the Client's Commands Disconnect menu command, which can be prevented by Control users.

This procedure removes the Client's ability to use a hot key combination (ALT+LSHIFT+RSHIFT, by default) to request help from a Control.

To enable the hot key disconnect:

1. Open the CLIENT32.INI file and locate the [Client] section of the configuration file.
2. Add the following line to the [Client] section:

    DisconnectHotkey=1

3. To reset the configuration file's checksum, open the Client Configurator in Advanced Mode, then open and save the file.
4. Restart the Client32 Service to apply the change using the Restart Client shortcut, or RESTART.BAT.

Exiting the Advanced Configurator

To Exit the Advanced Configurator:

1. Choose the File, Exit menu command, or click the close button in the top right corner of the Advanced Configurator window.
2. If a message dialog is displayed, asking if you want to save the changes to the Configuration file, click the appropriate button.
3. If you have made any changes, a warning message is displayed. Select the Restart option to apply your changes.

Using Control Profiles

Control Profiles are named configurations used by the Control application. They store security settings as well as additional settings, such as the network transports required to access Clients. They also enable a Control user with NetSupport PC-Duo administrator rights to set up profiles for other Control users. These profiles contain permissions which determine the level of access which Control users can have to Client PCs.

The Control profiles are stored as registry entries under Windows. Normally, they can be amended only by a NetSupport PC-Duo Administrator with the required access levels. Under Windows NT, 2000 and XP, Administrator privilege is required to amend the User Profiles.

Control users are able to access only the NetSupport PC-Duo functions which their profile permits; users without Administrator rights cannot change their profile. As a result, you can create secure, password-protected Control Profiles which determine the levels of access Control users can have to Client PCs. For example, one Control user may be profiled to have Connect and Watch functionality only, whereas another Control user may have full functionality.

Client profiles always take precedence over Control profiles. This enables PC-Duo to support users who handle sensitive information without compromising their ability to maintain confidentiality.

Security features which you can implement in Control Profiles include the following:

Password (Settings page)

Sets an encrypted password, which must be entered before a profile can be selected.

Security Key (Settings page)

Sets a security key, which is sent to Clients when the Control attempts to connect to them. If the Control's security key does not match the Client's key (if one has been set), the connection is refused.

Prompt for Additional Information when Connecting (Settings page)

When the User Acknowledgement required option is set at the Client, this setting defines an additional message, which is displayed at the Client. For example, it could be the name and telephone number of the Control user who is trying to connect.

Use Compression (Settings page)

Select this option to ensure that all data sent using this Control profile is compressed.

Use Encryption (Settings page)

Select this option to ensure that all data sent using this Control profile is encrypted, including any keystrokes. Select an entry in the Type list to specify what type of encryption you want to use.

Because only 56 bit (DES) encryption was available in previous versions of PC-Duo, you must use this option when a profile is used to connect to Clients running older versions of the software.

In PC-Duo version 8, you can specify a minimum level of encryption for remote control sessions in the Client configuration. The Client informs the Control when the connection is established. If the Control is already using a higher-level encryption algorithm that is also supported by the Client, the higher encryption level is automatically used. If the Control supports only lower levels of encryption, the connection is refused.

Blank Client Screen (View page)

Blanks the Client PC screen when it is being controlled, so the Control user can perform actions without being observed at the Client.

Change Settings (User Permissions page)

Prevents Control users from changing their default settings.

Configure User Interface (User Permissions page)

Prevents Control users from changing the functionality that is available to them.

Additionally, you can implement a wide variety of restrictions for a Control Profile in the Control Interface folder:

Hide Client List / Client List Read Only (Interface Settings page)

NetSupport PC-Duo maintains a list of Clients to which the Control has previously been connected, along with their network addresses. The Hide Client List option prevents the list from being displayed in the Control application. The Client List Read-only option prevents the list from being amended.

Hide Group List / Group List Read Only (Interface Settings page)

The Hide Group List option prevents the Group list from being displayed in the Control application. The Group List Read-only option prevents the list being amended.

Hide Dial Directory (Interface Settings page)

Disables all Remote Networks functions. The Remote Networks branch is removed from the Tree View, and all related menu items and Toolbar buttons are removed.

Dial Directory Read-only (Interface Settings page)

Prevents users from changing the Remote Networks list.

Disable Browse (Interface Settings page)

Prevents the discovery of Clients by browsing.

Disable Share / Disable Watch / Disable Control (Functions page)

These options limit the functions which the Control user is able to perform when connected to Clients.

Disable Show (Functions page)

Prevents Control users from displaying their screens on Client PCs.

Disable File Transfer (Functions page)

Disables PC-Duo's File transfer capabilities for this Control profile.

Disable Chat (Functions page)

Prevents the Control user from using the Chat feature.

Disable Send Message / Disable Broadcast Message (Functions page)

Disables the message functions at the Control.

Disable File Manager (Functions page)

Prevents Control Users from opening the PC-Duo File Manager.

Disable Reboot (Functions page)

Disables the ability for the Control to remotely reboot Clients.

Disable Replay (Functions page)

Prevents the Control from displaying Replay files. The Replay function is an option that records all activity while a Control is connected to the Client. It can be used to check and audit Control activities.

Disable Execute (Functions page)

Prevents the Control from running applications on Clients.

Disable Registry Editing (Functions page)

Prevents the Control from editing the Client registry except under remote control.

Disable Blank Screen (Functions page)

Prevents the Control from blanking out Client screens during a Control session.

Working with Control Profiles

To Select a Control Profile:

1. Disconnect the Control from all Clients.
2. In the Control window, choose the Tools, Configurations menu command. The Configurations dialog is displayed. It lists the available Control Profiles. (Your current Profile is displayed above the list.)

   You cannot change your Control Profile if you are not an Administrator, or your User Permissions do not allow you to change your Control settings.

3. Select the Profile you want to use, and click the Select button.
4. In the message dialog, read the information, then click the Yes button to use this Profile. You may also be required to enter a password to use this Profile.
5. To return to the Control window, click the Close button.

Amending Control Profile Settings

You can amend the settings for a Profile using the Settings for Configuration dialog. The dialog contains seven folders:

General

Specifies the name by which the Control identifies itself to Clients. It also enables you to record a description of the profile.

Connectivity

Specifies the settings used to start and maintain connections with Clients and remote Networks.

Security

Specifies the password required to access the Control Profile and the Security Key that controls which Clients the Control can access. It also specifies whether the Control has access to administrative functions, logs events and records actions performed on Clients during Control sessions.

Remote Control

Specifies the keyboard, mouse, and printer functions that the Control user can access on Client PCs when running remote control sessions. It also specifies the Control's audio settings and the level of detail shown in the Client screen when it is displayed on the Control PC.

Control Interface

Specifies which options and functions are available to the Control user. It also specifies how Help Requests from Clients are handled by the Control.

File Transfer

Specifies which options are available when using File Transfer windows.

File Locations

Specifies alternative names and locations for the Main Control data files.

To Amend a Control Profile's Settings:

1. In the Configurations dialog, select the Profile you want to work with, and click the Settings button.

2. In the Settings for Configuration dialog, amend the options.
3. Click the OK button to save your changes and return to the Configurations dialog.

   You can also display the current Profile settings directly from the Control window by clicking the Settings button in the Control window Toolbar.

Connectivity And Startup Settings

A separate dialog is used to display the Control's Connectivity and Startup settings. Like other Control configuration information, this information is specific to each Profile. Use it to specify the network transports with which the Control can access Clients. You can also use it to configure the Control to automatically perform the following actions when it is started:

• Connect to a specified Client.
• Connect to a specified Group.
• Perform a Browse operation.
• Dial a Remote Network.
• Begin viewing the specified Client or Group.

To specify Connectivity and Startup Settings:

1. In the Configurations dialog, select the Profile you want to work with, and click the Connectivity and Startup Settings button.

2. In the Settings for Configuration dialog, amend the options.
3. Click the OK button to save your changes and return to the Configurations dialog.

   The Control initializes more quickly if its profile is configured to use only those transports that are used by Clients.
   
   To display the current Profile's Connectivity and Startup options, choose the Network, Configure menu command in the Control window.

Resetting Control Profiles

You can return a Profile's settings to their original, default values.

To Reset a Profile:

1. In the Configurations dialog, select the Profile you want to work with.
2. Click the Reset button. A warning message is displayed.
3. Click the Yes button to reset the Profile settings to their original values.

Creating Control Profiles

NetSupport PC-Duo enables you to create your own custom Profiles.

To Create a New Control Profile:

1. Display the Configurations dialog, then click the New button on the right of the dialog.
2. In the Create New Configuration dialog, enter a name for this New Profile in the Name box, then use the Copy From list to select the Profile on which you want to base the new Profile.

3. Click the OK button to create the Profile. The Profile is displayed in the Configurations dialog.

Configuring Controls to Record Control Sessions

As an aid to security and auditing, you can record the actions taken by Controls when they Share or Control a Client.

To Modify a Control Profile to Record Control Sessions:

1. In the Control Window, choose the Tools, Configurations menu command to open the Configurations dialog.
2. In the Configurations dialog, select the profile you want to edit and click the Settings button.
3. In the Settings for Configuration dialog, select the Replay Files page in the Security folder.

4. Select the Record Replay Files check box, and enter the location of the Control session recording.
5. Click the OK button to save your changes.
6. In the Configurations dialog, click the Select button to apply the updated profile to the current Client, then click the Close button to close the dialog.

For information on how to display a recording, see "Recording and Replaying Control Sessions".

Creating Shortcut Icons for Profiles

Once you have created a Profile, you can use NetSupport PC-Duo to create a shortcut icon which can be used to start the Control application using this Profile.

To Create a Shortcut Icon for a Control Profile:

1. In the Configurations dialog, click the Icons button.
2. In the Icon Maintenance dialog, position the mouse pointer over a blank part of the Icon Maintenance dialog, left-click and hold the mouse button, then drag the mouse pointer to where you want the shortcut icon to appear:
   • If you want the icon to appear on the Windows desktop, drag the mouse pointer to an empty part of the desktop and release the mouse button.
   • If you want to add the icon to the Start menu, drag the mouse pointer over the Start button to display the Start menu, then navigate to the submenu and release the button.
3. The Create or Edit Icon dialog is displayed. Use this dialog to specify a Title for the icon, then select the Profile you want to use when starting the Control application from this icon.

4. If you want to prevent the user from accessing other Profiles, select the Prevent user from switching to another configuration check box.
5. Click the OK button to close the Create or Edit Icon dialog, then click the Close button in the Icon Maintenance dialog.

Deleting Control Profiles

To Delete a Control Profile:

1. Choose the Tools, Configuration menu command in the Control application to open the Configurations dialog.
2. Select the Profile you want to delete from the Configurations dialog.
3. Click the Delete button. A message dialog is displayed, asking you to confirm this action. Click the Yes button to delete the Profile.

   You cannot delete a Profile that is currently in use. If you want to delete that Profile, you must first select another Profile.

Recording and Replaying Control Sessions

NetSupport PC-Duo Clients can be configured to automatically record the actions performed when a Control connects to it. The recorded file can then be replayed by a Control.

You can also configure a Control to record Remote Control sessions, using the options in the Settings for Configuration dialog's Print Capture and Replay page.

Configuring Clients to Record Control Sessions

You can amend a Client's configuration file to specify where recorded Remote Control sessions are stored.

To Configure a Client to Record Control Sessions:

1. In the Windows Start menu, choose the Programs, NetSupport PC-Duo Client Configurator command.
2. In the NetSupport PC-Duo Client Configurator dialog, click the Advanced button.
3. In the Client Configurator window, choose the File, Open menu command, and select the CLIENT32.INI file.
4. Select Master Profile in the list, then click the Edit button in the Toolbar.
5. In the Master Profile dialog, select the Replay Files page in the Security folder.

6. Select the Record Replay Files check box, and use the In Directory text box to specify where the files are saved. Alternatively, click the Browse button to select the directory.
7. If you want to restrict access to the recordings, click the Set button to enter a user name and password for the recordings directory.
8. Click the OK button to return to the Configurator window. Click the Save button in the Configurator Toolbar, then exit the Configurator application.

   If the CLIENT32.INI file is used by more than one Client, click the Set button and use the Add/Edit User dialog to specify the Clients for which you want to record Control sessions.
   
   You may want to store recorded Control sessions in a secure area on a server.

9. Restart the Clients to enable Control recording. Control sessions recordings are stored in the specified directory with an extension of .RPF.

Replaying Control Sessions

You can replay a recorded Control session using the NetSupport PC-Duo Control application. (It does not need to be the same Control that recorded the session.) When viewing a Control session, remember you are watching a recording of the actions performed by a Control. The actions are not repeated on the Client.

To Replay a Control Session:

1. In the Control window, choose the Tools, Replay menu command.
2. In the Open dialog, locate and select the file you want to replay. When you select a Replay file, information about the file is displayed at the bottom of the dialog.
3. Click the Open button. The recorded control session is displayed in the Replay window.

Using the Replay Window

The Replay window is used to display recorded Control sessions.

The Replay window has two buttons in its Toolbar:

• The Scale to Fit button enables you to display all of the recorded session in the Replay window. This eliminates the need to scroll to different parts of the window.
• The Full Screen button enables you to make the Replay window fill the entire Control screen.

These buttons act as toggles. Click them a second time to return the Replay window to its previous state.

The Replay Controls window is also displayed when you are replaying a Control session.

The Replay Controls window enables you to navigate the Control session which is being displayed in the Replay window:

• The gauge bar at the top of the Replay Controls window shows the progress of the recording. This gauge is divided into set intervals, with units of minutes and seconds.
• Information about the current Control session is displayed at the bottom of the Replay Controls window.
• The buttons enable you to control the display of the replay:

  Play / Stop Starts and stops the Control session. The button changes to Stop when the Control session is playing. The button changes to Play when the Control session is stopped.

  Rewind Start playing the file from the beginning if it is already playing; otherwise, moves the replay index to the beginning of the file.

  Skip to Previous Moves the replay index to the previous activity marker, or to the beginning of the file. These markers are added at points where lots of activity was recorded at the Client.

  Frame Advance Advances the replay index to the next frame. Click and hold this button to Fast-Forward though the replay file.

  Skip to Next Moves the replay index to the next activity marker, or to the end of the file.

When you have finished watching the Control session, choose the File, Close command to exit the Replay window.

Security for Dial-Up Links

Dial-up support is provided by the NetSupport PC-Duo Bridge programs. These enable access to Client PCs on which the Bridge utility is running, or to any PC on a network which has a Client loaded and Bridge utility running.

Because the NetSupport PC-Duo Bridge claims the serial port, it is very secure. It has been tested with products that use the serial port as a back door to gain access to a PC, and has proven to effectively lock these out. The Bridge utility can be configured to support the following security functions:

Access Password

Requires the user at the Control PC to enter a password before access is permitted. The password is encrypted at the Client end. This feature is in addition to any Client password restrictions already in effect.

Dial-Back

This function causes the Dialin Bridge to dial-back the Control PC according to the password entered by the Control when attempting to connect. You can associate different telephone numbers to different passwords, enabling you to set multiple dial-back numbers.

Configuring Gateways

Gateways enable Controls to access multiple Clients on a private network through a single IP address. Use the Gateway Configuration Utility to define the settings of a Gateway, and to specify the Gateway Keys that can be used to access Clients through the Gateway PC.

To configure a Gateway:

1. Right-click the Gateway icon in the Windows system tray and choose Configure Gateway from the shortcut menu.

   Alternatively, if the Gateway is not running, click the Start button in the Windows Taskbar and choose Gateway Configurator from the PC-Duo Program Group.

   The Gateway Configuration Utility dialog is displayed.

2. By default, PC-Duo Gateways use port 3085 to communicate with Controls and Clients. If you want to use a different port to transmit and receive data, enter the new port number in the Gateway Port field.

   If you change the port number of a Gateway, you must also specify the same port setting for all Controls and Clients using the Gateway.
   
   You must allow access to the specified port in any firewalls protecting the Gateway.

3. Each Gateway automatically records details of the Control sessions performed through it. If you want to change the directory in which the Gateway log file is stored, enter the directory path in the Location field.
4. If you want to specify a size limit for the Gateway log file, enter the limit in the Maximum file size field.
5. To define a key that can be used to access Clients through the Gateway:
   1. Click the Add button. The Gateway Configurator dialog is displayed.

1. Enter a Description of the key, and click the Set button.
2. In the Gateway Key dialog, enter the key for this Gateway. The key must be from 8 to 16 characters long and can contain any alphanumeric characters. Click the OK button to validate the key and save it.

   Gateway Keys control access to Clients. To access a Client through a Gateway, the Control's Gateway Key must match the Gateway Key specified for the Client and one of the Keys defined for the Gateway.

3. The key is displayed in the Gateway Configurator dialog. Click the OK button to add the key to the Gateway.

6. Click the OK button to apply your changes and close the Gateway Configuration Utility dialog.

   For more information on using Gateways, see "Gateways".

Vector Networks http://www.vector-networks.com Voice: +44 (0) 1827 67333 Fax: +44 (0) 1827 67068 info@vector-networks.co.uk