Lockdown Management

In this section:

About Lockdown
Create a Lockdown Using the General Wizard
Configure an Edit or Combo Box Control Lockdown
Keyboard Wizard
Office Wizard

About Lockdown

Lockdown is a mechanism to restrict or disable access to application and operating system functionality, keyboard shortcuts and Microsoft Office application menus, toolbars and ribbons. By applying conditions to triggers, user actions and application usage can be controlled. For example:

Prevent users deleting browsing history using Internet Explorer Settings

Stop users from changing network settings
Lockdown shortcut keys, such as Print Screen
Lockdown actions can only be applied to nodes within User triggers and are not available for Computer triggers.

Using a combination of settings an overall policy of computer usage within an organization can be defined to ensure computers are used appropriately and systems are not compromised.

The functionality is accessed from the Tools & Wizards ribbon or from the work area shortcut menu.

Create a Lockdown Using the General Wizard

Open the application which you want to lockdown and navigate to the item you want to block. For example, to lockdown the security options in Internet Explorer, open the Internet Options dialog.
In the Environment Manager console, select the Policy Configuration navigation button.
In one of the User triggers, create a new node or select an existing node to which you want to add the lockdown action.
In the Tools & Wizards ribbon Lockdown group, select General Wizard.
In the General tab, enter a name and optional description for the lockdown.
In the Lockdown tab click and hold the Spy Tool button.

The Environment Manager console is minimized exposing the open application.
Drag the cursor onto the control in the application requiring lockdown. A red border indicates the control selected and the available lockdown options are displayed.
Release the mouse button to select.

Control returns to the Environment Manager console, enabling options for the lockdown to be defined. When the configuration is deployed to users, the lockdown is applied.

There are different control types for lockdown relating to various application and operating system functionality. Each control type has different characteristics and settings. See General Wizard.

Configure an Edit or Combo Box Control Lockdown

Use the Spy Tool in the General Wizard to select an Edit or Combo Box control.
Select edit control filtered.
In the General tab of the Edit Control dialog box, give the lockdown a Description and add any optional Notes.
Select the Lockdown tab.
Select a message which will display when the lockdown is breached. Existing messages can be added from the drop-down list or new messages created by clicking the ellipsis (...).
Click Add to configure block text libraries.
Click OK to save.

To set up Block Text and Blocked Message libraries, see Message Libraries.

Keyboard Wizard

The Keyboard Wizard prevents keys or a combination of keys, being used on the keyboards of managed computers. The keys can be locked down across the whole computer or restricted to certain applications.

Select the Policy Configuration navigation button.
In one of the User nodes, create a new node or select an existing node to which you want to add the lockdown.
In the Tools & Wizards ribbon Lockdown group, select Keyboard Wizard.
The Keyboard Lockdown dialog displays.
Configure the following information:
- The key or combination of keys to be locked down - with the cursor in the first field, press the key or combination of keys to be locked down.
- Define whether left and right versions of the same key are treated independently - select the checkbox to identify the keys separately. For example, Left Ctrl and Right Ctrl.
- Select a radio button to control whether the lockdown should apply to All Applications or a Selected Application. Use the ellipsis (...) to browse to the application or drag-and-drop the spy tool onto the required application.
Click OK.

The key or key combination is disabled as defined once the configuration is saved and deployed.

Office Wizard

The Office Wizard is used to lockdown specific Microsoft Office functions. Toolbar, menu and ribbon items can be disabled in Microsoft Office applications.

Select the Policy Configuration navigation button.
In one of the User nodes, create a new node or select an existing node to which you want to add the lockdown.
In the Tools & Wizards ribbon Lockdown group, select Office Wizard.
Click Next in the Welcome screen. All supported, installed Microsoft Office applications are listed.
Select the application you want to lockdown and click Next to open the application and display a list of all menu options.
Select the menu items you want to disable. Use the search facility to find specific items.
Click Next to display a list of Toolbar or Ribbon items.
Select the Toolbar or Ribbon options which you want to disable. A search facility is available to find specific options.
Once all Menu and Toolbar or Ribbon items for lockdown have been selected, click Next. The Summary screen displays details of the number of controls selected for lockdown.
Select the Do not apply lockdown settings permanently checkbox as required.