Read-Only Blanketing

At Security > Data > Read-Only Blanketing you can configure Read-only Blanketing. With Read-Only Blanketing, you can render all local drives on servers and desktops in your environment read-only, without touching Microsoft Windows security permissions on files and folders. This allows you to safeguard data against unauthorized access or modification by Workspace Control users, and secures the user workspace against corruption and loss of information.

Read-Only Blanketing allows you to prevent users from:

  • Saving data on local drives. If Read-Only Blanketing is enabled, data can only be saved on network drives.

  • Accidentally overwriting or deleting system files and other important files on their desktops.

The following folders are automatically excluded from Read-Only Blanketing:

  • The Recycle Bin on each local drive

  • %userprofile%, %allusersprofile%

  • Tmp and temp locations

  • Spool in system32 folder

  • Debug\usermode in system32 folder

  • The server console

Export log to CSV file

To export the information found under the Log tab as a CSV file, follow these steps:

  1. Open the Workspace Control Console and navigate to Security > Data > Read-Only Blanketing > Log tab.

  2. Right-click on any entry and then select Export to file from the context-menu.

  3. Select a location where to save the CSV file, enter an appropriate name for the file and then select Save.

Export log using the command line

Ivanti recommends to test first by exporting just one or two days of data.

Security logs can also be exported using the pwrtech command line:

pwrtech.exe /exportlog /type=rob /output=<output filepath> [/outputtype=csv] [/start=<start date>] [/end=<end date>]

/outputtype, /start and /end are optional parameters. If /outputtype is not specified, then the security logs are exported as XML files instead of CSV files.

Replace the following with the appropriate values:

  • <output filepath> — Enter the full filepath where to save the CSV or XML file.
    For example: C:\export\read_only_blanketing.csv.

  • <start date> — Enter the start date to export log entries starting with the specified date.
    The format for date is YYYYMMDD. For example: 20161130.

  • <end date> — Enter the end date to export log entries up to the specified date.
    The format for date is YYYYMMDD. For example: 20180523.

For example:
pwrtech.exe /exportlog /type=rob /output=C:\export\read_only_blanketing.csv /outputtype=csv /start=20161130 /end=20180523