User Activity Monitor : Monitoring Settings : Rules
  
Rules
User activity monitoring rules determine the conditions to start and stop recording the user activity. The recording of the activity of a given user begins when the conditions of the rule configured for that user are met, and stops when those conditions cease to be met. Different rules can be configured for different users or groups of users.
The users and groups for which monitoring rules are configured are listed in the console tree under User Activity Monitor > Rules. These users and groups are also listed in the details pane when the Rules node is selected in the console tree. To view which rules are configured for a specific user or group, select that user or group under the Rules node in the console tree. The list of the rules will appear in the details pane (see Managing existing rules).
The shortcut menu on the Rules node provides the following commands (next to the command name is the toolbar button corresponding to that command):
Manage - Opens a dialog box to set, view, or change the online mode rules (regular profile).
Manage Offline - Opens a dialog box to set, view, or change the offline mode rules (offline profile).
The dialog box for managing rules is similar for each of these two commands, but it manages different rule sets depending upon the command involved. For description of this dialog box, see Dialog box for managing rules.
The offline mode rules take effect when the computer is not connected to the enterprise network; otherwise if offline mode is not configured or undefined, the online mode rules are applied in all cases. For details on how the DeviceLock Service determines whether the computer is connected to the enterprise network, see Configuring Offline Mode Detection Settings.
Load - Imports rules from a file, and applies them for online mode. A dialog box opens to select the file to which the rules were saved.
Load Offline - Imports rules from a file, and applies them for offline mode. A dialog box opens to select the file to which the rules were saved.
Save - Exports the online mode rules to a file. A dialog box opens to specify the file to which the rules will be saved.
Save Offline - Exports the offline mode rules to a file. A dialog box opens to specify the file to which the rules will be saved.
Undefine Offline - Deletes all offline mode rules, with the result that online mode rules will be applied both in online mode and offline mode.
These commands (with the exception of the Undefine Offline command) are also available in the shortcut menu on each user or group in the Rules node. In addition, the user/group menu includes the Delete User command intended to remove the selected user or group from the Rules node. For the users and groups that have been removed from the Rules node, the effect of the rules is terminated.
In DeviceLock Group Policy Manager and DeviceLock Service Settings Editor, the shortcut menu on the Rules node also includes the following commands:
Undefine - Resets the online mode rules to the unconfigured state. Use this command to configure the DeviceLock Service settings so that the User Activity Monitor rules for regular profile are removed.
Remove Offline - Blocks the inheritance of the offline rules and enforces the regular profile rules. Use this command to configure the DeviceLock Service settings so that the User Activity Monitor rules for regular profile are applied in both online mode and offline mode.
Management of monitoring rules involves the following activities:
Creating rules
Managing existing rules