Managing existing rules
The users and groups with the configured user activity monitoring rules are listed in the console tree under User Activity Monitor > Rules, and also in the details pane when the Rules node is selected in the console tree. To view the rules for a user or group, select that user or group in the console tree, or double-click the user or group in the details pane. As a result, the details pane lists the rules for the given user or group, with the following information on each rule:
•Name - Displays the name of the rule. The name is assigned when creating the rule, and it can be changed when editing the rule.
•Description - Displays the description of the rule. Description may provide any additional information about the rule (for example, the purpose of the rule). A description can be set or changed when creating or editing the rule.
•Screen Capture - Indicates whether the rule causes the DeviceLock Service to perform video recording of the user’s computer screen. This option can be set or changed when creating or editing the rule.
•Keylogger - Indicates whether the rule causes the DeviceLock Service to record the sequence of keystrokes from the user’s computer keyboard. This option can be set or changed when creating or editing the rule.
•Condition - Indicates the recording start condition specified in the rule. The condition is a logical expression composed of one or more triggering criteria united by logical operators. Recording starts when this expression evaluates to true. The condition can be set or changed when creating or editing the rule.
Note: As the condition always contains the criterion User logged in, the Condition field normally does not display this well-known criterion. It is displayed only if the condition does not contain other triggering criteria. |
•Profile - Possible values:
•Regular - The rule is applied when the computer is connected to the enterprise network (online mode rule). This profile is assigned to the rules created by using the Manage command.
•Offline - The rule is applied when the computer is disconnected from the enterprise network (offline mode rule). This profile is assigned to the rules created by using the Manage Offline command.
The profile is assigned when creating the rule, and it cannot be changed once the rule has been created.
The shortcut menu on a user or group provides all the commands from the shortcut menu of the
Rules node, with the exception of the
Undefine Offline command. In addition, it includes the
Delete User command intended to remove the user or group from the
Rules node. For the users and groups that have been removed from the
Rules node, the effect of the rules is terminated.
The shortcut menu on a rule in the details pane provides the following commands:
•Manage - Opens a dialog box to set, view, or change user activity monitoring rules. In the case of selecting this command on a regular-profile rule, a dialog box opens for managing the online mode rules. In the case of selecting this command on an offline-profile rule, a dialog box opens for managing the offline mode rules. The dialog box looks similar in each of these two cases, but it serves to manage different rule sets depending upon the profile of the rule on which the
Manage command is selected. For description of this dialog box, see
Dialog box for managing rules.
•Screen Capture - Toggles the rule’s setting that controls the video recording of the user’s computer screen. Click this command to turn the video recording on or off. If multiple rules are selected, the Enable Screen Capture / Disable Screen Capture commands are displayed instead of this command.
•Keylogger - Toggles the rule’s setting that controls the recording of keystrokes on the user’s computer keyboard. Click this command to turn the keystrokes recording on or off. If multiple rules are selected, the Enable Keylogger / Disable Keylogger commands are displayed instead of this command.
•Delete - Deletes the rule/s selected in the list. One can select multiple rules to delete at once.
Note: Deleting a rule normally does not interrupt the recording started by this rule and continuing at the time the rule was deleted. The rule’s effect in this case ceases after the recording is completed. However, if the user is assigned only one rule, then deleting that rule interrupts the recording. |