InfoSecurity Technology - Giving you the Edge

  
   Home / Network Security / DeviceLock FAQ  
 
  

 

Home
End-Point Security
Network Security
Password Recovery
How to Buy
Partner Program
About Us
News
Contact Us
Help
Jobs

  

Join our newslist:
 
 
 

DeviceLock FAQ

General


Registration & Payment


Installation


Troubleshooting
Miscellaneous

 
 

Q: What is DeviceLock? 
A: DeviceLock for Windows NT/2000/XP gives network administrators control over which users can access what devices (floppies, serial and parallel ports, Magneto-Optical disks, CD-ROMs, ZIPs, etc.) on a local computer. Once DeviceLock is installed, administrators can control access to floppies, CD-ROMs or any other device, depending on the time of day and day of the week. DeviceLock enhances access control for Windows System Administrators and helps control removable disk usage. It can protect network and local computers against viruses, trojans and other malicious programs often injected from removable disks. Network administrators can also use DeviceLock to flush a storage device's buffers. Remote control is also available.

DeviceLock has the same functionality as other SmartLine's product DeviceLock Millennium Edition for Windows 9x/Me but DeviceLock was designed specially for Windows NT/2000/XP.

Q: Can I be notified when DeviceLock is updated? 
A: Absolutely. To receive news about DeviceLock, join our mailing list. Enter your email address below, then click on the 'Join!' button:

 

 

Q: What limitations are there in an unregistered version? 
A: There are no functional limitations for an unregistered version and you may use DeviceLock (during the evaluation period) as a fully registered program but only on one computer. An unregistered version of DeviceLock displays nag screens.

Q: What is the easiest way to register DeviceLock? 
A: Online using a credit card at http://shopping.netledger.com/advancedforce.

Q: Is it safe to use my credit card on the internet? 
A: Yes. All our registrations use SECURE protocols. It is impossible for a third party to intercept your credit card information. We also offer alternative ordering methods (such as order by fax, toll-free phone, bank transfer, etc.).

Q: I bought the Single license of DeviceLock. Could I install DeviceLock on all the computers in my network? 
A: You may install DeviceLock Service on only a single computer but DeviceLock Manager can be installed on any number of your computers. The Single license gives you the right to use DeviceLock on one computer so you are able to control access on only one computer. If you wish to use DeviceLock on several computers, you need to purchase the appropriate number of Single licenses.

    For example, if you wish to control access on:
  • one computer - you need to purchase one Single license ($35);
  • two computers - you need to purchase two Single licenses ($70);
  • up to 200 computers within the one network domain - you can buy the Site/Domain license ($2500). If you decide to add new computers (up to 200) to the domain, you won't pay for the extra licenses!
  • up to 2000 computers within the one geographical location - you can purchase the World/Corporate license ($7500) and install DeviceLock on all the computers in your network. If you decide to add new computers (up to 2000) to the network, you won't pay for the extra licenses!
  • more than 2000 computers - please contact us directly for a quote.

Q: What is the difference between Site/Domain and World/Corporate licenses? 
A: The one Site/Domain license lets you install DeviceLock Service on all the computers in ONLY one domain or network group with 200 or less computers. If you wish to install DeviceLock Service on up to 2000 computers in all your domains within the one geographical location, you should purchase the World/Corporate license. Please contact us directly for a quote if the DeviceLock Service is to be installed on more than 2000 computers.

Q: I bought a license for DeviceLock. Do I need to buy another license each time DeviceLock is upgraded or a newer version is released? 
A: No. When you purchase a license (any kind) for DeviceLock, you automatically purchase all future releases and updates that will be released within 12 months from the date of purchase. It means that during one year you can download and install the latest versions of the software from our site, and the license keyfile that you received from us will work with the latest product version.

After 12 months If you don't want to purchase an upgrade, you can use the program forever; it will never expire, but you won't be able to use the latest version.

 

Q: Can I install DeviceLock on the Compaq Alpha platform? 
A: Yes. DeviceLock works on the Compaq Alpha platform as well as on Intel x86. You can download the native DeviceLock version for the Compaq Alpha platform from http://www.protect-me.com/dl/download.html.

Q: Can I install DeviceLock under Windows NT/2000/XP if I don't have administrative privileges? 
A: No. You cannot install DeviceLock under Windows NT/2000/XP without having administrative privileges. To correctly install DeviceLock under Windows NT/2000/XP you MUST have administrative privileges. If you are going to use DeviceLock only on a local computer, you must have local administrative privileges. But, if you are going to use DeviceLock throughout your network, you must have domain administrative privileges.

Q: Can I install DeviceLock under Windows 95/98 or Windows Me? 
A: If you want to control access to devices on Windows 9x/Me, you should look at DeviceLock Me.

Q: Is it possible to install DeviceLock automatically (without any user intervention)? 
A: Yes. Just run DeviceLock Setup with the /s parameter (e.g. "c:\setup.exe /s"). This gives an install that can be used from within a batch file.
There is a special configuration file for silent setup: devicelock.ini. With this file, you can customize the DeviceLock installation parameters. For example:

  1. "Lock Devices" parameters. Only members of the special local group, the operating system and the local administrators will have access to the devices on the local computer if one of these parameters is enabled:
    • Floppy - floppy drive;
    • Removable - removable device;
    • CDROM - CD-ROM;
    • Serial - serial port (COM);
    • Parallel - parallel port (LPT);
    • Tape - tape device
    If the parameter CreateGroups is enabled another special local group will be automatically created:
    • Allow_Access_to_Floppy
    • Allow_Access_to_Removable
    • Allow_Access_to_CDRom
    • Allow_Access_to_Serial
    • Allow_Access_to_Parallel
    • Allow_Access_to_Tape
    Otherwise if a group does not exist on the local computer, only the operating system and the local administrators will have access to the device.

  2. "Install" parameters.
    • Service - DeviceLock Service and its related files will be installed
    • Manager - DeviceLock Manager and its related files will be installed
    • Documents - documentation (DeviceLock Manual.pdf) will be installed
    • To specify a destination directory for DeviceLock, you can supply the parameter InstallDir
    • If you have the registration key file for DeviceLock you can specify a directory with this file in the parameter RegFileDir

  3. "Misc" parameters:
    • Run - this parameter is used to launch an application or execute a batch file after a successful install.

Q: Is it possible to install DeviceLock using Microsoft Systems Management Server (SMS)? 
A: Yes. You can use the package definition files (DevLock.pdf for SMS version 1.x and DevLock.sms for SMS version 2.0 and later) supplied with DeviceLock, located in the sms.zip file.

Q: Can I install the DeviceLock Service on the remote computer without having to physically go to it? 
A: Yes. DeviceLock supports Remote Install. If the DeviceLock Service isn't installed on the remote system or the DeviceLock version is too old, DeviceLock Manager will suggest that you install the service. Select the DeviceLock Service executable file (dlservice.exe) and DeviceLock Manager will copy it to the remote computer. The DeviceLock Service executable file will be copied to the Windows system directory (e.g. c:\winnt\system32) if this service doesn't exist on this system. If the service exists on this system but is too old, DeviceLock Manager will copy the executable file to the directory of the old file and the old file will be replaced.

 

Q: Which ports do I need to open on the firewall to allow DeviceLock to work? 
A: You need to open 135-139 ports and all ports above 1024 for incoming and outgoing packets:

  • Port 135 (TCP) - for Remote Procedure Call (RPC) Service
  • Port 137 (UDP) - for NetBIOS Name Service
  • Port 138 (UDP) - for NetBIOS Netlogon and Browsing
  • Port 139 (TCP) - for NetBIOS session (NET USE)
  • Ports above 1024 (TCP) - for RPC Communication
DeviceLock works like any other standard Windows NT/2000/XP administrative tool (such as Event Viewer, Services, Computer Management, etc.) so, if these tools work then DeviceLock will work, too.

You can find more information in the Microsoft's Knowledge Base

Q: I am receiving the error 1350 ("Unable to perform a security operation on an object that has no associated security") whenever I try to set permissions under Windows 2000. 
A: There is a bug in Windows 2000. This problem was corrected in Windows 2000 Service Pack 2.

You can find more information in the Microsoft's Knowledge Base

Q: I am receiving the error 1722 ("The RPC Server is unavailable") whenever I try to connect to a computer. 
A: The error 1722 means that DeviceLock Manager cannot access DeviceLock Service on the remote computer. There are several possible reasons:

  • the remote computer does not exist on the network (the computer's name or IP address is incorrect or this computer was shut down recently but its name still exists in the network browser);
  • the remote computer is not a Windows NT 4.0/2000/XP computer and DeviceLock Service cannot be installed on this computer;
  • the remote computer is behind a firewall that was not configured properly (to configure a firewall, please read this answer);
  • the remote computer is on another segment of your network that is not accessible from your segment, i.e. the routing was not configured properly and you cannot access that network's segment at all.

 

Q: Is it possible to manage DeviceLock remotely? 
A: Yes. You can use DeviceLock Manager. Just select a computer that has the installed DeviceLock Service.

Q: How can I simultaneously assign a group of users to a few devices? 
A: Select a few devices from the list (using CTRL or SHIFT), press the "Permissions" button and then choose the users. DeviceLock provides a very powerful function ("Batch Permissions") that helps you assign permissions to devices on several computers simultaneously. An administrator can very quickly set permissions for all the computers in a network.

 

 

 
 
   

AdvancedForce© 2002-2006