###7###
      ͻ
        PC-ARMOUR    (c) S & S International, 1990,91,92  
      ͼ

<TAB> switches between the menu and help windows.

THE HELP WINDOW: The cursor keys and <PGUP>, <PGDN>, <HOME>, <END>
scroll through the help text. <TAB> switches back to the menu window.

THE MENU WINDOW: Use the cursor keys to move through the menu; <ENTER>
selects. Most menu lines are option toggles which change between
checked ( = operative) and unchecked (inoperative) when selected.
When the correct options are set push <F10> or select the "START
INSTALL" bar to start installation.

Some useful option combinations:
Ŀ
 B  A  P                   PROTECTION                      
Ĵ
                    maximum protection                  
                                                           
           anyone can use the PC, but unauthorised       
                     software can't be run                 
                                                           
         only permitted users,  no controls over s/w     
                                                           
           provides anti-virus control, which can be      
                bypassed by booting from diskette          
Ĵ
 [B]oot Protection, Program [A]uthorisation, Boot [P]assword  


***********************  END OF HELP SECTION  ************************

###1###
Ŀ
 BOOT PROTECTION IMPLEMENTS:                                     
Ĵ
  Hard Disk Hiding                                              
  Disabling of <CTRL>-<C>/<CTRL>-<BREAK> During Hard Disk Boots 


This option protects you against someone booting your computer from a
floppy disk, thereby gaining unauthorised access to the hard disk. PC-
Armour puts "boot protection" on the hard disk so that if the PC is
booted from a floppy disk, DOS reports that the hard disk is not
there. If you type C:, DOS responds with "Invalid drive specification"
or defaults to the next logical drive. Even most low-level programs
will not then be able to access the hard disk.

In order to use this option, PC-Armour needs an "installation
password". This is explained in the manual section on installation.
You may one day want to remove the boot protection; if you know the
password, you can do this with "DISARM", otherwise you will have to
re-install the hard disk from square one (low level format and so on).
Look after this password; you may want it a few years from now.

Without it, your only options are to reformat the hard disk or to call
S & S for help. We can remove PC-Armour from a disk, or tell you how,
but we would require evidence that you are authorised to do this.

***********************  END OF HELP SECTION  ************************

###2###
Ŀ
 PROGRAM AUTHORISATION IMPLEMENTS:                              
Ĵ
  Attempting  to execute any program,  unless it is explicitly 
   authorised for the appropriate PC, will fail with an "Access 
   denied" message.                                             
  Attempts to copy un-authorised programs will fail.           
  The AUTOEXEC.BAT file is protected against casual tampering. 


This option allows only programs which have been authorised using your
copy of AUTHORIS.EXE to run on your computer. This is done with the
authorisation "key" word, which you can choose. This key is embedded 
into your copy of AUTHORIS.EXE, so you need not remember it, but you 
must keep your copy of AUTHORIS.EXE safe. If you use program
authorisation, the line "C:\ARMOURN" is added to your AUTOEXEC.BAT
file, and AUTOEXEC.BAT is made hidden, system and read only to deter
unauthorised people from tampering with it. However, you can inspect
the contents of it by typing "TYPE AUTOEXEC.BAT" at the DOS prompt.

***********************  END OF HELP SECTION  ************************

###3###
Ŀ
 BOOT-UP PASSWORD IMPLEMENTS:                                     
Ĵ
  When the computer is booted, a password is required before the 
   user can proceed.                                              
  The AUTOEXEC.BAT file is protected against casual tampering.   


The Boot-up password can not be effective unless boot protection is 
also installed to prevent access to the hard disk after a floppy boot.

The third option in PC-Armour is to install access control using a
password which must be entered each time the computer is booted. If
you try to use the computer without this password, on the third wrong
guess the PC will reboot. If you use the boot-up password, the line
"C:\PASSWORD" is added to your AUTOEXEC.BAT and AUTOEXEC.BAT is made
hidden, system and read only. You can still inspect the contents of
AUTOEXEC.BAT by typing "TYPE AUTOEXEC.BAT" at the DOS prompt. The
password is user-changeable and you can have multiple passwords for
each computer.

If a boot-up password is not required, you will find that PC-Armour 
puts a small program called TIDYUP.EXE in the AUTOEXEC.BAT. This 
program re- enables the <CTRL>-<BREAK> which the previous elements of 
PC-Armour have disabled.

***********************  END OF HELP SECTION  ************************

###8###
With this option checked Armour will ask for only one password, which
it will use for all chosen protections (the default being to request 
separate installation and boot-up passwords, and Authorisation "key").

This facility exists to simplify the installation process, but it 
provides less security. It is usually preferable to choose separate 
passwords for each protection.

***********************  END OF HELP SECTION  ************************

###9###
All the executable files on your C: drive will be authorised. This is 
only relevant if the Program Authorisation option has been selected.

If Armour's Program Authorisation is installed without selecting this 
option, only the standard DOS shell (COMMAND.COM) and certain 
PC-Armour files will be authorised. Attempting to run any other 
software will return the message "Access denied."

A simple way to stop users bringing in outside software - to restrict
them solely to the programs they are intended to use - would be to 
take unwanted software off the hard disk, then install Armour with the 
"Authorise All" option selected. All the programs on the user's drive 
C: will then be authorised, and AUTHORIS.EXE can then be moved off C:\ 
onto a diskette.

Authorisation of all the files on any drive can also be performed by
running AUTHORIS /ALL in the root directory of that drive. Letting the
install program do this for you now will prevent software called from
AUTOEXEC.BAT failing when you reboot after installation.

***********************  END OF HELP SECTION  ************************

###4###
The protections in PC-Armour always apply to the first hard disk (C:),
and its programs are put into the root directory of C:\. This menu
option allows the user to change the drive or directory Armour is 
installed FROM.

When run, INSTALL.EXE sets the install path to the directory it was
found in. This default will generally be correct.

If there is any need to change the install directory select this menu
line with <ENTER>. An edit window will appear so that the path line
can be modified. Enter the directory in which the installation files
are to be found.

***********************  END OF HELP SECTION  ************************

###6###
Hitting <F10> (or <ENTER> when this bar is selected) will start the
installation process, providing at least one of the three protection
options is checked.

After the menu screen clears the installation program will request any
necessary passwords, each being entered twice.

Install will then proceed to copy the relevant parts of PC-Armour into
the root directory of your first hard disk, explaining what it is
doing at each stage. Any errors will display an error window and halt
the installation.

After installation has been successfully completed, you will be asked
to press a key. INSTALL.EXE is now finished. You should remove any
diskette in drive A: and reboot the computer to initiate your chosen
protections.

***********************  END OF HELP SECTION  ************************

###END###

