
                          DiaLOCK version 3.50
                           Installation Notes

This file is meant to supplement, not replace, information contained in the
Manager's Guide. It contains important information relating to product
installation and notes for those using the evaluation version of DiaLOCK.

Also included on this diskette is a file called 3_50.TXT which describes
changes and improvements that have been made to DiaLOCK version 3.50.

    Important Note: As it is illegal to distribute diskettes containing
    DOS system files, it is now impossible to boot a computer using a
    DiaLOCK installation diskette. You will need to start your computer
    with a system diskette prior to beginning installation.

Welcome!
--------
DiaLOCK is an access control and audit program for IBM PCs and compatibles
operating in MS-DOS, Windows or network environments. It provides a complete
set of security, management and productivity tools for shaping the computer
environment.

The product is both flexible and versatile. All DiaLOCK features can be
implemented independently and at a variety of levels and degrees. This gives
organizations the ability to customize the product to meet their individual
security needs.

DiaLOCK provides you with the ability to:

       - Control computer access,
       - Protect files, programs and directories
       - Prevent virus infections
       - Control physical units: keyboards, screens, floppy drives, hard
         disks, serial and parallel ports
       - Manage individual user environments
       - Audit system access and usage

Note on the Evaluation Version
------------------------------
If you have obtained an evaluation version of DiaLOCK, it is important that
you note the following. Control screen protection is deactivated on the
evalutaion version! When the control screen appears, the user can simply
press ENTER twice and access the computer with complete rights, regardless
of the program's configuration. Your system essentially has no protection.
When installing the Evaluation Version enter Manager for the User ID and
press enter for the Password.

PRECAUTIONS BEFORE INSTALLING DIALOCK BOOT
------------------------------------------
Please read the following sections prior to installing DiaLOCK.

Anti-virus Programs
-------------------
Before installing DiaLOCK, YOU MUST deactivate or remove any active
anti-virus programs. Such protections can be reactivated after DiaLOCK
installation, although it is preferred that you implement the DiaLOCK
strategy for virus prevention - see the Manager's Guide for more information.

Diskette Format
---------------
Installation of DiaLOCK must be made from drive A:. If your DiaLOCK diskette
is not in the right format, please contact your distributer for the correct
version.

Disk Compression
----------------
DiaLOCK is compatible with all major disk compression products, but the type
of compression you are using can affect the installation procedure.

MS-DOS 6.XX DOUBLESPACE - This type of compressor acts directly on system
files before reading the CONFIG.SYS, therefore posing no conflict with
DiaLOCK installation. Follow normal installation procedures on disks
compressed with DoubleSpace.

STACKER, SUPERSTOR, ETC. - These compressors create a new disk unit that
is set up after having loaded drivers in the CONFIG.SYS. In this case, you
must install DiaLOCK prior to the activation of these drivers. The steps
are as follows:

         1. Start the computer with a system diskette in drive A:
         2. Insert the DiaLOCK installation diskette in drive A:
         3. Type INSTALL [enter] to launch installation
         4. Follow procedures for standalone installation below
         5. Reboot your PC

DiaLOCK and MS-DOS 6.xx
-----------------------
PREVIOUSLY INSTALLED DOS 6.XX - Installing DiaLOCK on a PC equipped with
MS-DOS 6.xx poses no problems. Simply follow normal installation procedures.

NEW DOS 6.XX INSTALLATION - To perform a first time installation MS-DOS 6.xx
on a PC equipped with DiaLOCK, it is necessary to first de-install DiaLOCK
protection, install the new DOS version and re-install DiaLOCK. The steps
are as follows:

        1. Enter the Local Security Manager (LSM) as MANAGER and select
           REMOVE SYSTEM PROTECTION from the FILES menu.
        2. Select NO when prompted to delete program files.
        3. Reboot your PC
        4. Install, configure and test the new MS-DOS 6.xx system
        5. Enter LSM as MANAGER and select INSTALL DISK PROTECTION from
           the FILES menu.

MULTIPLE CONFIGURATIONS - New versions of MS-DOS allow the definition of
multiple configurations within CONFIG.SYS files. As DiaLOCK takes complete
control of the computer start-up process, including keyboard input, it is
impossible to use this new DOS feature. This is not a product limitation, as
DiaLOCK has always provided this service by linking configurations to users.
If an individual user wishes to have multiple personal configurations, simply
create a new user ID for that person linked to new CONFIG and AUTOEXEC file
versions. See the Manager's Guide for more information on assigning personal
configuration files.

F5 & F8 KEYS - These keys allow interactive execution of CONFIG.SYS commands.
For the reason stated above, these functions are not available on a DiaLOCK
controlled computer. If you wish to use these functions for troubleshooting
purposes, you will first have to deactivate DiaLOCK protection.

MEMMAKER - DiaLOCK device drivers are position sensitive, making it impossible
to use MEMMAKER.EXE or other similar memory management tools without first
deactivating DiaLOCK protection. See the Manager's Guide for additional
information.


Standalone Installation
-----------------------
To install DiaLOCK, you will need to boot your system from a system formatted
diskette and procede with the following steps from an A> prompt. You should
also have a blank system diskette ready for creating a backup diskette.

        1. Insert the DiaLOCK diskette in drive A:
        2. Type INSTALL [ENTER]
        3. Type Y to confirm installation
        4. In the ID field, type MANAGER [ENTER]
        5. In the Password field, press [ENTER]
        6. Press F10 to continue installation
        7. Provide blank system diskette when prompted to create backup
        8. Press [ENTER] to open the Configuration Menu, or
        9. Use F10 to access the upper menu options
       10. Press [ESC] at any time to leave a menu
       11. Press [ESC] twice in order to leave LSM

New Network Features
--------------------
DiaLOCK offers the following new network functions :
        - Automatic installation on a remote unit
        - Automatic transfer of users or user rights
        - Automatic update of user rights
        - Audits of remote PC configurations
        - All audits regrouped on the server
        - Automatic hardware and software inventory for each network station
        - Automatic password updates
        - Automatic server login : Single Sign-on

Installation on Novell Networks
-------------------------------
DiaLOCK can be installed on the server from any network station. The steps are
as follows:

        1. Install Dialock Boot on a network station by following the normal
           standalone installation procedure listed above.
        2. Connect yourself to the network as the SUPERVISOR.
        3. Start LSM and identify yourself as the MANAGER.
        4. Select INSTALL REMOTE WORK STATION from the FILE menu. Select the
           disk unit corresponding to the server, and validate to install
           LSM on the server. At this point, you will be able to paramater
           user profiles and establish different user databases that you want
           to spread throughout the network. See the Manager's Guide for
           additional information.
        5. Select INSTALLATION DIRECTORY under the PARAMETER menu to modify
           the path to which the installation files will be saved. (Usually
           F:\GLS\DISK)
        6. Quit LSM.
        7. Modify the user LOGIN SCRIPT to make all DiaLOCK network functions
           automatic. Do this by adding the following lines to each user's
           SCRIPT:
           #server_name\SYS:\LSM\TOOLS\NET_NUM.EXE /S /server_name/SYS:
           #server_name\SYS:\LSM\TOOLS\DBUPDATE.EXE /NETWARE
           #server_name\SYS:\LSM\TOOLS\DBNET.COM /ON
           (To modify user SCRIPTs, launch SYSCON.EXE in the PUBLIC directory.
           Select SYSTEM LOGIN SCRIPT under SUPERVISOR OPTIONS. Insert the
           lines displayed above, save, and quit SYSCON.)

Please see the Manager's Guide for additional information on Novell network
installations, as well as further explanations of command line options.

Installation on Other Types of Networks
---------------------------------------
Please see the Manager's Guide for additional information on installing
DiaLOCK on non-Novell networks.

Installing Windows Functions
----------------------------
Using a text editor, or Windows' own SYSEDIT, add the following lines to
the first section [windows] of the WIN.INI file.

load = C:\LSM\WINDOWS\DBAUDIT.EXE
load = C:\LSM\WINDOWS\DBSAVER.EXE
load = C:\LSM\WINDOWS\DBWIN.EXE

DBAUDIT - provides audit information on Windows sessions
DBSAVER - provides access control Screen Off services under Windows
DBWIN - provides a user accessable icon allowing the control of various
functions, including password changes and Sreen Off parameters.

See the Manager's Guide for additional information on using DiaLOCK functions
under Windows.

Standalone Deprotection
-----------------------
Always follow this procedure carefully to deinstall DiaLOCK:

        1. You will need the original DiaLOCK diskette
        2. Turn on your PC
        3. Pass the identification screen as the MANAGER
        4. Start LSM and identify yourself as the MANAGER
        5. Insert the DiaLOCK diskette in drive A:
        6. Select REMOVE SYSTEM PROTECTION from the FILE menu
        7. Follow instructions as they appear on screen
        8. Quit LSM
        9. Remove the diskette from drive A: and reboot the computer

Network Deprotection
--------------------
To remove DiaLOCK protection from a network, follow these steps:

        1. Turn on the station
        2. Pass the identification screen as the MANAGER
        3. Connect yourself to the server as the SUPERVISOR
        4. Verify that the INSTALLATION DIRECTORY option under the PARAMETER
           menu indicates F:\LSM\DISK (the files required for deprotection
           are on the server hard disk, in the directory SYS\LSM\DISK)
        5. Start LSM on a station and identify yourself as the MANAGER
        6. From the FILE menu, select the option REMOVE SYSTEM PROTECTION
        7. Follow the instructions that appear on screen

