Welcome!
The Lock 97:

Comprehensive Windows 95 Workstation Protection

This program is Shareware

If you like this program please

sent $25 and any comments to:

Rob Boulden

1007 South Lewis

Stillwater, OK 74074

http://www.theknow.com/CrashCourse

Email:

Ash@ionet.net

CrashCourse@theknow.com

The Lock will offer password protection for the Windows 95 platform.  It can be setup to handle multiple temporary logins, as well as setup definable restricted access to the Windows 95 machine.  The Lock now has the ability to validate a users password locally or through a Novell Network Server.

All menu items are accessed through a pop up menu.  To access this menu, click on The Lock's icon in the system tray.

Menu Options: (accessed through icon right click or panel menu)

File Menu:

Passwords Menu:

Options Menu:

View Menu:

User Info:

Help Menu:

The Lock Notes:

Modes of Operation:

General Security Issues:

Special Thanks:

                                   .


Modes of Operation

The Lock.

This is the standard Password protection mode.  In this mode, you may use the master password, the Admin password (make sure you customize it) or the temp master password to stop The Lock.   The temp Sentry passwords will exit The Lock, but leave the Sentry running.

Note:  The temp passwords are good for a user defined limited number of accesses only.

The Sentry.

This is the standard protection mode to allow access to the machine, however, the user may not edit any system files, including the registry.  This mode is timed, and will start The Lock Password protection when time has expired.  There is a list (file limitation data) of Window titles that may not be run when The Sentry is in operation.  These window names must be entered exactly as they appear in each window.  This may be edited by selecting OPTIONS\Lock Config, and selecting Edit Files under the Sentry Options section.

Complete Protection

When The Lock is run in total protection mode, all aspects of the lock will require a password to change.  In this mode, the system will act in its normal fashion, however, The Lock will be running the entire time.  When in this mode, it will require the Admin password to close The Lock.  If the user shuts down the system, The Lock will show a prompt with a list of options for Windows shutdown.  Shutdown will not continue until the user makes a selection; this will offer a higher level of protection by not closing The Lock until Windows is about to close itself.   This mode of operation will not allow any files listed in the Sentry file box to run.

While running in this mode, if a user closes The Lock by pressing CTRL-ALT-DEL and selecting Close Program, or the use selects the Exit button on The Lock itself, The Lock will be restarted in password protection mode.

Using total protection in combination with Sentry Mode offers the highest level of workstation security.

Back to the top.

                                   .


The Lock Notes

The default Admin password is :PassWordCrash;

THELOCK.EXE may have its Admin password altered by selecting PASSWORDS/Admin Password from the pop up menu.  Once changed, only you will know the Admin password.  This will offer a second level of protection.   It is STRONGLY recommended that you change the Admin password from it's default of "PassWordCrash".    When the system is in total protection mode, the Admin password is required to change any major aspect of The Lock and to log out of the current session of The Lock.

Back to the top.

                                   .


Help Menu

Help to activate this help file.

About to view about information, version number, and registration information.

Back to the top.

                                   .


View Menu

View Log File to view the last log file.  All attempts to enter a password are logged with the

password that was tried, with the exception of the correct password.   In addition to the password attempts being logged, most every other entry item concerning The Lock is logged also.  (This includes password changes, messages viewed, log file viewed, etc.)

View Message File to view the last message file.  Persons may leave a message to you while the

lock is running by tabbing to the Leave MSG button and pressing enter, or by pressing ALT-L .

The messages are dated and timed.

While being viewed, the message base may be deleted.

Back to the top.

                                   .


Options Menu

Lock Config.

Misc Config-

Screen Saver Config:  This option will start the Windows 95 screen saver utility and allow the current screen saver to be changed.

Win IP Config:  Select this option to view the current IP configuration for this machine.

Write MSG: for other users to view when attempting to log into The Lock.

Start the Security Wizard: This is a step by step guide to protecting your system.

Back to the top

                                   .


File Menu

Activate Lock to activate The Lock Password Protection

Activate Sentry to activate the Sentry Timed Workstation protection.

Admin Logoff to exit the program while complete protection is activated.

Exit to exit the program.

Back to the top.

                                   .


Passwords Menu

Lock Password to change the Lock Password.

Admin Password to change the Admin Password.  (Default is PassWordCrash)

Temp Passwords  to change the temporary user passwords.

Back to the top.

                                   .


Default Password
Admin Password

This is the Admin password for The Lock.  It is hard-coded into the program and should be changed upon installation and initialization.

                                   .


Lock Password

This is the standard user login password.  It will be linked to the current Windows 95 user name, allowing multiple users to run The Lock on the same machine.  (Each user must have their account activated by the Admin user, or they should use Novell validation as the login method.)

                                   .


Temp Passwords

Temp passwords will allow non-users access to your machine.  Each temp password may be used any number of times (specified by you) before they expire.  The temp passwords are divided into two types.

Temp Master passwords will allow the user complete access to the machine.

Temp Sentry passwords will allow the user limited, monitored access to the machine.  In Sentry mode, system files are locked, and programs can be marked to be disabled if they are run.  (While this mode does not offer ultimate security, it does offer an extended layer of protection.)

                                   .


Novell Validation

Novell validation will allow the user of the Windows 95 machine to validate the login password with their default Novell server.

This feature will only work on a Network that is running Novell and requires NWCALLS.DLL available from Novell's web page or FTP site.

                                   .


Lock Options
Options Dialog

Startup Options:

Auto Run protection:  to activate The Lock password protection automatically upon program startup.

Load The Lock with Windows: To automatically load The Lock upon Windows startup.

Novell Validation  Will allow The Lock to validate user passwords through a Novell network.

Complete Protection:  This feature will require the master or admin password to close the program.  While in this mode, the system keys are disabled (CTRL-ALT-DEL, etc.)  While in this mode, the Master or Admin password is required to change any of The Lock's system options.

Run Hotkey: To start The Lock Protection Mode with an <ALT>+ single keystroke.  Hot keys must be between F1 and F10, or A and Z, or 0 and 9, or the ~ key.  When the Set Hotkey button is selected, the next key pressed, and  the <ALT> key will be the new hot key.   The default hotkey is <ALT>+ ~.

General Options-

Use Screen Saver: Select this item to use the Windows Screen Saver.  If the Windows Screen Saver is disabled or cannot be found, the Default Lock Screen Saver will activate.

Blank Screen on Protection: Select this item to blank the screen each time The Lock protection is started.

Show The Lock Panel: View the current status of The Lock.

Show  Panel Menu: Show The Locks Menu in the Panel window.

Activate after Idle Time: To automatically start The Lock's password protection after the system has remained idle for a certain length of time.  Use edit box to adjust max idle time.

Sentry Options-

Edit Files:

Max Sentry Time: Change the amount of time that Sentry protection will run before starting The Lock, and edit the file limitation data.

DOS Options-

Use Lock for DOS: This option will protect the system bootup while CONFIG.SYS and AUTOEXEC.BAT are being processed.  The Lock for DOS uses the Admin password.

Lock Win95 Boot Keys: This option will disable the Windows 95 boot up keys (shift f5, shift f8, f5, f8, etc);

Lock DOS Boot Keys: This option will disable the DOS boot keys. (F5 and F8, etc.);

Previous help.

Back to the top.

                                   .


User Info

View the current users login information.

Back to the top.

                                   .


Special Thanks

CrashCourse software would like to thank the following individuals for their suggestions, comments, and input:

Mike Cremin

Biff Stephens

Brad Buxton

Joel Swift

Chris Lenderman

Richard Kent

Michael Callahan

Back to the top.

                                   .


Edit Files

Adding files to monitor.

Enter data on which windows to not allow to run during Sentry or Complete Protection modes.

In the Classes edit blank, enter the class name of the Window to monitor.

A * may be entered to monitor all window classes for a specified title.

In the current title edit box, enter the name of the window to not allow operation.

A * may be entered to monitor all window titles, a * and part of the title will monitor any window with that part of the title in it.

Examples:

Class name:	Window Title	Close Action

windowsCab	C:\Win95	Any window with class windowsCab and title 'C:\Win95'.

windowsCab	*	Any window with class windowsCab and any title

windowsCab	*win95	Any window with class windowsCab and win95 in the title.

*	*win95	Any window with any class and win95 in the title.

Button Information:

Remove all: 	Remove all window data.

Remove:	Remove current selected window data.

Add:	Add current window data.

Clear:	Clear current edit boxes.

Capture:	Launch the window capture utility.

Using the Window Capture utility.

Select Capture to activate the Window information capture utility.  While this utility is running, select any open window that the system should not allow to operate, then press any key.  The window title and window class will now be entered into the appropriate edit boxes.  Click OK and the items will be added to the

monitor list, or click Cancel to ignore the information.

Back to the previous.

                                   .


General Security Issues:

The following nine security items must be addressed in order to ensure maximum security for the system.

1.  Physically secure the computer:  Use a locking case, or a locked closet.

2.  Protect CMOS with a password.

3.  Disable booting from the A: drive.

4.  Boot directly into Windows 95.  If multiple configurations are needed, use The Lock for DOS to protect the boot process.

5.  Auto load The Lock with Windows.  Auto run Protection Mode when The Lock is loaded.

6.  Be aware of any network connections to the machine.  Only share those resources that are needed by outside users.

7.  Always use the Complete Protection features of The Lock.

8.  Always use the idle detection timer to automatically activate Protection Mode.

9.  Never leave the machine without Protection Mode activated.

Back to the top.

                                   .