1. After the function of printing prohibition has been set to "Prohibit", printing still can be performed through "Windows picture and FAX viewer".
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
Because the function of "Windows picture and FAX viewer" attached to Windows performs printing through other program, it cannot be prohibited.
[Resolution]
Upgrade to V14.1.0 or later. Printing through "Windows picture and FAX Viewer" can be prohibited.
2. The logon prohibition function cannot be operated.
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
In the Systemwalker Desktop Keeper prior of V13.0.0, only the user information of local group is managed target. Therefore, when the user managed by domain is logged in, the function of logon prohibition will not be operated.
Users of the following groups are not managed target s.
Domain Admins
Domain Guests
Domain Users
Enterprise Admins
Group Policy Creator Owners
[Resolution 1]
Create a user that is the same as the user managed in domain under local environment as well, and make it belong to the group of the logon prohibition target s. After that, when the user ID that has the same name in domain is used to login, the function of logon prohibition will be operated.
[Resolution 2]
Update to version after V13.2.0. The group mentioned above will be managed target.
3. Policy is not set, but the logon prohibition message is displayed and shutdown (logoff) is performed.
Error message
"[E601-INF001] The logon of this user is prohibited. Log off by force after 30 seconds." Or
"[E602-INF002] The logon of this user is prohibited. Shut down by form after 30 seconds."
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
In the client (CT) that is shut down (logoff) during logon after logon prohibition has been set, after logon prohibition is cancelled, click the [Update at Next Startup] button, but it will still shut down (logoff) at logon after restart.
When "Update Policy at Next Startup" is selected, it will take certain time to start from the startup of Systemwalker Desktop Keeper service to the time when the modified policy takes effect. After the login to the client (CT) has completed before the policy is distributed from the Management Server, the previous policy is still effective, so it will be shut down (logoff).
[Resolution]
When modifying the logon prohibition setting as "Update Policy at Next Startup", login for a while after OS is restarted.
In addition, if updating by clicking the [Update Immediately] button, this phenomenon will not occur.
4. E-mail attachment prohibition has been set, but the E-mail with attachment can still be forwarded.
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
Systemwalker Desktop Keeper will judge whether to prohibit the detected operation of attaching a file or not. At E-mail transmission, if no file is attached, the file attachment operation cannot be detected.
However, in V13.2.0 or later, when the method of E-mail attachment prohibition is modified to [Port Monitor Mode (Recommended)], this phenomenon will not occur.
[Resolution]
SE V13.0.0 or earlier:
No resolution. Update to V13.2.0 version. At installation of the client (CT), set the method of E-mail attachment prohibition to [Port Monitor Mode (Recommended)].
SE V13.2.0 or later:
Install client (CT) again. Set the method of E-mail attachment prohibition to [Port Monitor Mode (Recommended)].
5. File export to SAMBA cannot be prohibited.
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
Export to the server on network will not be prohibited target. Therefore, export to SAMBA server cannot be prohibited.
However, in SE V12.0L20 and the versions later than V13.0.0, the function of network disk file operation recording has been added, and logs relating to file export to network server can be extracted.
For printing prohibition, files on the network are also in the range of prohibition target s. Printing of file on SAMBA server can also be prohibited.
[Resolution]
Update to version V14.2.0 or later. Prohibition of file export on SAMBA is supported.
6. In the setting of export prohibition, [Removable] is selected, but export to the HDD connected through USB cannot be prohibited.
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
In versions earlier than V12.0L20, even if [Removable] is selected, export to HDD connected by USB cannot be prohibited .
[Resolution]
In case of V12.0L20 or earlier, select the drive letter to prohibit.
In case of V13.0.0 or later, prohibition can be achieved by selecting removable disk.
7. In export prohibition function, [Yes (allow normal export)] or [Yes (allow encryption export)] is selected for DVD/CD, but the recordable CD-R will be ejected when it is inserted and cannot be viewed.
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause 1
In case of V12.0L20 or earlier, as long as the writable media is inserted, Systemwalker Desktop Keeper will eject the media by force.
[Resolution]
Use one of the following resolutions.
Set policy, cancel the prohibition of file export only when viewing the content of CD.
View CD on the computer (server .etc) without setting of file export prohibition by following the policy.
Cause 2
When inserting writable DVD/CD media, if session is not closed on DVD/CD (writing/postscript is possible at Track AT Once), the disk is in the status that can continue to be written. However, because additional burning is prohibited, it is ejected by force.
[Resolution]
If it is desired not to eject CD-R and view, close the session of CD-R (complete Finalization/prohibit burning).
Because CD-RW can be erased and re-burned, even session is closed (complete Finalization/prohibit adding), it will be ejected.
In the version of V13.0.0 or later, viewing is achievable without CD-R of session or CD-R is closed.
8. DVD-ROM cannot be viewed.
Error message
"System Administrator prohibits the writing of data into DVD,CD."
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
On the DVD multi-drive of the client (CT) in which the export prohibition has been set, this phenomenon will occur when WinDVD5 software is used to view DVD-ROM.
Because the operating system of WinDVD5 is different from other player software, the normal operation of WinDVD5 cannot be ensured in Systemwalker Desktop Keeper.
[Resolution]
Use other DVD software.
9. On the client (CT) with the policy of E-mail attachment prohibition applied, after double-clicking the original ".eml" file, the message indicating to prohibit the file attachment will be displayed.
Error message
"[D1F1-INF001] Adding this file as E-mail attachment is prohibited by system administrator. (File prohibited to be added: <File Name>)"
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
In V13.0.0 or earlier and V13.2.0 or later (when the method of E-mail attachment prohibition is in compatible mode from V12.0L20 to V13.0.0), the operation of double-clicking the .eml file and attaching file to E-mail are judged as the same operation (same event as prohibition pattern occurs) inside the system, this phenomenon occurs.
However, in V13.2.0 or later, when the method of E-mail attachment prohibition is specified to [Port Monitor Mode (Recommended)], this phenomenon will not occur any more.
[Resolution 1]
Do not view the E-mail by double-clicking the file. View by double-clicking the list of E-mails from the E-mailer.
[Resolution 2]
In case of SE V13.0.0 or earlier:
Update to V13.2.0, and set the method of E-mail attachment prohibition to [Port Monitor Mode (Recommended)] when client (CT) is installed.
In case of SE V13.2.0 or later:
Install client (CT) again, and set the method of E-mail attachment prohibition as [Port Monitor Mode (Recommended)].
10. On the client (CT) with the policy of E-mail attachment prohibition applied, when opening the E-mail sent using the style sheet, the message indicating to prohibit the file attachment will be displayed.
Error message
"[D1F1-INF001] Adding this file as E-mail attachment is prohibited by system administrator. (File prohibited to be added: <File Name>)"
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
In V13.0.0 or earlier and V13.2.0 or later (when the method of E-mail attachment prohibition is in compatible mode from V12.0L20 to V13.0.0), the operation of opening E-mails sent using style sheet and attaching file to E-mail are judged as the same operation (same event as prohibition pattern occurs) inside the system, this phenomenon occurs.
However, in V13.2.0 or later, when the method of E-mail attachment prohibition is specified to [Port Monitor Mode (Recommended)], this phenomenon will not occur any more.
[Resolution]
Versions earlier than SE V13.0.0:
No resolution. Update the version to V13.2.0, and set the method of E-mail attachment prohibition to [Port Monitor Mode (Recommended)] at the installation of the client (CT).
Version SE V13.2.0 and later:
Install client (CT) again and set the method of E-mail attachment prohibition to [Port Monitor Mode (Recommended)].
11. In customization of the start menu of Windows(R) XP, the E-mail client cannot be modified.
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
In Systemwalker Desktop Keeper program, in order to realize the function of E-mail attachment prohibition, the system will monitor the information set in the customized [Start] menu and delete the information. Therefore, the original E-mail will view the information set in Internet options.
[Resolution]
Modify the program of Internet Options to modify the regulated E-mail.
For modifying the regulated E-mails, login to the client (CT) with the user of PowerUser/Administrator authority.
12. The link of E-mail in the [Start] menu disappears.
Target Version/Edition
BE V12.0L10 | BE V12.0L20 | BE V13.0.0 | BE V13.2.0 | BE V13.3.0 | V14.0.0/V14.0.1 | |
SE V12.0L20 | SE V13.0.0 | SE V13.2.0 | SE V13.2.1 | SE V13.3.0 | V14.1.0 | |
V14.2.0 |
Cause
In Systemwalker Desktop Keeper prior to V13.0.0, in order to achieve the function of E-mail attachment prohibition, after the Edition (SE) that has the function of E-mail attachment prohibition, the link to E-mail will be deleted from the [Start] menu.
[Resolution 1]
In order to activate the link to E-mail inform the [Start] menu, restart after uninstalling Systemwalker Desktop Keeper.
[Resolution 2]
Update to V13.2.0 and later. During version update, select [Port Monitor Mode] in the [E-mail Attachment Prohibition (E-mail Attachment Prohibition)] window.
