This is the log when the PrintScreen key is operated in the case that the use of the PrintScreen key is prohibited in the client (CT).
"The Use of PrintScreen Key is Prohibited" refers to the situation in which screen capture cannot be collected even if the PrintScreen key is pressed.
When logging, the screen capture at the time when the PrintScreen operation is performed can also be collected.
How to apply
Though the use of the PrintScreen key is prohibited, the user who intends to collect screen capture and perform violation operations can be found. Because the kind of screen capture to be collected is known, what kind of operation is going to be performed can be predicted. This can help prevent behaviors that may lead to a significant security problem.
Set policy for collection
Set policy in the Terminal Initial Settings window, the User Policy Settings window or the window after the Management Console is started (CT policy settings window).
When two of the following has been set, the PrintScreen key prohibition log will be collected.
Set PrintScreen Key Operation Log to No in Windows > Log collection operation.
Set PrintScreen Key Invalid to Yes in Print/PrintScreen.
When the Screen Capture check box is selected in Print/PrintScreen, the screen capture at the time when the PrintScreen key is used can be collected.
Displayed content
The following log content can be viewed:
Name: name of the client (CT)
Occurrence Date and Time: time for collecting logs at client (CT)
User ID: logon user name of the client (CT)
Domain Name: it is the domain name of the client (CT) when logging on to domain while it is the computer name of the client (CT) when logging on to local computer
Type: PrintScreen key prohibition (fixed value)
Classification: Violation (fixed value)
Attachment: when the attached data exists, display "1"
Content: the following content is displayed.
Information of pressing PrintScreen key.
Example of Content:
PrintScreen key has been pressed.
When performing keyword search in Log Viewer, the character "PrintScreen key is pressed." can be searched.
Note: (not displayed)
