Top
Systemwalker Desktop Patrol Operation Guide: for Administrators
FUJITSU Software

4.3.1 Structure of Diagnosis result window of operation settings

The following diagnosis result will be displayed in the Diagnosis result window of operation settings.

Note) The one that is set to not display in policy will not be displayed.

Diagnosis result of power saving

After the Power Saving tab is selected, the diagnosis result of power saving setting will be displayed.

Diagnosis result of security setting

After the Security tab is selected, the diagnosis result of security setting will be displayed.

4.3.1.1 Structure of Diagnosis Result Window of Power Saving

After the Power Saving tab is selected, the diagnosis result window of operational settings is shown as follows.

Icon

The meaning of icon is as follows.

Display

Meaning

Audit OK.

Audit failed.

Unable to collect information.

Information.

Display help.


Diagnosis result

After extracting the items, the detailed diagnosis result will be displayed for diagnosis content. The displayed content is shown below.

In addition, in case of PC with battery, the set value under both the conditions of connecting to power and using battery will be displayed. Only one value will be displayed for PC without battery.


Computer Usage Status

Item

Diagnosis Content

Computer Usage status (Estimated)

The usage condition of the computer being used will be displayed.

  • Amount of Power Used

  • Emitted CO2

This item does not diagnose audit OK and audit failed.


Operating system

Item

Diagnosis Content

Operating System

The operating system being used will be displayed.

This item does not diagnose audit OK and audit failed.


Power Connection status, Power status of System

Item

Diagnosis Content

Current power status

The following status will be displayed.

  • Whether it is operating using battery

  • Whether it is operating by connecting to power

This item does not diagnose audit OK and audit failed.

Display Information

Display the information of display connected to the PC.

  • Whether it uses CRT display

  • Whether it uses liquid crystal display

This item does not diagnose audit OK and audit failed.


Setting management of display

Item

Diagnosis Content

Time to Cut off the Power of Monitor

The diagnosis result of the time till the power of display is cut off will be displayed.

The threshold value (time) that is larger than the one set by administrator cannot be set.

When the threshold value (time) is set to 0, it will not be displayed in the Diagnosis result window of operation settings as the item not to be audited.

  • When OK

    <Collection Result> minutes later

    Example) 20 minutes later

  • When failed

    <Collection Result> (set a value within <Threshold Value> minutes)

    Example) 300 minutes (set a value within 20 minutes)

Brightness settings of display

The auditing result of brightness settings of display will be displayed.

When the set value is larger than the threshold value set by the administrator (10 stages), the auditing result will be failed.

This item is only audited under Windows Vista(R), Windows(R) 7, Windows(R) 8, Windows(R) 10, Windows Server(R) 2008, Windows Server(R) 2012 and Windows Server(R) 2016.


Setting management of hard disk

Item

Diagnosis Content

Time to Turn off the Hard Disk

Diagnose the time till the power of hard disk is cut off.

When the set time is larger than the threshold value (time) set by the administrator, the auditing result will be failed.


Setting management of system

Item

Diagnosis Content

Time to Shift to System Standby

Diagnose the time till the system shifts to standby status.

When the set time is larger than the threshold value (time) set by the administrator, the auditing result will be failed.

Time to Shift to System Hibernation

Diagnose the time till the system shifts to sleep status.

When the set time is larger than the threshold value (time) set by the administrator, the auditing result will be failed.

Hyper sleep

Diagnose whether the setting allows Hyper sleep.

When it is different from the threshold value (ON/OFF) set by the administrator, the auditing result will be failed.

This item is only audited under Windows Vista(R), Windows(R) 7, Windows(R) 8, Windows(R) 10, Windows Server(R) 2008, Windows Server(R) 2012 and Windows Server(R) 2016.


Setting management of processor

Item

Diagnosis Content

Power management of processor

The diagnosis result of PC processor will be displayed.

In case of the processor that does not support SpeedStep, it is displayed as information. (not supported by this system).

The following content will be displayed as information.

  • The value set in the operation of the smallest processor (%)
    Audit OK: The value within the threshold is set
    Audit failed: The value beyond the threshold is set

  • The value set in the operation of the largest processor (%)
    Audit OK: The value within the threshold is set
    Audit failed: The value beyond the threshold is set

This item is only audited under Windows Vista(R), Windows(R) 7, Windows(R) 8, Windows(R) 10, Windows Server(R) 2008, Windows Server(R) 2012 and Windows Server(R) 2016.


Setting management of USB

Item

Diagnosis Content

Settings of Selective Suspension of USB

The auditing result of the setting selected in Settings of Selective Suspension of USB will be displayed.

When it is different from the threshold value (enabled/disabled) set by the administrator, the auditing result will be failed.

This item is only audited under Windows Vista(R), Windows(R) 7, Windows(R) 8, Windows(R) 10, Windows Server(R) 2008, Windows Server(R) 2012 and Windows Server(R) 2016.

Display failed items only check box

After this item is selected, the displayed content can be refined to displaying failed items only. The selected state will still effective even if the window is closed.

In addition, the following item has nothing to do with the check box and will be displayed for sure.

This check box can be enabled/disabled according to policy.


Processing button

For the items audited as failed, they will be processed in batch by Systemwalker Desktop Patrol.


Correction of Diagnosis Result button

This button cannot be used in the diagnosis result of power saving.


Re-diagnose button

Execute the diagnosis of operational configuration again and update to the latest information.


End button

Close the Diagnosis result window of operation settings.

According to the setting of the administrator, the End button is grayed out sometimes. At this time, after performing the processing of power saving settings to change the status to audit OK, the End button can be selected.


4.3.1.2 Structure of Security Diagnosis Result Window

The Diagnosis result window of operation settings when the Security tab is selected is shown as follows.


Icon

The meaning of icon is as follows.

Display

Meaning

Audit OK.

Audit failed.

Unable to collect information.

Display help.


Diagnosis result

After extracting the items, the detailed diagnosis result will be displayed for diagnosis content. The displayed content is shown below.


Operation System

Item

Diagnosis Content

Support Status

Diagnose whether the operating system being used is appropriate on security.

Except the following operating systems and service packs, the auditing result will be failed.

  • Windows Vista(R) SP2 or later

  • Windows(R) 7 SP1 or later

  • Windows(R) 8

  • Windows(R) 10

  • Windows Server(R) 2008 SP1 or later

  • Windows Server(R) 2008 R2 SP2 or later

  • Windows Server(R) 2012

  • Windows Server(R) 2016


Windows Update Program

Item

Diagnosis Content

Application Status

Diagnose the application status of Windows update program.

Audit whether all security patches have been installed. If the patch that is not installed exists, Failed will be displayed 7 days after it is detected. It will be displayed as OK within the 7 days.

Other update programs can become auditing target through reflecting to the software dictionary manually.


Logon status

Item

Diagnosis Content

Use auto-logon

Diagnose whether the logon setting of Windows has been set to automatic logon.

When it has been set to automatic logon, it will be audited as failed.

Display the last user ID

Diagnose whether to display the last user name.

When the user name of last logon is displayed in the logon window, it will be audited as failed.


Windows Account

Item

Diagnosis Content

Security of Logon Account

Diagnose whether the Windows logon password for displaying the Diagnosis result window of operation settings has been set and whether the password that matches with the user name has been used.

When the password is not set and when the user name and password are matched, it will be audited as failed.

Security of Guest

Diagnose if the password of Guest account has been set, and whether the account and password are matched.

When Guest account is enabled, but password is not set. It will be audited as failed. (Note 1)

When Guest account is OFF, it will be audited as failed as well.

When Guest account is disabled, it will be audited as failed as well.

Note 1) It is allowed to only audit whether the Guest account is enabled without auditing the password.
Use the CustomPolicy.exe (Change of policy for customized settings) command to change the auditing method. For how to use CustomPolicy.exe, refer to Reference Manual.


Password policy

Item

Diagnosis Content

Set Complicated Password Required

In password policy, diagnose whether Password satisfies required complexity is enabled or not.

When Password satisfies required complexity is disabled, it is displayed as "It is the setting that does not require complex password.".

When it is not audited, this item will not be displayed.


Windows Security Information

Item

Diagnosis Content

Windows Update(Automatic Update) Settings

Diagnose whether Windows Update is disabled.

The default is auditing as failed when disabled only. The following setting will be audited as OK.

  • Automatic (recommended)

  • Download update automatically and execute installation manually

  • Only notify updates but not download automatically or execute installation

UAC(User Account Control) Settings

Diagnose whether the setting of user account control (UAC) is enabled.

When the user account control is set to disabled, it will be audited as failed.

This item is only diagnosed in Windows Vista(R), Windows(R) 7, Windows(R) 8, Windows(R) 10, Windows Server(R) 2008, Windows Server(R) 2012 and Windows Server(R) 2016. In other OS, this item will not be displayed.


Screen Saver

Item

Diagnosis Content

Setting Status

Diagnose whether the screen saver is set to start.

When the screen saver is not started, it will be audited as failed. Status Information of Startup Time (seconds), Release Password will not be displayed.

The waiting time for the startup of screensaver startup is set to

Diagnose whether the startup time of screen saver is within the allowed range specified by the administrator.

In default, when the value that is larger than 600 seconds (10 minutes) is set, it will be audited as failed.

This item will not be displayed if setting not to start screen saver.

Settings of Password Protection

Diagnose whether the password to recover from screen saver has been set.

When the password to recover from screen saver is not set, it will be audited as failed.

This item will not be displayed if setting not to start screen saver.

Password to Restore from Standby

Diagnose whether a password is required when restoring from the standby status.

When password is not required for restoring from standby, it will be audited as failed.


Shared Folder

Item

Diagnosis Content

Setting status

Diagnose whether the setting of shared folder is appropriate on security.

  • Status

    The auditing result will be displayed.

    In default status, when the shared folder with read only (r) or read and write (w) authority that is set to Everyone exists, it will be audited as failed.

  • Shared folder

    Display the shared folder that has been set.

  • Authority

    Display the authority that is set to Everyone.


Internet Explorer

Item

Diagnosis Content

The setting status of security zone

Diagnose the security zone of Internet Explorer. One of the following will be displayed in information.

  • Low

  • Medium-Low

  • Medium

  • Medium-High

  • High

  • Customized

When the setting is lower than the default Medium, it will be audited as failed.

In case of Customized, it can be diagnosed as OK/failed according to settings.

In addition, the version of Internet Explorer being used and the update version will be displayed.


Firewall

Item

Diagnosis Content

Setting Status

Diagnose the setting status of firewall.

When the set firewall is being operated, it will be audited as OK.

When the firewall is not set, it will be audited as failed.

The audited firewall is Windows firewall, and the personal firewall of anti-virus software.


BIOS hard disk password

Item

Diagnosis Content

Boot password

Diagnose whether the startup password of BIOS has been set (password used by administrator).

When password is not set, it will be audited as failed.

According to settings, it is allowed not to audit desktop computer. At this time, this item will be not displayed.

Setting password

Diagnose whether the setting password of BIOS has been set (password used by user).

When password is not set, it will be audited as failed.

According to settings, it is allowed not to audit desktop computer. At this time, this item will be not displayed.

Hard disk password

Diagnose whether the hard disk password has been set.

When password is not set, it will be audited as failed.

PCs for which the hard disk password cannot be set will be judged as having the password Not set, and will be audited as failed.

According to settings, it is allowed not to audit desktop computer. At this time, this item will be not displayed.


Anti-virus Software

Item

Diagnosis Content

Installation status

Diagnose whether the anti-virus software has been installed.

When not installed, it will be failed.

For supported anti-virus software, refer to "Supported products" in the User's Guide.

*It is required to set for searching anti-virus software.

Status of Virus Pattern

The diagnosis result of whether the virus pattern is within the set generations will be displayed.

Status of scheduled scan

Whether the scheduled scan has been set in anti-virus software and the diagnosis result of whether the scheduled scan has been executed will be displayed. When scheduled scan is not set or the scheduled scan is not executed within the set period, it will be audited as failed.

Settings of real-time scan

The diagnosis result of anti-virus software set in real-time scan (Auto-Protect) will be displayed.

When anti-virus software does not exist in real-time scan, it will be audited as failed.

Target range of scanning

Audit the scan target file set in the anti-virus software. When none of the file is the target for scanning, it will be audited as failed.


Encryption Software

Item

Diagnosis Content

Installation status

Diagnose whether the encryption software has been installed.

The following products will be audited by default.

  • SafeBoot

  • FencePro

Other products can be defined as auditing target in the user definition of software dictionary.

When encryption software is not installed, it will be audited as failed.


Status of Google desktop

Item

Diagnosis Content

Setting of data search on multiple computers

Diagnose whether the "Data Search on Multiple Computers" function is disabled.

When the "Data Search on Multiple Computers" function is enabled, it will be audited as failed.

When Google Desktop is not installed, it will be displayed as Not installed.


Prohibition Software

Item

Diagnosis Content

Installation Status

Diagnose whether the prohibition software has been installed.

  • Prohibition software

    Display the prohibition software name that has been detected.

When not detected, it will be displayed as No Problem.


Display failed items only check box

After this item is selected, the displayed content can be refined to displaying failed items only. The selected state will still effective even if the window is closed.

This check box can be enabled/disabled according to policy.


Processing button

For the items audited as failed, they will be processed in batch by Systemwalker Desktop Patrol.

For items that cannot be executed by the processing button, Unable to Auto-Processing will be displayed.


Correction of Diagnosis Result button

Modify the security diagnosis result to OK manually.

For details, refer to "Correction of diagnosis result".


Re-diagnose button

Execute the diagnosis of operational configuration again and update to the latest information.


End button

Close the Diagnosis result window of operation settings.

According to the setting of the administrator, the End button is grayed out sometimes. At this time, after performing the processing of power saving settings to change the status to audit OK, the End button can be selected.