Do you have a 64-bit version?
Screen Pass supports both the 32-bit mode and the 64-bit mode.
Is it comportable with Windows 7?
Latest release of Screen Pass is 100% comportable with Microsoft Windows 7 and Windows Vista operating systems
Do I need Group Policy to manage Screen Pass?
No. Screen Pass can be managed with Group Policy and includes a rich template for doing so, but Group Policy is not required. Administrators can lock down Screen Pass settings by pushing registry settings such as screensaver timeout, auto logout timeout, or allowed screensavers to KEY_LOCAL_MACHINE.
Aren't some Screen Pass features available with the standard operating system?
Yes, but Screen Pass gives administrators a much greater degree of control over password enforcement, screensaver timeout, and screensaver selection along with features such as auto logout, auto shutdown, and true administrator override that are not available with the standard operating system.
How is auto logout different from auto shutdown?
Auto logout is used to log a user off an idle workstation after the screensaver has been running for a predetermined period. It can be set to turn off the workstation or leave the computer at a logon prompt. The auto shutdown is used to turn off a workstation that has been sitting idle at the logon prompt for a predetermined period?
Can I turn off the auto logout function?
Yes, the auto logout time, the time after the screensaver starts and the workstation is logged off, is configurable and the function can be turned off completely. Administrators can "lock down" the auto logout time.
What happens to unsaved data during auto logout?
Unsaved application data is lost during autologout. Optionally, Screen Pass can be configured to perform autologout only if there is no unsaved data.
Can Screen Pass settings only be configured by an administrator or can a user choose some of the settings?
Screen Pass settings can be locked down by an administrator, but otherwise users can modify any setting using a custom tab on the Display Properties window. The one exception to this is password protection of the screen saver which is enforced by default.
Is Screen Pass available in languages other than English?
Currently Screen Pass is available with a user interface in French, Dutch, and German. Contact technical support to inquire about support for other languages.
How is the Screen Pass admin override different from the standard admin override in Windows.
The standard Windows admin override or unlock is actually a logout and a login under the administrator ID. With Screen Pass the admin override simply unlocks the workstation without terminating the current logon session.
Does the Screen Pass admin override comply with HIPAA regulations?
For HIPAA compliance you will most likely want to disable the admin override completely and instead show the optional logout button on the unlock password dialog.
We have helpdesk people that need to unlock other users' workstations. Will Screen Pass allow them to do this without granting them administrator rights?
Yes. Screen Pass has a number of methods for allowing users or groups of users to have unlock rights over other users without granting actual administrator rights.
What are "paired groups" used for in conjunction with admin override?
Paired groups is one method of declaring administrators for unlocking purposes without granting actual administrator rights. For example, under the paired group method users in the Accounting_SPAdmin group can unlock workstations of users in the Accounting_SPUser group. Paired groups works for Microsoft or Novell networks.
What the purpose of the Screen Pass extended right utility?
The Screen Pass extended right utility allows administrators to create a special Active Directory right that allows administrators to unlock other users' workstations. This is a method, separate from paired groups and available under ADS only, for declaring administrators for unlocking purposes. Once the extended right is added to the tree, administrators can grant the inheritable Screen Pass unlock right using Active Directory for Users and Computers. The extended right can also be easily removed using the extended right utility. Extended rights are a modification to the schema.
Can local administrators unlock the workstation or just domain based administrators?
For domain login sessions, network administrators can unlock the workstation. For local login sessions, local administrators can unlock the workstation. There is an option, however, to allow local administrators to unlock domain login sessions.
Does Screen Pass recognize Netware administrators for admin override?
Yes. For Netware login sessions Screen Pass allows network administrators to perform admin override. Specifically, it allow unlock if the proposed administrator ID has "supervisor object rights" over the currently logged in user.
Does Screen Pass install on the workstation or the server?
Screen Pass is installed on the workstation and no server component is required.
Are workstation admin rights needed to install Screen Pass?
Screen Pass is distributed as a Windows Installer package, i.e., an .MSI file. If executed directly, the installer requires admin rights because it copies files to the system32 directory and modifies certain protected registry settings under KEY_LOCAL_MACNINE. If distributed under Group Policy, admin rights are not required.
We have many lab based computers and need to enforce Screen Pass policies no matter who logs on. Can we do this with Screen Pass?
Yes. Screen Pass Group Policies are normally applied on a user by user basis, but they can be made to apply to all users of the computer through the 'loopback processing' feature of Group Policy. If you are not using Group Policy, administrator configured registry settings for Screen Pass apply to all users of the workstation.
Our lab computers are logged on all the time with a shared user ID. We like users to unlock them with their network ID's. Can we do this with Screen Pass and keep a log of who is using the computer?
Yes. Screen Pass can collect a detailed log of all logon, logoff, lock, unlock, admin override, and failed password attempts. This information can be recorded to the Windows event log or written directly to an ODBC dataset.
