1.9 Security

Access to all functions within Accessory Manager is controlled by a security file. This file indicates which functions can be accessed and which cannot.

If you enable security for a specific action, the capability to perform that action is removed not only from the menus, but also from any toolbars, keyboard maps, QuickPads, or HotSpots that perform that action.

For example, if you do not want users to be able to create new sessions, you can enable security for New Session. The next time the user runs Accessory Manager, New Session will no longer appear on the File menu, and any button, keystroke, or HotSpot that performs that action will be disabled.

Accessory Manager determines which security file to use by checking for a particular item in the Windows Registry. It searches for this item first in the HKEY_CURRENT_USER key, and if no file is specified there, it searches for it in the HKEY_LOCAL_MACHINE key.

You can use the security files that come with Accessory Manager, or you can edit these files or create your own, depending on your particular needs. For example, you might modify the default security file and have all users use it, or you might create separate files for different groups of users.

If the security file specified in the Windows registry is deleted, or if the registry entries are deleted, you will not be able to run Accessory Manager.

NOTE:When you upgrade from any previous 32-bit release, by default security is enabled for any new menu items and actions in the new release. For example, if you upgrade from the Ruby Edition, security is enabled for Start/Stop Capture, and Capture will not appear in the File menu. To ensure access to any new menu items and actions, you must edit the security file and disable security for the new commands.

Predefined Security Files

Accessory Manager comes with two security files:

  • ADMIN.ESF

  • DEFAULT.ESF

ADMIN.ESF provides access to all Accessory Manager functions. DEFAULT.ESF provides access to all functions except the Security dialog box (which you use to create or modify security files) and the Advanced tab on the Page Settings dialog box.

When you perform a standalone, shared, or multi-user installation, you automatically use ADMIN.ESF. However, all users who run NETSETUP or USRSETUP use.

Security for Security Files

Once you have created one or more security files for the users at your site, you can ensure the security of these files in a number of ways:

  • Specify a password for each security file so that only authorized personnel can change the settings for that file.

  • Enable security for the Security item in the Options menu to prevent access to the Security dialog box.

  • Keep the security files in a read-only directory on a file server. (You will not be able to edit the files while they are in this location.)

  • Use the Windows Policy Editor to remove the user's ability to run the Registry Editor. (This prevents the user from switching to a security file that allows more functionality.)

To create a security file

  1. From the Options menu, click Security.

    You can click this option only if you are using the ADMIN.ESF security file or another security file in which access to the Security dialog box is enabled (the Security command is selected in the Options category).

  2. To base the new file on a file other than the current security file, type the name of the file to use in the File Name text box, or click Browse and select the desired file from a list of available files.

    Be sure to include the drive and directory for the file.

  3. Click the Options tab and specify which actions should be disabled when the new security file is in use.

    NOTE:If security was enabled for the selected file, you will be prompted for a password when you click the Options or Change Password tab.

  4. If desired, click the Change Password tab and specify a password to use for the new file. Only people who know this password will be able to change the settings in this file.

  5. Click the File tab.

  6. Click Save As.

  7. Type the desired name for the new security file.

To edit a security file

  1. From the Options menu, click Security.

    NOTE:You can click this option only if you are using the ADMIN.ESF security file or another security file in which access to the Security dialog box is enabled (the Security command is selected in the Options category).

  2. To edit a file other than the current security file, type the name of the file to edit in the File Name text box, or click Browse and select the desired file from a list of available files.

    Be sure to include the drive and folder for the file.

  3. Click the Options tab and specify which actions should be disabled when this security file is in use. (When you can select or clear a command by double-clicking it or by clicking the check box in front of the command.)

    Items preceded by check marks can be used by the user; items preceded by cleared check boxes have security enabled and cannot be used by the user.

    NOTE:If security was enabled for the selected file, you will be prompted for a password when you click the Options or Change Password tab.

  4. If desired, click the Change Password tab and specify a password to use for this file. Only people who know this password will be able to change the security settings in this file.

    When you click OK, the specified changes are made to the specified file.

    If you edit the file currently in use by Accessory Manager, the changes will not take effect until you restart Accessory Manager.

In this section