|
First Run
When running Sentry for the first time,
A master password will be created for the 'administrator' user.
A "Sentry Security Brief" will show (Version 3.03 and above). It will display setup and security information after the creation of an administrator account.
This can be suppressed with the nobrief/nowizard setting in settings.ini for export/replication.
In the main screen of Sentry,
The software is running in protection mode.
Depending on your operating system, and level of administrator privledges, the software will completely lock out access to Windows until the program is unlocked by authenticated Sentry account credentials.
The Ctrl-Alt-Delete menu will be disabled. On Windows Vista and above, Task Manager will still be available unless the program is run as an administrator.
The Task Manager can still be stopped by the "Stop Task Manager" option under Security Options.
By default, AutoRun keys are disabled, preventing USB and CD insertion "AutoRuns".
By default, the AutoMinimize option is on, so non-Sentry and unrecognized windows will be hidden if they try to pop above Sentry.
Leaving protected mode
MultiUser Mode
By default, Sentry is in single user mode, and will default to single-user layouts unless you change it.
The administrator account you just created can control anything in the program.
If you want other users to be able to unlock Sentry (but not change program settings), switch to Multi User mode by going into Options -> Accounts.
You will need to use a multi-users friendly layout, with a "username" field, to support this.
Ways to unlock Sentry
Hit Alt-F4 and enter credentials to exit (the administrator account you just entered will work)
Enter credentials into the layout, and hit enter (or unlock button)
Click the Sentry Menu and then "Unlock and Exit". (You can also use Windows Key or Triple-Right-Click to bring up the Sentry menu)
Insert USB flash drive (or CD) containing Sentry Unlock key (see: Options -> Deployment -> Portability)
Issue a remote unlock command from Sentry Manager
How Sentry will enter this protected mode again.
After unlocking, Sentry will unload the layout from memory and retreat to a System Tray icon. If the program is unregistered, a nag screen will appear.
You can re-lock Sentry by:
Double clicking the system tray icon.
Setting a "lock on idle" in Options -> Security. (by default, it automatically relocks after 600 seconds).
Hit the Sentry lock hotkey (by default, Ctrl-Alt-S)
Insert USB or CD media containing a Sentry unlock instruction with credentials
Issue a "lock" command by Sentry Manager