Hidden Features Clarifications/Troubleshooting

Support,

I'm not seeing expected behavior on some features -- can you clarify if what I'm seeing is correct, or if I'm applying settings incorrectly?

1 - Keep Running Start Interval
My Settings:

Hive HKEY_CURRENT_USER
Key path Software\Inteset\SecureLockdown_v2
Value name KeepRunningStartInterval
Value type REG_DWORD
Value data 0x7530 (30000)

Problem: From what I can tell, this should poll and relaunch the program every 30 seconds -- instead, the app relaunches almost instantly. Note I'm using an application launcher (clickonce appref-ms shortcut) as my target instead of the exe directly.

2 - EnableControlPanel, EnableManagementConsole, EnableCommandPrompt, EnableRegistryEditor -- I have these enabled, but I'm unclear how you would typically launch them in SecureLockdown mode. Windows + R is disabled, and task manager likewise doesn't have a "run" option to invoke these processes. How would you open them (if needed) once they're enabled?

Regarding the "KeepRunningStartInterval" feature, once the master app launches it will poll every 30 seconds (in your case) to see if the app is not running. If it finds that it is not running, it will start it immediately.

Regarding launching the various Windows admin features (ie: Command Prompt), this is usually done at login using the Secure Lockdown > Background Apps feature.

Regarding the import of the Secure Lockdown settings, are you receiving an "Settings imported successfully" message? If not, check the Windows Application Event Logs for an error.

Support,

I'm not seeing that result. The master app is the appref-ms shortcut, and the masterproc name is the EXE the shortcut ties into. I have KeepRunningStartInterval set to 30 seconds, but in practice the app consistently loads back up within 1-3 seconds after closing.

As far as launching the other apps, that makes sense!

For importing the settings, I am receiving an "import successful," but it seems that when I grab the settings from removable media, they don't actually populate. If I copy it locally and import, it seems to work without issue.

There is a problem with the "KeepRunningStartInterval" feature as you've noted. An engineer is looking into it and should have an answer shortly.

Support,

Thanks! I'll wait to hear from you. Let me know if I can provide any configuration info or logs to help your team diagnose the issue.

The fix has been posted to the website. You can download it (build: 2.00.122) here.

Inteset S. wrote:

If we were inlined to use an elevated command prompt while lockdown was enabled... Is that a feature that can be added? We have several reasons why this would be useful to us. I can elaborate more if needed...

The Command Prompt could be made available to use, but because Secure Lockdown is enabled, its administrative ability will be limited. In general, the best way to perform administrative functions on a locked down account is to disable Secure Lockdown, perform the needed function, then re-enable Secure Lockdown.