On the Access settings page, you can allow station users to access websites, local directories and files. You can also set time limits on using the internet and the computer.
The parameters of Office Control are applied to all the users of the computer where Dr.Web Agent is installed. By default, access to the internet and to local resources is not restricted to any of the accounts; no time limits are set.
Office Control parameters
The settings specified on the tab apply to all the user accounts. You can find the information on how to specify custom settings for individual users and group of users in the Custom settings for individual users and groups of users section.
•Select the No restrictions mode to allow access to all websites. At that, the white and black lists are not processed. This mode is enabled by default.
•Select the Block by categories mode to add categories to the black and while lists manually to block or allow access to the resources regardless of other restrictions. At that, the white and black lists are processed.
•Select the Block all except websites from the white list mode to deny access to all web resources except for those in the white list. At that, the black list is not processed.
In any mode except for the No restrictions one, you can enable the Enable safe search option to manage results of the search engines. This option allows you to exclude unwanted resources from search results.
You can create lists of websites to block or allow access to the resources. By default, both lists are empty. If required, you can add addresses to the black and white lists (if Block by categories mode is selected), or only to the white list (if Block all except websites from the white list mode is selected).
To configure domain addresses lists
1.Enter a domain name or a part of a domain name for the website in the White list or Black list field depending on whether you want to allow or block access to it.
Details
a)To add a certain website, enter its URL (for example, www.example.com). This allows access to all webpages located on this website. b)To allow access to websites whose URL contains a certain text, enter this text in the input field. For example, if you enter example, then the access to example.com, example.test.com, test.com/example, test.example222.ru, and others will be granted. c)To allow access to websites within a particular domain, enter the domain name with a period (.) character, for example, .com. This allows access to all webpages located on this domain. If the domain name includes a forward slash (/), the substring before the slash is considered a domain name, while the substring after the slash is considered a part of address for the websites that you want to access within this domain. For example, if you enter example.com/test, such webpages as example.com/test11, template.example.com/test22, and so on will be processed. d)To add certain websites to the exclusions, enter the mask of their names. Masks will be added in the mask://... format. A mask denotes the common part of object names, at that: ▪The asterisk (*) character replaces any, possibly empty, sequence of characters. ▪The question mark (?) replaces any, including an empty, character (one).
|
Your input may be unified. For example: the http://www.example.com address will be transformed into www.example.com.
2.To add one more object to the list, click 
.
3.To remove the address from the list, click 
next to the list item that corresponds the address.
4.To add other devices, repeat steps 1 and 2.
|
If traffic is encrypted (HTTPS websites), black and white lists can include domain addresses only (for example, https://example.com). You can configure access to individual pages of the domain for unencrypted traffic only (HTTP websites) (for example, http://example.com/test). |
Folders and files
Enable the Protect folders and files option to block access to all resources listed below.
To configure the list of protected files and folders
1.To add an object, enter the path in the corresponding field.
2.Select limitation mode:
a)Read-only—an added object will be read only.
b)Blocked—to block access to the specified object completely.
3.You can specify only one object in one field. To add one more object to the list, click .
4.To remove an object from the list, click next to the list item that corresponds the object.
5.To disable all limitations for all objects in the list, disable the Protect folders and files option.
Time limits
You can set restrictions on time the user can spend on the internet or work on the computer. By default, no time limits on the computer and internet use are set.
To set time limits for a particular profile
1.To add a new profile to the list, click .
2.In the field that appears, enter a new profile name.
3.Click Save.
4.To remove a profile from the list, select the corresponding item in the list and click .
5.If necessary, repeat steps 1–3 to add other profiles.
6.Configure the limitation mode using the table of time limits.
You can also edit the table without adding a new profile. In this case, all the changes will be saved in the User-defined profile.
How to use the table of time limits
Using the table, you can specify hours and days of the week when users are allowed to use the computer or access the internet. The restriction is set to every 30 minutes of every weekday.
Color |
Limitation mode |
Mode description |
White |
No restrictions |
Access to the internet and computer is allowed in the specified period. This mode is set by default. |
Blue |
Block internet access |
Access to all web resources is blocked in the specified period. Once the limitation period starts, the access to all websites is blocked. |
Red |
Block all |
Access to the computer is blocked in the specified period. Once the limitation period starts, the user is logged off. |
To restrict access to the internet
Select days of the week and hours when the user is restricted from accessing the internet and then mark the corresponding timeslots blue:
•To mark one timeslot, click it once.
•To mark several adjacent timeslots, click the first slot once and select the rest of required squares while holding down the mouse button.
To restrict access to the computer
Select days of the week and time when the user is restricted from using the computer, and then mark the corresponding timeslots red.
•To mark one timeslot, click it twice.
•To mark several adjacent timeslots, click the first slot twice and select the rest of required squares while holding down the mouse button.
Custom settings for individual users and groups of users
You can specify custom settings for individual users or group of users, if needed.
To specify custom settings for individual users and groups of users
1.Click Per-group settings.
2.Select a user or a user group in the tree structure on the left side of the window.
3.If the settings have not yet been set, click Specify the settings. Root group settings are copied from the root group. You can edit them if necessary. Configuring the settings is similar to the general settings of Office Control.
4.In case personal settings are specified, you can remove them. To do this, select an existing user group or an individual user and click 
. At this, root group settings will be used.
5.Close the Custom settings for user groups window. All the changes are saved when the window is closed.
Structure of station users
•The structure of station users is displayed as a tree that includes user groups and individual users. By default, Administrators, Guests and Users groups are set.
•All the existing user groups are available after the station is connected to Dr.Web Server.
•If Active Directory service is used in your LAN, you can add its individual users. To do that, execute the task Synchronization with Active Directory from the Dr.Web Server Task Scheduler window (see the Setting Dr.Web Server Schedule section in the Dr.Web Enterprise Security Suite Administrator Manual).
•General—general settings for the Users root group. They are used by default.
•Inherited—root group settings that are inherited from the Users root group in case settings for user groups and individual users are not specified. At this, user settings section is empty.
•Personal—personal settings for user groups and individual users that are not inherited from the root group.
|
For users with no personal settings that belong to one or several groups, all the group settings and general settings are merged with a priority of blocking. |
