Copyright: Hard Drive Software


Welcome to RedHand
RedHand Audit and Security

RedHand has been designed to provide comprehensive monitoring and security for any PC, whether standalone or networked, but without unnecessary or complicated logon procedures. The use of a machine can be closely watched and tightly controlled without the user needing to know that the program exists...

When first started, RedHand will appear as a circular animated icon in the system tray and will begin recording, storing the title of every window used, every key pressed, screenshots at timed intervals and a complete record of how much time individual programs are in use in a hidden and encrypted data file. The program cannot be accessed or shut down without the password or Keydisk. The authorised user or Administrator can view and/or print all activity that has taken place on the computer. The log file can also be emailed to a specified address when the user is online.

RedHand can become completely invisible - removing all traces of itself from the Desktop and the Task List using the silent AutoStart feature to make it run as soon as Windows starts; provide discreet security by throwing up false 'error' messages when specific windows are opened; or provide full-blown security by replacing the entire Windows 95/98/NT/2000/ME Desktop and time-limiting the activity of the machine. You can choose to hide folders and files from other users, you can even hide programs so that they cannot be run.

The program will recover the password and configuration settings, even if its hidden settings are deleted or damaged, and re-installing will have no effect. You must use the Uninstall feature to remove RedHand from your system. Uninstall is located in the "File" menu or by right-clicking the icon in the system tray. You cannot uninstall RedHand without the password - the default password is pass .

There are thousands of combinations of stealth and security settings, which can be mixed to suit your needs.

RedHand :  Low Profile - High Security!

·	Getting Started

·	The Log Window

·	File Menu

·	View Menu

·	Settings

·	Contacts

·	Uninstalling RedHand

·	·	·	·	·	·	·	·	·	·	·


Entering Your Password

RedHand in VISIBLE mode...

With RedHand in visible mode, there are three ways of entering the password.

1	Click the RedHand icon and type the password into the box.

Note: The password is case sensitive - 'Pass' will not work if the default password  pass  is in use.

2	Insert your Keydisk (either made during the installation process or from the Settings menu in the Log View window) and right click the RedHand icon. Select 'Keydisk' from the menu. RedHand will allow you in. If the Keydisk isn't there, or is invalid, nothing will happen. The password is encrypted on the Keydisk, so the real password cannot be discovered by reading it.

3	You can also click the padlock icon on the 'Password' screen with the Keydisk in the drive. This feature has been added for, for example, teachers, who may need to access the controls while their students are watching. Several other areas of RedHand also have the padlock icon, where the password is required and work in the same way.

RedHand in INVISIBLE mode...

Once invisible there is no way physically to enter the password from the keyboard, and RedHand can be viewed or stopped only by forcing the password to appear in a window's title text.

There are three ways to do this:-

1	(Recommended): Choose 'Run' from the Start Menu, type your password (only) and hit return. In this case Windows tries to run whatever is entered in the 'Run' dialog. It fails. Because a valid path or program name has not been entered, it displays an error message with your password as the title, which RedHand can see.

CAUTION: Do not use this method if you choose a password that refers to a valid program on your computer (like 'regedit'). Windows 95/98 will see it as a valid command, launch the program and then hold it in the 'Run' dialog box for all to see.

2	Use this method if you have disabled the 'Run' dialog):

(i)	Insert your Keydisk

(ii)	Start windows Notepad or similar program.

(iii)	Select 'Open' from the 'File' menu, and browse to the encrypted password stored on the Keydisk in 'a' or 'b'. (A jumble of letters and numbers with a .txt extension)

(iv)	Select the encrypted password and click OK to load the file in Notepad. Notepad will close immediately and RedHand will open.

3	(Use this method only if you have disabled the 'Run' dialog and lost or damaged your Keydisk):

Start Notepad and type something (anything), then choose 'Save' from the file menu, enter your password as the filename and click OK.

Note: Use this method only as a last resort. In this case you must delete the file you created manually, as RedHand cannot determine where Notepad saved it. A reference to the document will appear in the 'Documents' list in the Start menu - so you need to delete this shortcut as well. The password is not case sensitive if RedHand is invisible.

·	Stealth Settings


General Description
The Log Window

Records are displayed in time order and are made up of: -

·	Window Title - The actual text that appears in the Title Bar of an application, or a sub window of a larger application.

·	 	·

·	Start Time - the time that the window was first accessed

·

·	Approx. Time -  the duration of the window's use

·

·	LK -  "X" indicates that RedHand forced this window to close - "Txt" in this column indicates that RedHand recorded keystrokes while this window was active.

·

Keystroke Recording

·	If keystrokes are recorded, RedHand displays "Txt" in the "LK" column of the Log window. To view the text, click the "Txt" label. The text typed may be difficult to read, as there is no way to locate where the cursor was (which can be moved with the mouse) when the keys were pressed . Everything will be recorded, including errors and typos.

·

Layout

·	The gauge at the top left represents the number of records that are currently stored in RedHand's Log, up to the maximum of 16,000.

·

·	The controls on the toolbar give quick access to the main program areas and also the order in which the display is sorted - newest or oldest records first.

·

·	The line gauge on the right hand side of the screen indicates the time left until RedHand performs its routine maintenance of the Log file. When the green bar reaches the top, the oldest records are cleared from the file, but not from the display window. This happens every 5 - 10 minutes (all the time that RedHand is running) and there is no need to intervene. To prevent old records from being cleared temporarily, click 'Stop Recording'.

·

·	You must use the 'Exit' button in the 'Log Window' (or 'Exit' in the File menu) to close the program completely. Click 'Resume' to close the 'Log Window' and resume recording.

·	 	·

·	If the 'Log Window' is minimised the controls are still available by right-clicking the icon in the System tray - but remember that you must use 'Resume' to prevent others from tampering with the controls.

·

Application Usage

·	"View Application Usage" in the View Menu (or right click on the grid for the same menu) changes the display to a list of applications that have been used on the machine currently being viewed:

·

·	Program - the name of the Program

·

·	Path - Where the executable file is located

·

·	Time - the total number of hours that the program has been used since the history was last cleared

·

·	Click on a line for a more detailed description above the grid - including the program's icon. The icon will not be available if the path to the executable file is no longer valid, either because the program has been moved or deleted or there is no network connection to the machine.

·

·	For a bar chart display of application usage, click the graph button in the top right hand corner. To make this chart easier to read, applications that are permanently in use (virus scanners, operating system components etc.) are ignored. To display these as well, click the cross button which has now appeared next to the graph button.

·

Note:  The Application log file is updated every 10 minutes, so nothing will appear until after the first 10 or 20 minutes after using the "Clear the file now" button in the "Limits" section of the Settings window, or after installing the program.

Internet Usage

"View Internet Usage" in the View Menu (or the right click menu on the grid) changes the display to the daily usage of a dialup connection on the machine currently being viewed.

Note: The Internet log file is updated every 24 hours, so nothing will appear until after the first 24 hours of use.

·	File Menu

·	Settings Menu

·	Security Manager

·	Additional Tips and Tricks


File Menu

Go to Next User... - goes to the point in the log at which the next user logged on.

Clear Log - deletes all of the current records and resets the display.

Find - leading to the Search window. Enter a word or phrase to look for in the current log file and click "Find first" to locate the first instance, click "Find Next" to locate subsequent instances.

Print  - prints currently selected records from the Log. Select an area by dragging the mouse across the records you want to print, or click the first record and hold down shift while clicking the last, then click 'Print Selected Area'. To select all records, drag the mouse across the grey title bar at the top of the grid. RedHand will print as many pages as necessary, at about 40 records to a page. Printing the "Application usage" file always prints the whole file.

Archive Current Log file... - Saves the file currently being viewed for later use.

View Archive Log file... - Views a previously archived log file

Exit - (also available from the button at the bottom right of the Log Window) stops recording, disables all of the security features and closes the program. This is the only way to stop the program once it is running.

Uninstall RedHand - Starts the uninstall process. For security purposes, this is the only way that RedHand can be removed from the computer.

·	The Log Window

·	Settings Menu

·	Security Manager


Getting Started

Installation

From a CD

Insert the CD in the drive. If it fails to autorun, double click My Computer on the desktop and then the CD-ROM icon. From there select 'setup.exe' to start the installation process. Follow the instructions and you may be prompted to restart your computer. The CD will not autorun if RedHand is already running on the computer.

From a downloaded file

Run the downloaded EXE file.

Note: when upgrading from an earlier version you do not need to uninstall, or even stop the program from running. Simply install version 7 over the top and existing settings will be preserved. NB Due to the later encryption format of the Log file, you will not be able to view log files created in version 4 and any existing file already on your machine will be overwritten.

IF YOU NEED TO KEEP RECORDS FROM VERSION 4, PRINT THEM OUT BEFORE INSTALLING VERSION 7!

*   *   *   *   *

1	 From the Start Menu select 'RedHand Pro' and read the opening instructions carefully. You will need the Keydisk supplied, or a blank disk (if you do not have the RedHand Media Pack) when the 'Make Keydisk' screen appears.

!! DO PLEASE MAKE THE KEYDISK !!

Put a blank disk in the drive and click the appropriate button. The disk will contain the encrypted password with a text extension and a copy of this Help file, should you forget what to do. The Keydisk can be used to access areas of RedHand that display the padlock icon. Click the padlock with the disk inserted in the drive.

2	When the process is complete RedHand will appear as a two-coloured, circular icon in the system Tray. RedHand will automatically load by default each time Windows starts

To Access RedHand

Click the RedHand icon. You will be presented with a password dialog.

THE PASSWORD is  pass . Type this in the box to access the program for the first time. Click OK and you will be presented with the Log window. From 'Settings' in this window you can change the password (in a registered version only) and should do this as soon as possible.

RedHand is now up and running. Once you click the 'Resume' button on the Log window the program will continue auditing and logging all your computer's activity. You need do nothing else!

The rest of this Help file outlines and explains further RedHand's functions and permutations in detail.

·	Entering Your Password

·	The Log Window


Settings Menu

Security Options - Leading to the 'Security Options' screen.

·	Stealth Tab

·	Security Tab

·	Keyphrases Tab

·	Advanced Tab

·	Limits Tab

Internet Options - Internet Options

Change Password - Leads to the 'Change Password' window.

Make Keydisk - Use this feature to make a new Keydisk or update an existing one. The keydisk also give the option to delete the Help file and Start menu references from the hard disk.

Language - Select from English, French, Spanish or German languages


Security Manager
The Security Manager

Use this feature to store your passwords and usernames (or bank accounts and Credit Card numbers) encrypted and hidden safely away.

If RedHand is operating invisibly, no-one will know that there is a password store worth trying to break into...

The Password Manager Window

The Password Store cannot be viewed or updated until the current password is entered, when the controls will become visible and the first record displayed.

There are four fields per record: -

The Account Name - a general description of what the account contains i.e. 'Accounts Program'

The User Name - if required to access this program, ftp site, mail client, etc.

The Password - always stored but hidden from view until the icon is clicked

Notes - a brief note (i.e. the URL of the site )

Save - Saves the information in the 'New Account' area as a new record.

Delete Account - Deletes the account currently being viewed.

Note: The Password Manager list is not copied when using the Network Installer.

·	The Log Window


Stealth Tab

·	Maximum number of records stored - Old records are cleared every 10 minutes or so, and you can specify how many records RedHand holds at any time. The default is 500. The maximum number of records is 16,000.

·	Don't record a log file - if you require security functions only

·	Recording Options - RedHand records every window that is opened. This can be filtered by using the four recording options: -

·	Do not record windows opened for less than 2 seconds - RedHand will not record windows which are opened and closed rapidly, with the exception of locked windows, which are always recorded.

·	Do not record unknown windows - RedHand will not record windows with no titles, messages etc. which normally show up in the Log as '??' .

·	Record only attempts to access locked windows - nothing will appear in the Log except for Windows that RedHand has closed with the 'Window Locks' feature.

·	Clear old records only on start-up - Stops old records from being cleared while RedHand is running. The Log file will continue to grow in size until the machine is re-booted, when excess records will be removed.

·	 Record all keystrokes - enables and disables the keystroke recording feature. When th box is checked, all keyboard activity will be recorded.

Note: All of these options are overridden if the 'Don't record a log file' box is checked.

Tip: RedHand works best when it stores between 500 and 1500 records. The more records it has to process the slower the maintenance time will be (a noticeable slowdown of the machine may occur for a second or two), and the longer it takes to retrieve them from the file when viewing or refreshing the Log.

·	Invisible Mode - Removes all traces of RedHand from the Taskbar, Desktop, Alt-Tab keystroke (and Ctrl-Alt-Del menu in Windows desktop). You must change the default password to avoid RedHand opening unexpectedly in invisible mode. Once you have selected this option, you will be prompted to make or update your Keydisk. While this is not strictly necessary, as the password can be entered in the 'Run' dialog from the Start menu, it is advisable to keep the Keydisk updated with each password change.

·	 AutoStart RedHand - Check this option to start RedHand automatically when Windows starts, as if it's icon were in the 'Start-up' folder.

Note: If you do not want RedHand to AutoStart with Windows, leave the box unchecked, but you will need to maintain and use the Shortcut in the Start Menu each time. This is not recommended.

·	 Error Message to Display - When RedHand automatically closes a window specified in Keyphrases, it can display a false 'Error' message. You can select one from the list provided, or type one of your own directly into the box. If you leave the box blank the window will be closed without any message being displayed.

·	Settings Menu


Security Tab

•	Lock Boot Keys in DOS - Checking this box removes the option to press F8 to enter MS-DOS or Safe Mode. This is the only area of RedHand that modifies an essential system file. Make sure that you reset this option before uninstalling RedHand.

•	Lock Ctrl-Alt-Del - Check this box to disable the machine's Ctrl+Alt+Del keystroke (or just the 'Task Manager' window in Windows NT), preventing the user from terminating programs from there or from using the Alt-Tab combination in Windows 95/98. This function is also temporarily set when the RedHand Desktop is in use, and when the Cyberlock or Lock Machine features lock the machine.

•	Hide Desktop Icons - Temporarily removes the shortcuts from the Windows desktop, preventing them from being damaged or deleted by the user.

Note: this also requires locking Ctrl-Alt-Del to prevent the user from using the Windows/D shortcut to make the icons visible again.

•	Prevent Exit From Windows - Prevents the user from shutting down Windows, (although MS-DOS can still be reached through the MS-DOS prompt)

•	Remove Desktop Wallpaper at logon - Removes any desktop wallpaper each time a user logs off. Users may change the wallpaper as usual, but their changes will not be permanent.

•	Preserve Existing Desktop Shortcuts - Removes any new shortcuts that have been created on the Windows desktop when a user logs off. Users may create new shortcuts, but these will be lost on exiting Windows. RedHand's reference list of required desktop shortcuts is updated by clicking OK in the Security Options screen - confirm desktop shortcuts first.

Note: This feature will only remove shortcuts from the Windows 95/98 Desktop, it will not remove actual files and folders

•	Lock Explorer's right click menu - Prevents the user from right clicking on files and folders in Windows Explorer and Open/Save dialog boxes.

Note: The change may not take effect until the current user logs off.

•	No New Software - Prevents any new executable files from being run on the system. If you need to add new software while this feature is running, turn it off (either manually on the machine, or via the network), install the new software and then turn the feature back on. The hard disk image will automatically be rebuilt to include the new .exe file(s). Exceptions can be made in the "Options" dialog. If any programs specified in the "Always Allow" box are run on the system, the executable list will be rebuilt on the next reboot, allowing the use of SMS (smsagent.exe) to install new software automatically.

Note: It takes up to 2 minutes to rebuild the list after the Security Options window is closed, and also on reboot if an automatic install program was used. Changes will not take effect until this process is complete.

•	Lock Machine After 3 Attempts - When the user attempts to access a locked window, or incorrectly enters the password in the RedHand Desktop, an unseen counter is advanced. If this feature is enabled and the counter reaches 3 in any 30-second period, RedHand will take control of the Desktop, preventing access for 2 minutes.

Note: While locked, the padlock icon and password box are visible to enable an authorised user to reset the lock if necessary.

Programs for use with RedHand Desktop

•	Use RedHand Desktop - The RedHand Desktop will replace the Windows desktop completely. Only programs that you specify in the 'Programs for use with the RedHand Desktop' will be available to the user. Add programs to the list by clicking 'Add Program', and browse to the executable file. You will then be asked to supply a name for the program and any command line parameters that you want to use. This name will appear in the list of 'Safe Programs' and as an icon on the RedHand Desktop's Taskbar.

•	Use Windows Wallpaper - RedHand will use the current wallpaper set for the user profile as the background in the RedHand Desktop.

•	Settings Menu


Keyphrases Tab

If RedHand finds any of the words listed in the 'Lock these Keyphrases' list in any part of a windows title, and window locking is enabled, it will immediately close that window.

If a listed Keyphrase appears in a window title that you do not want to lock, enter that window title in the 'Do not lock these Keyphrases' box. i.e. You can lock 'run', but allow 'text runaround'.

Note: Not all windows can be locked, if the window does not have a 'control box' (the box in the extreme top right corner with an 'X') locking will not work.

Auto-record Key Phrases - Drag this window to any convenient place on your screen and open a window that you wish to lock. Click 'add' on the auto-record window (do not click the window first), and the title will be added to the list.

Enable Window Locking - Check this box to enable this feature

Note: Window locking and recording is disabled while the auto-record window is on screen.

·	Settings Menu


Internet Tab
Internet Options

Internet Web Access

Check 'Lock Forbidden Websites' to show a list of restricted sites, which will automatically be added to RedHand's list of Locked Keyphrases.

You can add to this list manually by entering the website title (not the URL!) and clicking the 'Update List' button.

Internet Access Control

Close Internet Browser after ** minutes of inactivity - Prevents a browser window from being left open. This is particularly useful where people have unrestricted access to the Internet, but may leave sensitive or inappropriate material on public view. This does not hinder normal browsing, but will close the browser if the same page has been viewed for more than the specified time

Enable Internet Access Logging - Details the number of minutes that a machine has been online per 24-hour period. The file will be updated every 24hrs, or the next time the computer is started.

The list will be available to RedHand when you view the users file.

Note: RedHand can only cut the Windows 95/98/NT/2000/ME DUN connection. It will not work with third party diallers such as AOL or Proxy Server connections to the Internet.


Advanced Tab

Policy Controls - General - These controls refer to policies that affect the entire machine i.e. 'Network configuration screen' refers to the dialog that is generated from the network icon in Control Panel.

Note: RedHand's policy controls will override any other policy settings set by other programs if any of them are selected (this includes 'Hide Drives') NB some policy settings require that the machine is re-booted before they come into effect.

Start Menu Policies: -

·	Disable Run Dialog - Disables the 'Run' option in the Start Menu. The 'Run' option will disappear from the Start Menu completely after a re-boot.

IMPORTANT! If you use this option then you will not be able to use the normal method of entering the password if RedHand is invisible. Make sure you have made and understand how to use a Keydisk.

·	Disable MS-DOS - Prevents access to MS-DOS through the MS-DOS prompt and stops any MS-DOS programs from being started from Windows.

·	Disable Find  - Disables the 'Find' option in the Start Menu. The 'Find' option will disappear from the Start Menu completely after a re-boot.

·	Protect Taskbar Settings - Prevents access to the Taskbar Properties.

System Policies: -

·	Disable System Changes - Removes sensitive areas of the System Properties dialog in control panel.

·	Disable Display Settings - Prevents access to the Display Properties.

·	Protect Printer Settings - Prevents access to the Printer Settings.

·	Disable Control Panel - Prevents access to 'Control Panel' completely. (A re-boot is required to remove it from 'My Computer' and Explorer)

·	Disable Registry Editor - Stops the user from editing the system registry using 'Regedit.exe'.

CAUTION!! Think carefully before enabling this option!

CD-ROM Drive: -

·	Disable AutoRun - Prevents CDs from starting automatically when they are loaded into the drive.

More Policies: -

 This section contains additional policy controls that are "written to order" as our clients request them. To date the policies in this section include:

·	Hide User Profiles Tab - Removes the tab from the "Passwords Properties" dialog

·	Hide Remote Administration Tab - Removes the tab from the "Passwords Properties" dialog

·	Hide Display Settings Tab - Removes the tab from the "Display" dialog

·	Hide Display Appearance Tab - Removes the tab from the "Display" dialog

Control Panel Applets: -

·	Lock Hardware Wizard - Prevents the Add New Hardware Wizard from operating

·	Lock Add/Remove Programs - Prevents the Add/Remove Programs wizard from operating

·	Lock Modems - Prevents the Add/Remove Programs wizard from operating

·	Settings Menu


Known Issues

Some issues known to cause problems.

Please check http://www.harddrivesoftware.com for the latest information.

Program Launcher

A few programs cannot be retrieved if minimised after being launched from the RedHand Desktop. The 16-bit version of Paintbrush and the Calculator are two of these. We are looking into this problem, but the 32bit "Paint" works fine.


Interpreting the Log

While RedHand represents all activity accurately on your computer, there could be a few occasions when things are not quite what they appear to be. To avoid any embarrassment consider the possibilities.

RedHand gets its information from the title bar of the window that the user is currently using - i.e. if you are using Windows Notepad to read a 'readme.txt' file, RedHand would record 'Notepad - README.TXT' and then the current date, time, and finally, the amount of time the user spent before moving to another window. (It will also record whether the window was locked)

The first entry in a recording session gives the user name (the name that the current user logged on with).

Sometimes a window has no title and if this is the case then RedHand records '??'. This can be misleading, and the only way to get an idea of what was going on is to study the entries immediately before and after the '??'.

Another thing to consider is how many times you have clicked on the wrong icon accidentally, or the wrong file. People make mistakes. With a genuine error, you would expect to see a speedy exit from the program or file - 15 seconds is not unreasonable, especially if they are not familiar with the software. However, if the next entries in the Log are 'Printing' or 'Copying File' or 'Save As', then further investigation could be warrantied.

The best way to see how the Log works is to record your own actions for an hour or two. This will help you to be objective when you are checking on someone else's activities.

·	The Log Window


Lock System

Lock System is a simple but extremely powerful way to secure your computer when you walk away from it. It works like a password-protected screensaver which is instantly available from the system tray. Turn on the feature from the 'Log Window' and a flashing skull icon will appear in the system tray.

Left click the icon to lock the system instantly. Right click the icon to turn the feature off. When the computer is locked with 'Lock System', you can regain access by entering the password or by using the Keydisk. Unlike a screensaver, 'Lock System' will recover, even if the user powers off and re-starts the machine.


Screen Capture

RedHand's screenshot capture feature provides snapshot video playback of exactly what is viewed on the users screen. The controls are self explanatory, but care must be taken to select sensible recording parameters to minimise disk space usage and network traffic.

RedHand will estimate the disk space required and how much time will be recorded but there are several factors that will affect the estimates.

RedHand will suspend recording screen captures if there is no mouse or keyboard activity, The time estimated is for continuous activity and in reality may be much longer.

Unlike the Log file, Screen Captures are copied to the network immediately. Therefore the value entered in "Grab screen every XX minutes" should not be set too low if network copying is required. Every 1 minute should be used only as a rule of thumb, the minimum is 0.2 Minutes (every 12 seconds)

·	"Record Maximum" specifies the number of screenshots that are kept on the local disk (and in the network) at any one time. The oldest Screen Captures are removed as new ones are added.

·	·	·	·	·	·	·	·	·

Images are hidden on the local disk in a compressed format that cannot be viewed by other applications.

The screen resolution will affect the disk space used, a screen resolution of 640x480 will use less disk space then 800x600.


Additional Tips
Additional Tips and Tricks

·	Fastest access to latest entries in the log? - To jump to the bottom of the Log to view the last records entered, double click anywhere on the grid.

·	Need to print the whole Log? - To select the entire Log for printing, drag the mouse across the grey titles at the top of the Log display.

·	Need access to a locked window but don't want to view the Log? - To disable 'Window Locking' and recording quickly, without viewing the Log, open a locked window and with your Keydisk in the drive, double click the 'Cross' icon. Do not click OK. RedHand will be disabled until you click the button which now says 'Resume' on the 'Error' message.

·	Need to read the Log on a computer that will no longer run Windows? - If the computer you are monitoring will not run Windows because of some serious problem, you can still discover what the last operations in Windows were (invaluable when troubleshooting). Copy or access the file 'Olspll.dll' from the windows/system folder from DOS. Rename the file "Olspll.dat". This encrypted file can then be viewed by using "View remote file" from the "Network" menu with RedHand on another machine.

·	Total Invisibility - There are several ways in which RedHand's stealth and security operation can be enhanced:

·	Removing References - You may wish to delete the help file from the windows/system directory to prevent it from being read by the user. You will be prompted to do this after making a Keydisk when the file will have been copied onto the floppy for future reference. A button is also provided on the 'Make Keydisk' screen.

·	You can also remove the shortcut from the Start Menu when you are familiar with the 'AutoStart' procedure.

Caution: If you turn "AutoStart" off and you have removed the shortcut from the Start Menu, you will need to start the program manually. To do this type "commh32" into the Run dialog. This is NOT recommended as it will leave references to the program in the Windows history list.

·	Increasing Security - To prevent a user from using a floppy boot disk, use your BIOS setup to set the boot sequence to 'c:' then 'a:' (rather than the usual 'a:' then 'c:'), and then prevent access to the BIOS setup by installing a BIOS password.

·	If you ever need to use a boot disk yourself, you can get into BIOS and change the settings back.

·	The Log Window


Contacts
Contact Addresses

UNITED KINGDOM (Head Office)

Hard Drive Software Ltd

West Country House

Bailey Hill

Castle Cary

Somerset

BA7 7AD

ENGLAND

Tel: 	+44 (0) 1963 351470 (Tech Support)

      	+44 (0) 1963 351758 (Sales)

Fax: 	+44 (0) 207 691 7756

http://www.harddrivesoftware.com

Email:	sales@harddrivesoftware.com

support@harddrivesoftware.com

(Online secure ordering - Switch - Visa - Mastercard - Amex)

Please visit the Web sites or eMail for the latest information on distributors


Uninstalling RedHand

To remove RedHand from your computer, choose 'Uninstall RedHand' from the 'File' menu within the program. You will be prompted for the password.

Do Not Attempt to Remove RedHand by any other means!


System Information

This feature allows you to retrieve information about a computer's hardware and settings.

If you need to contact technical support at any time you may be asked to access this feature and send us the file that it produces. All of the information in this screen can be exported to a text file.


Hide Drives & Folders

Hide Folders

WARNING! Although your files and folders are hidden and cannot be read or executed, they are not indestructible. Users and other programs may delete, damage or move files that aren't recognised or that they think are not in use. BACK UP YOUR FILES FIRST!

Select the files and folders that you want to hide - using the "Add" buttons to enter new items into the list. For obvious reasons you cannot enter any files or folders contained in the Windows folder.

Click 'Hide Now' and your files and folders will disappear. How long this takes to process depends on the number of files selected and their size. RedHand will give an approximate time for hiding as you select new files and folders.

To restore your files click "Unhide Now".

To add or remove folders and files from your list you must first Unhide them.

Note: Uninstall does not unhide your folders. Unhide them before Uninstalling or they will remain hidden in the system after the uninstall.

Hide Drives

Use this feature to hide local drives from Explorer.

Select the drives you want to hide and then click 'Apply' or 'Done' to close the Window.

The selected Drives will not appear in Explorer or 'My Computer', although any existing shortcuts will still work.

Note: Hide Drives is a policy control. RedHand's policy controls will override any other policy settings set by other programs if any of them are selected  Advanced Security.


 View Menu

Refresh Display - causes the Log display to be updated with the very latest information, up to the RedHand window itself. If a remote file was being viewed, this command refreshes the display for the file being viewed.

Application Usage... - Switches to the Application usage display.

View Internet Usage... - Switches to the Internet usage display.

Screen Capture - Leads to the screen capture viewing window.


Tools Menu

·	System Information

·	Security Manager

·	Hide Drives & Folders

·	System Lock


Limits Tab

Application Usage

Check "Do not record application usage" if you do not want to record Applications in use on the machine. The other option is to "Record all application usage" to record all the time. Click "Clear the file now" to erase the Application Usage history file.

Note: The log file is updated every 10 minutes, so nothing will appear until after the first 10 or 20 minutes after using the "Clear the file Now" button.

Time Lock

Set the required Start and End times for locking in the "Limits" section of the security window. This feature will use "Lock System" to prevent access to the machine. The authorised user can use the password or Keydisk to gain access

Compatibility

RedHand can automatically suspend its disk-writing activities while certain programs that it may interfere with are active. The main causes of such problems are disk defragmenters, which fail to operate correctly if the content of the disk changes.

The exact text that appears in the applications window must be specified. There will be a short delay after the application is started before RedHand stops writing, and another short delay after the application is closed.

CAUTION! RedHand's logging and window closing features will be suspended while the applications specified here are active - if the user knows this they can effectively disable the program simply by opening the defragmenter! We recommend that this feature only be used in invisible mode and only if absolutely necessary.