home *** CD-ROM | disk | FTP | other *** search
-
-
-
-
- T H E G U A R D I A N
-
- U P D A T E
-
- Version 1.92
-
- -------------------------------------------------------------------------
-
- * * * * Notice to Registered Users * * * *
-
- Your registration serial number is contained in the master configuration
- file, GUARDIAN.MRE. We recommend you replace the file that came with your
- Shareware version. Be advised, however, that when you do this, all
- installation parameters will be reset to their default values - including
- the master password, "guardian". When you replace the file, you should
- immediately change the password(s) to what you are currently using.
-
- -------------------------------------------------------------------------
-
- * * * * Notice to Users of DOS Version 5 * * * *
-
- 4/92
-
- The DOS installation procedure supplied in version 5 will normally create a
- CONFIG.SYS file containing a SHELL statement which tells DOS to look for
- its COMMAND.COM command interpreter in a directory called DOS. In
- addition, it will normally set up entries for programs or device drivers
- for such things as SETVER and possibly HIMEM and identify them as residing
- in that DOS directory. In this kind of configuration, with versions of The
- Guardian prior to 1.92, you would have to re-configure it if you wanted to
- be able to boot your computer from your hard disk while it is locked. (You
- would have to remove any references in the CONFIG.SYS file to the DOS
- directory, plus any programs in that directory that are needed at start-up
- time would have to be moved to the root directory.)
-
- If your disk contains a directory called DOS, Version 1.92 does not lock
- it, but it does mark it hidden so that it will not show up on a routine
- directory listing. If you have a configuration like that described above,
- you can still access the DOS directory while the disk is locked and
- therefore you can still boot the computer. If you do want that directory
- to be locked, you should change the name of it to something else such as
- DOS3, DOSS, etc.
-
- Caution: Now when a disk is locked, all programs and/or files in the DOS
- directory are available to use. Make sure there isn't anything in that
- directory that you want to be "locked".
-
- It is a good idea to review the contents of the CONFIG.SYS file to make
- sure you aren't calling in extraneous programs. For example, the program
- SETVER allows you to "send a message" to any application program that makes
- it think it is actually running under a different version of DOS. In order
- to do this, you must make an explicit entry in the SETVER table. If you
- aren't doing this, you don't even need the program, and since it is a
- resident program, you are wasting memory resources.
-
- -------------------------------------------------------------------------
-
-
-
- UPDATE.DOC; Page 2
-
-
- Version 2 of The Guardian was released in June, 1992 and is available
- directly from Marcor Enterprises. It has a windows style "interface" with
- pull down menus, pop up message windows, and includes mouse support. Among
- its many new features is the ability to selectively leave unlocked any
- combination of files and/or directories, lock or unlock multiple disks in
- one operation, customize the sign-on screen and the "locked disk" message
- file, multiple security levels, automatically park the heads of a disk
- after locking it, and control over several operational parameters. It
- includes a new program which allows you to lock or unlock disks directly
- from the DOS command line (and therefore from a batch file). The
- registration fee for version 2 is $49.95 plus $4.00 s/h ($6.00 outside the
- continental United States) plus applicable sales tax. For more information
- on its other features, please contact Marcor Enterprises.
-
-
- * * * * Getting Started * * * *
-
- Do NOT attempt to run any of the programs before reading the documentation
- - especially program TG.EXE! This is the sign-on program, and once it is
- started, you MUST have a correct password to prevent locking the disk. The
- Guardian is distributed with an initial master password of "guardian" (all
- lower case letters and without the quotes). The program TGM.EXE is the
- program used for unlocking a disk, changing passwords, etc. Don't take
- unnecessary risks - read the documentation!
-
- -------------------------------------------------------------------------
- 8/91
-
- With version 1.9, anyone who registers The Guardian will receive a bonus
- program along with the registered versions of the main programs. This
- program, TGCMD.EXE, can be used as a momentary command interpreter (e.g. a
- substitute for the COMMAND.COM that comes with DOS) which will further
- enhance the security protection of The Guardian.
-
- The documentation for The Guardian explains that if you add the command
- TG.EXE to your AUTOEXEC.BAT file, the sign-on menu will appear whenever you
- start or re-boot your computer, thus forcing a person to enter a valid
- password before he can use the computer. While most people don't realize
- it, it is possible to interrupt the AUTOEXEC procedure and potentially
- bypass the running of the sign-on program, even if the "TG" command is the
- very first entry in the AUTOEXEC.BAT file. Of course, a person would only
- have a reason to try this if he knew before he turned on the computer that
- there was something in the AUTOEXEC.BAT file that he wanted to override.
-
- This temporary command interpreter, provided to registered users, offers a
- way to safely prevent such an interruption. TGCMD.EXE can be specified in
- the CONFIG.SYS file as the initial command interpreter in place of
- COMMAND.COM. It will automatically execute the sign-on program, TG.EXE,
- and, assuming a correct password is entered, then transfer control to the
- "primary" command interpreter (normally COMMAND.COM). With this
- configuration, it is not possible to bypass the execution of the sign-on
- program.
-
- This program is offered only to registered users because it is only of any
- value to you if you are routinely using The Guardian, in which case, you
-
-
-
- UPDATE.DOC; Page 3
-
- are legally obligated to register it anyway. It has no effect on the
- functionality of the principle programs.
-
- 4/91
-
- With version 1.8 of The Guardian, a modest restriction has been added to
- unregistered copies of the system. Despite stern warnings about reading
- the documentation BEFORE running any of the programs, many people have
- simply copied the programs to their hard disk and run program TG.EXE to
- "see what it would do" - and they got a nasty surprise when the program
- locked their disk because they didn't know the default master password.
- Effective with this release, when the master password is "guardian" as
- originally distributed, and you are using an unregistered version, the
- program TG.EXE will not lock the disk as a result of an incorrect password.
- It will tell you this and then proceed to go through its alarm procedure as
- if the disk had been locked, but it won't actually lock it. Once you set
- up your own passwords, the program is fully functional.
-
- You can still intentionally lock a disk using program TGM.EXE.
- -------------------------------------------------------------------------
-
- Another important consideration .....
-
- The reference manual states that The Guardian looks in its own directory
- for its master configuration file, GUARDIAN.MRE. Under some circumstances,
- this could be confusing. What it really does is look in the CURRENT
- directory. This could have some very significant implications. If you
- choose to leave all the programs in a sub-directory, such as SECURE, then,
- when you want to add instructions to your AUTOEXEC.BAT file to execute
- program TG.EXE, do it this way: cd\; cd SECURE; TG; cd\. DO NOT put cd\;
- SECURE\tg in this file. The Guardian would look for GUARDIAN.MRE in the
- root directory, and, since it isn't there, would automatically create a new
- one with default values - including a new master password of "guardian" -
- NOT the one you assigned in the SECURE subdirectory. If you want to put
- the program TGM.EXE in the root directory so it won't get locked, move BOTH
- the program and the file GUARDIAN.MRE to the root directory. Then, what
- you put in the AUTOEXEC.BAT file to execute program TG.EXE is cd\;
- SECURE\tg. (The uppercase/lowercase isn't important; also the use of semi-
- colons in the examples is just for readability - in the actual file, you
- would put each command on a separate line.)
-
- 5/90
- Documentation clarification
-
- Chapter 3, Locking/Unlocking a Disk, describes the process for
- intentionally locking or unlocking a disk on any drive (program TGM.EXE).
- After selecting a drive, you are asked for an authorization code and are
- given three opportunities to provide the correct password (see the
- documentation for more detail). If you fail in three attempts, the request
- is denied, and you are returned to the master menu - nothing has been done
- in terms of locking or unlocking the disk. It is important to understand
- the difference between this action in this program, TGM.EXE, and the
- actions in the sign-on program, TG.EXE. If, in the sign-on program,
- TG.EXE, you fail to provide the correct password in three tries, the
- program automatically locks the CURRENT drive - which might not be the
- drive where the program is located. (This is also described in Chapter 2,
- Logging on to a System.) Also, remember that once the sign-on program has
- been started, there is only one way out - provide the correct password
-
-
-
- UPDATE.DOC; Page 4
-
- (unless, of course, you turn off your computer). If you don't provide the
- correct password, the disk is locked and the keyboard is disabled.
-
-
- * * * * Version History * * * *
-
-
- Version 1.92 - 6/92
-
- The only change is that now when you lock a disk, if the program finds a
- directory called DOS, it does not lock it, but does mark the directory
- "hidden". This change was made to accommodate users of DOS version 5 which
- normally depends on the availability of that directory to "boot" from a
- hard disk. This change applies to all versions of DOS, not just version 5.
- Remember that now any program or file in a directory called DOS is still
- available for use while a disk is locked. If you don't want this directory
- left unlocked, change its name to something other than DOS.
-
-
- Version 1.91 - 1/92
-
- This update corrects several minor errors.
-
- If some problem were to occur while one of the programs is running and the
- lock control file, !!!.###, gets created but has no data (i.e. has a length
- of 0), the program would still read data off the disk and try to use it for
- passwords and lock status. This usually resulted in the program rejecting
- any password entered to unlock a disk even though it wasn't locked in the
- first place.
-
- When you deliberately lock or unlock a disk, program TGM forces you to
- enter a valid drive letter by setting a range of letters based on the
- number of drives installed or set by your CONFIG.SYS file. If the number
- of drives is a multiple of 16 (it often is 32 if a computer is on a
- network), the program, in doing some logical "masking", would calculate the
- number of drives to be zero and would set the letter range to "A-@". (In
- the ASCII numbering system the "@" character is numerically one less than
- "A".)
-
- If you change the master password and then attempt to lock a disk using
- that new password without first quitting the program, the new password
- would not be set properly in memory even though the program correctly
- updated the master configuration file, GUARDIAN.MRE. Now it works
- correctly.
-
-
- Version 1.9 - 8/91
-
- Version 1.9 of The Guardian contains two changes which, individually are
- fairly minor but, in conjunction with each other, provide for significantly
- simpler operation. When combined with the temporary command interpreter
- provided to registered users, it also greatly improves security protection.
-
- When a disk is locked, The Guardian now leaves "unlocked" ANY of its own
- programs/files that it finds in the root directory, which now includes the
- sign-on program, TG.EXE, and the command interpreter, TGCMD.EXE. The other
- change is that the sign-on program, TG.EXE, now checks the lock status of
- the disk before it displays the sign-on menu. If it is already locked, it
-
-
-
- UPDATE.DOC; Page 5
-
- accepts only the master password or the password that was used to lock the
- disk and then automatically unlocks the disk. This means that, if you
- register the program and use the new command interpreter, you can lock the
- disk before you turn off the computer, and, when you turn it back on, the
- disk is automatically unlocked as part of the normal start up process.
-
- If you prefer not to have the "Installation" name displayed as part of the
- sign-on menu, select the parameters option in program TGM.EXE and delete
- the contents of the Installation field. Program TG.EXE will then not
- display anything when it displays the sign-on menu.
-
- C A U T I O N
-
- Do not use version 1.9 of The Guardian to unlock a disk that was
- locked with an earlier version. The name of the "readme" file
- that is placed on a locked disk has been changed from
- READTHIS.MRE to README.TXT. Also you should not have one of your
- own files called README.TXT in the root directory. The Guardian
- will successfully lock and unlock the file, but for an instant
- during its processing, you will have duplicate entries in your
- root directory. When The Guardian is all done, it issues a
- command to DOS equivalent to "DEL README.TXT" and DOS will then
- erase or delete BOTH files.
-
-
- Version 1.8 - 4/91
-
- This corrects an error which would only occur under very unusual
- circumstances. If the contents of a disk are altered while it is locked
- (such as adding a file - which should never be done), then, when you try to
- unlock the disk, you will get an error message for each locked file whose
- directory entry has been altered. You are given the opportunity to abort
- the unlock procedure or continue - normally you would continue. If,
- however, you press Esc to abort the process, the program would previously
- go ahead and replace the control file (containing the information for
- unlocking the remainder of the disk) with a control file indicating the
- disk was unlocked. Now this control file is left untouched until the disk
- is completely unlocked. As stated in the documentation, until a disk is
- completely unlocked, The Guardian considers it locked - thus you cannot
- lock a disk which has been partially unlocked.
-
- In addition, several more cosmetic enhancements have been made.
-
-
- Versions 1.6 - 1.7 9/90 - 11/90
-
- Version 1.6 contains some internal corrections which under very remote
- circumstances could cause one of the programs to behave erratically.
-
- Version 1.7 is primarily a technical upgrade. The internal structure of
- the program building blocks has been rearranged and much of the source code
- of the programs has been re-written for greater efficiency for both speed
- and reduced program size. Also a number of cosmetic enhancements have been
- added.
-
-
- Version 1.5 - 3/90
-
-
-
- UPDATE.DOC; Page 6
-
- Version 1.5 accomodates the enhancements introduced with DOS version 4
- which allows you to format a logical disk larger than 30 mb. These same
- capabilities exist in Compaq's version of DOS 3.3. Included on this
- distribution disk is a program called DISKINFO.EXE. It merely reads a disk
- and displays various technical parameters about the disk. If you have any
- questions about the compatibility of your DOS or disk format with the
- PC/MS-DOS format, run this program before attempting to lock a disk. If it
- displays valid information, you will have no problems. If you are not
- familiar with terms such as clusters and sectors, just verify the total
- capacity. Also, the standard default number for bytes/sector is 512. If
- the program displays any 0's or negative numbers, please contact Marcor
- Enterprises.
-
- With version 1.5, a slight change has been made in the way The Guardian
- locks a disk. Version 1.5 does not lock any files in the root directory
- that end in the extension .COM or .SYS. This way, if you lock your hard
- disk, the system is still "bootable" even though all other files are
- inaccessible (although it will not execute any commands in an AUTOEXEC.BAT
- file). Also, if it finds its own master menu program, TGM.EXE, in the root
- directory, it will not lock it. This way, you can, at your option, have
- your disk set up so that, if or when it gets locked, it is possible to
- restart your computer and unlock the disk without needing a another hard
- disk or diskette. Read the reference manual regarding some restrictions
- and cautions about using this technique.
-
- CAUTION: Some large disks use their own software for handling hardware
- features not supported by some versions of DOS. Frequently this means you
- need a special file called a device driver which is invoked by your
- CONFIG.SYS file. If this driver file does not end in an extension of COM
- or SYS, and if it is not in the root directory, then it will get locked
- along with other files and will not be available to CONFIG.SYS when you
- start up your computer. Thus it is possible that you still will not be
- able to boot your computer when the disk is locked.
-
- (6/92 - Version 2 of The Guardian eliminates this potential problem.)
-
-
- * * * * * * * * * * * * * *