Employee Monitoring User Manual
2.4. Uninstall Methods
3.4. Log Scheduling
3.5. Lockdown Scheduling
3.6. Content Filtering
3.8. General Settings
3.9. Advanced Settings
3.10. Server Access Settings
3.12. Alert Notifications
3.13. Security Auditing
4.2. Viewer Settings
4.4. Network Log Storage
NetVizor can be installed successfully
on any PC running Windows 95/98/ME/NT4/2000/XP.
NetVizor includes two separate installation programs that you can use:
NetVizor's monitoring client can
be installed on a PC in seconds. The installation is self configured so
you only need
Installation Path: x:\program files\nvclient\sysdiag.exe
NetVizor's viewer is easily installed
by running the NVViewerInstall.exe. Simply install the viewer and run
Since NetVizor is tailored for network usage it is very easy to deploy it across your LAN.
1. Create a .bat file with the line "NVClientInstall.exe" (no quotes)
2. Run it from a shared network drive on every PC - the client will self-install in stealth, as described above.
ADVANCED INSTALLATION GUIDELINES
With NetVizor's centralized monitoring capabilities you may find the need to customize the installation on each PC that you intend to monitor. For instance, if you want to have each PC use a website filter database you have compiled you will want to configure each client to use this list - without having to manually export it to each client (very time consuming). Here is a way to circumvent this tedious footwork.
NetVizor's client can be uninstalled locally, or remotely via a network logon script.
To Start Monitoring in NetVizor's
client, simply click the "Start Server" button - then enter
your NetVizor password.
NetVizor's logs and activities are only viewable via the NetVizor web interface (see below).
NetVizor's activities can be viewed
locally or remotely. To view locally click "View User Activity"
NetVizor's logging settings can
be configured by clicking on the LOGGING button on the NetVizor interface
Screenshot logging can be enabled and configured under the "ScreenShots" tab.
NetVizor can be scheduled to log
at specific times during the day. Click on SETTINGS -> Scheduling Setup
NetVizor can be scheduled to lockdown
your PC at scheduled times. Click on SETTINGS -> Lockdown Scheduling
NetVizor can be configured to block/allow specific websites for the user, block chat clients, or to prevent specified applications from being executed. Click on FILTERING to access NetVizor's filtering menu - simply select Websites Filtering, Chat Filtering, or Application Filtering to configure the appropriate content to be filtered.
Website and Applications Filters can be imported/exported for use on multiple PC's as well - just select the appropriate selection from the FILTERING menu.
NetVizor can be configured to only allow access from remote IP's that you specify. To access the IP Security Configuration window click on SECURITY -> Configure Allowed IP Addresses. Full IP addresses can be added, or trusted Class A,B,C IP's (ie: 127.127.127.) If a disallowed IP tries to access the server, they will receive a 'banned' message.
NetVizor's General Settings are accessed via the SETTINGS -> General Options button.
Startup: NetVizor can be configured to load on windows startup for all users, the current user you are logged in under, or not at all.
Active Mode: this option allows NetVizor to be started in monitoring mode when it is opened - no need for manually starting its monitoring.
Stealth Mode: this option allows NetVizor to run in total stealth. Combined with 'Active Mode' the software will load and run in monitoring mode in complete stealth.
Splash Warning: this option allows you to display a message to the user when NetVizor is started. This message can be configured in the Advanced Settings -> Splash Screen window.
Port: this is the port used to remotely access NetVizor's web interface with. The default port is 80.
NetVizor's advanced settings can be accessed from the SETTINGS->Advanced Options button.
Thread Priority: this allows you to specify NetVizor's thread priority (ie: how much CPU it uses). For slower systems a lower thread priority is recommended.
Splash Screen: this allows you to specify NetVizor's startup splash screen, if enabled.
Autoclear: this allows you to have NetVizor autoclear its logs when they reach specified size limits.
Log Location: this allows you to specify where you want NetVizor to store its activity logs. For Windows NT/2000/XP systems monitoring ALL users it is recommended that the log location be set to x:\documents and settings\all users
Hotkey: this allows you to customize the hotkey combination that is used to bring NetVizor out of stealth mode.
Security Options: this allows
you to enable various security settings that help 'hide/conceal' NetVizor,
such as log encryption, spyware detector disabling, and more.
NetVizor's remote admin capabilities (such as window management, file browsing) can be enabled/disabled by viewing the Server Access Settings options. This can be accessed by clicking on Security -> Set Server Access Rights.
NetVizor has the powerful capabilities of not only allowing you to monitor individual workstations, but also to monitor individual USERS on your network. This is ideal if you have users that rove around from one PC to another, where they login under the same username at each PC. To enable user monitoring for centralized viewing, you will have to specify a shared network folder in the 'log storage location' settings in the NetVizor client (LOGGING menu -> Log Storage)
Once you specify a shared network folder, all logs will be stored on this shared network folder. You must then configure the NetVizor viewer to use this same shared folder in its 'network log storage' settings. Once you do this, click "Refresh" in the NetVizor viewer and all the roving users will be shown in the Resource list in NetVizor's viewer.
We recommend using a log folder
named 'logs$' for NetVizor's log storage - ie: \\your-server\logs$
The shared folder must also be stored on a Windows NT/2000/XP machine.
To access NetVizor while it is running, press CONTROL+ALT+SHIFT+M on your keyboard, enter in your password ('spytech' is the default). After configuring the shared folder you will be prompted to restart NetVizor - the NetVizor module is located at x:\program files\nvclient\sysdiag.exe - 'x' being your disk name.
NetVizor can be configured to send an email alert notification when certain actions are detected - such as a restricted website being visited or a restricted application being executed.
Setting it up
NetVizor allows you to secure your network workstations from one centralized location with its security auditing tool. NetVizor can audit remote computer's for weak password policies, misconfigured user accounts, and improper registry settings that could create exploits in your network.
To perform a security audit simply connect to a computer's web interface and select "Perform Security Audit". After the audit is completed you will be presented with the audit results. You can fix Registry Audit Alerts from your remote location by simply clicking the "Fix this Alert" link under each alert listed.
NetVizor's viewer is used to allow you to centrally view all monitored PC's on your network.
To view activities of a PC on your
network simply select a Computer from the computer list and click "View
If you have "Check if workstations are being monitored" enabled in the viewer's settings, you will see a GREEN LIGHT next to a computer that is online and being monitored. A RED LIGHT will indicate a PC that is not being monitored by NetVizor.
By clicking on "Options" in the viewer you can configure its basic settings.
Startup: allows you to load the NetVizor viewer when you turn your PC on.
Enumerate Network: allows you to have NetVizor enumerate your network for accessible workstations, or not.
Check if Workstations...: this allows you to see what remote PC's in the computers list are being monitored by NetVizor. A GREEN LIGHT indicates a monitored PC - a RED LIGHT indicates one that is not being monitored.
Port: this allows you to specify a custom port to use when viewing PC's through the viewer. This applies to all computers in the list. If you set a port that NetVizor is not using on the remote PC's then you will not be able to access the NetVizor web interface.
By clicking on "Options" in the viewer you can configure NetVizor's IP Configuration. This is a list of IPs that you want NetVizor to scan when it loads - NetVizor will check if these PC's are online and being monitored by a NetVizor client. You must have the "scan these IPs" option enabled in the IP Configuration settings to have these IPs scanned. This option is useful if some PC's are not being enumerated by the viewer, or you do not want NetVizor to enumerate your entire network, but just a few workstations.
By clicking on "Options" in the viewer you can configure NetVizor's Network Log Storage Locations. These folder paths are the shared network folders where you have chosen remote NetVizor clients to save their logs to. This will allow the NetVizor viewer to enumerate all logged users from these shared folders, so you can view all the logged activities easily from the NetVizor viewer.
For example: Clients may be set up to store logs in \\yourserver\logs$ - You would specify the viewer's Log Storage path to point to x:\network folder\logs$ (just an example path) - this would allow you to view all logged user activities from the remote clients.
This feature allows you to view logs created by computers on different subnets, where their logs are saved to a share accessible by the central computer you are viewing from.
NetVizor's web interface is the heart and soul of the NetVizor software. Here you can view all user activities in realtime, of the remote user. Below is an outline of each feature in the NetVizor web interface.