Goverlan Universal Settings - Registry Settings

This article describes the registry settings used by Goverlan. These settings are normally distributed via a Group Policy Object, however you can also configure them manually via a script, or into an installation package.

Note: If a registry value does not exist, the default is applied.

Goverlan Management Console

HKEY_LOCAL_MACHINE\Software\Policies\PJ Technologies\GMC

Name

Type

Possible Values

Description

DoNotShowNTDomains

REG_DWORD

 

0 => Look for NT domains
1 => Do not look for NT domains (default)

Enable this option if your infrastructure no longer includes any NT domains or if you do not need to administer them. Enabling this option improves performance.

ShowAdvancedOptions

REG_DWORD

0 => Do not display advanced options (default)
1 => Display advanced options

Enable this option to display advanced options. Unless instructed by our Support or Sales team, you do not need to enable this feature.

EnableEnvVarTable

REG_DWORD

0 => Do not use Enable Environment Variable Resolution Table  
1 => Enable Environment Variable Resolution Table (default)

Enable this option if your users are configured with a roaming profile path which includes one or more environment variables which need to be defined by a local value table. This is an advanced option.

EnableTsProfileDetection

REG_DWORD

0 => Do not use the configured Terminal Services Profile Path in the detection of user logged-in workstations
1 => Use the configured Terminal Services Profile Path in the detection of user logged-in workstations (default)

Enable this option if your users are configured with a Terminal Services Roaming Profile Path and you want Goverlan to use it to detect logged-in workstations.

EnableDfsShareDetection

REG_DWORD

0 => Do not use DFS Share Detection during the detection of user logged-in workstations (default)
1 => Use DFS Share Detection during the detection of user logged-in workstations (default)

Enable this option if your users are configured with a Roaming Profile Path or a Home Drive Path which points to a DFS share and you want Goverlan to use it to detect logged-in workstations.

DSA

REG_DWORD

0 => Do not disable the Scope Action feature (default)
1 => Disable the Scope Action feature

Use this option to prevent Goverlan Management Console users from using the Scope Action feature. If enabled, the Scope Action feature is not available.

disableWMIXfeature

REG_DWORD

0 => Do not disable the WMIX feature (default)
1 => Disable the WMIX feature

Use this option to prevent Goverlan Management Console users from using the WMIX feature. If enabled, the WMIX feature is not available.

disableCHATfeature

REG_DWORD

0 => Do not disable the Chat feature (default)
1 => Disable the Chat feature

Use this option to prevent Goverlan Management Console users from using the Chat feature. If enabled, the Chat feature is not available.

ApplicationMiscDataPath

REG_SZ

Application Data Path - default: %APPDATA%\Goverlan

Defines the directory used by Goverlan to store miscellaneous data. For instance, this directory is used to store custom action, custom control and scope action definition files.

ApplicationSharedDataPath

REG_SZ

Application Shared Data Path - default: <empty>

Defines a network resource path used to store information about objects which can be shared (such as custom controls and custom actions). This value is optional and may be empty.

ApplicationOutputDataPath

REG_SZ

Application Output Data Path - default: %ALLUSERSPROFILE%\Application Data\Goverlan\Output

Defines the directory used by Goverlan to store output data files. For instance, this path is used as the default location to store Scope Action report and log files.

ApplicationTmpDataPath

REG_SZ

Application Temporary Data Path - default: %TEMP%\Goverlan

Defines the directory used by Goverlan to store temporary data files.

ApplicationCentralDataRepoDir

REG_SZ

Application Central Data Repository - default: <empty>

Defines a network resource path used to store central information about user objects. This central repository may be used by Goverlan during the detection of logged-in workstations. This value is optional and may be empty.

Goverlan Remote Control - Admin Side

HKEY_LOCAL_MACHINE\Software\Policies\PJ Technologies\Goverlan Universal Settings\GRMC

Name

Type

Possible Values

Description

disableClipboardTransfer

REG_DWORD

0 => Disable the Clipboard Transfer feature
1 => Enable the Clipboard Transfer feature (default)

Use this policy to disable the clipboard transfer feature in Goverlan Remote Control. If you enable this policy, clipboard transfer cannot be activated during a remote control session.

forceObserveOnly

REG_DWORD

0 => Force all remote control sessions to be Observe Only
1 => Allow the control of remote machine's keyboard and mouse (default)

Use this policy to force the Observer Only mode in Goverlan Remote Control. If you enable this policy, the machine will only be able to initiate non-interactive (observe only) remote control sessions.

disableCHATfeature

REG_DWORD

0 => Disable the Chat feature (Remote Control only)
1 => Enable the Chat feature (default)

Use this policy to prevent Goverlan users from using the Chat feature. Note that this setting is only recognized by Goverlan Remote Control.

AdminModeFlags

REG_DWORD

0 => Always allow the Admin Mode
1 => Only allow the Admin Mode if no-one is logged-into the remote machine (except if the logged-in user is the Goverlan user)
2 => Never allow the Admin Mode

This policy controls how the Goverlan Remote Control Admin Mode feature should be authorized. The Admin Mode enables the administration to block the client's screen, keyboard and mouse while performing administrative work.

 

Goverlan Remote Control - Client Side

HKEY_LOCAL_MACHINE\Software\Policies\PJ Technologies\Goverlan Universal Settings\GRMS

Name

Type

Possible Values

Description

PreSessionAction

REG_DWORD

1 => No Action (default)
2 => Prompt Local User
3 => Disable Remote Control
4 => Lock Computer
5 => Log out local user

Action to be executed before the remote control session starts.

PostSessionAction

REG_DWORD

1 => No Action (default)
4 => Lock Computer
5 => Log out local user

Action to be executed after the remote control session ends.

NotifyPastSession

REG_DWORD

0 => Disable Notification  (default)
1 => Activate Notification

Option to display a screen notification alert when the remote control session ends.

NotifyPastSession_Email

REG_DWORD

0 => Disable Notification  (default)
1 => Activate Notification

Option to send an email notification alert when the remote control session ends.

NotifyPastSession_CLog

REG_DWORD

0 => Disable Notification  (default)
1 => Activate Notification

Option to update a central log with session information when the remote control session ends.

RMSEventMaxCount

REG_DWORD

[5 .. +]
(default = 25)

Goverlan keeps a history log of remote control session activity. This settings specifies the maximum number of remote control session events to keep in this log.

PromptWaitSeconds

REG_DWORD

[5 .. +]
(default = 15)

Number of seconds to wait while prompting the local use for approval before the remote control session is automatically refused.

NotifyWaitSeconds

REG_DWORD

[0..+]
(default = 10)

Number of seconds to display the notification banner during a remote control session.

0 results in no banner notification.

LockedCancelsPrompt

REG_DWORD

0 => If PreSessionAction is set to 'Prompt Local User' and the machine is in a Locked state, or no user is currently logged-in, the connection is refused
1 => If PreSessionAction is set to 'Prompt Local User' and the machine is in a Locked state, or no user is currently logged-in, the connection is approved without the prompt (default)

This setting defines the behavior to adopt if the PreSessionAction value has been configured to prompt the local user for approval and the machine is in a locked state, or no user is currently logged-in (Goverlan v5.13 and later).

AuthorizeLocalAdmins

REG_DWORD

0 => Do not authorize local administrators
1 => Authorize local administrators (default)

Specifies if local administrators are automatically authorized to initiate a remote control session (Goverlan v5.05 and later).

NoVisualNotification

REG_DWORD

0 => Display visual notification (default)
1 => Do not display visual notification

If set to 1, no visual notification is displayed to notify the local user that a remote control session is active.

NotifyPastSession_CLogLineFormat

REG_SZ

string

Network path and file name of the central log to use if NotifyPastSession_CLog is enabled

NotifyPastSession_CLogLineFormat

REG_SZ

string

Format of the activity information line to use when recording information in the central log.

smtp_Account

REG_SZ

string

SMTP Email Account to use when sending a post session notification email (NotifyPastSession_Email)

smtp_AccountPwd

REG_SZ

string

SMTP Email Account password to use when sending a post session notification email (NotifyPastSession_Email)

smtp_Server

REG_SZ

string

SMTP Email server name to use when sending a post session notification email (NotifyPastSession_Email)

smtp_Port

REG_DWORD

[0..+]
(default = 25)

SMTP server port to use when sending a post session notification email (NotifyPastSession_Email)

smtp_Recs

REG_SZ

string

Semi-colon separated list of email recipients to use when sending a post session notification email  (NotifyPastSession_Email)

smtp_Subject

REG_SZ

string

Email subject line to use when sending a post session notification email (NotifyPastSession_Email)

Goverlan Agents

HKEY_LOCAL_MACHINE\Software\Policies\PJ Technologies\Goverlan Universal Settings\GAGT

Name

Type

Possible Values

Description

communicationPort_1

REG_DWORD

[1 .. 65535] - Default: 21159

Communication port used by the Goverlan Agent.

GA_ProtectionType

REG_DWORD

0 => No filter (default)
1 => No Agents Installation
2 = >No Agents Updates (freeze current version)

Enable this setting to prevent the Goverlan Agents from being installed or updated on a machine.

AutoFWConfig

REG_DWORD

0 => Do not allow the Goverlan Agents to modify local firewall settings
1 => Allow the Goverlan Agents to modify local firewall settings (default)

Enable this setting to have the Goverlan Agents automatically configure the Windows Firewall with the necessary ports for Goverlan client/server communications.

If enabled, the Goverlan service validates the firewall configurations when it starts, and removes Goverlan related configuration settings when it stops.

LoggingEventMaxCount_USR

REG_DWORD

[1 .. 65535] - Default: 25

Maximum number of login events to remember in the Users Logged-In Workstation History log.

LoggingEventMaxCount_MAC

REG_DWORD

[1 .. 65535] - Default: 25

Maximum number of login events to remember in the Machines User History log.

 

See Also

Settings Distribution - Overview