v5.1 Server Guide

v5.1 Server Guide
Impero learning series
English
© 2015 Impero Solutions Ltd.
v5.1 Server Guide
Impero installation guide
table of contents
Introduction
Tabs
Licence
Connections
Settings
Active Directory Settings
Resource Logging
Console Access Rights
Mail Server Settings
Acceptable Use Policy
Computer Availability
Group Timetable
Lock Screen
Misc
Automatic Updates
Patch Management
Patch Management Prerequisites
Room Booking
Confide
Favourites
YouID
Menu Items
File
Tools
Help
4
5
5
7
8
8
9
10
15
15
17
20
22
24
25
26
27
28
31
34
36
37
37
39
45
v5.1 Server Guide
Impero installation guide
Appendices
Appendix A - Console Logging Levels
46
47
v5.1 Server Guide
1
Introduction
The Impero Server is a service and a program that must run continuously on a single machine within your network. Running more
than one server will cause your network clients to stop functioning. There is an Impero Server application that interacts with the
Impero Server service. To launch the program, locate the 'Impero Server' shortcut icon (Image 1) on the desktop and doubleclick.
You may be presented with the password entry box (Image 1.1) or the Impero Server
application will open (Image 1.2). This depends on how the Impero Server application has been
configured.
Image 1 - Desktop Icon
Image 1.1 - Password Box
N ote : If y ou are not sure of y our password, please ask y our network adm inistrator.
Image 1.2 - Impero Server
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 4
v5.1 Server Guide
2
Tabs
The main functions within the Impero Server application window are split over nine tabs - 'Licence', 'Connections', 'Settings',
'Automatic Updates', 'Patch Management', 'Room Booking', 'Confide', 'Favourites' and 'YouID'. If you do not see any of these tabs
in the Impero Server window, you can scroll through the tabs using the arrow keys
in the top right-hand corner.
2.1
Licence
The 'Licence' tab (Image 2) opens by default upon opening the Impero Server. This displays a variety of licence information in
regards to your installation of Impero.
Image 2 - Licence Tab
1 - The first display in this tab gives you details regarding the number of Impero licences that are available to your organisation.
Establishment Name
The name of your company.
Console Limit
This is the number of Impero Consoles that you are currently licenced to run at any one time.
Workstation Limit
This is the number of remote workstations that you are currently licenced to concurrently manage with the Impero client.
If the number of active Console/Workstation sessions reaches the limits displayed in this window, any new Console/Workstation
connection will fail until a currently active session ends, or your number of licenses is increased. In order to increase your license
limits, please contact Impero or contact your account manager.
2 - Your 'Activation Code' is required when contacting Impero Support. The code is also used to gain access to the support forums
on the Impero website. Clicking on the 'Support Website' button will open the Impero Support Centre, where you are able to
create new and view existing support tickets. If you are prompted to login at this stage, use the Activation Code as displayed in the
Impero Server License tab, and the password that was created during installation of your Impero Server. If you are unsure of this
password, please contact Impero Support.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 5
v5.1 Server Guide
3 - This display shows you further information regarding your current licence agreement with Impero.
Licence Type
This will tell you whether you are licensed to run a trial or full version of Impero.
Latest Server Allowed
This tells you the latest version of Impero Server that you are currently licensed to run. If this version is later than the version
you are running, check the Automatic Updates tab . You can check the current running version by selecting the 'Help' menu
followed by 'About'.
Latest Client Allowed
This tells you the latest version of the Impero Client that you are currently licensed to run. If this version is later than the
version you are running, check the Automatic Updates tab .
Product
Details of the Impero product that you are licensed to run.
License Expiry Date
This date tells you when your current license with Impero ends. If you need to extend this license please contact Impero
Support, or speak to your account manager.
Days Remaining
If you are running a full version of Impero, the number displayed here will tell you the number of days of Impero Support you
are currently licensed to receive.
4 - The 'Activated Modules' panel in this window will show you the features that are currently active in your Impero Console
license.
If any of these modules are not available under your licence agreement but you are interested in using them, please contact Impero
Support, or speak to your account manager.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 6
v5.1 Server Guide
2.2
Connections
The 'Connections' tab allows you to view all connected Impero clients on your network (Image 3).
Image 3 - Connections
The main panel shows you a list of Impero clients and information regarding their state and connection type. In this display you can
see the remote Computer Name, the Username that is connected from that computer, the IP Address of the remote computer,
the Client Type (this is either Console or Workstation), the Version of the Impero Client running, the Status of the connection
(Active or Disconnected), and the Last Contacted time between the Server and that computer.
Click on the arrow in the left most column of an entry to select that computer. You can select multiple computers by holding down
the 'CTRL' key on your keyboard while clicking on computers in the list, or select all computers using the
button in the top
corner of the 'Connections' list.
There are four actions that you can perform in this view using the buttons above the main panel:
Refresh Display
Refresh the current view of client connections.
Uninstall Impero Client
Use this button to uninstall the Impero Client from any selected client entry in the list. You can also perform this action by rightclicking on any computer in the list.
N ote : T here m ay be 'Enhanced Security' options configured that disallow this action from being carried out.
Force Update To Latest Version
If there is a more up-to-date version of the Impero Client available, this option will force the selected remote computers to update
to this version of the client. The text in the bottom left-hand corner of 'Connections' tab will show you if there is a newer version of
Impero available. You can also perform this action by right-clicking on any computer in the list.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 7
v5.1 Server Guide
View Client Update Queue
Click on this option to see a list of computers that are currently in a queue to be updated. You can also see what version the remote
computer will be updated to and an estimated time of when it will be updated.
2.3
Settings
The 'Settings' tab (Image 4) of the Impero Server contains a number of sub-tabs that define how various sections of your Impero
installation will behave.
Image 4 - Settings Tab
2.3.1
Active Directory Settings
Impero is capable of integrating with Active Directory (AD) domains, which adds extra functionality to the software, such as
importing user and computer groups from AD, enabling/disabling user accounts and changing user passwords. In order to set up
this integration, your Active Directory needs to be linked to Impero by entering your server details here (Image 5).
Image 5 - Active Directory Settings
Once you have entered your settings, click on the 'Test Directory Settings' button to verify that Impero can communicate with
your AD server. If the test is successful, click the 'Apply' button to save your changes.
Tick the 'Force Google Chromebooks to authenticate with Active Directory' option if you wish to enable an AD prompt when
users log in to Chromebook devices. This would result in Chromebook users having to enter their AD credentials in order to allow
access to the Internet - their access will be restricted until their AD details are correctly entered. This allows Impero to view and log
Chromebook device usage by AD username.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 8
v5.1 Server Guide
2.3.2
Resource Logging
The 'Resource Logging' tab (Image 6) controls which remote computer events you wish for Impero to log, as well as log file
location and duration.
Image 6 - Resource Logging
[1] - Location of Log Files
Select the location to which you wish for Impero log files to be saved. By default, Impero will store the logs in a 'Logs' folder under
the 'Impero Server' directory. If you wish to change this, click on the 'Browse' button and navigate to the location on a local hard
drive that you wish to save logs to. Click the 'Apply' button to save any changes.
[2] - Specify in the drop-down list (Image 6.1) if you wish to purge any log files older than a certain date.
If you select 'Do Not Remove', the logs will remain in the specified directory until such a time they are
manually removed, or a purge is set up at a later date. If any of the other options in this drop-down list
are selected, then any logs older than the days specified will be deleted. Click the 'Apply' button to save
any changes.
[3] - Click on these checkboxes to specify which resources and events should be logged by Impero.
Image 6.1 - Delete Logs
Log all resources that Impero client users access
Enabling this will log any window that the client accesses on the remote computer.
Log all running Applications
This will log any application that the client runs on the remote computer.
Log all websites accessed
This will log all websites that are accessed on the remote computer.
Log all Printed Documents
This will log any document that is sent to a printer from the remote computer.
Log an image for violations that generate image evidence
If there are policies set up in the Impero Console that take a screenshot when a violation occurs, this option will log the images that
are saved from these violations.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 9
v5.1 Server Guide
Log Deleted Files from My Documents
This will log anything that is deleted from 'My Documents' on the remote computer.
Click on the 'Apply' button to save any changes.
2.3.3
Console Access Rights
The 'Console Access Rights' tab (Image 7) allows you to define who can use Impero and their access levels within the Impero
Console. Access rights can be granted to users, computers or Active Directory groups through this tool.
Image 7 - Console Access Rights
[1] - Only allow the following users, computers and Active Directory groups to access Impero
If the box remains unchecked, then everyone will have access to the Impero Console. They must enter the password that has been
predefined in (Image 7 - [2]).
If this box is marked then the 'Access Rights List' (Image 7 - [4]) and access right tabs (Image 7 - [5]) become active. Once these
are active, only the users/computers/groups that appear in the 'Access Rights List' have access to Impero.
[2] - The Password needed to run the console
Upon registering your Impero Server you would have created a password to access the Impero customer portal. The same
password appears here and is the default Console access password. To change the password, enter a new password in box (Image 7
- [2]) and then click the 'Apply' button.
Users are always required to enter the password to launch the Console, unless you have set up an 'Access Rights List' (Image 7 [4]). If this is configured, users will still be required to enter this password, but only once per login session. All computer based
access rights will always require password entry.
[3] - Require all console users to enter the password once per session
All users will by default be required to enter the Console password when they attempt to launch the Impero Console. If a user
belongs to the 'Access Rights List' (Image 7 - [4]), this password prompt will only occur once per session, i.e. once the user has
authenticated they will not be prompted to enter the password again if they close the Console and re-open it. However, once they
log out of the operating system and back in, they will be prompted to enter the password again on the first launch of the Console.
This behaviour can be disabled by unticking this option, however it is not recommended to turn this option off.
[4] - Access Rights List
The 'Access Rights List' panel becomes active if the 'Only allow the following users, computers and Active Directory groups to
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 10
v5.1 Server Guide
access Impero' (Image 7 - [1]) option is ticked. From then onwards, only entries in this list are able to access the Impero console.
There are three buttons in the bottom left-hand corner of this panel allowing you to perform certain actions.
New
Image 7.1 - New User
In the new window you then have three options as to who you wish to add access for:
User
Add a username to the Access Rights List. In (Image 7 - [4]), user 'bmatthews' is already assigned access.
Computer
Enter a computer name to allow access from that computer to Impero. In (Image 7.1), a computer is being assigned
access.
Active Directory Group
If you wish to add a Security Group from your Active Directory server, check this selection and click on 'Find'. You can
then navigate through your Active Directory setup to add a Security Group to the Access Rights List. Alternatively, type in
the Active Directory Security Group name.
N ote : T he 'Find Active D ire ctory Group' feature requires further enabling in the 'Active Directory Settings' tab in the Im pero S erver.
When you have entered your user/computer/Active Directory group, click on the 'Ok' button, and that user will then appear
in the Access Rights List (Image 7.2).
Image 7.2 - Access Rights List
Remove
Select a user in the 'Access Rights List', and click on the 'Remove' button in order to remove access to the Impero Console for
that user.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 11
v5.1 Server Guide
Copy
You are able to copy the access rights of one user/computer to others. Select the user that you wish to copy from, and click
on the 'Copy' button. You can then either select the user/computer that you wish to copy the access rights to (Image 7.3), or
select to copy the access rights to a new user. If you select 'A new user', you will then be prompted to add a new user (Image
7.1) to where the access rights will then be copied.
Image 7.3 - Copy Access Rights
(Image 7.3) shows the process of copying access rights from the user 'Steve' to a number of users.
[5] - The access right panel becomes active if the 'Only allow the following users, computers and Active Directory groups to access
Impero' (Image 7 - [1]) option is ticked. When enabled, you can click on any user in the 'Access Rights List' (Image 7 - [4]) in order
to modify their access rights in this panel. The access rights are split between three tabs:
Access
The 'Access' tab governs which tools in the Impero Console the selected user/computer has access to (Image 7.4).
Image 7.4 - Access Right - Access
Firstly, you can set whether the selected user/computer/group has to enter a password to gain entry to the Impero Console. If
this box is checked, then the user must enter the password (Image 7 - [2]) in order to be able to launch the console.
N ote : W hen a com puter is added to the 'Access R ights L ist', any one accessing the console from that com puter m ust enter the password. If their
usernam e and/or one of their security groups are added to the 'Access R ights L ist', then this will override the need to enter a password by default.
The panel underneath the checkbox then lists all the tools within the Impero console that are available for the user/computer
to have access to. Tick the box next to the tools that you wish for them to have access to, or untick those that you do not wish
for them to have access to.
The toolbar or the corresponding icon will be removed from the user's Impero Console once the Impero Console has been
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 12
v5.1 Server Guide
restarted. If you change a user's Console Access Rights so that they have access to under twelve features, their Console view
will automatically switch to a basic view containing a one-level menu displaying only those twelve or less icons.
Groups
The 'Groups' tab allows you to define what access levels the selected user/computer has to the groups that currently exist
within Impero (Image 7.5).
Image 7.5 - Access Rights - Groups
The 'Existing Groups' panel on the left-hand side will contain a list of all the groups that are currently created within your
Impero setup. Select one of the groups by clicking on it, i.e. in (Image 7.5), 'IT Room 1' is selected. You are then able to view
the 'Group Access Rights' for the selected user/computer for that group in the right-hand panel. Mark the relevant
checkboxes next to the access levels that you wish to grant to the selected user/computer.
Allowed To View Group and
The selected user/computer has access to view the group, as well as perform any further selected options.
Manage Group Members
The selected user/computer has the ability to add/remove users to this group.
Manage Group Policies
The selected user/computer is able to add/modify/remove any policies (Block List/Allow List/Keyword Detection/
Advanced Policies) applied to the group.
Manage Classroom Layout
The selected user/computer is able to modify the Room Layout of the group (Computer Groups only).
Rename Group
The selected user/computer has access to change the name of the group.
Manage Group Access Rights
The selected user/computer is able to make changes to the access rights that other users have for this group.
Manage Group Settings
The selected user/computer can make changes to the Group Settings that are applied to this group.
Delete Group
The selected user/computer is allowed to delete this group.
No Access To Group
The selected user/computer does not have any access rights to the group.
The 'Copy' button at the bottom allows you to copy the 'Group Access Rights' from the selected group to all of the other
existing groups. For example, in (Image 7.5), 'IT Room 1' is selected. Clicking on the 'Copy' button will copy the Group Access
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 13
v5.1 Server Guide
Rights from 'IT Room 1' to all of the other 'Existing Groups' in the left-hand panel, overwriting any access rights that were
previously associated with those groups.
Policies
The 'Policies' tab allows you to control what levels of access selected users/computers have to Advanced Policies within the
Impero console (Image 7.6).
Image 7.6 - Access Rights - Policies
The 'Existing Policies' panel on the left-hand side will display a list of all the policies that are currently created within the
Impero Console. The 'Default Policies' (Block List, Allow List, White List, Action List) that are automatically created per group
will appear at the top of the list, followed by other policies that exist in the system. Click on one of the existing policies in the
left-hand panel in order to see the 'Policy Access Rights' that are assigned to the selected user for that policy. Mark the
relevant checkboxes next to the access level that you wish to grant to the selected user/computer.
Allowed to View Policy and
The selected user/computer has access to view the policy as well as perform any further selected options.
Manage Policy Items
The selected user/computer has access to add/remove items to this policy.
Rename Policy
The selected user/computer has access to rename the policy.
Delete Policy
The selected user/computer has access to delete the policy.
No Access to Policy
The selected user/computer has no access to view or edit any of the policy items.
The 'Copy' button at the bottom allows you to copy the 'Policy Access Rights' from the selected policy to all of the other
existing policies. For example, in (Image 7.6), 'IT Room 1' is selected. Clicking on the 'Copy' button will copy the Policy Access
Rights from 'IT Room 1' to all of the other Existing Policies in the left-hand panel, overwriting any access rights that were
previously associated with those policies.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 14
v5.1 Server Guide
2.3.4
Mail Server Settings
There are a number of features within Impero that allow email alerts to be sent to selected people. In order for the email alerts to
work, you must enter mail server and email account details in this window (Image 8).
Image 8 - Mail Server Settings
Once you have entered your mail server settings, click on 'Send Test Email' to verify whether the settings are correct. The test
email should go to the address you have entered in the 'Account Name/Email Address' field, and appear from the entry you have
made in the 'Mail From' field.
If your settings are correct, click on the 'Apply' button to save the changes.
2.3.5
Acceptable Use Policy
The 'Acceptable Use Policy' (AUP) tab (Image 9) allows you to create one or more AUPs. Impero Console users can then configure
each group to display a specific AUP that users must agree to when logging onto the system. If the user does not agree to the AUP
they will be automatically logged off the system.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 15
v5.1 Server Guide
Image 9 - Acceptable Use Policy
1 - Define whether the AUP will be enabled or not, and if it is enabled, how it will behave.
Disable the Acceptable Use Policy
Users will not be required to agree to an AUP when logging on.
Always ask users to agree to the Acceptable Use Policy when they log on
If this option is selected, users will be prompted to agree to the AUP every time they log onto the system.
Only ask users who have not already agreed to the Acceptable Use Policy
If this option is selected, users will only have to agree to the AUP the first time they log onto the system. Users that have
already previously agreed will not be prompted to agree the next time they login.
2 - Current Acceptable Use Policies
The drop-down area will show a list of all the AUPs that have already been created. By selecting any of the AUPs in the dropdown list, you can then edit it in the text area below (Image 9 - [3]).
Add
Add a new AUP. Click the 'Add' button and give the new AUP a name. It will then become active for editing in the text area
below (Image 9 - [3]).
Remove
Delete the AUP that is currently selected in the drop-down list.
3 - Define your Acceptable Use Policy
Whichever AUP is selected in the drop-down list (Image 9 - [2]) will be available for editing in this text area. Enter your
organisation's policy into the text area and press the 'Apply' button to save the changes. Impero console users can then
configure which AUP will appear on a group by group basis. Only one AUP will be displayed even if users are members of
multiple groups with multiple AUPs. The user/computer group with the highest priority group will display the AUP assigned to
this group. There are three buttons at the top of the text area that allow you to edit how the text will appear:
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 16
v5.1 Server Guide
Edit the font style in which the Acceptable Use Policy text will appear.
Edit font colors for the Acceptable Use Policy text.
Enter an image into the Acceptable Use Policy.
4 - When a user agrees to the AUP, a digital signature is taken by Impero to confirm their agreement of the policy.
View Signatures
Click on 'View Signatures' in order to view these digital signatures and see which users have agreed to the AUP. You are able to
see their username, the computer on which they signed on and agreed to the policy, and the time at which they agreed (Image
9.1). You can also click on the 'Export' button to export this information to a CSV file.
Image 9.1 - View Signatures
Clear Signatures
Click on 'Clear Signatures' to clear the list of users that have agreed to the AUP. All users will then be required to accept the
AUP again when they log in next.
5 - The 'AUP Size' field will display a percentage figure telling you the current size of the AUP file you are currently viewing. Please
ensure that this figure does not exceed 100%.
2.3.6
Computer Availability
The 'Computer Availability' feature enables you to show computer availability across your network. This is displayed via a web page
and shows users where there are free computers to use throughout your organisation. To enable this service, select the 'Computer
Availability' tab in Impero Server and check the 'Enable the computer availability service' box (Image 10).
Image 10 - Computer Availability
[1] - The default port for this service is set to '8181'. Ensure that this port is not currently in use. If it is, you can change the port
number to any free port in the 'Port' text field. You must then click on 'Apply' to save any changes.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 17
v5.1 Server Guide
[2] - To hide any particular group from displaying, tick the checkbox next to that group in the 'Computer groups that should
NOT be used' area.
[3] - To view the computer availability web page, use the following web address:
http://127.0.0.1:8181/default.html
Replace 127.0.0.1 with your Impero Server IP address i.e. http:// S erver IP Address: Port N um ber/default.html.
H int: After m ak ing changes, click on the 'Apply ' button to save.
The computer availability web page is then displayed, showing a list of computer groups and how many of the computers in each
group are not currently in use (Image 10.1).
Image 10.1 - Computer Availability Web Page
Clicking on any of the group names will expand the list to show the name of any free computer within that group. A computer is
defined as 'free' if it is switched off or currently does not have a user logged in.
The computer availability web page will refresh every 30 seconds and displays the last time updated in the top left corner. To force
an update, click on the 'Update' button in the top right corner of the web page.
There are additional features within the computer availability functionality called 'Digital Signage'. This allows you to modify the
web address to view more specific information.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 18
v5.1 Server Guide
For example, if you wish to view only a specific group, you can add '(findgroups)' to the end of the URL plus the group name, i.e.
http://127.0.0.1:8181/default.html?(findgroups)IT Room 1 (Image 10.2).
Image 10.2 - Digital Signage
This will display your specified group with a colour indicator for the amount of computers that are currently free. There are three
different indicators:
Green: More than 25% of the computers are free.
Orange: Less than 25% of the computers are free.
Red: No computers are free.
To display more than one group at a time, separate the groups with the '&' symbol in the URL, i.e. http://127.0.0.1:8181/
default.html?(findgroups)IT Room 1&IT Room 2 (Image 10.3).
Image 10.3 - Digital Signage
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 19
v5.1 Server Guide
To display the groups with the most inactive computers, append '(topinactive)' after the port number followed by the number of
groups you wish to display, i.e. http://127.0.0.1:8181/default.html?(topinactive)2 (Image 10.4).
Image 10.4 - Digital Signage
Digital Signage also supports iFrames, which you can then use on your own website.
----------------------------------------------- S tart htm l code----------------------------<!D O CT Y PE htm l>
<htm l lang="en">
<head>
<sty le ty pe="text/css">
.Body Back G round
{
border-radius: 15px;
box-shadow: 5px 5px 5px #444444;
-webk t-box-shadow: 5px 5px 5px #444444; /* safari and webk it com pat*/
back ground-color: #ffffff;
color: #333333;
}
</sty le>
</head>
<body >
<ifram e src="http://127.0.0.1:8181/default.htm l(fram e:topinactive)2" width="270" height="330" class ="Body Back G round">
</ifram e>
</body >
</htm l>
---------------------------------------------E nd htm l code------------------------------
By inserting the style and iFrame in the example above, you can display all the information from the digital signage on your own
website. The URL in the iFrame is slightly different as the command contains 'frame:' which informs the webserver to format the
website for an iFrame, instead of formatting it as a standard website. Depending on your website requirements, you may need to
edit the size of the iFrame by changing the width and height properties of the iFrame in the attribute field.
2.3.7
Group Timetable
The 'Group Timetable' feature is designed to support 'Bring Your Own Device' (BYOD) initiatives by allowing you to automatically
populate 'Personal Groups' based on a timetable. This will ensure that a teacher using the Impero Console will have their Personal
Group populated with the correct student users at a designated start time, and emptied at a designated end time.
In order for this feature to work correctly for Console users, they will need to have their Console Access Rights configured to allow
access to their Personal Groups, and have their Personal Group enabled in the Console.
You will first need to select the option to 'Enable the Group Timetable feature' (Image 11).
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 20
v5.1 Server Guide
Image 11 - Enable Group Timetable
The Group Timetable will be populated by importing a timetable CSV file, which can potentially be exported from your MIS. There
are four pieces of information that this CSV file must contain - the username of any Impero Console user, the start and end times of
their lessons, and the usernames of the students that belong to that lesson.
Click on 'Browse' and navigate to your timetable CSV file. The content of the CSV file will then appear in the 'Group Timetable'
window (Image 11.1)..
Image 11.1 - Imported Timetable
All columns from the CSV file will appear within this view, even those that are not required by the feature. Using the fields at the
top, you can then define which columns and settings to use:
Username Separator Symbol
Enter in here the symbol that is used to separate student usernames in your CSV file, i.e. '|' or ';'. This allows Impero to
differentiate between usernames in the CSV file. Please do not use a comma ',' as the separator symbol.
The following four drop-down lists will contain all column headings found in your CSV file:
Console Username
Select which column displays teacher usernames. Impero will use this information to select which Console user Personal
Groups are populated.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 21
v5.1 Server Guide
Start Time
Select which column displays the start time of the lesson. Impero will use this information to select the time at which the
Personal Group is populated.
End Time
Select which column displays the end time of the lesson. Impero will use this information to select the time at which the
Personal Group is emptied.
Group Members Usernames
Select which column displays the usernames of the students belonging to this lesson. Impero will use this information to
populate the members of the Personal Group.
If you have any column headings that do not relate to any of the four settings above, these can be left alone.
First line contains headers
This option is purely aesthetic. If the first row of the imported CSV file contains the column heading, tick this option to remove
the column headings to avoid duplication (Image 11.2).
Image 11.2 - Populated Group Timetable
Providing the users that appear in the designated 'Console Username' column have access to, and have enabled, their Personal
Group, they will see that group automatically populated at the designated 'Start Time' with all users in the 'Group Members' list
provided they are logged into an active Impero workstation client. That group will be automatically cleared at the designated 'End
Time'.
2.3.8
Lock Screen
The 'Lock Screen' tab allows you to modify the screen that displays to users when their screen has been locked by Impero. If you
wish to change the background image that appears when a screen is locked, tick the option to 'Use Custom Lock Screen
image' (Image 12)
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 22
v5.1 Server Guide
Image 12 - Custom Lock Screen
The 'Browse' button will then become active, allowing you to navigate through your file system to the image that you wish to
make your lock screen background. Once you have selected your image, it will load into the 'Preview' panel on the right-hand side
of the window.
You are able to modify the colour of the text that will appear on the lock screen by clicking in the coloured squared in the centre of
the screen. This will open a new window (Image 12.1) in which you can select from a list of basic colours or define your own
custom colour. Click on 'OK' to make your selection; the 'Preview' window will then change to display the 'AaBbCc' text in your
chosen colour.
The final two options in this window allow you to modify the text that will
appear when a user screen is locked:
The text when an Impero Policy locks the Screen
This is the text that will appear on the user screen if a screen is locked either
manually by an Impero Console user or automatically via an Impero Advanced
Policy.
The text when the network cable is pulled out
This is the text that will appear on the user screen if a user removes the
network cable from their computer, and the option to lock screen if a
network cable is pulled out is enabled.
Image 12.1 - Custom Text Colour
Once you have configured your lock screen options, click on 'Apply' to set
your changes.
N ote : O nce y ou press 'Apply ', y our lock screen im age is autom atically copied to y our Im pero S erver directory (usually C:\Program F iles (x86)\Im pero
S olutions L td\Im pero S erver\D ata\image .jpg). T he location display ed in the 'L ock S creen' tab (Im age 12.1) will change to point to the copied im age,
rather than the im age in y our originally selected location.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 23
v5.1 Server Guide
2.3.9
Misc
The 'Misc' tab (Image 13) allows you to configure a number of settings for your Impero environment.
Image 13 - Misc
Location of "Personal Groups" directory structure
'Personal Groups' allow you to load a text file containing a list of usernames to the Impero Console. A user group containing all
these users will then be automatically created in the Console (providing the computers that they are logged into have the
Impero Client installed on them). You can then use this group to manage this set of users. The group will be removed when
you end the current Console session.
This setting allows all users to be pointed to one location for loading text files containing lists of users for personal groups. Click
on the 'Browse' button and navigate to the location that you wish to use to load this file from. The advantage of this is that the
text files are created and stored in one folder which can be locked down by NTFS permissions (i.e. read-only), which stops
users from creating their own text files to load any user they wish.
N ote : T he 'Personal G roups' feature requires further enabling in the 'Console Access Rights' tab in the Im pero S erver.
Set up the Default Time a New User is added to a New Group
With this setting you are able to define the default setting that will apply when a Console user moves a user into a new group.
There are two options for this setting:
Until removed
The default setting when moving a user to a new group will be 'Until Removed', i.e. they will remain in that group until they
are manually removed.
For a limited time
You can then set a time period which will be the default time that a user will be placed into a new group for. For example, you
can set this to '45 Min(s), 0 Hour(s), 0 Day(s)'; then if you drag and drop a user into the 'Screens Locked' group for example,
they will remain in that group with their screen locked for 45 minutes before being automatically removed from the group.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 24
v5.1 Server Guide
Location of Exam Store
If you wish to revert to using the old Impero Exam Module (pre-version 4.1), you can do so by un-ticking the 'Use New Exam'
option here.
If you wish to continue using the new Exam Module, you are required to set an 'Exam Store'. Any attachments that you add to
exams will be saved to the location specified here. Click on the 'Browse' button in order to navigate to the exam store location.
Minimum client version allowed to connect to this server
To keep your Impero environment secure you are able to prevent clients that are running older version of the Impero client
from connecting to your Impero Server, and therefore to other Impero clients on your network. Select from the drop-down
list which client versions you wish to restrict from connecting to the Impero Server. These clients will then remain in a
'Disconnected' state and will not be accessible through the Impero Console until they are updated to the correct client version.
Click on the 'Apply' button to save any changes that have been made.
2.4
Automatic Updates
The 'Automatic Updates' tab (Image 14) in Impero Server allows you to manage the updating of Impero Server and Clients.
Image 14 - Automatic Updates
[1] - Use this section to control how and when your Impero Server and Clients will be updated.
Automatically update Impero Server and Clients
If this button is checked, your Impero Server and Clients will automatically update to the latest version of the Impero software
that is available to your organisation, based on the following two checkboxes. If this button is not checked, you will need to
manually install the updates.
N ote : N ew updates are autom atically downloaded to the 'Updates' folder (C:\Program F iles (x86)\Im pero S olutions L td\Im pero S erver\Updates).
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 25
v5.1 Server Guide
Update Impero Client at any time
Immediately adds the Impero Clients to the update queue, whenever a new version is available.
Only add Impero Clients to the update queue between the following times
Adds the Impero Clients to the update queue at a specified time, whenever a new version is available.
[2] - View Client Update Queue
Click 'View Client Update Queue' in order to see which Impero Client machines are currently waiting to update.
[3] - Change Log
The 'Change Log' gives details regarding the latest versions of Impero. Each new version of Impero will have an entry in the
change log detailing any bug fixes and new features that are part of that release of software.
N ote : If the change log is not display ed, then y ou need to enter y our proxy details in the Im pero S erver application.
2.5
Patch Management
The 'Patch Management' tab in Impero Server (Image 15) is where the Patch Management feature is enabled and initial
configurations are set up.
Image 15 - Patch Management
[1] - Enable Patch Management
By default, Patch Management is disabled regardless of whether it is displayed in the Licence tab. This box must be checked to
enable Patch Management.
[2] - Patch Repository Options
The location defined under 'Server patch repository location' is where any patches that are downloaded will be held on the
Impero Server.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 26
v5.1 Server Guide
[3] - Repository auto cleanup status
Check this box to select whether you would like the server patch repository to be automatically cleaned up. The drop-down
box will define how often you wish for the repository to be cleared.
[4] - Server Deployment Options
The 'Max number of concurrent patch deployments' defines how many remote computers will be patched simultaneously. By
default, Impero sets this to '10' in order to keep network traffic down when downloading and installing patches. You can
decrease or increase this as per your organisation's network.
[5] - User Permissions
Under the 'User Permissions' panel, you can define user access to Patch Management. There are three levels of access that can
be granted here:
Administrators
Full access to the Patch Management feature.
Technicians
Can authorise and deploy patches, change profile settings but cannot view reports.
Reporting
Can only view reports within Patch Management.
In order to grant access to further users, type their username into the text field and select which level of access you want to
grant them in the drop-down list. Then click on the 'Add user' button to add them to the access list. Click 'Apply' to save any
changes you have made.
[6] - Debug
The 'Debug' tool is for Impero Support use only.
2.5.1
Patch Management Prerequisites
N ote : Patch M anagem ent is only supported on W indows com puters with .N E T 3.5 installed
Firewall Exclusions
Please allow the following ports through any internal firewalls on your clients e.g. Windows Firewall
TCP 80
TCP 443
TCP 135
TCP 137-139
TCP 161
TCP 445
TCP 1070-1170
Please allow the following sites through any web-filters or proxy servers
*.software.gfi.com/lnsupdate/
*.download.microsoft.com
*.windowsupdate.com
*.update.microsoft.com
Antivirus exclusions
Please add the following folder and file exclusions to any Potentially Unwanted Applications (PUA), on-access and scheduled scan
policies:
C:\Program Files (x86)\GFI\LanGuard 11 Agent
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 27
v5.1 Server Guide
C:\Program Files\GFI\LanGuard 11 Agent
lnssatt.exe
lnsscomm.exe
mantle.exe
update.exe
2.6
Room Booking
The 'Room Booking' tab (Image 16) allows you to set up and modify the Impero Room Booking system.
Image 16 - Room Booking
In order to use the Impero Room Booking system, you must first enable it here by ticking the 'Enable Room Booking' option.
Once enabled, you are then able to configure the remainder of the options in the 'General Settings' tab:
Website refresh time
Specify (in seconds) how often the Room Booking website will automatically refresh, so that users are kept up to date of any
new booking that might have been made.
Warn user of log off time
Specify (in minutes) how long prior to a booked session ending the user will be warned that they are going to be logged off.
Drop-in Session Length
Specify (in minutes) the length that any user can create a drop-in session for. A drop-in session means that the computer is
available for anyone to log into, but only for a maximum of the time period specified here.
Time between consecutive drop-ins
Specify (in minutes) a time period between consecutive drop-ins, so that a user would have to wait this amount of time to log
into a drop-in session having just ended another session.
Select preferred date format
Select from the drop-down list which date format you wish to use on the Room Booking website.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 28
v5.1 Server Guide
Enable email alerts for all users
Tick this option if you want users to enter an email address upon creating a booking. The user will then receive an email
confirmation of any booking they create.
Booking Override Password
When a user books a session, you may give them the option to password protect their booking. Enter a password here that will
override any passwords that are applied to bookings.
Booking CSV location
All bookings that are created are saved to a CSV file on the server. This field gives you the option to set up where this CSV file is
saved to, click the 'Browse' button to navigate to the location you wish to use.
Once you have configured all the relevant settings above, click on the 'Apply' button to save your changes. You can then select the
'User Permissions' (Image 16.1) tab to work on further configurations.
In this tab you are able to define different levels of access and define which users are to have which level of access. Select in the
'Permissions Level' drop-down list which user type you wish to edit the access for. By default, all system users have 'User' access,
unless you specify otherwise.
Image 16.1 - User Permissions
[1] -Excluded Groups
Define any groups that users with the selected permission level will NOT have access to on the Room Booking website. The dropdown list will contain a list of all the Impero Computer Groups that are set up on your system. If there are any groups that you do
not wish for users to be able to access on the Room Booking system, select the group in the drop-down list and click on 'Add'. Click
on the 'Apply' button after making any changes.
[2] - Included Users
Define which users will have the level of access you are currently configuring. Once your permission level is selected, type into this
field the username of the user that you wish to give this level of access to, and click on the 'Add' button. After making any changes,
click the 'Apply' button. All users default to having the 'User' permission level; users will only have a different level of access if they
are specified in this field.
[3] - For the selected permission level you can also configure the following settings that will apply to all the users that are assigned
this level of access:
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 29
v5.1 Server Guide
The number of concurrent bookings the user can make
Specify the amount of bookings that users with the selected permission level can hold at any one time, i.e. if you enter '1', and a
user with this access level books a computer from 14:00 - 16:00, that user will not be able to make another booking within
that time period.
Maximum allowed booking time
Specify the maximum length of time (in minutes) that a user with this permission level can make a booking for.
Time before reservation times out
Specify the amount of time (in minutes) that the Room Booking system will hold a booking for before the reservation times
out, i.e. if you enter '10' here, and a user has made a booking at 14:00, their reservation will time out at 14:10 if they have not
accessed their booking by then.
Website session timeout length
Specify the amount of time (in minutes) that a user can be inactive on the Impero Room Booking website before their session
times out.
Action to take on duplicate logins
Select from the drop-down list which action to perform if a duplicate login occurs.
N o Action: No action will be taken, the first session will remain active and the second session will be permitted.
D rop existing session: The second session will be permitted, but the first session will end.
Prevent new session: The first session will continue, but the user will not be permitted to commence the second session.
Repeat booking option available
Tick this option if you wish for users of the selected permission level to have access to create repeat bookings. For example, if
this is ticked, a user can book a session at 14:00 on Wednesday afternoon and choose to repeat that same booking the
following Wednesday.
Password protect booking
Tick this option if you want users of the selected permission level to set a password on their booking. If this option is selected,
upon creating a booking, the user will be prompted to enter a password, which they then must enter in order to access the
booking.
Allowed booking types
Tick the box for each type of booking that users of the selected permission level will have access to create:
S ingle PC: Users with this permission level will have the option to book out single specific computers.
R oom : Users with this permission level will have the option to book out an entire room, which reserves every computer
within the group.
U navailable: Users with this permission level will have the option of making a computer unavailable, which means that no
other user will be able to create a booking to that computer while it is unavailable.
D rop In: Users with this permission level will have the option of assigning a computer to have a 'Drop-In Session', which
means that any user is able to log onto the computer while it is set to 'Drop In'. However, a user that logs into a computer
during a drop-in session will only be able to use the computer for the length of time specified under the 'Drop-in Session
Length' setting in the 'General Settings' tab (Image 16)
D rop In R oom : Users with this permission level will have the option of assigning an entire room to have a 'Drop-In Session',
which means that any user is able to log onto any computer in the room while the room is set to 'Drop-In'. However, a
user that logs into a computer during a drop-in session will only be able to use the computer for the length of time
specified under the 'Drop-in Session Length' setting in the General Settings tab (Image 16).
Ensure you click the 'Apply' button to save any changes.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 30
v5.1 Server Guide
2.7
Confide
The 'Confide' tab (Image 17) ªallows you to enable and configure the Impero Confide system. The Confide system gives users the
chance to submit any concerns they may have about themselves or any other user. They can submit their concerns to specified
Confide Administrators and have the option to remain anonymous if they wish.
Image 17 - Impero Confide
In order to use the Confide system, you must tick the 'Enable the Impero Confide System' option. You can first customise the
Confide system to fit your requirements before enabling it.
The text area under 'Welcome Page Settings' is the text that will display to a user when they launch the Confide system to report a
concern. This text area is editable, so you are able to customise the text to fit your establishment needs. If you ever wish to revert
back to the default text, click the 'Reset Welcome Text' button. Click on 'Apply' to save any changes you may have made.
At this point, you may see a pop-up saying 'No Users Defined' (Image 17.1).
Image 17.1 - No Users Defined
You must define at least one Confide Administrator in order to start using the system. To do so, click on the 'Report' tab (Image
17.2).
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 31
v5.1 Server Guide
Image 17.2 - Report Tab
Click the 'Add' button in order to start configuring Admin users - these are the people that users will be submitting their Confide
concerns to. The users that are entered here will have access to the 'Confide Viewer' which is the repository for concerns that are
submitted. There are a number of fields you are then able to set up for each user:
U sernam e - Enter the username of a user that will be a Confide admin (that will receive user submissions). The entry here must
match the user's domain username; the user must be logged in with this username in order to have access to the Confide
Viewer.
D isplay N am e - This is the name of the user that will appear to users that are submitting Confide issues.
Em ail Address - Enter the users' email address here; they will then be notified via email if any concerns have been submitted to
them (providing your Mail Server Settings are in place).
D escription - You can enter a brief description of the user here; this description will be displayed to the end-user when they
launch the Confide system.
Can R un R eports - If this option is ticked for a user, it means that they will be able to view all Confide submissions, regardless of
who the issue has been assigned to.
Once you have set up your Confide admin users, click on the 'Apply' button to save your changes. Those users that you have added
will then see the 'Confide Viewer' menu item in the Impero Console, as well as an option when they right-click on their system task
tray icon (Image 17.3).
Image 17.3 - Confide Viewer
If at any time you wish to remove a user from the list of Confide Admins, you can do so by clicking the
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
in the top right-hand
Page 32
v5.1 Server Guide
corner of the panel containing the user you want to remove. However, if that user has any issues currently assigned to them, you
will first need to reassign their issues before you are able to remove the user. You will be notified of this via a pop-up message
(Image 17.4).
Image 17.4 - Reassign Confide Issues
Click 'Yes' on the pop-up dialogue, and in the following window you will see a list of the other Confide admin users. Mark the user
that you wish to reassign the issues to by clicking on them; you will then see a green tick next to the user. Click 'OK' to reassign the
issues, and remove the user that you no longer wish to appear as a Confide admin.
Once you are satisfied with your Confide admin users, you can define further settings for your Confide system in the 'Options' tab
(Image 17.5).
Image 17.5 - Confide Options
Show Reporting on Logon Screen
Tick this option if you wish to display a 'Confide' button on the machine logon screen for all users. They can click this button to
launch Confide and submit their issue without having to log into the machine.
Show Reporting Button on Desktop
Tick this option if you wish to display a 'Confide' button on the desktop of all users. They can then click this button to launch
Confide and submit their issue.
Disable anonymous reporting
Tick this option if you do not want to give users the option of submitting anonymous Confide issues. They will then be
required to provide contact details upon submitting a concern.
Do you want to use your own Logo?
Tick this option if you wish to add custom branding to the Confide window. Click the 'Browse' button to navigate to the logo
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 33
v5.1 Server Guide
you wish to use. The logo you choose will appear above the 'Browse' button as an example, and will then appear on all Confide
windows that the end-user can see.
Severity List
Create a list of severities that you can assign to issues in the Confide Viewer. If you wish to add a new severity, enter it into the
field below the list and click 'Add'. To remove a severity, right-click your mouse on it and click 'Remove'.
Status
Create a list of statuses that you can assign to issues in the Confide Viewer. If you wish to add a new status, enter it into the
field below the list and click 'Add'. To remove a status, right-click your mouse on it and click 'Remove'.
Classification List
Create a list of categories that you can assign to issues in the Confide Viewer. If you wish to add a new category, enter it into
the field below the list and click 'Add'. To remove a category, right-click your mouse on it and click 'Remove'.
Sub-Classification List
Create a list of sub-categories under the category currently selected in the 'Classification List'. If you wish to add a new subcategory to the selected category, enter it into the field below the list and click 'Add'. To remove a sub-category, right-click
your mouse on it and click 'Remove'.
To save any changes you have made, click on the 'Apply' button.
2.8
Favourites
The 'Favourites' tab (Image 18) allows you to configure the 'Global Favourites' that will appear when an Impero Console user uses
the 'Run Website/File' feature. Users will always see a list of the global favourites which they can run with one click without having
to set anything up themselves.
Image 18 - Favourites
Under the 'File' tab, you are able to set up applications or files as favourites. In the 'Filename' field, type in the name of the
application (e.g. 'wordpad.exe') or file (e.g. 'C:\Documents\Report.pdf'), or you can browse to either using the browse
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
button.
Page 34
v5.1 Server Guide
You also have the option to add extra parameters, if the file that you wish to add is an installer.
You can use the drop-down to select from the list of the 'Windows 8 applications' that you can choose to run.
Once you have set up your application or file, click on 'Add to Favourites'. You will then be prompted to assign a name to identify
this favourite. Once you have added your name, click on 'OK'. The favourite will then be added to the 'Application' node in the
Global Favourites panel on the right-hand side (Image 18.1).
Image 18.1 - Add Favourite
You can also set up global websites that will appear in the 'Run Website/File' tool. Click on the 'Website' tab in the Impero Server
window (Image 18.2).
Image 18.2 - Favourite Websites
To add a global website, type in the web address into the 'Website' field, ensuring you add the 'www.' prefix. From the 'Browser'
drop-down list, select which browser you wish for this website to open in. Once you have added the address and browser, click on
'Add to Favourites' and assign the favourite a name. The website will then be added to the 'Global Website' list on the right-hand
side (Image 18.3).
Image 18.3 - Global Website
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 35
v5.1 Server Guide
If you wish to remove any favourites that you have added, right-click on the name of the favourite in the right-hand panel, and
select 'Remove' (Image 18.4).
Image 18.4 - Remove Favourite
2.9
YouID
The 'YouID' tab (Image 19) allows you to set up an integration with Impero YouID, providing you have purchased a valid YouID
license.
Image 19 - YouID
Enable YouID password reset
Tick this option in order to allow users to reset their own password, providing that the user has already registered for the YouID
Self-Service Password Management system. Once enabled, users will see a 'Password Reset' button on the Windows login screen
(Image 19.1).
Image 19.1 - Password Reset
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 36
v5.1 Server Guide
If the user clicks on this button, they will be directed to a webpage where they are able to reset their account password. As long as
the user has already registered for this system, they will then be prompted to enter their email address in order to verify their
registration, before allowing them to reset their password.
YouID Identifier
For UK establishments, enter your unique DfE number here. If you are in any other country, please contact Impero Support who
can advise you on what to enter in this field.
Turn on Impero YouID autologin
If you have purchased Impero YouID licenses and wish to use the desktop tiles (configured in the Impero Console) to launch single
sign-on applications, you must first tick this option. Once this is enabled, you are able to provide credentials in the Impero Console
that will be used for single sign-on applications.
YouID URL
Enter the YouID URL of your establishment here. Without the correct URL in place here, the password reset and autologin features
will not work.
3
Menu Items
There are three menu items across the top of the Impero Server window - 'File', 'Tools' and 'Help'.
3.1
File
The 'File' menu (Image 20) offers two actions to carry out within the Impero Server.
Image 20 - File Menu
Service > Stop
The 'Stop' option under the 'Service' contextual menu will stop the Impero Server service running. You are presented with a
dialogue box upon clicking the 'Stop' button to verify that you wish to stop the service (Image 20.1).
Image 20.1 - Stop Service
Clicking 'Yes' and stopping the service will shut down the Impero Server application. The Impero Console will also become
unavailable while the Impero Server service is not running, as the clients cannot run while the Impero Server service is stopped.
Console users will be notified if the server goes offline with an alert on their screen (Image 20.2). Anyone trying to launch the
console while the service is stopped will see the same message on their screen.
Image 20.2 - Console Alert
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 37
v5.1 Server Guide
In order to restart the Impero Server service, click on the Windows Start menu, type in 'Services' in the search field and click on
'Services' which should appear at the top of the search (Image 20.3).
Image 20.3 - Services Search
This will open the Windows Services window. Locate the 'Impero Server Service' and either right-click on it and click on 'Start',
or click on the 'Start' button on the left-hand side (Image 20.4).
Image 20.4 - Services
The Impero Server service will then start up again, and the Server/Consoles will be available for use again.
Compress Power Logs
If you have upgraded from an earlier version of Impero and wish to view Power Management logs from this version, you will
first need to 'Compress Power Logs' via this menu item.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 38
v5.1 Server Guide
3.2
Tools
There are a variety of actions that can be performed from the 'Tools' menu option (Image 21) in the Impero Server.
Image 21 - Tools
Perform Web Check
If you select to 'Perform Web Check', your Impero Server will contact the Impero Licence Server to check for any updates. This
will then check if there is a more recent version of Impero available to you or if there have been any changes made to your
licence agreement with Impero.
N ote : By default, Im pero will perform this check every 21 m inutes.
Reactivate My Activation Code
Your activation code is required when first installing Impero and for any contact you have with the Impero Support team. You
will need to reactivate your activation code if your server becomes unregistered due to either a hardware or software change.
In order to do so either contact Impero, or use this feature to set your licence to reactivate before making the change.
Log Viewer (Legacy)
V4 Impero has an SQLite back-end for logging purposes. If you have upgraded from an older version of Impero, you can still
view logs from that version using the 'Log Viewer (Legacy)' menu item. You can then perform the same searches, reports and
analysis on your old logs as you can on the V4 logs in the Impero Console.
Enhanced Security
The 'Enhanced Security' menu item allows you to have greater control over who can stop and remove the Impero service.
Selecting this will open the 'Client Security' window (Image 21.2). There are then two tabs available to view.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 39
v5.1 Server Guide
Configuration
Image 21.2 - Enhanced Security
Mark the 'Enable enhanced Impero security and logging' checkbox in order to activate the window and allow you to
configure the enhanced security settings.
[1] - Impero Server
Mark the 'Require password to enter Impero Server' checkbox if you wish for access to the Impero Server to become
password protected. The 'Security Password' (Image 21.2 - [4]) will then be required in order to access Impero Server.
[2] - Impero Client (Service Control)
You can use these options to control whether or not Impero Console users have access to stop the Impero Client service or
not.
Allow service stop
Console users will have access to stop the Impero Client service.
Allow service stop with password
Console users will have access to stop the Impero Client service, but will require a password to perform this action. The
'Security Password' (Image 21.2 - [4]) will be required in order to stop the Impero Client service (Image 21.3).
Disallow service stop
Impero Console users will not have access to stop the Impero Client service.
Image 21.3 - Password Needed
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 40
v5.1 Server Guide
[3] - Impero Client (Uninstallation)
You can use these options to control whether or not Impero Console users have access to uninstall the Impero Client.
Allow Uninstall
Console users will have access to uninstall the Impero Client.
Allow Uninstall under the following conditions
Locally by entering the Im pero passw ord - Console users will have access to uninstall the Impero Client, but will require a
password to perform this action. The 'Security Password' (Image 21.2 - [4]) will be required in order to uninstall the
Impero Client (Image 21.4).
F rom Im pero S erver - Access to uninstall the Impero Client will only be allowed from the Impero Server.
Image 21.4 - Password Needed
Disallow Uninstall
Console users will not have access to uninstall the Impero Client.
[4] - Security Password
Enter your desired password here that will be required if any of the restrictions in this window are applied.
[5] - Exceptions
Image 21.5 - User Exceptions
If there are specific users that you wish to be exempt from the enhanced security settings, you can enter them in an
exception list. Click on the 'Exceptions' button to open the 'User Exceptions' window (Image 21.5).
You can then enter any desired username into the text field at the top of the window, and click on 'Add'. The user will
then be added as an exception. Click on the 'OK' button to save any changes you have made. In order to remove a user
from the exception list, simply click on the 'Delete' button to the right of their name.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 41
v5.1 Server Guide
Logs
The 'Logs' tab will display four expandable lists of actions - Impero Client Uninstallation, Impero Client Service Stop, Impero
Server Accessed and Impero Server Stopped - and details on when they have been carried out (Image 21.6).
Image 21.6 - Logs
You can click on the sign to expand any of these actions which will display when that action has been performed, the user
that performed the action, the computer from which the action was performed, and any further information available.
Proxy Settings
You can add your Proxy Server Settings (Image 21.7) to the Impero Server using this menu item.
Image 21.7 - Proxy Settings
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 42
v5.1 Server Guide
[1] - Select from the checkboxes here whether or not you have a Proxy Server. If you do have a Proxy Server and have marked
the checkbox, you can then add your server and port details below. If you have multiple proxy ports, you can add them in the
'Additional Proxy Ports' field, seperated by semicolons. You only need to add the username, password and domain details if
your server requires additional authentication.
[2] - If there are certain applications you wish to bypass the Impero proxy server settings, you can add them in the 'Impero
Proxy Application Exclusions' panel here. Type the application executable into the text field and click the 'Add' button to
exclude the application. If you wish to remove the exclusion, simply click on the 'Remove' button to the right of the executable
name.
You can also create an 'Impero Proxy IP White list', which allows you to specify one or more IP Addresses which will be
ignored by the Impero Proxy when accessed. Enter the IP Address into the available field and click the 'Add' button to white list
the address. If you wish to remove the exclusion, simple click on the 'Remove' button to the right of the IP Address.
Backup & Restore
Every day between 12am and 1am, Impero backs up all its data (Groups, Licensing information, Print Credit settings, Policies,
Console Access Rights) to a folder structure on the machine running the Impero Server application. You can easily create and
restore your own backups using the 'Backup & Restore' tool here. In order to do so, access this menu item and click on the
'Create Backup' button. This will create a backup under the 'Existing Backups' panel (Image 21.8).
Image 21.8 - Backup & Restore
The backup will store key files from the data folder (Image 21.9) to give you the ability to restore your structure. Log files are
not backed up and are the responsibility of the end-user.
Image 21.9 - Backup Data
To restore a previous backup, select the backup you need from the 'Existing Backups' list (Image 21.8), and click on the
'Restore' button.
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 43
v5.1 Server Guide
Injection Exclusions
By default, Impero injects a DLL into all running processes in order to monitor running applications. You can use the 'Injection
Exclusions' menu item (Image 22) to stop Impero from injecting this DLL if there are certain applications that you do not wish
to be monitored.
Image 22 - Injection Exclusions
In order to add a new exclusion to the list, type in the name of the application executable (i.e. notepad.exe, winword.exe) into
the 'Application' text field and a brief description of the application you are excluding into the 'Description' text area. Then
click on the 'Add Exclusion' button, and then 'OK'. As the following dialogue box (Image 22.1) will indicate, in some cases the
remote computer will need to be restarted in order for the exclusion to take effect.
Image 22.1 - Add Injection Exclusion
If you need to remove any of the exclusions, simply click on the 'Remove' button on the right of any of the applications in the
list.
H int: A good way of finding out the executable nam e of an application is to find the shortcut icon for that application, right-click and select
'Prope rtie s '. S elect the 'Shortcut' tab, and look in the 'T a rge t' field. T he final part of this path should show y ou the executable nam e, ending in .exe.
Convert Mac Power Logs
If you have run a previous version of Impero within a Mac environment, you can convert Power Management log files from that
environment so that they can still be viewed in V4 Impero.
Console Logs
There are two options of actions that can be performed under the Console Logs contextual menu item (Image 22.2).
Image 22.2 - Console Logs
View Logs
Selecting the 'View Logs' menu item will open the 'Console Log Viewer' which displays a log of any activity that has taken
place within the Impero Console (Image 22.3).
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 44
v5.1 Server Guide
Image 22.3 - View Logs
In the left-hand panel, you are able to select a date from within the last 30 days from which you wish to view the logs from.
Expanding one of the dates will then display a list of the usernames that were logged into the console on that date. You can
click to select one of these usernames to then view logs of that user's activity in the Impero console from the selected date.
Set Logging Level
There are three options that you can select under the 'Set Logging Level' menu item - 'None', 'Minimal' and 'Full'. For a
comparison of which actions are logged by minimal and full logging levels, please see Appendix A.
Language
You are able to select from the drop-down list of options which language you wish to view the Impero Server in.
Image 22.4 - Select Language
3.3
Help
The 'Help' menu (Image 23) offers useful information regarding your install of Impero Server.
Image 23 - Help Menu
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 45
v5.1 Server Guide
Display Statistics
The 'Display Statistics' (Image 23.1) option is a tool used by Impero Support for debug purposes.
Image 23.1 - Display Statistics
About
Click on the 'About' menu option to view details regarding the instance of Impero Server that you are currently running (Image
23.2).
Image 23.2 - About
1 - View the version number of Impero that is running and your Activation Code. Your Activation Code is required when
contacting Impero Support.
2 - See the last date and time that the Impero Server contacted the Impero Licence Server to check for any updates. Click the
'Web Check Now' button to contact the Licence Server and check for any updates.
3 - If there are any updates available to the 'Impero Collective Block List', the 'Update' button will become active so that you
can download the updates.
4
Appendices
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 46
v5.1 Server Guide
4.1
Appendix A - Console Logging Levels
Logged Action
Logging Level
Minimal
Full
Open Console
Create Group(s)
Remove Group
Rename Group
Set Group Priority
Change Group Type
Add Group Members
Edit Group Members
Remove Group Members
View Thumbnails
View Screen
Lock Screen
Unlock Screen
Lock Internet
Unlock Internet
Disable Printing
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 47
v5.1 Server Guide
Enable Printing
Disable USB
Enable USB
Open BlockList
-
Block Window Quick Policy Added
-
Block Website Quick Policy Added
-
Block Application Quick Policy Added
Open AllowList
Open Keyword List
Advanced Policies
-
Create Policy
-
Rename Policy
-
Remove Policy
-
Add Group Policy
-
Action Policy Item Added
-
Action Policy Item Edited
-
Action Policy Item Removed
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 48
v5.1 Server Guide
-
AllowList Policy Item Added
-
AllowList Policy Item Edited
-
AllowList Policy Item Removed
-
Block Policy Item Added
-
Block Policy Item Edited
-
Block Policy Item Mass Edited
-
Block Policy Item Removed
-
Firewall Policy Item Added
-
Firewall Policy Item Edited
-
FirewallList Policy Item Removed
-
Mime Policy Item Added
-
MimeList Policy Item Removed
-
WhiteList Policy Item Added
-
WhiteList Policy Item Edited
-
WhiteList Policy Item Removed
Broadcast Screen
(Open the ‘Broadcast Screen’ window)
Broadcast Screen To Users
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 49
v5.1 Server Guide
Get Screen Shot
Save Screenshot
Record Screen
Recording Started
Watch Recordings
Remote Viewing/Control
Full Control Turned On
Share Control Turned On
Control Returned To User
Remote View Closed
Send Message
(Open the ‘Send Message’ window)
Message Sent
Chat
(Open ‘Live Chat/Forum’ window)
Started Chat Forum
(When a chat forum is created)
Chat Forum Message Sent
Quick Question
Open Send File
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 50
v5.1 Server Guide
Send File To User
Open Collect File
Collect File
Open Run file/website
Run Files
Open Assign Task
Power On Computers
(Open ‘Power On’ window)
Power On
Restart
(Open ‘Restart’ window)
Restart Computer
Power Off
(Open ‘Power Off’ window)
Shutdown Computer
Standby
Hibernate
Open Logon Users
Log User On
LogOff
(Open ‘Logoff’ window)
Logoff User
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 51
v5.1 Server Guide
Lock Windows
Unlock Windows
Disable Windows Account
Enable Windows Account
Open Change Password
Reset Password
View Task Manager
(When 'Task Manager' is opened/refreshed)
Open Task Manager
End Process
Stop Service
Start Service
CMD Prompt
(When ‘Command Prompt’ is opened/used)
Open Command Line
Send Command Prompt Command
Open File Search
Find File
Open Mimic Editor
Send Mimic Script
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 52
v5.1 Server Guide
View Events (Event Viewer)
Open Event Viewer
Open Patch Management
pCredit: Append Credits
pCredit: Set User Credits
pCredit: Modified Printers
pCredit: Delete User
Open youId Config
Open Software Deployment
(Deploy MSI)
Open Software Licensing
Software Licensing: Add Application
Software Licensing: Remove Application
Software Licensing: Send Email Alerts To
Software Licensing: Set Cleanup Time
Open Mac Software Deployment
Open Power Management
Open Logviewer
© 2015
© 2015
Impero
Impero
Solutions
Solutions Ltd.
Ltd.
Page 53