Windows Lock Version 1.0, Jan. 1994 Installation To Install Windows Lock simply copy the files wdwslock.exe, setlock.exe, and wdwslock.hlp to any directory in your PATH. The most obvious choice is the c:\windows directory. When this is done you are ready to setup your initial password. This is done by running setlock.exe. You can run these executables from the Run command in Program Manager or File Manager but a preferred method would be to create an entry for each one in an existing or new program group. This information is available in the Windows documentation. The setlock.exe program will write out a file that contains the password information. This file will be written to the directory that the setlock.exe program is in or to the directory defined by an environment variable WINLOCK. It is best to define a directory for the environment variable WINLOCK so various working directory settings do not interfere with the operation of the setlock.exe or wdwslock.exe programs. An example of how this environment variable should be set in the autoexec.bat file is as follows. The windows directory does not have to be used, any directory you wish may contain the file used by these two programs. SET WINLOCK=c:\windows Setting the Password (setlock.exe) There can be only one password for a system. No user names or multiple passwords are supported in this version. Run setlock.exe The dialog will appear to setup Windows Lock: When this dialog appears the cursor will be in the Old Password field if a password is currently defined. If a password is not defined then the cursor will be in the Password field. Old Password : This field accepts the existing Password (if there currently is one) or your registration number. New Password : This field accepts the new Password. Confirm Password : This field accepts the new Password again to insure that the correct change is being made. Entrap Cursor : This check box indicates if the cursor should be restricted to the Password Dialog and the cancel button disabled when it comes up or if the cursor will be free and the Cancel button enabled. Using the Password Dialog (wdwslock.exe) Run wdwslock.exe The dialog will appear to enter the password: The cursor will be positioned in the Password field when this dialog comes up. At this time enter the password previously defined using the Setup Windows Lock Dialog. Pressing the RETURN key after the password is typed has the same result as selecting the OK button. If an incorrect password is entered then a warning dialog will appear. If the correct password was entered the dialog will dismiss. If the Entrap Cursor option was selected on the Setup Windows Lock Dialog then the Cancel button will be disabled and the cursor will be restricted to the Password Dialog until the proper password is entered. If the Entrap Cursor option was not chosen then the Cancel button will dismiss the Password Dialog. The wdwslock.exe program can be run without any command line arguments to lock the system when using the Entrap Cursor option. It can also be run with command line arguments to run another executable when the correct password is given. The command line arguments will include the name of the executable and any arguments it may require. To password protect Microsoft's Paintbrush you would enter the following in the command line field of the Properties Dialog for Paintbrush: wdwslock.exe pbrush.exe If you wished to bring up Paintbrush with a bitmap: wdwslock.exe pbrush.exe example.bmp Recommended Usage Windows Lock can be used in a variety of ways. To lock the system quickly. By having a readily available icon that executes the Password Dialog with no command line arguments, you can lock your system quickly. The Entrap Cursor option must be selected for this to be effective. Unlike some screen savers with passwords, Windows Lock can be initiated when desired and since it is not a screen saver it will allow you to lock your system and still use your favorite screen saver. To password protect programs. By changing a programs command line field in the Properties Dialog to include wdwslock.exe before the program name you can password protect that program. This will not prohibit a user from executing the program using the Run command of Program Manager or File Manager, modifying the Properties, or modifying program groups. To further protect a system, restrictions can be placed on Program Manager and the File Manager itself should be protected with the Password Dialog. To password protect the system at startup. By placing the wdwslock.exe program in your startup with the Entrap Cursor option enabled, you can prevent someone from simply restarting windows to get around a password. These steps should protect a system from unauthorized access by the majority of users, but they are by no means crack proof. Further Windows Security Options for Program Manager By adding a section to the progman.ini file in the windows directory you can further protect your system. The Restrictions section, [Restrictions], disables some capabilities of the Program Manager environment. The following entries can appear in the [Restrictions] section: Entry Meaning NoRun= Specifies whether to disable the Run command on the File menu. If this entry is set to 1, the command is disabled. If this entry is set to 0, the Run command is enabled. The default is 0 (enabled) if no value is specified. NoClose= Specifies whether to prevent the user from exiting Program Manager through the File menu, the System menu, the ALT+F4 accelerator, or the Task List. If this entry is set to 1, exiting is prevented. If this entry is set to 0, exiting is allowed. The default is 0 (allowing exiting) if no value is specified. NoSaveSettings= Specifies whether to disable the Save Settings on Exit command on the Options menu. If this entry is set to 1, the Save Settings on Exit command is disabled. If this entry is set to 0, the command is enabled. The default is 0 (enabled) if no value is specified. NoFileMenu= Specifies whether to disable the File menu and all of its commands. If this entry is set to 1, the File menu is disabled. If this entry is set to 0, the menu is enabled. The default setting is 0 (enabled) if no value is specified. EditLevel= Controls the extent to which the user can modify read-write groups. (Shared, read-only groups cannot be modified.) This entry may be set to one of the following values: Value Meaning 0 Allows any modifications to the group. This is the default. 1 Prevents the user from creating, deleting, or renaming groups. 2 Prevents the user from creating, deleting, or renaming groups and from creating or deleting items in a group. 3 Prevents the user from creating, deleting, or renaming groups; from creating or deleting items in a group; and from changing command lines for items in a group. 4 Prevents the user from changing any property of an item in a group; from creating, deleting, or renaming groups; from creating or deleting items in a group; and from changing command lines for items in a group. Setting NoRun to 1 and EditLevel to 3 prevents a user from using Program Manager to run any applications that are not already in a program group. Registration If you use an unregistered Windows Lock you will notice that every time you accept a password on the Password Dialog, a box appears indicating you are unregistered and it displays the password you entered using the Setup Windows Lock Dialog. When you send in your registration, I will return you a registration number that you will enter in the Old Password field of the Setup Windows Lock Dialog. This will register the software and you will no longer get the annoying box that displays your password. Windows Lock is Donation-ware. If you feel that this software will be useful to you please send $5 (US dollars) to the following address: Stephen A. Jernigan 171 Dexter Cir Madison, AL 35758 USA If you are writing a check please make it out to All proceeds from this software will go to support a Contemporary Christian Music Radio station (WAY-FM) that is providing a much needed Christian ministry for Nashville Tennessee and much of middle Tennessee and northern Alabama through a number of translators. If you have an email address, it would be quicker and easier for both of us if you would include it with your check so I can email you your registration number. If you don't have email, then provide a return address and I will mail it to you. Please report any bugs, suggestions for improvement or new features you would like to see. I can be reached through email at sajernig@ingr.com NOTE: This software may be freely distributed to and by any BBS or ftp archive as long as the following files are all kept together and unmodified. wdwslock.exe wdwslock.hlp wdwslock.txt setlock.exe readme.txt No one except for Stephen A. Jernigan may charge a fee for this software except for various transfer fees that some services require. No warrenty is expressed or implied for the use of this software. Copyright (c) 1994 Stephen A. Jernigan