This file contains information on setting up and using FM Guard.
Copyright (c) Chaosoft, 1994-97. All rights reserved
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

TABLE OF CONTENTS
----------------------------------------------------------------
  1. Introduction
  2. Preparing Windows(r) for effective use of FM Guard
  3. Setting up restrictions to File Manager and Common Dialogs
  4. Changing the FM Guard password
Appendices:
  A. Restricting Program Manager
  B. Restricting Control Panel
----------------------------------------------------------------

Note: please refer to file README.TXT for information on:
  - installing or uninstalling FM Guard
  - getting updated releases of the product
  - purchasing a license for continued use
  - obtaining technical support

////////////////////////////////////////////////////////////////
//
//	1. Introduction
//
////////////////////////////////////////////////////////////////

The FM Guard utility is designed to provide means to selectively
restrict File Manager and some other Windows components.  Its main
purpose is to restrict user's access to the critical parts of the
Windows installation while allowing the user to manipulate personal
files with File Manager.

NOTE: throughout FM Guard documentation, "Windows" is used to refer
  to Windows 3.1/3.11, Windows for Workgroups 3.11, and Windows 95.
  In those few instances where the operation of FM Guard under these
  systems differ, an explicit operating system name is used.  
  
NOTE for Windows 95 users: FM Guard restricts only the "old" File
  Manager, that is still available with Windows 95 as the
  WINFILE.EXE file.  FM Guard cannot restrict Windows Expoler.  If
  you need to restrict Explorer and some other resources specific to
  Windows 95, you may find that our other product, "Folder Guard for
  Windows 95", specifically designed for the Windows 95 operating
  system, is more suitable.  Please refer to the ORDER.TXT file for
  more information on this product.

It should be noted that Windows was not designed to be secure (in
respect to the user's access to its vital components).  To make your
system configuration more "bullet-proof", it's important to follow
the preparatory steps, described in Section 2 of this file.

FM Guard is controlled by its configuration file, FMGUARD.SYS (the
latter should be placed into the WINDOWS\SYSTEM directory).
FMGUARD.SYS is a regular ASCII text file, containing the restricting
commands.  You may modify this file using any text editor (for
example, Windows Notepad), to specify how exactly you want FM Guard
to restrict File Manager and some other Windows components.  The
descriptions of all restricting commands, recognizable by the
current version of FM Guard, are provided in Section 3 of this file.
FM Guard is supplied with a sample FMGUARD.SYS file, specifying some
"reasonable" restrictions.  You can change this file to make it
suitable for your needs.

If you need to temporarily disable FM Guard while File Manager is
running, you may use the "Guard-Disable" command in the main menu of
File Manager.  Before the protection provided by FM Guard can be
disabled, a valid password must be entered at the prompt.  If you are
using an unregistered version of FM Guard, then the word "FMGuard"
(without quotes) can be used as the password.  This "evaluation"
password is fixed and cannot be changed.  If you have purchased a
license for continued use of FM Guard and received your Registration
Code, you may use the PASSWORD.EXE utility to setup a new password
of your choice.  Please refer to Section 4 on using PASSWORD.EXE.

////////////////////////////////////////////////////////////////
//
//	2. Preparing Windows(r) for effective use of FM Guard
//
////////////////////////////////////////////////////////////////

The main purpose of this section is to give you some ideas about
possible ways to make your Windows installation more secure.  It is
NOT required to implement any of these suggestions in order for FM
Guard to work!

NOTE for Windows 95 users: Most of the recommendations below are
   intended for use with Windows 3.1x or Windows for Workgroups
   3.11, where File Manager and Program Manager constitute the main
   shell through which the user interacts with Windows.  These
   recommendations do not make much sense under Windows 95.
   Nevertheless, we recommend you to look through this section
   anyway, paying attenting to the steps related to setting up File
   Manager.

1.  Before activating FM Guard, decide which disks and drives your
users should have access to.  You may want, for example, to assign a
directory on your hard disk or network drive as the "working"
directory for all users (i.e.  allow them to save their files in
that directory only and prevent them from accessing all the other
directories and disks).  To do that, create a logical drive
associated with the working directory using DOS command SUBST, and
then make all the other drives unaccessible (by listing them in the
"NoDrive=" line of the FMGUARD.SYS file, see below in this file).
For more information on the SUBST command please type "help subst"
at the DOS prompt.  

Under Windows 95, better results can be achieved with our product
"Folder Guard for Windows 95", that allows to set up specific access
rights to any directory on your disk(s).

2.  Set up the desired configuration of Windows in the way you would
want the user to see it when s/he initially runs it.  It includes
the position and size of the Program Manager and File Manager main
windows, their secondary windows (displaying icons, files and
directories), options, etc.

IMPORTANT: make sure that none of the File Manager "child" windows
   shows the contents of a directory on a drive that you wish to
   prevent access to, otherwise after activating FM Guard such a
   window may show no files!  If the latter happens, choose "View-By
   File Type" from main menu of File Manager and make sure that the
   "Name" field in the dialog box contains "*.*", without quotes.

3.  Choose "Options" from main menu of File Manager.  Make sure that
the "Save Settings on Exit" option is not checked.  Then press the
SHIFT+ALT+F4 keys simultaneously to save the current configuration
of File Manager in WINFILE.INI.  Repeat the same for Program Manager
to save its configuration in the PROGMAN.INI file.

4.  Add "winfile.exe" to the list of files loaded automatically on
Windows start-up by changing the line "load=" in the section
[windows] of the WIN.INI file to read:

   [windows]
   ...
   load=winfile.exe <other files, if any, separated by spaces>
   ...

This will run File Manager automatically on Windows start up and FM
Guard will be activated before the user receives control from
Windows.  Otherwise the user would be able to uninstall FM Guard by
modifying WINFILE.INI before running File Manager.

CAUTION: don't assume that placing File Manager's icon into "Start
  Up" group of Program Manager will have the same effect: if you
  don't add winfile.exe to the "load=" line as described above, the
  user will be able to disable the loading of all programs from the
  "Start Up" group by simply keeping the SHIFT key depressed while
  Windows is initializing.
 
5.  Set up restrictions for Program Manager and Control Panel, if
you wish (see Appendices A and B at the end of this file for more
information).

6.  Create a private directory on your hard disk, for instance,
C:\PRIVATE, and copy WINFILE.INI, PROGMAN.INI, CONTROL.INI, and all
the other files which you want to be used as the "fresh copies" when
Windows starts up, into that directory.

7.  To prevent users from uninstalling FM Guard, add the following
lines to the end of AUTOEXEC.BAT file in your root directory:

   ----------------- cut here ----------------
   @echo off
   :StartWin
     copy C:\PRIVATE\*.* C:\WINDOWS > NULL
     win
     goto StartWin
   ----------------- cut here ----------------

The "@echo off" line will suppress echoing the rest of the commands
on the screen while executing them.

The ":StartWin" line is not a command, it's a label to mark the
beginning of the command sequence to be executed each time the user
restarts Windows.

The "copy ..." line will copy your previously saved, "fresh" copies
of WINFILE.INI, PROGMAN.INI, etc., from the PRIVATE directory into
the WINDOWS directory, overwriting the existing files (just in case
the user has changed them or removed the "FM Guard=..." line from
WINFILE.INI !).

The "win" line starts Windows.  The user may then do his/her work as
usual.  If s/he decides to change WINFILE.INI and restart Windows,
the next line, "goto StartWin" will transfer the execution to the
"StartWin" line.  The original WINFILE.INI file will be restored and
all the changes the user might have made will be lost.  This
protects your system from uninstalling FM Guard.

8.  Copy FMGUARD.SYS into WINDOWS\SYSTEM directory, if you have not
done so already, and modify it, if necessary.  Please refer to
Section 3 in this file for descriptions of the restricting commands
which can be in FMGUARD.SYS.  After you have set up the desired
restrictions, you may wish to assign the 'read-only' and 'hidden
file' attributes to the file.

9.  If you use Windows on a network and want to setup different
levels of restrictions for different users, you may wish to put the
most restrictive options in the "common" file FMGUARD.SYS, which is
kept in the WINDOWS\SYSTEM directory.  It will be used by FM Guard
as the "default" configuration file.  If you want to provide more
capabilities of File Manager for some users, you need to prepare
additional, less restrictive configuration file, and put it into a
local directory.  To force FM Guard to use the additional, "local"
configuration file, you need to do two things:

  a) Add the line "ProcessLocalFile=ON" to the "common" file
     FMGUARD.SYS (the one in the WINDOWS\SYSTEM directory).  If you
     turn this option off, by specifying "ProcessLocalFile=OFF" in
     the FMGUARD.SYS file, no local configuration files will be
     processed.

  b) Add the "fmguard=..." line, specifying the location of the
     local configuration file to the [windows] section of WIN.INI.
     For example, if you want FM Guard to process the FMGLOCAL.SET
     file, located in the "\USER\OPTIONS" subdirectory on the D
     dirive, you have to add to following entry to the [windows]
     section of WIN.INI:

       fmguard=D:\USER\OPTIONS\FMGLOCAL.SET

If FM Guard cannot find the local file, it allows File Manager to
run as usual, without any error message.  The "common" set of
restrictions, as specified by the WINDOWS\SYSTEM\FMGUARD.SYS file,
will be in effect in this case.

BE AWARE that any command you specify in the local configuration
file suppresses the corresponding command in the "common" file
FMGUARD.SYS.  BE SURE to delete (or even better, to comment out by
placing a semicolon at the beginning of a line) all commands in the
local configuration file, which you don't want to be overdidden.
For example, if you want a single common password to be used to
disable FM Guard on any machine, be sure to comment out the line
"Password=" in all local configuration files, otherwise they would
suppress the password specified in the "common" configuration file.

10.  Make all other necessary changes to the system (like making the
entire directory WINDOWS\SYSTEM read-only).

11.  Activate FM Guard by adding the "FM Guard=..." line to the end
of [AddOns] section in the WINFILE.INI file (see README.TXT for
details on installing and activating FM Guard).  If you have other
File Manager extensions installed (such as MSTOOLS.DLL from
MicroSoft, or our FMSTEPUP.DLL), make sure that you have no more
than 4 (in case of Windows 3.1/3.11) or 5 of them (in case of
Windows for Workgroups 3.11 or Windows 95) listed in the [AddOns]
section, including FM Guard.

12. Restart Windows. That's it!

////////////////////////////////////////////////////////////////
//
// 3. Setting up restrictions to File Manager and Common Dialogs
//
////////////////////////////////////////////////////////////////

The FMGUARD.SYS file contains the commands specifying which features
of File Manager should be restricted by FM Guard.  This file must be
placed in the WINDOWS\SYSTEM directory (the directory containing
such Windows system files as USER.EXE, GDI.EXE, etc.).  If FM Guard
cannot find FMGUARD.SYS in the SYSTEM directory, it displays an
error message and closes File Manager (to prevent users from using
File Manager in the unrestricted mode).

The name of the FMGUARD.SYS file is hardcoded into FM Guard and
cannot be changed.

The format of the FMGUARD.SYS file is ordinary ASCII, so that it can
be edited using any text editor (like Windows Notepad).  Do not use
word processors to modify this file, since they may add formatting
codes to the text, which are unrecognizable by FM Guard.

It's NOT required to put the [restrictions] line at the beginning
of the FMGUARD.SYS file.

Each restricting command should be written in a single line.  Each
line of the file should contain no more than one command.  If a line
contains only 'white spaces' (any combination of SPACE and TAB
characters), it's skipped without processing or warning.

If the first 'non-white-space' character in the line is a semicolon
(';'), this line is treated as a comment and the rest of it is
ignored by FM Guard.  Otherwise the line is treated as a restricting
command.

Each restricting command should be written using the following
syntax:

   command = value ; comment

where "command" is the name of the restricting command, and "value"
is its value. The "comment" is optional; note that if the semicolon 
character (';') is specified in the line, the rest of the line 
(including the semicolon itself) is treated as a comment and is 
ignored by FM Guard.

Both the name and the value can be surrounded by an arbitrary number 
of "white spaces" (characters SPACE and TAB).  Both the name and the
value are case insensitive, so that, for example, 'NoClose', 'NOCLOSE', 
and 'noclose' are all valid names representing the same restricting
command.

If the specified name of the command is not one of the predefined
names, the entire line containing that name is ignored by FM Guard
without error message.

If a restricting command has been deleted from FMGUARD.SYS or
commented out, then no warning is issued by FM Guard, and the
corresponding feature of File Manager is not affected by it (that
is, the feature remains enabled).

Most of the restricting commands of the FMGUARD.SYS file are used to
restrict access to the commands of the File Manager menu.  Such
commands may have the following values:

  OFF - the corresponding command of File Manager should not be
        restricted by FM Guard.  The user is allowed to have full
        access to such a command, as if FM Guard were not present in
        the system at all.  This is the default value for all
        restricting commands.
        
  ON  - FM Guard should restrict such a command of File Manager by
        disabling (but not removing!) the appropriate menu item in 
        the menu of File Manager.  A command restricted in this way
        will not be accessible to user neither via menu nor via a
        keyboard shortcut.  Such a command can be enabled and used
        again only if you disable FM Guard with the "Guard-Disable" 
        command.
        
  DEL - FM Guard should restrict such a command in the same way as
        if the ON value (see above) were specified, and besides that
        FM Guard should remove such a command from the menu of File 
        Manager.  A command restricted in this way cannot be enabled
        back by disabling FM Guard with the "Guard-Disable" command.

For example:

  NoRun = OFF - does not restrict access to the "File-Run"
                command of File Manager.
                               
  NoRun = ON  - disables the "File-Run" command, but does not remove
                it from the menu of File Manager.   
                               
  NoRun = DEL - disables the "File-Run" command and removes
                it from the menu of File Manager.

NOTE: although this document and the sample file FMGUARD.SYS
  supplied with FM Guard use the OFF/ON/DEL values for the
  restricting commands, the following values can also be used:
  
    0, FALSE, NO      - as replacements for OFF;
    1, TRUE, YES      - as replacements for ON;
    2, DELETE, REMOVE - as replacements for DEL.
    
For example, any of the following commands are equivalent to each
other and reated by FM Guard in the same way:

   NoClose = 1
or
   NoClose = ON
or
   NoClose = True
or
   NoClose = Yes
   
For those restricting commands which control the availability of 
some other features of File Manager, not represented by the items
of its main menu, such as "NoDragDrop" or "NoChangeDrive", only 
the OFF or ON values can be specified (since the DEL value for
such commands would be meaningless anyway). The same rule applies 
also to the restricting commands which restrict the system menu 
commands of File Manager, such as "NoMoveSize" or "NoCloseMDI": the 
items in the system menus can only be disabled, not removed.

There are also restricting commands, such as NoDrive, UserName,
Password, which values are strings or numbers.

The following table contains all restricting commands which are
recognized by the current version of FM Guard.
________________________________________________________________

UserName = string   
  
  where "string" should be replaced with the name the software is
  registered to, without quotes.  It must contain no less than 6 and
  no more than 29 characters, including spaces and punctuation.  The
  name must be entered EXACTLY as it appears on your Registration
  Acknowledgement, including proper number of spaces between the
  words (don't use the TAB key instead of SPACE) and using proper
  letter case (upper or lower).
  
________________________________________________________________

RegNum = number
  
  where "number" should be replaced with the registration code, as
  it appears on your Registration Acknowledgement, without quotes.
  To verify that the registration code entered is valid, save the
  FMGUARD.SYS file after you have modified it, restart File Manager,
  and choose "Guard-About" in the menu of File Manager.  If the
  screen reads "Unregistered copy", then either UserName or RegNum
  contains an invalid value.  If both UserName and RegNum are valid,
  the "About FM Guard" screen will show the name it's registered to.
  
________________________________________________________________

Password = number

  where "number" should be replaced with the encoded passport
  generated by PASSWORD.EXE, included in the FM Guard distribution
  package.  This command has no effect if the registration
  information above is missing or invalid.  The only difference
  between the registered and unregistered versions of FM Guard is
  the password protection of the "Guard - Disable" command.  Please
  see file ORDER.TXT for information on how to register FM Guard.
  
________________________________________________________________

NoClose	= OFF / ON / DEL
  
  restricts the "File-Exit", "Control Menu - Close", ALT+F4 commands
  of File Manager.
  
________________________________________________________________

NoSaveSettings = OFF / ON / DEL

  restricts the "Options - Save Settings on Exit" command.
  
________________________________________________________________
  
NoExecute = OFF / ON

  restricts running programs via double-clicking a file in a
  File Manager window or via the "File-Open" command.  This command
  does NOT prevent opening associated documents via double-clicking
  a file in File Manager.  Use the "NoOpen" command to disable
  opening associated documents as well.  Also, use the "NoRun" and
  "NoDragDrop" commands as complements to the "NoExecute" command.
  
________________________________________________________________
  
NoDragDrop = OFF / ON

  disables all drag-and-drop operations and thus prevents the user
  from running programs by dragging them from File Manager to
  Program Manager.  Note that NoDragDrop also disables all the other
  drag-and-drop' operations: copying and moving files, etc.  The
  user is still able to use the menu commands to perform these
  operations (unless they are explicitly restricted)
  
________________________________________________________________

NoMoveSize = OFF / ON

  restricts the "Move" and "Size" commands for the main window of File
  Manager.
  
________________________________________________________________

NoMinimize = OFF / ON 

  restricts the "Minimize" command for the main window of File
  Manager.
  
________________________________________________________________

NoMaximize = OFF / ON

  restricts the "Maximize" command for the main window of File
  Manager.
  
________________________________________________________________

NoSwitch = OFF / ON

  restrict launching Task Manager from the System Menu of File
  Manager.
  
________________________________________________________________

NoMoveSizeMDI = OFF / ON

  restricts the "Move" and "Size" commands for the "child" windows of
  File Manager. Does NOT restrict the "Search results" window.
    
________________________________________________________________

NoMinimizeMDI = OFF / ON

  restricts the "Minimize" command for the "child" windows of File
  Manager. Does NOT restrict the "Search results" window.
  
________________________________________________________________

NoMaximizeMDI = OFF / ON

  restricts the "Maximize" command for the "child" windows of File
  Manager. Does NOT restrict the "Search results" window.
  
________________________________________________________________

NoNextMDI = OFF / ON

  restrictes the "Next" command for the "child" windows of File
  Manager. Does NOT restrict the "Search results" window.
  
________________________________________________________________

NoCloseMDI = OFF / ON

  restricts the "Close" command for the "child" windows in File
  Manager.  Does NOT restrict the "Search results" window.
  
________________________________________________________________

NoOpenMDI = OFF / ON

  restricts opening new "child" windows in File Manager.

  New for version 2.12: this command no longer prevents opening the 
  "Search Results" window, unless the "NoSearch" command is also 
  specified.
  
________________________________________________________________

NoChangeDrive = OFF / ON

  prevents the user from changing the drives displayed in child
  windows. However, moving around the directories on the drive
  currently displayed in a window is still possible.
  
________________________________________________________________

NoDrive = string

  restricts browsing the drives listed in the "string" value.
  For instance, to disable access to drives C, H, and Z, specify:
  
    NoDrive = CHZ 

  IMPORTANT: before activating FM Guard, make sure that none of the
    "child" windows of File Manager shows the contents of the
    drive(s) you wish to prevent access to.  Otherwise, after you
    have activated FM Guard, no files may be shown in such a window
    by File Manager.
     
    If the latter happens:
      - while File Manager is running, disable FM Guard by choosing
        "Guard-Disable" from menu;
      - close all windows which show the "prohibited" drives;
      - for every other child window of File Manager, choose 
        "View-By File Type" from the menu and restore the
        filter of file names (*.* usually) in the dialog box.
      - press SHIFT+ALT+F4 simultaneously to save the current
        configuration of File Manager;
      - enable FM Guard.

  FM Guard is now able to restrict not only File Manager, but also
  some other Windows components.  As of this writing, FM Guard is 
  able to restrict user access to certain disks via Common Dialogs 
  ("Open", "Save As", etc.).  To employ this feature, the "NoDrive" 
  command in the FMGUARD.SYS file should be used.  
  If you have already set this command up to prevent access
  to the drives via File Manager, then no additional actions are
  required: access to these drives via Common Dialogs will be
  restricted by FM Guard automatically, as well.

  IMPORTANT: the Common Dialogs restrictions are in effect only while
    File Manager (with FM Guard activated) is running.  If you close
    File Manager, then the full access to the drives via Common
    Dialogs will be restored.  If you want the Common Dialogs
    restrictions to be in effect continuously, make File Manager to
    be loaded on Windows start up (by specifying WINFILE.EXE in the
    "load=" line of the WIN.INI file) and use the "NoClose=ON"
    command in the FMGUARD.SYS file.  This will keep File Manager
    active for the duration of the whole Windows session.

  Please note that not all applications use Common Dialogs.  In
  spite of the fact that using Common Dialogs is encouraged by
  Microsoft and is even required for an application to qualify for
  the "Windows Compatible" logo, some of the software vendors
  (including Microsoft itself!) don't use them.  As a result, some
  applications (including MS Word and Excel) cannot be restricted by
  FM Guard in this way.
  
  Also, if you are using FM Guard with Windows 95, only "old" common
  dialogs, used by the 16-bit applications, are restricted by FM
  Guard.  To restrict the "new" common dialogs, use our product
  "Folder Guard for Windows 95".
  
________________________________________________________________

NoDeleteEdit    = OFF / ON
NoRunEdit       = OFF / ON
NoMoveEdit      = OFF / ON
NoCopyEdit      = OFF / ON
NoRenameEdit    = OFF / ON
NoSearchDirEdit = OFF / ON
NoPrintEdit     = OFF / ON

  disable edit boxes in the corresponding dialog boxes.  The user
  will be able to use the commands to manage his or her own files
  (by highlighting them in File Manager), but will not be able to
  type anything in the edit boxes.

  For example, you may want to allow the user to use the Delete
  command to delete his or her own files, by highlighting the files
  in File Manager and choosing the "File-Delete" command from main
  menu.  To achive this, you should specify "NoDelete = OFF" to
  enable access to the "Delete" command, but also use "NoDeleteEdit
  = ON" to prevent modifying the filename in the dialog box.  In
  this way the user won't be able to delete files located on a
  "restricted" drive, for instance.
  
________________________________________________________________

NoSearchAllSubDirs = OFF / ON

  disables the "Search All Subdirectories" checkbox in the
  "File-Search" dialog box.
  
________________________________________________________________

NoShowSystemHiddenFiles = OFF / ON

  disables the "Show System/Hidden files" checkbox in the "File-By
  File Type" dialog box.
  
________________________________________________________________

NoAttributesEdit = OFF / ON

  prevents one from modifying the file attributes with the
  "File-Properties" command.
  
________________________________________________________________

NoFileMenu = OFF / ON / DEL

  restricts the "File" submenu in the menu bar of File Manager.
  
________________________________________________________________

NoOpen          = OFF / ON / DEL
NoMove          = OFF / ON / DEL
NoCopy          = OFF / ON / DEL
NoDelete        = OFF / ON / DEL
NoUndelete      = OFF / ON / DEL
NoRename        = OFF / ON / DEL
NoProperties    = OFF / ON / DEL
NoRun           = OFF / ON / DEL
NoPrint         = OFF / ON / DEL
NoAssociate     = OFF / ON / DEL
NoCreateDir     = OFF / ON / DEL
NoSearch        = OFF / ON / DEL
NoSelect        = OFF / ON / DEL

  restrict menu items of the "File" submenu.  To restrict the "Exit"
  menu item, use the "NoClose" command (see above in this file).
  
________________________________________________________________

NoDiskMenu = OFF / ON / DEL

  restricts the "Disk" submenu in the menu bar of File Manager.
  
________________________________________________________________
  
NoCopyDisk      = OFF / ON / DEL
NoLabelDisk     = OFF / ON / DEL
NoFormatDisk    = OFF / ON / DEL
NoMakeSystemDisk= OFF / ON / DEL
NoSelectDrive   = OFF / ON / DEL

  restrict menu items of the "Disk" submenu.  In addition, the
  "NoMakeSystemDisk" command also disables the "Make System Disk"
  check box in the "Format Disk" dialog box.
  
________________________________________________________________

NoTreeMenu = OFF / ON / DEL

  restricts the "Tree" submenu in the menu bar of File Manager.
  
________________________________________________________________

NoExpOneLevel   = OFF / ON / DEL
NoExpBranch     = OFF / ON / DEL
NoExpAll        = OFF / ON / DEL
NoCollapse      = OFF / ON / DEL
NoIndicateExp   = OFF / ON / DEL

  restrict menu items of the "Tree" submenu. 
  
________________________________________________________________

NoViewMenu = OFF / ON / DEL

  restricts the "View" submenu in the menu bar of File Manager.
  
________________________________________________________________

NoTreeDir = OFF / ON / DEL

  restricts the following items of the "View" submenu: "Tree and
  Directory", "Tree Only", "Directory Only".
  
________________________________________________________________

NoSplit = OFF / ON / DEL

  restricts the "Split" command of the "View" submenu.
  
________________________________________________________________

NoDetails = OFF / ON / DEL
  
  restricts the following items of the "View" submenu: "Name", "All
  File Details", "Partial Details".
  
________________________________________________________________

NoSort = OFF / ON / DEL

  restricts all the "Sort By..." items of the "View" submenu.
  
________________________________________________________________

NoByFileType = OFF / ON / DEL

  restricts the "By File Type" command of the "View" submenu.
  
________________________________________________________________

NoOptionsMenu = OFF / ON / DEL

  restricts the "Options" submenu in the menu bar of File Manager.
  
________________________________________________________________

NoConfirmation  = OFF / ON / DEL
NoFont          = OFF / ON / DEL
NoStatusBar     = OFF / ON / DEL
NoMinimizeOnUse = OFF / ON / DEL

NoCustomizeToolBar = OFF / ON / DEL
NoToolBar       = OFF / ON / DEL
NoDriveBar      = OFF / ON / DEL

  restrict items of the "Options" submenu.  Use the "NoSaveSettings"
  command to restrict the "Save settings on Exit" item.

Note: these command only restrict the corresponding
menu items, preventing from using it; they don't affect
the current settings. For instance, NoStatusBar=ON does not
hide the status bar if it's shown, but prevents from
changing its visibility instead.
  
________________________________________________________________

NoWindowMenu  = OFF / ON / DEL
NoHelpMenu    = OFF / ON / DEL

  restrict the "Window" and "Help" submenus in the menu bar of File
  Manager, accordingly.  There are no separate commands controlling
  the individual commands of the "Window" and "Help" submenus.

  NOTE: we do not recommend using the "NoWindowMenu = DEL" command,
    since it can cause the General Protection Fault in File Manager.
    If you experience this problem, use the "NoWindowMenu = OFF"
    command instead.
  
________________________________________________________________

NoNetwork = OFF / ON / DEL 

  restricts the "Network Connections..." command.
  
________________________________________________________________

NoViewShared = OFF / ON / DEL

  restricts the "View Shared Directories..." command.
  
________________________________________________________________

NoShareDir = OFF / ON / DEL

  restricts the "Share Directory" command.
  
________________________________________________________________

NoStopShareDir = OFF / ON / DEL
 
  restricts the "Stop Sharing Directory" command.
  
________________________________________________________________

NoConnect = OFF / ON / DEL

  restricts the "Connect to a network drive" command.
  
________________________________________________________________

NoDisconnect = OFF / ON / DEL

  restricts the "Disconnect from a network drive" command.
  
________________________________________________________________

NoOpenOnConnect = OFF / ON / DEL

  restricts the "Open new on connect" command.
  
________________________________________________________________

NoStepUpMenu  = OFF / ON / DEL

  restricts the "StepUp" menu in the menu bar.  Ignored if FM StepUp
  is not installed.
  
________________________________________________________________

NoToolbarMenu = OFF / ON / DEL

  restricts the "Toolbar" menu in the menu bar.  Ignored if FM
  Toolbar is not installed.
  
________________________________________________________________

NoGuardMenu = OFF / ON / DEL

  restricts the "Guard" menu item in the menu bar. This command has
  NO EFFECT if values of the UserName or RegNum commands are invalid
  or missing.

  CAUTION: if you set it to 'ON' or 'DEL', you won't be able to
    disable FM Guard by entering a password, and, if you follow the
    recommended steps described in Section 2 of this file, you may
    not be able to disable FM Guard at all!  Use this command only
    after you have tested your Windows and FM Guard configurations and
    made sure everything is set up the way you want it.
    
________________________________________________________________

ProcessLocalFile = OFF / ON

  If the command "ProcessLocalFile=ON" is specified in the
  FMGUARD.SYS file, then after processing the FMGUARD.SYS file in
  the WINDOWS\SYSTEM directory, the contents of an additional file
  with restricting commands is analized.  The location of this
  additional file is specified with the command
  "fmguard=<DOS-path-to-the-local-config-file>" which should be
  added to the [windows] section of the WIN.INI file.  The "local"
  configuration file may contain any restrictive commands,
  overriding the corresponding settings in the "common" FMGUARD.SYS
  file, thus providing a way to make File Manager more or less
  restrictive, depending on the user.  The only commands which are
  ignored in the "local" configuration file are "UserName",
  "RegNum", and "ProcessLocalFile".  BE SURE to comment out those
  entries in the local configuration file which you don't want to be
  overriden.
  
NOTE: in order for this command to be usable, your Windows
  installation must provide for separate WINDOWS directories for
  different users or user groups.

////////////////////////////////////////////////////////////////
//
// 4. Changing the FM Guard password
//
////////////////////////////////////////////////////////////////

After you have registered FM Guard and received your Registration
Code, you can use the PASSWORD.EXE utility to change the password
required to disable/enable FM Guard while File Manager is running:

 - run PASSWORD.EXE, and when the dialog box pops up, enter the name
   FM Guard is registered to (EXACTLY as it appears on your
   Registration Acknowledgement!), your Registration Code, and the
   new password.  If the registration information is entered
   correctly, the dialog box will display a line that should be
   added to your FMGUARD.SYS file.  It has the form:

     Password = number

   where "number" contains the password in an encoded form.  You may
   wish to enter the new password again to verify that the resulting
   "number" is the same.

   After you have added the required "Password =..." command to the
   FMGUARD.SYS file (in the SYSTEM directory!), the new password can be
   used to disable/enable FM Guard.

_________________________________________________________________
Appendix A. Restricting Program Manager
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

You may also wish to restrict Program Manager in addition to File
Manager.  Please note that the ability to restrict Program Manager
is built-in into Windows and is NOT a feature of FM Guard.  The
information below is provided only for reference purposes for your
convenience.  If you have any questions about restricting Program
Manager, you should contact the customer support department of
Microsoft, NOT Chaosoft.

The [restrictions] section of PROGMAN.INI is intended to allow
system administrators to restrict access to certain Program Manager
functions, the settings within the section can consist of the
following:

[restrictions]
NoRun=
NoClose=
NoSaveSettings=
NoFileMenu=
EditLevel=

Description of Settings:

Entry             Value
-----------------------------------------------------------
NoRun = 1         Disables the Run command line on the File menu.
                  The Run command will be dimmed on the File menu
                  and the user will not be able to run
                  applications from Program Manager unless the
                  applications are set up as icons.

NoClose = 1       Disables the Exit Windows command on the File
                  menu. Users will not be able to quit Program
                  Manager (and thus Windows, assuming Program
                  Manager is set up as the Windows SHELL).  The
                  File/Exit Windows command and the Control
                  menu/Close command are dimmed. ALT-F4 is also
                  disabled.

NoSaveSettings=1  Disables the Save Settings on Exit command on
                  the Options menu.  The Save Settings on Exit
                  command will appear dimmed on the Options menu
                  and any changes that the user makes to the
                  arrangement of windows and icons will not be
                  saved on exiting Windows.  This setting
                  overrides the SaveSettings= entry in the
                  [settings] section of PROGMAN.INI.

NoFileMenu = 1    Removes the File menu from Program Manager.  All of
                  the commands on that menu are then unavailable.
                  Users can start applications by using icons.
                  Windows may still be exited via the System Menu or
                  ALT-F4.

                  Note: For all the No* settings, setting them =0
                  enables them (the default, including when they
                  do not appear in PROGMAN.INI at all)

EditLevel =       Sets restrictions for what settings and features users
                  can modify in Program manager.

                  0 -- Any changes may be made (default).

                  1 -- Prevents user from creating, deleting, or
                       renaming GROUPS. The New, Move, Copy, and
                       Delete commands on the File menu are dimmed
                       when a group is selected.

                  2 -- All restrictions of level 1, plus prevents
                       creating or deleting PROGRAM Items.  The
                       New, Move, Copy, and Delete commands on the
                       File menu are always dimmed.

                  3 -- All restrictions of level 2, plus prevents
                       changing command lines for PROGRAM Items.
                       The text in the Command Line box in the
                       Properties dialog cannot be changed.

                  4 -- All restrictions of level 3, plus prevents
                       ANY changes to PROGRAM Item information.
                       Prevents changes in any of the areas of the
                       Properties dialog, it still may be viewed,
                       though all of the areas are dimmed.

_________________________________________________________________
Appendix B. Restricting Control Panel
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Below are the instructions on entries that can be made in the
CONTROL.INI file to limit access to specific icons in the Control
Panel, such as 386 Enhanced, International, Printers, and so on.

Please note that the ability to restrict Control Panel is built-in
into Windows and is NOT a feature of FM Guard. The information
below is provided only for reference purposes for your
convenience. If you have any questions about restricting Control
Panel, you should contact the customer support department of
Microsoft, NOT Chaosoft.

Add a section called [Don't Load] to the CONTROL.INI file, then
type the name of the icon that you don't want to be shown. The
section should look as follows; however, only add the name of the
item you want to limit.

Example of All the Icons Turned Off
-----------------------------------

[Don't Load]
Printers=1
Color=1
Fonts=1
Ports=1
Mouse=1
Desktop=1
keyboard=1
Printers=1
International=1
Date/Time=1
Network=1
386 Enhanced=1
Drivers=1
Sound=1

Example of All the Icons Turned On
----------------------------------

[Don't Load]
Printers=
Color=
Fonts=
Ports=
Mouse=
Desktop=
keyboard=
Printers=
International=
Date/Time=
Network=
386 Enhanced=
Drivers=
Sound=

A "0" or "1" after the "=" sign (without quotation marks) will disable
that icon.

