Employee Monitor Installing Via Group Policies
Installing
- Create a network installation point on your service. You can use the NETLOGON folder for this purpose.
- Copy
the installer files: MpkNetInstall.msi, key.bin and settings.bin. It is
recommended to join all destination computers into a single
organization unit and create a GPO for it.
- Open
the group policy management window, use the right mouse button to
select a group of computers or the domain itself, and click «Create a GPO in this domain, and Link it here».
- Enter the policy name and click «OK».
- Right-click on the newly-selected policy and select «Edit…» from the menu.
- Open the «Software Installation» menu, right-click on it and select the «Properties» menu item.
- On the first tab, select «Default package location» and set the property to «Assign» for new network packages.
- Right-click on the empty field and select a corresponding command for adding a new installation package.
- Select the MkNetInstall.msi package from the default package location folder and click «Open».
You can now close the policy management window.
- Run the gpupdate /force command to update the policies.
Upgrading
- Copy the new network installer to the distribution folder.
- Open
the policy management window to install a network agent. Right-click on
an empty field and use a corresponding command to install a network
agent. Right-click on an empty field to add a new installation package.
- Select the new version of the package and click «Open»
- Select the new version from the list of packages, right-click on it and select the «Properties» menu item.
- Switch to the «Upgrades» tab and click the «Add…» button.
- Select the previous version of the package in upgrade settings and enable the «Package can upgrade over the existing package» option, then click «OK».
- Click «Apply» and then «OK» in the upgrade settings window.
- Use the gpupdate /force command to update the policies.
Removing
- Open the «Software Installation» menu, select the program installation package and right-click on it.
Select the «
Remove…» command. This must be repeated for all packages.
- Choose to remove the program for all users and click «OK».
- Run the gpupdate /force command to update the policies.
Employee Monitor Installing Whithout A Domain
Installing
- Generate a network installer using the «File» -> «Create an installer» menu command.
- Copy
all installation files (MpkNetInstall.msi, key.bin and settings.bin) to
a single folder on the computer and run MpkNetInstall.msi. You will
need admin rights to complete the manual installation.
- Wait until the installation is over – and you are done.
- Connect the computer in the log viewer.
Upgrading
- Performed identically to installation.
Removing
- Generate a network installer with the «File» -> «Create an installer» command or use a previously created one.
- Copy all installation files (MpkNetInstall.msi, key.bin and settings.bin) to a single folder on the computer.
- Right-click on MpkNetInstall.msi and select «Uninstall».
- Wait until the uninstallation is complete.
Employee Monitor Installing Old Version (7.x)
How to manually install the software on non-domain network
1. Create an installer for the Refog Employee Monitor; click the menu
«File» and select
«Create Installer…»
The following five files will be copied to the specified folder:
- MpkNetInstall.exe - program installer;
- logstart.vbs - installer to be run in the hidden mode;
- loguninstall.vbs - uninstaller to be run in the hidden mode;
- key.bin - license file;
- mpk.db - default settings file;
2. Copy these files to all computers
3. Using administrator privileges launch
logstart.vbs on all computers
4. To open a network log, click the menu
«File» and select
«Connect to another computer…»
5.
When viewing a log Refog Employee Monitor will ask for a login and a
password for an administrator of that computer, which log you are trying
to view.
To automatically install the software on the domain network:
1. Install the software on any computer on the network with the network administrator rights.
2. Set up the watching parameters that will be applied to all network computers by default.
3. Create an installer for the REFOG Employee Monitor; click the menu
«File» and select
«Create Installer…»
The
following four files will be copied to the specified folder: -
MpkNetInstall.exe – program installer; - logstart.vbs – installer to be
run in the hidden mode; - loguninstall.vbs – uninstaller to be run in
the hidden mode; - key.bin – license file; - mpk.db – default settings
file;
4. Copy these files to the domain controller common folder "NETLOGON".
5.
You should add the logon script «» on the domain controller for every
user you want to install "REFOG Employee Monitor" to. For this, open
Control Panel , click the Administrative Tools icon, double-click Active
Directory Users and Computers, right-click the user, select Properties
and then add the script to the Logon Script field.
If
the logon script has been already specified, you should add the
following string to this script to run the installer in the hidden mode:
"MpkNetinstall" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /NET This
done, REFOG Employee Monitor will be installed and run on the domain
computers as soon as the users log on.
Viewing logs on the remote computer:
You
are able to view logs only under the domain administrator rights and
having access to the shared system resources "C$", "D$", etc. of the
domain computers.
To open a network log, click the menu
«File» and select
«Connect to another computer…»
To open a local log, on the menu File select Local log
If you manually install REFOG Employee Monitor on every computer then to open a log the following requirements should be met:
- You should login to Windows using Administrator account
- Computer
which logs you are planning to view should have exactly the same
account as in previous step. Meaning login and password should
completely match to login and password of Administrator account you are
using to view logs.
We are working on this issue and these requirements will not be needed anymore.
How to open REFOG Employee Monitor? The hotkeys do not always help
1. Press Windows key and R key.
2. Type
runrefog and press Enter.
How to start REFOG Employee Monitor automatically at Windows startup?
To start it automatically for all users, select «Users» and click the green button with a triangle
To start it automatically for a certain user, select the user from the list and click the red button.
Employee Monitor: advanced settings
From
time to time, we get contacted by people complaining that they cannot
connect to a remote computer using Mipko Employee Monitor.
Unfortunately, such situations do happen because of the differences in
network architectures, computer settings, user permissions and other
parameters. We have compiled a list of recommendations that will most
probably help you solve your problem and successfully establish a
connection. Here they are.
One.
Make sure that the script is installed and launched on monitored computers (just in case you missed something). The
following instruction explains how it can be created and installed.
The work of the script can be tested in the following way:
If the script was installed, you will find a folder called C:\Documents
and Settings\All Users\Application Data\MPK (in Windows XP) or
C:\ProgrammData\MPK (in Windows 7) containing logs and the executable
file of the program. If the program is running, it won’t be possible to
delete or move the executable file (with the *.exe extension).
Two.
Try adding the target computer using its IP address instead of its network name.
Try navigating from the observer’s computer to C$, the hidden shared
folder of the client system being monitored and make sure it is
accessible under the current user without errors or issues of any sort.
If it’s not, try looking for a possible reason and fixing it.
My Computer > address bar > \IP address or name of the client computer\C$ > Enter
If it didn’t help and didn’t solve the problem, carry on with the instruction.
Three.
1. For Windows XP/Server 2003
Open the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanserver\parameters key and add an
AutoShareServer (for Server 2003) or
AutoShareWks (for Windows XP) value equal to 1.
2. For Windows 7, 8, Server 2008, 2012
You need to enable network discovery and shared access to files and printers.
Open
"Control Panel > Network and sharing center > Change advanced
sharing settings". You need to activate the "Turn on network discovery"
and "Turn on file and printer sharing" options.
After that, go to the
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System key, create a
LocalAccountTokenFilterPolicy value of REG_DWORD type equal to 1 and reboot the monitored system.
3.
If there is no admin password set on the monitored computer, you need
to do the following. Make sure that the RestrictAnonymous DWORD
parameter in the
HKLM\SYSTEM\CurrentControlSet\Control\Lsa key in the registries of all monitored computers is set to
zero. This is officially recommended by Microsoft.
In Windows 7 and 8, disable "Password-protected sharing":
Control
Panel > Network and Internet > View network status and tasks >
Change advanced sharing settings > General (current profile) >
Password-protected sharing > Turn off.
If you see the
following error: "Multiple connections to a server or shared resource by
the same user, using more than one user name, are not allowed."
try adding the name of the computer to the user name. For instance, try using "testwin\testadmin" instead of "testadmin".
You can also try closing the log viewer, then opening the command line (Start->Run->cmd) and doing the following:
1. Run the "net use" command and find the computer you cannot connect to
2. Enter the following commands:
net use {computer_name or ip_address} /delete net use {computer_name or ip_address}\c$ /delete
3. Run the program and try adding the computer again
Make
sure that all computers are in the same workgroup or domain. This is
important and if it is not so, it may cause the problem.
If you
still fail to connect after trying all of the above, please contact our
technical support department - we will try to find the reason of your
problems.