Employee Monitor Installing Via Group Policies

Employee Monitor Installing Via Group Policies

Installing

• Create a network installation point on your service. You can use the NETLOGON folder for this purpose.
  
• Copy the installer files: MpkNetInstall.msi, key.bin and settings.bin. It is recommended to join all destination computers into a single organization unit and create a GPO for it.
  

• Open the group policy management window, use the right mouse button to select a group of computers or the domain itself, and click «Create a GPO in this domain, and Link it here». 

• Enter the policy name and click «OK».

• Right-click on the newly-selected policy and select «Edit…» from the menu.

• Open the «Software Installation» menu, right-click on it and select the «Properties» menu item.

• On the first tab, select «Default package location» and set the property to «Assign» for new network packages.

• Right-click on the empty field and select a corresponding command for adding a new installation package.

• Select the MkNetInstall.msi package from the default package location folder and click «Open».

You can now close the policy management window.

• Run the gpupdate /force command to update the policies.

Upgrading

• Copy the new network installer to the distribution folder.

• Open the policy management window to install a network agent. Right-click on an empty field and use a corresponding command to install a network agent. Right-click on an empty field to add a new installation package.

• Select the new version of the package and click «Open»

• Select the new version from the list of packages, right-click on it and select the «Properties» menu item.

• Switch to the «Upgrades» tab and click the «Add…» button.

• Select the previous version of the package in upgrade settings and enable the «Package can upgrade over the existing package» option, then click «OK».

• Click «Apply» and then «OK» in the upgrade settings window.

• Use the gpupdate /force command to update the policies.

Removing

• Open the «Software Installation» menu, select the program installation package and right-click on it.

Select the «Remove…» command. This must be repeated for all packages.

• Choose to remove the program for all users and click «OK».

• Run the gpupdate /force command to update the policies.

Employee Monitor Installing Whithout A Domain

Installing

• Generate a network installer using the «File» -> «Create an installer» menu command.
  
• Copy all installation files (MpkNetInstall.msi, key.bin and settings.bin) to a single folder on the computer and run MpkNetInstall.msi. You will need admin rights to complete the manual installation.
  
• Wait until the installation is over – and you are done.
  
• Connect the computer in the log viewer.
  

Upgrading

• Performed identically to installation.

Removing

• Generate a network installer with the «File» -> «Create an installer» command or use a previously created one.
  
• Copy all installation files (MpkNetInstall.msi, key.bin and settings.bin) to a single folder on the computer.
  
• Right-click on MpkNetInstall.msi and select «Uninstall».
  
• Wait until the uninstallation is complete.
  

Employee Monitor Installing Old Version (7.x)

How to manually install the software on non-domain network

1. Create an installer for the Refog Employee Monitor; click the menu «File» and select «Create Installer…»
The following five files will be copied to the specified folder:

• MpkNetInstall.exe - program installer;
• logstart.vbs - installer to be run in the hidden mode;
• loguninstall.vbs - uninstaller to be run in the hidden mode;
• key.bin - license file;
• mpk.db - default settings file;

2. Copy these files to all computers
3. Using administrator privileges launch logstart.vbs on all computers
4. To open a network log, click the menu «File» and select «Connect to another computer…»
5. When viewing a log Refog Employee Monitor will ask for a login and a password for an administrator of that computer, which log you are trying to view.

To automatically install the software on the domain network:

1. Install the software on any computer on the network with the network administrator rights.
2. Set up the watching parameters that will be applied to all network computers by default.
3. Create an installer for the REFOG Employee Monitor; click the menu «File» and select «Create Installer…»

The following four files will be copied to the specified folder: - MpkNetInstall.exe – program installer; - logstart.vbs – installer to be run in the hidden mode; - loguninstall.vbs – uninstaller to be run in the hidden mode; - key.bin – license file; - mpk.db – default settings file;
4. Copy these files to the domain controller common folder "NETLOGON".

5. You should add the logon script «» on the domain controller for every user you want to install "REFOG Employee Monitor" to. For this, open Control Panel , click the Administrative Tools icon, double-click Active Directory Users and Computers, right-click the user, select Properties and then add the script to the Logon Script field.

If the logon script has been already specified, you should add the following string to this script to run the installer in the hidden mode: "MpkNetinstall" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /NET This done, REFOG Employee Monitor will be installed and run on the domain computers as soon as the users log on.

Viewing logs on the remote computer:

You are able to view logs only under the domain administrator rights and having access to the shared system resources "C$", "D$", etc. of the domain computers.
To open a network log, click the menu «File» and select «Connect to another computer…»
To open a local log, on the menu File select Local log
If you manually install REFOG Employee Monitor on every computer then to open a log the following requirements should be met:

• You should login to Windows using Administrator account
• Computer which logs you are planning to view should have exactly the same account as in previous step. Meaning login and password should completely match to login and password of Administrator account you are using to view logs.

We are working on this issue and these requirements will not be needed anymore.

How to open REFOG Employee Monitor? The hotkeys do not always help

1. Press Windows key and R key.

2. Type runrefog and press Enter.

How to start REFOG Employee Monitor automatically at Windows startup?

To start it automatically for all users, select «Users» and click the green button with a triangle

To start it automatically for a certain user, select the user from the list and click the red button.

Employee Monitor: advanced settings

From time to time, we get contacted by people complaining that they cannot connect to a remote computer using Mipko Employee Monitor. Unfortunately, such situations do happen because of the differences in network architectures, computer settings, user permissions and other parameters. We have compiled a list of recommendations that will most probably help you solve your problem and successfully establish a connection. Here they are.

One.

Make sure that the script is installed and launched on monitored computers (just in case you missed something). The following instruction explains how it can be created and installed.
The work of the script can be tested in the following way:
If the script was installed, you will find a folder called C:\Documents and Settings\All Users\Application Data\MPK (in Windows XP) or C:\ProgrammData\MPK (in Windows 7) containing logs and the executable file of the program. If the program is running, it won’t be possible to delete or move the executable file (with the *.exe extension).

Two.

Try adding the target computer using its IP address instead of its network name.
Try navigating from the observer’s computer to C$, the hidden shared folder of the client system being monitored and make sure it is accessible under the current user without errors or issues of any sort. If it’s not, try looking for a possible reason and fixing it.
My Computer > address bar > \IP address or name of the client computer\C$ > Enter
If it didn’t help and didn’t solve the problem, carry on with the instruction.

Three.

1. For Windows XP/Server 2003
Open the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanserver\parameters key and add an AutoShareServer (for Server 2003) or AutoShareWks (for Windows XP) value equal to 1.
2. For Windows 7, 8, Server 2008, 2012
You need to enable network discovery and shared access to files and printers.
Open "Control Panel > Network and sharing center > Change advanced sharing settings". You need to activate the "Turn on network discovery" and "Turn on file and printer sharing" options.
After that, go to the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System key, create a LocalAccountTokenFilterPolicy value of REG_DWORD type equal to 1 and reboot the monitored system.
3. If there is no admin password set on the monitored computer, you need to do the following. Make sure that the RestrictAnonymous DWORD parameter in the HKLM\SYSTEM\CurrentControlSet\Control\Lsa key in the registries of all monitored computers is set to zero. This is officially recommended by Microsoft.
In Windows 7 and 8, disable "Password-protected sharing":
Control Panel > Network and Internet > View network status and tasks > Change advanced sharing settings > General (current profile) > Password-protected sharing > Turn off.
If you see the following error: "Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed."
try adding the name of the computer to the user name. For instance, try using "testwin\testadmin" instead of "testadmin".
You can also try closing the log viewer, then opening the command line (Start->Run->cmd) and doing the following:
1. Run the "net use" command and find the computer you cannot connect to
2. Enter the following commands:
net use {computer_name or ip_address} /delete net use {computer_name or ip_address}\c$ /delete
3. Run the program and try adding the computer again
Make sure that all computers are in the same workgroup or domain. This is important and if it is not so, it may cause the problem.
If you still fail to connect after trying all of the above, please contact our technical support department - we will try to find the reason of your problems.