Lock Down Mode allows administrators to isolate the data in Workspot desktop and app sessions to the Workspot cloud, preventing end-users from transferring information from their Workspot desktop/apps to their local device, as follows:
Saving, copying, cutting, pasting, screen capturing, and so on from the Workspot resource to the local device is blocked.
The Workspot desktop windows cannot be minimized or restored. To regain access to the local desktop, the user must close the Workspot Client session.
Lock Down Mode is implemented partly in Workspot Control and partly in the Workspot Client. Clients other than the Workspot Windows Client do not support Lock Down Mode.
Client Support of Lock Down Mode
Newer Clients
All currently supported Workspot Windows Clients support Lock Down Mode. They respond to it as follows:
When a Workspot desktop/app is running, it takes over the Client keyboard, mouse, and displays. The user cannot interact with local resources until the Workspot desktop/app is exited. In essence, the local device becomes a dedicated Workspot terminal for the duration of the session.
During the Workspot session, users will not be able to perform the following:
Print from Workspot to a printer known to the local device
Capture a Workspot screen locally.
Copy/paste between Workspot and the local device.
Transfer files between Workspot and the local device.
Operations that both start and end with the Workspot device, such as copying and pasting between two applications running on the Workspot desktop, are allowed.
Older Clients
Older, unsupported Windows Clients may disallow the data transfers listed above but do not prevent local applications from being used during the Workspot session.
Enabling Lock Down Mode in Workspot Control
Lock Down Mode is an element of a Security Policy. Every Workspot Group has a Security Policy. Lock Down Mode is applied to a user if the user's Group specifies a Security Policy that enables Lock Down Mode.
Lock Down Mode is specified in the "Protocol Setting" section of a Security Policy ("Policies > Add a New Policy > Add a New Policy" or "Policies > policyname > Edit Policy."
When creating a new policy, give it a name and select "Security Policy" as the policy type.
Select which Workspot Groups this policy should apply to.
Scroll down to "Protocol Setting." The top radio button is "Enable Locked Down Mode," which defaults to No. Select "Yes" and confirm the selection.
This will set the following options to "No":
Enable printing
Enable screen capture
Enable copy and paste
Allow external applications to edit documents
Allow local drive sharing
Allow drives user plugs in while in session
Allow redirection of plug and play devices
Click "Add Policy" or "Save" at the bottom of the page.
Locked Down Mode will also inform Workspot Clients that they are locked down. This will become effective at the start of the next session.