Administrative Alerts Dialog Box


 

You can enable administrative alerts to automatically notify you of critical events, requiring direct administrator actions. Once enabled, an alert will be sent to the specified destinations when such a critical event is encountered. 

 

Available administrative alerts include: 

 

- "Notify if DeviceLock Administrators settings are changed" - DeviceLock sends this notification when any changes have been made to the DeviceLock Administrators settings. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the name of the user, the user's SID, and the event ID.

 

- "Notify if attempt to change Service settings is denied" - DeviceLock sends this notification when DeviceLock Security is enabled and a user with insufficient access rights attempts to modify DeviceLock Service settings multiple times over a short period. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the name of the user, the user's SID, and the event ID.

 

- "Notify if attempt to change Service settings with enabled "Override Local Policy" is denied" - DeviceLock sends this notification when the Override Local Policy parameter is enabled in DeviceLock Group Policy Manager and any user that connected DeviceLock Management Console to the computer running DeviceLock Service attempts to modify the service's settings. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the name of the user, the user's SID, and the event ID.

 

- "Notify if Service settings are changed" - DeviceLock sends this notification when one or more DeviceLock Service settings (except for DeviceLock Administrators settings) have been modified. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the type of device or protocol involved, the user's activity type, the type of the profile, the name of the user, the user's SID, and the event ID.

 

- "Notify if Service settings are corrupted" - DeviceLock sends this notification when DeviceLock Service starts and detects corruption of its settings. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the name of the user, the user's SID, and the event ID.

 

DeviceLock Service uses a checksum calculation to validate its settings. All corrupted settings are automatically restored. 

 

- "Notify if Service was recovered" - DeviceLock sends this notification when the DeviceLock Driver starts and detects removal of one or more DeviceLock Service installation files. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the name of the user, the user's SID, and the event ID.

 

All missing files are automatically restored.

 

- "Notify if local storage quota is exceeded" - DeviceLock sends this notification when the local storage quota for audit/shadowing data, the alert queue, and data for content analysis has been exceeded. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the name of the user, the user's SID, and the event ID.

 

- "Notify if Service is stopped" - DeviceLock sends this notification when DeviceLock Service starts after it has been stopped. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the version number of DeviceLock Service, the name of the user, the user's SID, and the event ID.

 

- "Notify if Service was terminated" - DeviceLock sends this notification when DeviceLock Service restarts after incorrect termination. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the version number of DeviceLock Service, the name of the user, the user's SID, and the event ID.

 

- "Notify if Alerts settings are changed" - DeviceLock sends this notification when one or more alert settings have been modified. The notification is sent according to the previous alert settings. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the type of the profile, the name of the user, the user's SID, the identifier of the process associated with this event, and the event ID.

 

- "Notify if keylogger is detected" - DeviceLock sends this notification when hardware USB keylogger is detected. The notification will include such information as the type of the event, the name of the computer, the date and time when the event was received, the user's activity type, the name of the USB device detected as a keylogger, the name of the user, the user's SID, and the event ID. The Log event parameter in Anti-keylogger options should be enabled to allow this notification.