Differences
This shows you the differences between the selected revisions of the page.
| 2017-05-03 | 2017-05-03 | ||
| no summary (75.137.147.17) (hidden) (untrusted) | Restored revision 1486717336. Undoing revisions 1493824804, 1493825285. (martin) (hidden) | ||
| Line 2: | Line 2: | ||
| WinSCP allows system administrators to restrict or enforce certain functionality of the application. | WinSCP allows system administrators to restrict or enforce certain functionality of the application. | ||
| - | ==== [[configuring]] Configuring NO Restrictions ===== | + | ===== [[configuring]] Configuring the Restrictions ===== |
| - | System administrator can configure anything. | + | System administrator can configure the following: |
| - | + | * Restrict [[security_credentials|password storing]]. | |
| + | * Restrict [[task_edit|file opening/editing]]. | ||
| + | * Restrict connection to servers without having their [[ssh_verifying_the_host_key|host keys accepted in advance]]. | ||
| + | * Force [[ui_authenticate#authentication_banner|authentication banners]] being shown. | ||
| + | These restrictions are configured via "local machine" registry root key (modifiable only by system administrators). Example of corresponding registry export follows: | ||
| + | <code ini> | ||
| + | [HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2] | ||
| + | "DisableOpenEdit"=dword:00000001 | ||
| + | "DisablePasswordStoring"=dword:00000001 | ||
| + | "DisableAcceptingHostKeys"=dword:00000001 | ||
| + | "ForceBanners"=dword:00000001 | ||
| + | </code> | ||
| + | |||
| + | On 64-bit systems, a physical location of the key is ''HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2'' (as WinSCP is 32-bit application). | ||
| + | |||
| + | ===== [[special_session]] Unmodifiable Site ===== | ||
| + | Administrator can set site setting ''Special'' to 1 to restrict user from modifying or deleting the site accidentally (Note that the setting can be changed by end-user). Such site will also be highlighted in [[ui_login|site list]]. Example how to configure the setting, if INI file is used as [[config|configuration storage]], follows: | ||
| + | |||
| + | <code ini> | ||
| + | [Sessions\Server] | ||
| + | HostName=example.com | ||
| + | UserName=customer | ||
| + | Special=1 | ||
| + | </code> | ||
| ===== Distributing Restricted Version ===== | ===== Distributing Restricted Version ===== | ||
| WinSCP can be [[custom_distribution|distributed]] with the restrictions preconfigured. | WinSCP can be [[custom_distribution|distributed]] with the restrictions preconfigured. | ||