Codenica logo
     IT Audit and Inventory Software
CODENICA - 11 YEARS
 
User Guide
main user guide menu »
Chapter : Agents
( Codenica Audit )

 
Agent - requirements
 

Requirements for the Agent and Agent Server

• .NET Framework 4.0
• Windows Vista / 7 / 8 (32 / 64 bit)
• Service started: Secondary logon
• Local Administrator account enabled and active

Additionally for Agent only

• Standard user account (no Administrator rights)

TCP and UDP ports used
(may require Firewall access)

• AGENT: TCP:57771, UDP:57772
• AGENT SERVICE: TCP:57777, UDP:57778
• AGENT SERVER: TCP:57773, UDP:57774
• CONSOLE (CODENICA AUDIT): TCP:57775, UDP:57776

 
 
Agent - modules
 

The mechanism of the installed Agents consists of three independent modules:

Agent - module installed on the end workstation
Console - Codenica Audit integrated within the application
Agent Server - a small software package installed on any computer

Agent Server (PCAgentServer.exe) is a small independent software package which resolves communication between the Console and the Agent. It does not require any database system.

The Agent Module consists of three main modules:

• Windows Service Module - PCAgentService.exe
• The executable program (with Administrator rights) - PCAgent.exe
• The executable program (with logged in User rights)   - PCAgentUC.exe

 
 
Agent - installation
 

Agent and Agent Server installation is described and shown (application screens) step-by-step in a specially prepared Tutorial.

Go to the Agent Installation Tutorial page »

 
 
Agent - settings
 

Agent configuration is performed via the software Settings window:
Menu > File > Settings

Program settings are described in detail in a separate chapter: Settings »

The topics are provided below, along with links to relevant sections in this chapter.

• Agent > General »
• Agent > Installation »
• Agent > Schedule »
• Agent > Applications blocked »
• Agent > Tracking: Processes »
• Agent > Tracking: Internet »
• Agent > Tracking: USB Drive »
• Agent > Tracking: Printing »
• Agent > Tracking: Hardware (WMI) »
• Agent > Tracking: Installations (Registry) »

 
 
Tracking: User
 

Events recorded by the Agent running on the employee's computer:

• Turning computer on and off
• All windows opened by user
  (applications, folders, files, websites, etc.)
• Active operation time for each window opened:
  − Number of keys pressed
  − Number of separate clicks of the left and right mouse buttons
  − Focus and idle time
• Using the Internet with blocking of selected websites (HTTP only)
• Opening applications with blocking of selected programs
• Printing
• Access to USB disks (Pendrive) used by the employee:
  − Option to assign full access to USB disks
  − Option to assign a read-only access to USB disks
  − Option to disable access rights to USB disks
      (USB disks will not be visible in the system)

Agent configuration is performed in the Settings window:
Menu > File > Settings

Note:

Codenica Audit is a tool designed to track computer operations. Analysis of tracking data enables greater work productivity.

Codenica Audit is NOT an employee surveillance tool and complies with the following principles:

• Content entered by a User is not recorded by any media or method
   (only the key strokes and mouse clicks are counted)
• Internet HTTPS protocol pages are not tracked

 
 
Tracking: Windows
 

Tracking the open windows (tracking Window Captions) generates the highest number of logs by its very nature, therefore the default maintenance time (after which logs are deleted as obsolete) is 7 days.

Maintenance time may be customized in Settings:
• Agent > General »

Log tracking of the opened Window Captions may be disabled in Settings :
• Agent > Tracking : Processes »

Logs collected when tracking opened windows may be viewed using:
Main menu > Agent > Tracking: Opened windows

Tracking logs are divided into stages:

• Tracking Daily
• Tracking Weekly
• Tracking Monthly

The further division is as follows:

• Tracking User
• Tracking Location
• Tracking Department
• Tracking Section
• Tracking Room number

 
 
Tracking: Applications
 

Software tracking process consists of three independent stages:

1) Tracking application activity

Tracking application activity involves collecting information on each application startup, full operation time, focus time, activity time and idle time. Other information on the tracked application is recorded as well, such as:

• File name
• Process name
• Manufacturer's name
• Product name
• Product version
• Number of application start-ups
• Total number of mouse button clicks
• Total number of key strokes
• Total number of application open windows

An important aspect when tracking software is setting the interval for measuring an employee's idle time. During this interval the employee is assumed to still be active on the computer even though s/he does not press any key on the keyboard or move the mouse - s/he may be reading information on the screen or analyzing it. The default time is 60 seconds. This setting controls the Activity time and the Idle time as viewed in logs.

All parameters of Tracking software activity may be customized in Settings:
• Agent > Tracking : Processes »


2) Tracking blocked applications

Codenica Audit allows the creation of a so-called "Application blacklist", i.e. a list of applications whose startup should be blocked. To create the Application blacklist, use the Applications blocked tab in Settings:
• Agent > Applications blocked »

3) Tracking application installation/uninstallation

The last group in the tracking software mechanism is tracking software installation/uninstallation. This process is based on listening to changes in the Windows Registry events

To customize this mechanism’s options, use the
Tracking tab: Installations (Registry) in Settings:
• Agent > Tracking: Installations (Registry) »

Maintenance time may be customized in Settings:
• Agent > General »

All logs collected during software tracking may be viewed using:
Main menu > Agent > Tracking: Software

Tracking logs are first divided into the three groups described above and next into:

• Tracking Daily
• Tracking Weekly
• Tracking Monthly

The further division is as follows:

• Tracking User
• Tracking Location
• Tracking Department
• Tracking Section
• Tracking Room number

 
 
Tracking: Internet
 

Internet tracking is based on a proxy mechanism which handles queries. Only the HTTP protocol is tracked; therefore an employee accessing HTTPS sites (e.g. banks) is not tracked. Internet tracking is independent of the browser and collects information such as the following:

• Domain
• URL
• Activity time
• Focus time
• Total time
• Idle time
• Total number of mouse button clicks
• Total number of key strokes
• Total number of visits
• Total number of references
• Detailed browser data (file, process, product, version, etc.).

Note:

Codenica Audit is a tool designed to track computer operations. Analysis of tracking data enables greater work productivity.

Codenica Audit is NOT an employee surveillance tool and complies with the following principles:

• Content entered by a User is not recorded by any media or method
   (only the key strokes and mouse clicks are counted)
• Internet HTTPS protocol pages are not tracked

 

Internet tracking mechanism also supports website and domain blocking. This blocking is based on the configuration of relevant filters that prevent user access to a specific page or an entire domain.
To configure the blocked domains or websites, use the
Sites blocked tab in Settings:
• Agent > Tracking : Internet »

Internet tracking logs are first divided into three main groups:

Domains visited
Addresses visited
Addresses blocked

Then into:

• Tracking Daily
• Tracking Weekly
• Tracking Monthly

The further division is as follows:

• Tracking User
• Tracking Location
• Tracking Department
• Tracking Section
• Tracking Room number

To customize or disable Internet tracking, use the Settings:
• Agent > Tracking : Internet »

 
 
Tracking: Hardware
 

An agent installed on the user's computer performs a quick scan at each startup and compares the result to the last scan. With this mechanism, the Agent can regularly detect the computer hardware changes and create logs recording new or missing hardware. Hardware tracking is based on selected WMI classes for hardware and may be customized inSettings:
• Agent > Tracking : Hardware (WMI) »

Tracking logs are divided into stages:

• Tracking Daily
• Tracking Weekly
• Tracking Monthly

The further division is as follows:

• Tracking User
• Tracking Location
• Tracking Department
• Tracking Section
• Tracking Room number

 
 
Tracking: Printing
 

The tracking of printed output is based on the tracking of print queues and collection of the necessary information for each print copy made ​​by the user.

The logs include information such as the following:

• Document name
• Printer name
• Print color
• Number of copies
• Print quality
• Duplex/Simplex
• Paper format
• Paper orientation
• Number of printed pages
• Number of bytes of print

Tracking logs are divided into stages:

• Tracking Daily
• Tracking Weekly
• Tracking Monthly

The further division is as follows:

• Tracking User
• Tracking Location
• Tracking Department
• Tracking Section
• Tracking Room number

To customize or disable tracking printing, use Settings:
• Agent > Tracking: Printing »

 
 
Tracking: using USB drive
 

Installing Agents track each USB drive inserted by the user. The Agent also controls access to USB drives in the following modes:

• Access to USB drives in read-only mode
Full access to USB drives (possibility to save company data)
No access rights to USB drives (USB drives will not be visible in the system)

Tracking logs are divided into stages:

• Tracking Daily
• Tracking Weekly
• Tracking Monthly

The further division is as follows:

• Tracking User
• Tracking Location
• Tracking Department
• Tracking Section
• Tracking Room number

To customize or disable tracking of use of USB drives, use Settings:
• Agent > Tracking : USB Drive »

 
 
Help Desk - Send message
 
Help Desk - Send message
 

The Wizard allows information to be sent (MessageBox format) to the employee's computer on which the Agent is running. Three types of MessageBox are available:

• Information
• Question
• Warning

Information can include any character string. The Wizard allows user feedback to be obtained by pressing an appropriate key. Use the Add icon button to select one or more hosts which are to receive information. The answer (information received) will display in the Status field.

 
 
Help Desk - Preview screens (online)
 
Help Desk - Preview screens
 

The preview screen window allows you to select any number of computers (Hosts) whose activity you want to track on an ongoing basis. Select the computer in the comboBox Host, and click the Add button. The Overview screen displays all the screens of the selected hosts simultaneously; to focus on a single computer, select the tab with its HostName or double click on the picture of its screen. The preview screen mechanism allows you to select the resolution of the screens sent (the highest is 640 x 480) including their refresh frequency (maximum 1 second). You can also enable the cursor capture and options to fit the image to the control. The preview screen mechanism allows you to track employees’ activities on their computers, but not to influence these activities.

 
 
Help Desk - Remote desktop (RDP)
 
Help Desk - Remote desktop (RDP)
 

Codenica Audit provides support for Windows-based remote desktop (RDP) within its own window. All the functionality and capabilities of this solution are dependent on the Windows drivers version.

 
 
Help Desk - Remote console
 
Help Desk - Send message
 

The Wizard allows you to run a remote host console (CMD) in a separate system-defined window. Simply select the host, complete the authorization data (or retrieve it from the authorized Agent or DCOM), and press the Start remote console (CMD) button.

 
 
Help Desk - Remote - files
 
Help Desk - Remote file management
 

The remote file management window allows you to select a host and manage its files in a form similar to the file managers. You can create, delete, download and upload files to a remote computer. However, this solution’s functionality is limited for reasons of performance.

 
 
Help Desk - Remote - registry
 
Help Desk - Remote registry management
 

The Windows Remote Registry Window allows you to select the host and remotely manage its registry operation in a form similar to REGEDIT. You can create, edit and delete nodes and registry values ​​on the remote computer.

 
 
Help Desk - Remote - processes
 
Help Desk - Remote process management
 

The Remote Process Management Wizard allows you to remotely control processes running on the selected computer. Simply select the host, and the Wizard retrieves the processes which you can view and close when closing the main window (close MainWindow) or unconditionally interrupt (kill).

 
 
Help Desk - Remote - Services
 
Help Desk - Remote services management
 

The Remote Services Management Wizard allows remote management (services) to run on a selected computer. Simply select the host, and the Wizard retrieves its services which you can view, start, pause or stop. The Wizard also allows you to change the default startup method for the specified service.

 
 
Help Desk - Remote - other
 
Help Desk - Remote operations
 

The Wizard incorporates other functions that can be performed remotely. These currently include:

Perform remotely - a function allowing remote execution of any file (or CMD command) on the selected computer.

Lock host screen, Logout user, Shutdown host, Restart host - functionality supporting basic remote operations.

Start the host (Wake On Lan) - this function requires correctly completed fields in the properties of the selected host:
WOL - MAC Address
WOL - Port Address