                            Syslock 95 V3.0
			     By Scott Huhn

-------------------------------------------------------------------------------

BRIEF OVERVIEW

-------------------------------------------------------------------------------

This program is a system lockout designed to keep customers from, in any
way, damaging demo computers.  It disables all destructive DOS commands
from Windows 95, locks the autoexec.bat, config.sys and all windows .ini
files, removes the 'run' and 'save settings on exit' commands from the
Explorer shell, the Explorer, several potentially dangerous Control Panel
applets, the DOS prompt, Taskbar settings and all direct access to the disk
drives.  In addition, Syslock 95 makes backup copies of all the major files
that are changed during the installation.

Syslock also disables several icons from the desktop:  The Recycle Bin,
Microsoft Network, and The Internet.  The removal of the recycle bin
disables the ability to 'drag-and-drop' delete, but still allows the
you to delete unsightly shortcut icons that customers make by pressing
the delete button on the keyboard.  The removal of the MSN and Internet
icons, prevents customers from starting these programs' respective setup
processes. If the MSN or Internet setups are run while a system is locked,
Registry errors will occur upon booting.

Because of the possibility of file damage caused by not properly shutting
down Windows 95, the "Shut Down" function has not been removed (and should
be used).  If each machine is not properly shut down each night, file
damage will eventually occur as will excesive drive fragmentation.

-------------------------------------------------------------------------------

NEW FEATURES

-------------------------------------------------------------------------------

There have been some major changes to Syslock since V2.0.  First, it is no
longer machine specific, it will work on all of Best Buy's systems INCLUDING
LAPTOPS!

Secondly, it works much differently as compared to the past versions.  I have
been studying the Windows 95 registry for the past 6 months and found some
new ways to perform the desired tasks.  This means that any systems already
locked with V2.0 or before MUST be unlocked with the original disk and then
relocked with V3.0.

You will now notice that when you attempt to use the lockout (for install and
uninstall), you must enter a password.  This is designed to keep anyone
from using the disk should one be stolen, as a prod here (Mark!) already 
allowed to happen.  The password will be posted in the PCTECH-TIPS along with
the with the decompression password for the zip from the FTP site.

Next, you will notice that none of the desktop icons are removed anymore,
they are instead disabled.  This will better customers a better idea of what
the Windows 95 desktop is supposed to look like.

Again, in this version the Packard Bell Navigator can be removed from startup
(to prevent passwording), but now the shortcut to the Explorer in the Acer
Ace Tools page has also been removed.

And of course lastly, you will see a nifty little dialog box pop onto the
screen at bootup telling you that the machine is locked out.  This will allow
you to easily tell whether or not a system is locked.

-------------------------------------------------------------------------------

INSTALLATION

-------------------------------------------------------------------------------

First, if you are going to install Syslock95 V3.0 on a system locked with an
older version, you MUST unlock it with the appropriate disk before attempting
to lock the system with V3.0.  NOTE: In order to fully unlock the system, you
must let it boot into windows once before trying to relock it.

Before you lock a machine it is a good idea to fully reinstall all of the
software off of CD.  This ensures that the lockout works properly (it
searches for specific files and directories) and it makes for a better
looking and functioning demo system.  Also, choose your background and/or 
screen saver before you lock the system, once it is locked you can't change 
it.

In addition, delete any accumulated shortcuts from the desktop and from in
the taskbar, especially shortcuts to the Recycle Bin, Microsoft Network and
The Internet.  If these shortcuts are not deleted, these functions can still
be accessed, thereby underminding part of the lockout.

To lock or unlock a machine, simply boot off of the lockout disk, enter the
password, and follow the on screen instructions.  The program will do most of
the work by itself, with the exception of the Packard Bells, where you will
be prompted whether or not the load the Navigator on startup.

-------------------------------------------------------------------------------

IMPORTANT NOTICES:

-------------------------------------------------------------------------------

1.  Make backup copies of this disk, for the simple reason that if this disk
    is damaged, it takes at least an hour to unlock each system manually.

2.  If you run a virus scanner of this disk, it will show a virus in the file
    EXPNDLOK.COM.  Here are what some scanners will find:

        Norton Antivirus 95:   PC-MPC (Gen1) virus
        F-Prot 2.22:           Encrypted with the program CRYPTCOM
	McAfee Virus Scan 95:  Abraxas5 virus
        PC-cillin 95:          (c)Brain or Dropper7

    This is normal, it is caused by a program used to encrypt the
    expndlok.com file.  There is not a virus in this file, it is a false
    alarm.  If this file is cleaned it will be destroyed, thereby destroying
    your lockout disk.  DO NOT CLEAN THIS FILE!

3.  It has been found that the C: drive can initially be accessed through
    the notepad, wordpad, or write.  If one attempts to change drives or go
    back to the previous folder, all of the drives disappear from the window
    blocking any further access.  This may seem hazardous, but in actuality
    the a customer can't do any damage because all of the vital system files
    (.ini, config.sys, autoexec.bat, etc.) are all read-only.  Therefore, a
    customer could view but not modify them.

4.  Do not attempt to unzip any of the zip files on the disk, the program
    unzips them as needed.

5.  This version of Syslock covers all of Best Buys models including laptops.

6.  As stated before, USE THE PROPER SHUTDOWN PROCEDURE EVERY NIGHT!  This
    will save you from wasting alot of time restoring systems later on.

-------------------------------------------------------------------------------

KNOWN REMAINING BUGS

-------------------------------------------------------------------------------

These are the remaining known bugs in the lockout.  Also known as the bugs
Microsoft can't give me a straight answer to.  The reason I decided to release 
this version with these remaining bugs, is that I felt it was better to have a
mostly working lockout on our systems than none at all.  I am continually 
searching for their fixes, if you have an idea drop me a line.

1.  The ability to create new shortcuts (eg. to the C: drive) using the
    context menus.

2.  The ability to delete/move/copy from within an open dialog box.

3.  The ability to access the Explorer using the "WIN+E" hot keys on a
    MS Natural keyboard.

4.  The abliity to copy/delete/move/rename using the context menus.

5.  When the install/uninstall is finnished you will see the error "BATCH
    FILE NO FOUND", don't worry about this.  The program to delete all of 
    the install/unistall is on the floppy while the program that calls it
    is on the harddrive.  In the process of deleting the files the calling 
    file is also deleted, therefore the directory deleting program has 
    nowhere to return to, hence the error.
-------------------------------------------------------------------------------

FILES

-------------------------------------------------------------------------------

These are the files that should be on this disk.

AUTOEXEC.BAT
CONFIG.SYS
DELDIR.BAT
END.BAT
INIT.BAT
PKUNZIP.EXE
README.TXT
START.ZIP
SYSTEM.ZIP


-------------------------------------------------------------------------------

FINAL NOTES

-------------------------------------------------------------------------------

Please note any bugs found or any additional features you feel would be
advantageous and contact me any of the ways listed below.

                           shuhn@d.umn.edu

or via snail-mail or phone at:

                           Best Buy Co., Inc 
                           5105 Burning Tree Road
                           Duluth, MN 55811
                           (218) 722-8767 ext. 2111

and of course for all you Best Buy employees with TAO access:

                           PCTECH-TIPS

or

                           PCTECHD043

-------------------------------------------------------------------------------

Copyright 1996, Best Buy Company, PC Services

Unauthorized use and/or modification is strictly prohibited!

