The Grr! Control Panel Applet Grr! is controlled by its Control Panel applet. The applet lets you set the options appropriate for your machine. When you install Grr! on a Windows NT4/2K/XP/2003/XP or higher system, you will have two Control Panel applets; the main Grr! program which controls how Grr! operates on the local machine, and the Grr! Server applet, which lets you configure the machine as a Grr! control server that provides settings for other machines running Grr! (See the Managing Grr! on Multiple Machines page for information on using the Grr! Server). Unless you're a network administrator, you will only need to use the main Grr! applet. You do not need to reboot or stop and restart the service after making changes; the service will automatically recognize and start using the new settings immediately. Basic Settings Grr! Control Panel Applet Automatically reject changes if no one logged on If checked, Grr! will automatically reject any changes made to the watched areas of your registry or startup directories when no one is logged onto your machine. If this box is not checked, Grr! will automatically allow any changes made when no one is logged on. Play growl sound when warning box pops up If checked, Grr! will play a growling sound when activated. This option will be grayed out if you don't have a sound card installed on your machine. Record event details in log file (grr.log) If this box is checked, Grr! will record complete details for each change it notices, including whether or not the change was accepted. The log file will be called grr.log and located in your system directory (by default c:\windows\system on Win95/Win98, or c:\winnt\system32 on Windows NT4/2K/XP/2003/XP). Advanced Settings The Advanced button takes you to a secondary dialog where you can set advanced options. Control Panel Applet Advanced Settings General Options Enable Splash Screen Uncheck this box if you don't want to see the Grr! splash screen when you log onto your machine. (The evaluation version does not let you uncheck this box.) Relaxed polling for older Win95 machines This option will be grayed out if you aren't running Grr! on Windows 95. Win95 does not support alertable registry or directory watches, so Grr! must poll periodically for changes. Usually this polling does not interfere with normal system operation, but on older machines with very slow hard drives or processors, you may want to check this box to reduce system impact. Allow suspend during defrag and scandisk (Win95/Win98 only) If this box is checked, Grr! will automatically suspend operations as needed to allow Microsoft's Defrag and Scandisk, plus Norton's SpeedDisk and Disk Doctor, to work without restarting themselves. Grr! continues monitoring the system while suspended, and resumes protection automatically when these low-level disk programs release the hard disk. Debug statistics log file enabled Check this box and specify a filename if you want the program to generate debug and statistical information. The filename you specify must end in .txt. If it does not exist, Grr! will create it. Thereafter, Grr! will append to the file each time it generates its report. The report is generated at startup, shutdown, and every logoff/logon. You don't need to enable this section unless you are curious about what Grr! is monitoring, or if you are directed to turn it on by tech support to assist in debugging. You may select either long or short format for the log file. Long format includes statistical information and debugging details. Short format only includes the statistical information. Email copies of alert information... Grr! can send SMTP email alerts to anyone you'd like when an alert event occurs. The box will be grayed out until you have filled out the SMTP host and the proper FROM and TO addresses in the Email Setup dialog described below. To enable email alerts, click the Email Setup button on the Advanced Settings page and fill in the requested information. The SMTP host should be the name or IP address of the SMTP server to which you have access. FROM address should be a valid SMTP address - the email alert will appear to have come from this address. The TO address should be a valid SMTP address - this is the address of the recipient of the alert. Email address names may be either plain or decorated. A plain name is one like person@place.com. A decorated name is one like "Tech Support" <techsupport@yourdomain.com>. The quotation marks are required if the decorated portion of the name contains space characters. Email Settings Screen You also have the option of selecting whether Grr! will send email immediately, or wait until it detects that you have a Dial-up Networking connection. Send email at any time Select this button if your machine is always connected to the LAN. Send email only when Dial-up connection detected Select this button if you are using a modem or other occasionally-connected to the network methods such as a VPN connection. Grr! will then send copies of alert information to the designated recipient. Extra Definitions... Clicking this button will bring up the Extra Files, Directories and Associations screen. This screen allows you to expand the areas that Grr! monitors to cover new areas of threat or add custom items of your own you wish to protect. Extra Files, Directories and Associations screen Extra Files List any extra files you want Grr! to watch for you. Grr! monitors changes to the entire file. Monitored files must consist of textual data (not binary) and less than 64K in size. Extra Directories List any extra directories you want Grr! to watch for you. Grr! only monitors additions to directories, not deletions or changes. Extra Associations List any extra file associations you want Grr! to watch for you. Include the leading period (example: .cpp or .wri) for each entry you make. Client Options Use Network Settings If this box is checked and you specify the name of an Windows NT4/2K/XP/2003/XP machine on your network running Grr! Server in the Network Server box, then your machine will take its settings from that server. This lets the network administrator set up (or change) the settings for everyone at once. Settings derived from the network server may either override or work along with your own settings, depending on how the network administrator has configured the server. In order to select an Windows NT4/2K/XP/2003/XP machine as your network server, the Grr! Server portion must already be installed on the Windows NT4/2K/XP/2003/XP machine, and you must have appropriate network permissions to access it. See the Managing Grr! on Multiple Machines section for information on using the Grr! Server. Temporarily Disabling Grr! It may be desirable to disable Grr! temporarily when installing new programs so that you are not interrupted by Grr! pop-up warnings. To do this, click the Disable button on the first security alert that pops up. Grr! will remain disabled until you re-enable it using the Control Panel applet, or until a system reboot. For security reasons, Grr! cannot be disabled until the first alert is made, and the disabling of the service is logged in the log file. Also, you can set Grr! to automatically suspend during certain system operations on Win95/98/ME. See the Advanced Settings section above for details. Re-enabling Grr! Click the Reenable Service button on the Control Panel Applet to re-enable Grr! The Reenable Service button will only be visible if you have previously disabled the service by clicking the Disable from a security alert pops up. The service reenables instantly when you click the Reenable button on the Control Panel applet,and also automatically reenables itself if you log off or reboot.