Embedded Lockdown Manager

Embedded Lockdown Manager automatically detects which lockdown features are installed on the device, and displays configuration options for only those features.
Embedded Lockdown Manager uses Windows Management Instrumentation (WMI) providers to detect and change configuration settings, and can export the settings to PowerShell scripts.

You can use Embedded Lockdown Manager to configure the following lockdown features for Windows Embedded 8.1 Industry:

• Windows 8 Application Launcher – Enables a single Windows Store application to start automatically. Can be configured to disable the Start screen.
• USB Filter – Allows only trusted USB devices to connect to system.
• Gesture Filter – Prevents undesirable edge and corner gestures.
• Keyboard Filter - Suppresses unwanted key combinations, such as Ctrl+Alt+Delete; configure Breakout key.
• Dialog Filter - Prevents unwanted pop-up windows and dialog boxes from appearing on the screen.
• Unified Write Filter - Protects physical media from write operations.
• Shell Launcher - Starts an alternate shell instead of the standard Windows shell.

Note: In order to use ELM to configure the Windows 8 Application Launcher, you must first install KB2932074 on the Windows Embedded Industry 8.1 device you want to configure.

Supported Operating Systems

Embedded 8 Industry, Embedded 8 Standard, Windows 7, Windows 8, Windows 8.1, Windows Embedded Industry 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

As an alternative to executing the .MSU files below on the appropriate OS, each file has a corresponding .CAB file that can be downloaded and installed as described in the Install Instructions.

Windows 7 and Windows Server 2008 R2:

• Windows7-KB2932354-x64.msu
• Windows7-KB2932354-x86.msu

Windows 8, Windows Embedded 8 Standard, Windows Embedded 8 Industry and Windows Server 2012:

• Windows8-RT-KB3036200-x86.msu
• Windows8-RT-KB3036200-x64.msu

Windows 8.1, Windows Embedded 8.1 Industry, and Windows Server 2012 R2:

• Windows8.1-KB3038256-x86.msu
• Windows8.1-KB3038256-x64.msu

A) Copy the appropriate .msu file to your system and double-click to install ELM on your system.

OR

B) Install the appropriate .cab file for you system via the command line with administrator privileges: "DISM /online /add-package"

IMPORTANT: This tool can be used to make changes directly to the registry. Make configuration changes at your own risk. Validate your changes in a test environment before deploying to a live environment or production device.

The latest release of Embedded Lockdown Manager (ELM) enables you to install ELM on Windows 8.1 devices. This version also includes the following additional new functionality:

• The ability to configure Windows 8 Application Launcher on Windows Embedded 8.1 Industry devices. (Requires KB2932074)
• The ability to configure Gesture Filter on Windows Embedded 8.1 Industry devices.
• The ability to configure USB Filter on Windows Embedded 8.1 Industry devices.

TROUBLE SHOOTING

Note: Users of Windows 7 or Windows Server 2008 R2 based computers may encounter the following error when launching ELM: “MMC has detected an error in a snap-in and will unload it”.
MMC has known dependency on .Net Framework 3.5.1 for the above operating systems. Make sure to install .NET Framework 3.5.1 using the following steps:

On a Windows 7-based computer

1. Click on Start button and then click Control Panel
2. Select Programs
3. Under Programs and Features, select Turn Windows features on or off
4. Select the check box next to the Microsoft .NET Framework 3.5.1.
5. Click on OK.

On a Windows Server 2008 R2-based computer

1. Open Server Manager.
2. Right click Features and select Add Features
3. Expand .Net Framework 3.5.1 Features
4. Select the check box next to the .NET Framework 3.5.1
5. Click on Install.