All Client settings that are accessible via Client Diagnostics tool, are stored in WIndows Registry and can be altered individually or via GPO.
Most settings, if not stated otherwise, reside under HKLM\SOFTWARE\Systola\SystoLock\LogonUI key and are of data type DWORD.
For SystoLOCK version prior to 2.10 and if Microsoft Office 2013 or above is installed, the same values should additionally be maintained under the key
HKLM\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY, subkey\MACHINE\Software\Systola\SystoLock\LogonUI.
Use bitwise logical OR to combine different options when they are controlled by a single property.
if you want to mask (hide) the default password credential provider from being available, use DefaultProviderControl property to control the behaviour:
| Hide standard password credential provider | Value |
|---|---|
| In local sessions | 0x001F |
| In RDP-sessions | 0x009F |
| In local sessions on secure screen | 0x1F00 |
| In RDP-sessions on secure screen | 0x9F00 |
if you want to mask (hide) the smart card credential provider from being available, use SmartCardProviderControl property to control the behaviour:
| Hide smartcard credential provider | Value |
|---|---|
| In local sessions | 0x001F |
| In RDP sessions | 0x009F |
| In local sessions on secure screen | 0x1F00 |
| In RDP sessions on secure screen | 0x9F00 |
| In local sessions, unless smartcard is present | 0x005F |
| In RDP sessions, unless smartcard is present | 0x00DF |
| In local sessions on secure screen, unless smartcard is present | 0x5F00 |
| In RDP sessions on secure screen, unless smartcard is present | 0xDF00 |
if you want to mask (hide) SystoLOCK credential provider from being available, use ProviderControl property to control the behaviour:
| Hide SystoLOCK credential provider | Value |
|---|---|
| On local login/unlock screen | 0x0001 |
| On remote login/unlock screen | 0x0002 |
| On local credential prompt | 0x0004 |
| On remote credential prompt | 0x0008 |
| On local secure credential prompt | 0x0010 |
| On remote secure credential prompt | 0x0020 |
| On pre-authentication screen | 0x0040 |
These tweaks take precedence before group memebership settings.
| Task | Property Name | Value |
|---|---|---|
| Disable Fast Login | FastLoginControl | 0x0F |
| Disable Arrows around push notification codes | FastLoginControl | 0x40000000 |
| Use Dingbat (① ② ③ ④ ⑤ ...) for number matching | FastLoginControl | 0x80000000 |
| Offline Login response length | OfflineLoginResponseLength | 6 ... 9 |
| Disable self-provisioning | SelfProvisioningUI | 0x00 |
| Use KSP in CredUI | Settings | 0x10000000 |
| Always run RDP session alive keeper tool | Settings | 0x04000000 |
| Do not select SystoLOCK tile as default (Windows 8.1 and below) | DefaultTileControl | 0x0000 |
| Disable CredUI cancel-shortcut (Ctrl+Shift) | CancelFilterDisabled | 0x0F |