Xcitium Enterprise

• Introduction To Comodo Client Security
  • Special Features
  • System Requirements
  • Install Comodo Client Security
  • Start Comodo Client Security
  • The Main Interface
    • The Home Screen
    • The Tasks Interface
    • The Widget
    • The System Tray Icon
  • Understand Security Alerts
  • Password Protection
• General Tasks - Introduction
  • Scan And Clean Your Computer
    • Run A Quick Scan
    • Run A Full Computer Scan
    • Run A Rating Scan
    • Run A Custom Scan
      • Scan A Folder
      • Scan A File
      • Create, Schedule And Run A Custom Scan
    • Automatically Scan Unrecognized And Quarantined Files
  • Instantly Scan Files And Folders
  • Process Infected Files
  • Manage Virus Database Updates
  • Manage Blocked Autoruns
  • Manage Quarantined Items
• Firewall Tasks - Introduction
  • Configure Internet Access Rights For Applications
  • Stealth Your Computer Ports
  • Manage Network Connections
  • Stop All Network Activities
  • View Active Internet Connections
• Containment Tasks - Introduction
  • Run An Application In The Container
  • Reset The Container
  • Identify And Kill Unsafe Running Processes
  • Open Shared Space
  • The Virtual Desktop
    • Start The Virtual Desktop
    • The Main Interface
    • Run Browsers Inside The Virtual Desktop
    • Open Files And Run Applications Inside The Virtual Desktop
    • Pause And Resume The Virtual Desktop
    • Close The Virtual Desktop
  • Containment Statistics Analyzer
• DLP Tasks - Introduction
• Advanced Tasks - Introduction
  • Create A Rescue Disk
    • Download And Burn Comodo Rescue Disk
  • Remove Deeply Hidden Malware
  • Manage CCS Tasks
  • View CCS Logs
    • Antivirus Logs
    • VirusScope Logs
    • Firewall Logs
    • HIPS Logs
    • Containment Logs
    • Website Filtering Logs
    • Device Control Logs
    • Autorun Event Logs
    • Alert Logs
    • CCS Tasks Logs
    • File List Changes Logs
    • Vendor List Changes Logs
    • Configuration Changes Logs
    • Virtual Desktop Event Logs
    • Data Loss Prevention Event Logs
    • Search And Filter Logs
  • Submit Files For Analysis To Comodo
  • View Active Process List
• CCS Advanced Settings
  • General Settings
    • Customize User Interface
    • Configure Virus Database Updates
    • Log Settings
    • Manage CCS Configurations
      • Comodo Preset Configurations
      • Personal Configurations
    • Manage Performance
  • Antivirus Configuration
    • Real-time Scanner Settings
    • Scan Profiles
  • Firewall Configuration
    • General Firewall Settings
    • Application Rules
    • Global Rules
    • Firewall Rule Sets
    • Network Zones
      • Network Zones
      • Blocked Zones
    • Port Sets
  • HIPS Configuration
    • HIPS Settings
    • Active HIPS Rules
    • HIPS Rule Sets
    • HIPS Groups
      • Registry Groups
      • COM Groups
  • Protected Objects
    • Protected Objects - HIPS
      • Protected Files
      • Blocked Files
      • Protected Registry Keys
      • Protected COM Interfaces
    • Protected Objects - Containment
      • Protected Files And Folders
      • Protected Keys
  • Data Loss Prevention
  • Containment Settings
    • Containment Settings
    • Auto-Containment Rules
    • Virtual Desktop Settings
    • Containment - An Overview
    • Unknown Files - The Scanning Processes
  • File Rating Configuration
    • File Rating Settings
    • File Groups
    • File List
    • Submitted Files
    • Vendor List
  • Advanced Protection
    • VirusScope Settings
    • Scan Exclusions
    • Device Control Settings
    • Script Analysis Settings
    • Miscellaneous Settings
  • Web Filter Settings
    • Website Filtering Rules
    • Website Categories
• Appendix 1 - CCS How To... Tutorials
  • Enable / Disable AV, Firewall, Auto-Containment And VirusScope Easily
  • Set Up The Firewall For Maximum Security And Usability
  • Block Internet Access While Allowing Local Area Network (LAN) Access
  • Block / Allow Specific Websites To Specific Users
  • Set Up HIPS For Maximum Security And Usability
  • Create Rules To Auto-Contain Applications
  • Run An Instant Antivirus Scan On Selected Items
  • Create An Antivirus Scan Schedule
  • Run Untrusted Programs Inside The Container
  • Run Browsers Inside The Container
  • Restore Incorrectly Quarantined Items
  • Submit Quarantined Items To Comodo Valkyrie For Analysis
  • Enable File Sharing Applications Like BitTorrent And Emule
  • Block Any Downloads Of A Specific File Type
  • Disable Auto-Containment On A Per-application Basis
  • Switch Off Automatic Antivirus Updates
  • Suppress CCS Alerts Temporarily
  • Control External Device Accessibility
• Appendix 2 - Comodo Secure DNS Service
  • Router - Manually Enable Or Disable Comodo Secure DNS
  • Windows - Enable Comodo Secure DNS
• About Xcitium

Virtual Desktop Settings

• Click 'Settings' > 'Containment' > 'Virtual Desktop'

• Virtual desktop settings let you set password protection, automatic login for specific users, and more.

• You can also configure desktop and start-menu shortcuts which will launch applications in the virtual desktop

Configure virtual desktop settings

• Click 'Settings' on the CCS home screen

• Click 'Containment' > 'Virtual Desktop'

The interface allows you to:

• Set an exit password for virtual desktop

• Configure 'Disclaimer' shown during startup of virtual desktop

• Secure virtual desktop sessions with a PIN

• Set time-out period for paused virtual desktop sessions

• Add applications to virtual desktop

• Set virtual desktop to start automatically when selected users / users in selected user group log-in

• Request password when exiting Virtual Desktop - Create an 'exit' password for the virtual desktop. Users need to enter the password in order to close the virtual desktop.

This prevent users from closing the virtual desktop and accessing the host, potentially exposing the computer to danger. (Default = Disabled)

• Click 'Settings' > 'Containment' > 'Virtual Desktop'

• Enable 'Request password when exiting Virtual Desktop'

• Click the 'Create/Change password' link:

 

• Type a password that cannot easily be guessed.
  

• It should be 8-16 characters long and contain a mix of upper case letters, lower case letters, numbers, and special characters.

• Confirm the password then click 'OK'.

• The validity of the password is 90 days. You need to reset the password when it expires.

• Show disclaimer upon Virtual Desktop startup - Create a disclaimer which is shown when the virtual desktop starts. Users must accept the disclaimer before they can access the virtual desktop. Default = Enabled.

Create Virtual Desktop disclaimer

• Click 'Settings' > 'Containment' > 'Virtual Desktop'

• Enable 'Show disclaimer upon Virtual Desktop startup'

• Click the 'Edit Disclaimer' link:

• Enter the disclaimer message and click 'Save'

• The message is shown when the virtual desktop starts

• Users should read the disclaimer and click 'Accept':

• Protect paused Virtual Desktop session with a PIN - Generates a session specific PIN number during virtual desktop startup. The PIN is required to resume the session from a paused state. This creates a second layer of authentication on top of the regular Windows username/password for any sensitive data in the virtual desktop. The feature is also useful on shared computers as it prevents other users from accessing the session. (Default = Disabled)

• Select this option if you want to secure virtual desktop sessions with a PIN

• Click 'Show PIN' in the start menu to view the number at any time

• The user needs to make a note of the PIN. If they pause the virtual desktop session they will need to enter the PIN to resume.

• See Pause and Resume the Virtual Desktop for more details on pausing and resuming a virtual desktop session

• Duration of paused Virtual Desktop session before its automatic termination - Set the maximum length of time a virtual desktop session can be left in paused state. The session gets automatically terminated when this period elapses. (Default = Disabled)

Add applications to virtual desktop

• The virtual desktop start menu has shortcuts for Windows explorer and your installed browsers.

• You can also add shortcuts in the virtual desktop for any other application.

• Alternatively, you can open any application inside the virtual desktop by navigating to the executable file.

• This section explains how to add and shortcuts for applications that you want to run inside the virtual desktop.

Add application shortcuts and start menu items to virtual desktop

• Click 'Settings' on the CCS home screen

• Click 'Containment' > 'Virtual Desktop'

• Click 'Add' under 'Applications' in the 'Virtual Desktop' settings interface

• Application - Navigate to the location of the executable file for the application and select 'Open'

• Running Processes - Select the process from the list of currently running processes, whose parent application is to be added click 'OK'
  

The applications will be added to the list:

• Use the 'Desktop' and 'Start Menu' switches to enable/disable each type of shortcut per application

• Click 'OK' to save your settings

• Click OK in the 'Advanced Settings' dialog for your changes to take effect.

Add users who should log straight into the virtual desktop

• You can configure the virtual desktop to start automatically whenever certain users login to the system

• This means the virtual desktop becomes the default operating environment for those users
  

 

Add users

• Click 'Settings' on the CCS home screen

• Click 'Containment' > 'Virtual Desktop'

• Select the 'Users' tab

• Click 'Add'

 

• Select the users or user groups to whom you want this rule to apply.

• Type the names of the users or user groups to be added. Use the format [domain name][user/group name] or [user/group name]@[domain name].

• Alternatively, click 'Advanced' then 'Find Now' to locate specific users/user groups.

• Click 'OK' to confirm.

• Repeat the process to add more users

• Click 'OK' to save your settings

• Click OK in the 'Advanced Settings' dialog for your changes to take effect

The virtual desktop starts automatically when the user signs-in to the computer.

• The user can decide whether to continue with the virtual desktop or switch to the host OS

• If so configured, users will need to provide a password to close the virtual desktop.