Windows Client Installation Package Parameters

The Windows Client installation package consists of two parts:

The signed SytecaClient.exe installation file.
IN SAAS ONLY: SytecaClient.msi is used instead of SytecaClient.exe.
A SytecaClient.ini text configuration file containing the Application Server address the Client connects to, along with the rest of the Client configuration.

This page lists the parameters available in that .ini file. Unless noted otherwise, an invalid or missing value falls back to its default.

Server name / IP address

Parameter	Description	Default
`RemoteHost`	Application Server hostname or IP address. Accepts multiple values, separated by commas or semicolons. Must be a static address — use a unique external IP for cloud-based Application Servers.	(none)
`RemotePort`	The port Clients use to connect to the Application Server.	`9447`

User activity recording frequency

Parameter	Description	Default
`EnableActivity`	Record activity and screen captures when the active window changes (`1`/`0`).	Enabled
`EnableWndNmChanges`	Record activity and screen captures when the window name changes (`1`/`0`).	Enabled
`EnableKBandMouse`	Record activity and screen captures on click or key press (`1`/`0`).	Enabled
`EnableTimer`	Record activity and screen captures at a fixed time interval (`1`/`0`).	Disabled
`Timer`	Interval in seconds for `EnableTimer`. Minimum 30 seconds. Required if `EnableTimer` is set.	`30`

Screen capture settings

Parameter	Description	Default
`EnableScreenshotCreation`	Record screen captures alongside activity (`1`/`0`).	Enabled
`EnableCaptureActiveWindowOnly`	Limit screen captures and metadata to the active window only (`1`/`0`).	Disabled
`ColorDepth`	Screen capture color depth: `7` (4-bit grayscale), `8` (8-bit), `16` (24-bit).	`7`

Monitoring parameters

Parameter	Description	Default
`EnableClipboardMon`	Log copy/paste operations (`1`/`0`).	Enabled
`EnableSystemIdleDetect`	Detect system idle events (`1`/`0`).	Enabled
`EnableIdleForceTimeout`	Register an idle event after a fixed inactivity period (`1`/`0`).	Enabled
`IdleForceTimeout`	Inactivity period in minutes before the forced idle event. Minimum 5 minutes.	`15`
`EnableSwiftUsernameMonitoring`	Log usernames used to log in to the SWIFT network (`1`/`0`). Requires `EnableScreenshotCreation=1`.	Disabled

Keystroke monitoring parameters

Parameter	Description	Default
`EnableKeystrokes`	Log keystrokes (`1`/`0`).	Enabled
`StartSessionOnKeyword`	Start monitoring only after a keyword is typed (`1`/`0`).	Disabled
`Keywords`	Comma-separated keywords that trigger monitoring (for example `drugs,medicine`). Combined with OR logic; matching uses a `LIKE`-style operator (`drug` also matches `drugstore`).	Empty
`KeystrokeFiltering`	`disabled` monitors all applications; `include` monitors only apps listed in `KeystrokeFilteringAppNames`/`KeystrokeFilteringAppTitles`; `exclude` monitors all apps except those listed.	Disabled
`KeystrokeFilteringAppNames`	Comma-separated application names (for example `word.exe,excel.exe`). OR logic, `LIKE`-style matching (`word.exe` also matches `winword.exe`).	Empty
`KeystrokeFilteringAppTitles`	Comma-separated activity titles (for example `Facebook,Google`). OR logic, `LIKE`-style matching.	Empty

Log files

Parameter	Description	Default
`MonLogging`	Create monitoring logs on the Client computer (`1`/`0`).	Disabled
`LogPath`	Path for monitoring log files. Environment variables like `%appdata%` and `%temp%` are allowed.	`C:\ProgramData\Ekran System\MonLogs`
`EventLoggingEnabled`	Log Syteca events (errors, warnings, info) to the Windows Event Log (`1`/`0`).	Disabled
`LogLevelThreshold`	Severity written to the Windows Event Log: `0` = Error only, `1` = Error + Warning, `2` = Error + Warning + Information. Requires `EventLoggingEnabled=1`.	Disabled

URL monitoring

Parameter	Description	Default
`URLMonitoring`	Monitor visited URLs (`1`/`0`).	Enabled
`MonitorTopDomain`	Monitor top- and second-level domain names. Requires `URLMonitoring=1`.	Enabled

Application filtering

See Filtering parameters for the equivalent Management Tool UI fields.

Parameter	Description	Default
`FilterState`	`disabled` monitors everything; `include` monitors only apps/titles/URLs listed in `FilterAppName`/`FilterAppTitle`; `exclude` monitors everything except those listed.	Disabled
`FilterAppName`	Comma-separated application names, OR logic, `LIKE`-style matching.	Empty
`FilterAppTitle`	Comma-separated window titles/URLs, OR logic, `LIKE`-style matching.	Empty

User filtering

Parameter	Description	Default
`UserFilterState`	`disabled` monitors every user; `include` monitors only users listed in `UserFilterNames`; `exclude` monitors every user except those listed.	Disabled
`UserFilterNames`	Semicolon-separated user names (for example `work\jane;work\john`). OR logic. Asterisk wildcards allowed for name or domain (`\administrator`, `\admin*`).	Empty

Additional options

Parameter	Description	Default
`EnableProtectedMode`	Enable Protected mode (`1`/`0`).	Disabled
`UpdateAutomatically`	Enable automatic Client updates; `0` requires manual updates.	Enabled
`DisplayClientIcon`	Show the Client tray icon (`1`/`0`).	Disabled
`OfflineClientDetection`	Enable notification when a Client has been offline past a threshold (`1`/`0`).	Disabled
`OfflineClientDetectionInterval`	Threshold before a Client is considered disconnected.	`01d00h00m`
`OfflineClientNotificationEmail`	Semicolon-separated notification email addresses.	Empty

Monitoring time filtering

Parameter	Description	Default
`MonitorTimeFilterState`	`disabled` records 24/7; `include` records only during `MonitoringDays`/`MonitoringHours`; `exclude` skips recording during those days/hours.	Disabled
`MonitoringDays`	Days of the week to apply the filter to, OR logic.	Mon, Tue, Wed, Thu, Fri
`MonitoringHours`	Hours of the day to apply the filter to.	`8:00 - 18:00`

Remote host IP filtering

Parameter	Description	Default
`IPFilterState`	`disabled` monitors all remote IPs. `includePublic`/`excludePublic` and `includePrivate`/`excludePrivate` include or exclude the addresses in `IPFilterAddresses`, scoped to public or private IPs respectively.	Disabled
`IPFilterValue`	Comma-separated IP addresses, OR logic. Asterisk wildcard allowed (for example `10.200..`).	Empty

Authentication options

Parameter	Description	Default
`NotificationMessage`	Message displayed to the user on login.	Disabled
`EnableNotificationComment`	Require a comment on the login message (`1`/`0`).	Disabled
`RequireTicketNumber`	Require a valid ticket number from an integrated ticketing system before the user can proceed (`1`/`0`).	Disabled

Two-factor and secondary authentication

Parameter	Description	Default
`EnableForcedAuth`	Require secondary user authentication on a shared account (`1`/`0`).	Disabled
`EnableOneTimePassword`	Allow requesting a one-time password for temporary access (`1`/`0`).	Disabled
`EnableTwoFactorAuth`	Require a time-based one-time password to log in (`1`/`0`).	Disabled

Advanced options

Parameter	Description	Default
`InstallDir`	Client installation folder. Environment variables like `%appdata%` and `%temp%` are allowed.	`%ProgramFiles%\Ekran System\Ekran System`

If the custom path defined is inaccessible or write-protected, the Client installs to <systemdisk>\Program Files\Ekran System\Ekran System instead. This applies whether the path is set during remote installation or when generating the installation package.

Windows Clients

Full Windows Client installation and configuration reference.

Filtering parameters

The Management Tool UI equivalent of the filtering parameters above.

Offline cache size

Configure LocalCacheLimit through the Management Tool instead.

Protected mode

What Protected mode changes about Client operation.

Overview

Installation

Scaling & High Availability

Database

Users and Permissions

Clients

Access

Management Tool Settings

Client Parameters

Licensing

Multi-Tenant

Dashboards

Audit Log

Security

Windows Client Installation Package Parameters

Server name / IP address

User activity recording frequency

Screen capture settings

Monitoring parameters

Keystroke monitoring parameters

Log files

URL monitoring

Application filtering

User filtering

Additional options

Monitoring time filtering

Remote host IP filtering

Authentication options

Two-factor and secondary authentication

Advanced options

Windows Clients

Filtering parameters

Offline cache size

Protected mode

​Server name / IP address

​User activity recording frequency

​Screen capture settings

​Monitoring parameters

​Keystroke monitoring parameters

​Log files

​URL monitoring

​Application filtering

​User filtering

​Additional options

​Monitoring time filtering

​Remote host IP filtering

​Authentication options

​Two-factor and secondary authentication

​Advanced options

​Related

Windows Clients

Filtering parameters

Offline cache size

Protected mode

Server name / IP address

User activity recording frequency

Screen capture settings

Monitoring parameters

Keystroke monitoring parameters

Log files

URL monitoring

Application filtering

User filtering

Additional options

Monitoring time filtering

Remote host IP filtering

Authentication options

Two-factor and secondary authentication

Advanced options

Related