Embedded Lockdown Manager (Industry 8.1)
June 2, 2016
Learn how to enable, disable, and configure Embedded Lockdown Manager (ELM) for your Windows Embedded 8.1 Industry (Industry 8.1) device.
You can use Embedded Lockdown Manager (ELM) to configure most lockdown features on a device running Windows Embedded 8.1 Industry (Industry 8.1).
Note
You can download an updated version of ELM from the Microsoft Download Center. For more information, see the Remarks section below.
Overview
ELM is a snap-in to the Microsoft Management Console (MMC). You can use ELM directly on a device running Industry 8.1, or you can use ELM on a development computer and then remotely connect to a device.
To connect to a device, you must use an administrator account and the password cannot be blank.
If you want to use ELM to remotely manage your device, you may need to configure your device for remote access. For more information, see Configure a device for remote management.
ELM automatically detects which lockdown features are installed on the device, and displays configuration options for only those features. ELM uses Windows Management Instrumentation (WMI) to detect and change configuration settings.
You can use ELM to configure the following lockdown features for Industry 8.1:
Feature |
Description |
|---|---|
Prevents undesirable pop-up windows and dialog boxes from appearing on the screen. |
|
Suppresses undesirable key combinations, such as Ctrl+Alt+Delete. |
|
Launches an alternate shell instead of the standard Windows 8 shell. |
|
Protects physical media from write operations. |
If you use the ELM update, you can also configure the following lockdown features for Industry 8.1:
Feature |
Description |
|---|---|
Prevents unauthorized USB devices from connecting to USB ports. |
|
Launches a Windows Store app immediately when a configured account signs in. |
|
Blocks undesirable edge gestures. You cannot use ELM to configure this feature in Standard 8. |
Important
In order to use the ELM update to configure Windows 8 Application Launcher, you must first download and install the WEMSAL_UserAppXInformation WMI provider on the device you want to configure by applying the Update for Windows Embedded Industry 8.1 (KB2932074) from the Microsoft Download Center.
Turn ELM on or off
By default, ELM is not turned on. You can turn ELM on or off for your Industry 8.1 device by using the following steps:
To turn ELM on or off by using Control Panel
In Control Panel, click Programs and Features.
On the Programs and Features window, click Turn Windows features on or off.
In the Windows Features window, expand the Embedded Features node, and check or clear the checkbox for Embedded Lockdown Manager.
To turn ELM on or off by using DISM
Open a command prompt with administrator rights.
At the command prompt, type the following command to turn on ELM:
Dism /online /Enable-Feature /FeatureName:ISKU-EmbeddedLockdown-or-
Type the following command to turn off ELM:
Dism /online /Disable-Feature /FeatureName:ISKU-EmbeddedLockdown
Turning on ELM does not require you to restart the device.
After you turn ELM on, you can run ELM by navigating to the Search screen and typing Embedded Lockdown Manager.
Where to find Embedded Lockdown Manager
In a typical installation, ELM can be found at the following location:
%SYSTEMROOT%\System32\EmbeddedLockdown.msc
Remarks
You cannot use ELM to do the following actions:
- Block the Predefined key combinations for the Microsoft Surface keyboard.
- Use the following UWF commands:
If you do not use the ELM update, you also cannot use ELM do the following actions:
- Change the breakout key in Keyboard Filter.
- Enable or disable Shell Launcher.
Embedded Lockdown Manager Update
The ELM update provides improved stability and adds the following functionality:
- The ability to change the breakout key in Keyboard Filter.
- The ability to enable or disable Shell Launcher.
- The ability to configure the following additional lockdown features for Industry 8.1:
- USB Filter
- Windows 8 Application Launcher
- Gesture Filter
For more information about the ELM update, see Embedded Lockdown Manager Update Help.
Important
The Windows Management Instrumentation (WMI) service cancels Lockdown feature tasks when there is insufficient physical memory available. To resolve this issue, read the KB article.