WinPCGuard Help

Activate WinPCGuard

This option allows you to change multiple WinPCGuard settings with one button. You can activate or deactivate selected restrictions in the Restrictions and Security menus. When WinPCGuard is deactivated, these options become unavailable.

Apply restrictions on this PC

This option is available in Server mode. It determines whether the configured restrictions also apply to the computer from which you manage clients.

If you disable it, no restrictions will apply on this PC. The Activate / Deactivate WinPCGuard options will be unavailable on this PC.

This setting applies only to this computer. It is not assigned to groups or transferred to clients.

Automatic client configuration updates

WinPCGuard in server mode:

Enabling this option automatically applies the last saved main configuration to clients, not according to the current WinPCGuard settings. The main configuration is saved when you press the Update client settings button in the Clients section, where you can also find more detailed information about updates. The configuration is sent when a client connects. This also allows you to prepare settings for computers that are currently switched off.

WinPCGuard in client mode:

Enabling this option makes the client receive the main configuration from the server when it starts. If you want to configure some clients separately, this option must not be enabled, otherwise the client would receive the main configuration.

Automatically find the server

When this option is enabled, the client automatically finds its assigned server on the local network, even if the server’s IP address changes. The server therefore does not need a fixed IP address.

For the first connection, enter the correct server IP address on the client or take over the client through the Clients window. The client remembers the server’s identity and verifies that it is connecting to the same server during subsequent searches.

The same connection and client takeover password must be set on both the client and the server.

When this option is disabled, the client connects to the IP address entered in the settings. The server must therefore have a fixed IP address on the network, configured manually or reserved through DHCP.

If multiple servers with the same identity are found, automatic connection is suspended and the reason is displayed in the settings.

Hide the taskbar icon

If you do not want the WinPCGuard icon to be visible on the taskbar, enable this option. WinPCGuard will run hidden in the background. To display the program, use the keyboard shortcut CTRL + ALT + S.

Keyboard shortcuts

CTRL + ALT + S - access to the WinPCGuard program

CTRL + ALT + K - access to the Clients window

CTRL + ALT + K opens the Clients window. Available functions depend on the password entered, just as when opening Clients from the menu or by double-clicking the icon when configured to open Clients. See Passwords for details.

WinPCGuard must be set as a server.

Log file

The log file records activities blocked by WinPCGuard.

Network communication and firewall

WinPCGuard is a network application and needs communication between computers to manage clients and share screens. The WinPCGuard installer automatically allows communication through Windows Firewall.

If you use a third-party firewall or security software, you may need to allow WinPCGuard network communication manually in its settings. If computers are not visible on the network or screen sharing does not work, check the firewall settings on both the server and clients.

WinPCGuard uses TCP ports 11111 and 45505–45507 for communication. Presentation sharing uses a UDP port in the range 45505–45760; the specific port is selected automatically based on the server’s IP address. If the firewall blocks communication, allow it on these ports.

Passwords

Main password

Access to all WinPCGuard functions. If the main password is not set, access to the Clients window is also available without a password, even if this is configured. If you enter the old password when changing the password and do not enter a new password, the password will be deleted.

Clients window password

If a main password is set, you can enter the main password when opening the Clients window for full access, or the Clients password for limited access. Limited access excludes computer search and takeover, remote installation, and manual client updates and configuration. The Clients password is optional; if it is not set, use the main password. Without a main password, Clients opens without a password prompt and with all functions available, even if a separate Clients password is stored. If both passwords are identical, full access takes priority. If you do not enter anything when changing this password, the old password will be deleted.

Connection and client takeover password

This password protects the client's connection to the server and allows a client to be taken over by another server. It is verified on every connection, not just during initial pairing.

Set the same password on the server and client. If the passwords differ, or a password is set on only one side, the connection is refused.

If neither the server nor the client has a password set, you can enter just the server's IP address on the client. On the first connection, the client remembers the server and checks its stored identity on subsequent connections.

Server and client settings

Install WinPCGuard on every computer you want to manage. It can run as a server, as a client, or independently without network communication. If you have multiple computers on the network, set WinPCGuard as the server on one computer and as a client on the others. No physical server is required on the network! You can change client settings from the server. You can also use multiple servers, each with its own connected clients. This lets you manage separate groups of computers from their respective servers. By default, the port is set to 11111. You can change it in the range from 1025 to 60000 if it is already used by another application (the system will display an error message, or WinPCGuard will not work correctly). The server and its clients must be on the same network, i.e. there must be a connection between them.

WinPCGuard as a server

The IP address of this computer will be displayed in red in Settings. You must enter this address on each client so that it can successfully establish a connection to the server. In the settings, you can view the current number of clients connected to the server at any time. If the computer has multiple active network connections, the displayed IP address will blink, and other IP addresses will be hidden underneath it. You can update the settings of connected clients from the server.

For an easier way to connect clients, see Search for computers on the network.

WinPCGuard as a client

Enter the IP address of the computer where WinPCGuard is running as a server into the fields. The client port must be the same as the server port. The client waits for commands sent by the server.

With automatic server discovery disabled, the server must have a fixed IP address, configured manually or reserved in DHCP. If its IP address changes, you must also update it in the client settings.

If you enable Find server automatically, the client can find its assigned server on the same local network even after the server’s IP address changes. This option is disabled by default, and the same connection and client takeover password must be set on the client and server. For the initial assignment, enter the server’s current IP address or use client takeover from the server.

When a connection to the server is established, a confirmation message will be displayed in Settings indicating that the client is connected to the server.

Allowing and blocking internet access

This block remains active even after the user logs off. You must allow the internet again using this option, or a manual update will change this state.

Client states in the list

In the Clients window, you can use standard icons or small previews of client desktops. If a desktop preview is unavailable, a status icon is displayed instead. Status icons also appear in the standard icon view.

The icons distinguish these states:

The user’s screen is locked.
No user is signed in.
A user is signed in, but WinPCGuard is not running or is disconnected.

Hover over a client to see a tooltip with status details.

Remote control

Select a connected computer in Clients and choose Remote control using its button or context menu. Use the current WinPCGuard version on both computers.

Start enables mouse and keyboard control of the displayed client. Stop ends control while keeping the desktop visible. Closing the desktop window also ends viewing.

Grey means Viewing only. Orange means Connecting control. Green means Control active after confirmation and receipt of the image. Red means Connection lost when the connection or client acknowledgements fail. After reconnecting to the same PC and user, the previous mode resumes automatically: viewing only or control with a new session. Held keys and mouse buttons are not carried over. Stop or closing the desktop window cancels automatic control recovery.

Toggle full screen with its toolbar button or Ctrl+Alt+Enter. 1:1 shows the original logical size with DPI adjustment; Fit fits the image to the window without enlarging a smaller desktop. A larger image has scrollbars. Changing the view does not end the session.

In full screen, the top toolbar hides automatically. Move the pointer to the top edge to reveal it, or use the pin to keep it visible. It stays visible while the pointer is over it. The toolbar overlays the image without changing its scale or position. In a normal window, the toolbar stays visible.

The mouse, wheel, side buttons and keyboard operate the client while the desktop has focus. Click inside the image to return focus. Send Ctrl+Alt+Del with its dedicated toolbar button.

Text clipboard content synchronizes during the session. Copy files and folders with Ctrl+C and paste with Ctrl+V into the destination Explorer window or desktop. File content transfers only when pasted. The progress window allows cancellation; closing that window only hides it. A completed file replaces an existing destination file with the same name.

Control before sign-in and without the application running

Remote access is available even when the WinPCGuard client application is not running. You can view the sign-in screen, sign in a user or control their existing desktop.

Use the normal Windows sign-in credentials. Remote control does not bypass passwords or UAC requirements.

When the client application starts or the user signs out, the open window automatically adapts to the current state.

Clipboard synchronization and file transfer are available only while the WinPCGuard client application is running.

Remote installation of WinPCGuard

Remote installation lets you update WinPCGuard to a newer version on selected connected clients directly from the Clients window. You can start the update centrally without running the installer separately on every computer.

In the Clients window, select the connected computers, choose the installer for the new WinPCGuard version, and click Install. The program will be installed on the selected clients. The process may also restart them.

Run

Use this feature to open a website, program, file or folder on selected connected computers. It works similarly to the Windows Run dialog (Win + R), but the item opens on the selected client computers.

Examples

www.google.com — opens a website in the default browser.
notepad.exe — starts Notepad.
C:\Users\Public\Documents — opens a folder on the client computer.
C:\Users\Public\Documents\document.pdf — opens a document in the default application.
cmd.exe /c start notepad.exe — starts Notepad through the command prompt.
cmd.exe /c mkdir C:\Test — creates the folder C:\Test.

The file or folder you want to open must exist on the client computer, and the required program must be installed.

You can add parameters after the program name. Enclose paths containing spaces in quotation marks. Run command-line commands, such as mkdir or copy, through cmd.exe /c. Items open with the permissions of the user running the client.

Entered items are saved in the history on the server. In the expanded list, you can remove an entry using the × on its right. You can also remove the selected entry with the Delete key.

You can move items in the list, change their order and edit them to suit your needs.

Search for computers on the network

This function is used to search for computers on the network where WinPCGuard is running. Computers found this way can be connected to the current server.

To take over a client, the same Connection and client takeover password must be set on both the server and the client computer.

Taking over is possible in two ways:
temporary takeover - after WinPCGuard is started again, it will be in the same state as before the takeover
permanent takeover - WinPCGuard will always connect to the computer that took it over

After takeover, the client connects to the new server. With temporary takeover, the original assignment is restored when WinPCGuard is started again. With permanent takeover, the client remains assigned to the new server.

Updating client settings

You can update client settings in two ways:

apply the same configuration to all clients at once
apply a separate configuration to selected clients

Update client settings - this button updates all connected clients, and at the same time saves the main configuration that was sent to them. This main configuration will be used for automatic client configuration updates. If you want clients to automatically receive this configuration, you must enable it in Settings - for the server and for individual clients. Clients will receive the main configuration each time they connect to the server version of WinPCGuard. The main configuration is saved even if no clients are connected.

Load main configuration - as stated above, clients are updated using the saved main configuration. If you want to see their current configuration, click this button - WinPCGuard will load this configuration. You can review it, modify it if needed, and then perform the update.

Update selected client settings - this button updates the selected clients and saves their configuration at the same time. Use this if you want to set a different configuration for clients than the main configuration. Do not forget to disable automatic client configuration updates for these clients in Settings, otherwise they will receive the main configuration.

Load configuration - loads the configuration of the selected client. The button is active if the selected client has a saved configuration. You can load the configuration for only one client at a time.

Viewing client desktops

Double-click a client in the list of connected clients to display that client’s desktop. You can also display it by selecting the client and pressing the Desktop button. You can enlarge the Clients window to full screen so that you can see a larger part of the client’s desktop. Double-click the client desktop image to switch between a view fitted to the window and the original size (100%). Press F to switch between full-screen and windowed view.

Presentation

Displays the server screen on selected client computers, for example when demonstrating a procedure or teaching.

In the Clients window, select the computers you want to show your screen to and click Presentation. Click again to stop the presentation.

The transfer uses multicast on the local network. Network devices must allow multicast traffic between the server and clients. With multiple routers or Wi-Fi access points, their settings may prevent the screen from reaching clients even when normal communication between computers works.

If a client remains on “Waiting for screen”, test the transfer with the devices connected to the same Wi-Fi access point or through a wired LAN.

Client presentation

The Client presentation feature lets you show the desktop of one connected client on other selected computers. The image passes through the server, which forwards it to the receiving clients. The source and receiving computers must be connected to the same WinPCGuard server.

Starting the presentation

In the Clients window, select one computer whose desktop you want to present.
Click Client presentation. The window that opens shows the selected source and the available receiving clients.
Select the receiving computers. Use Select all to select everyone.
Keep or clear Show the presentation on the server too as needed, then click Start presentation.

Presentation preview on the server

Show the presentation on the server too is enabled by default. The presentation opens on the server in a separate window that you can move and resize. The image keeps its aspect ratio. The preview is for watching the presentation, not for controlling the source computer.

When the preview window on the server is active, you can use these keyboard shortcuts:

F or Ctrl+Alt+Enter — switch between full screen and windowed view.
Esc — return from full screen to the original window.

Closing the preview with the close button only ends its display on the server. The presentation continues on the receiving clients. To end the entire presentation, use Stop presentation in the Clients window. This ends the presentation on all receiving computers and closes any open preview on the server.

Users

Use this section to configure restrictions separately for each user group. Each group can have different settings.

Functions that can be configured separately for each group are highlighted in white.

When WinPCGuard is started for the first time, the Default group is created. Individual restrictions will be controlled according to this group unless the currently logged-in user is defined in another group. If you do not want to define different settings for users, then this part of the program will not be relevant to you. All restrictions are configured directly through the main program window.

If you want to define different restrictions for individual users, you must first create groups and assign users to the groups. You can define different restrictions for each group. When adding a user to a group, the relevant group must be selected.

Assigning restrictions to groups

Select a group - the current restrictions will be loaded and you can then modify them.

Block file downloads

This feature blocks downloads of selected file types through web browsers. It helps prevent unwanted or accidental downloads, for example after clicking a misleading button or link. This reduces the risk of downloading unknown programs or potentially harmful files.

The following file types are blocked by default:

Programs and installation packages: EXE, MSI, MSIX, MSIXBUNDLE, APPX, APPXBUNDLE.
Archives: ZIP, RAR, 7Z, TAR, GZ.
Disk images: ISO, IMG.
Scripts and other executable files: BAT, CMD, PS1, VBS, SCR.

You can customize the list of blocked extensions to suit your needs by adding other file types or removing some from the list. Normal internet access remains available; the restriction applies to downloads of files that match the configured list.

Usage and registration

You can use WinPCGuard free of charge for 30 days from installation without any restrictions. After this period expires, you will be notified that the free usage period has expired. If you want to continue using it, you must register on the website www.winpcguard.com. After registration and payment of the relevant amount, we will send you the registration details.

If you use WinPCGuard network features, connect the clients to the server. You only need to enter the registration details once on the server, in the About… section. Connected clients register automatically, so you do not need to register them individually.

Changing registration details

In the About… window, click “Change registration details” and enter the new name and password. The details are verified automatically. If they are incorrect, the existing registration is retained.

When the server’s registration changes, the new details are sent to connected clients. Disconnected clients receive them the next time they connect. A client’s paid registration is replaced only by details with a later update entitlement date.

Contents

Settings

Clients