> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# Windows Client Installation Package Parameters
> Every configuration parameter available in the Windows Client .ini installation package, for defining Client behavior before deployment.
The Windows Client installation package consists of two parts:
* The signed `SytecaClient.exe` installation file.
**IN SAAS ONLY:** `SytecaClient.msi` is used instead of `SytecaClient.exe`.
* A `SytecaClient.ini` text [configuration file](/docs/administration/clients/windows) containing the Application Server address the Client connects to, along with the rest of the Client configuration.
This page lists the parameters available in that `.ini` file. Unless noted otherwise, an invalid or missing value falls back to its default.
## Server name / IP address
| Parameter | Description | Default |
| ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- |
| `RemoteHost` | Application Server hostname or IP address. Accepts multiple values, separated by commas or semicolons. Must be a static address — use a unique external IP for cloud-based Application Servers. | *(none)* |
| `RemotePort` | The port Clients use to connect to the Application Server. | `9447` |
## User activity recording frequency
| Parameter | Description | Default |
| -------------------- | -------------------------------------------------------------------------------------------- | -------- |
| `EnableActivity` | Record activity and screen captures when the active window changes (`1`/`0`). | Enabled |
| `EnableWndNmChanges` | Record activity and screen captures when the window name changes (`1`/`0`). | Enabled |
| `EnableKBandMouse` | Record activity and screen captures on click or key press (`1`/`0`). | Enabled |
| `EnableTimer` | Record activity and screen captures at a fixed time interval (`1`/`0`). | Disabled |
| `Timer` | Interval in seconds for `EnableTimer`. Minimum 30 seconds. Required if `EnableTimer` is set. | `30` |
## Screen capture settings
| Parameter | Description | Default |
| ------------------------------- | ------------------------------------------------------------------------------ | -------- |
| `EnableScreenshotCreation` | Record screen captures alongside activity (`1`/`0`). | Enabled |
| `EnableCaptureActiveWindowOnly` | Limit screen captures and metadata to the active window only (`1`/`0`). | Disabled |
| `ColorDepth` | Screen capture color depth: `7` (4-bit grayscale), `8` (8-bit), `16` (24-bit). | `7` |
## Monitoring parameters
| Parameter | Description | Default |
| ------------------------------- | --------------------------------------------------------------------------------------------------- | -------- |
| `EnableClipboardMon` | Log copy/paste operations (`1`/`0`). | Enabled |
| `EnableSystemIdleDetect` | Detect system idle events (`1`/`0`). | Enabled |
| `EnableIdleForceTimeout` | Register an idle event after a fixed inactivity period (`1`/`0`). | Enabled |
| `IdleForceTimeout` | Inactivity period in minutes before the forced idle event. Minimum 5 minutes. | `15` |
| `EnableSwiftUsernameMonitoring` | Log usernames used to log in to the SWIFT network (`1`/`0`). Requires `EnableScreenshotCreation=1`. | Disabled |
## Keystroke monitoring parameters
| Parameter | Description | Default |
| ----------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- |
| `EnableKeystrokes` | Log keystrokes (`1`/`0`). | Enabled |
| `StartSessionOnKeyword` | Start monitoring only after a keyword is typed (`1`/`0`). | Disabled |
| `Keywords` | Comma-separated keywords that trigger monitoring (for example `drugs,medicine`). Combined with OR logic; matching uses a `LIKE`-style operator (`drug` also matches `drugstore`). | Empty |
| `KeystrokeFiltering` | `disabled` monitors all applications; `include` monitors only apps listed in `KeystrokeFilteringAppNames`/`KeystrokeFilteringAppTitles`; `exclude` monitors all apps except those listed. | Disabled |
| `KeystrokeFilteringAppNames` | Comma-separated application names (for example `word.exe,excel.exe`). OR logic, `LIKE`-style matching (`word.exe` also matches `winword.exe`). | Empty |
| `KeystrokeFilteringAppTitles` | Comma-separated activity titles (for example `Facebook,Google`). OR logic, `LIKE`-style matching. | Empty |
## Log files
| Parameter | Description | Default |
| --------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------- |
| `MonLogging` | Create monitoring logs on the Client computer (`1`/`0`). | Disabled |
| `LogPath` | Path for monitoring log files. Environment variables like `%appdata%` and `%temp%` are allowed. | `C:\ProgramData\Ekran System\MonLogs` |
| `EventLoggingEnabled` | Log Syteca events (errors, warnings, info) to the Windows Event Log (`1`/`0`). | Disabled |
| `LogLevelThreshold` | Severity written to the Windows Event Log: `0` = Error only, `1` = Error + Warning, `2` = Error + Warning + Information. Requires `EventLoggingEnabled=1`. | Disabled |
## URL monitoring
| Parameter | Description | Default |
| ------------------ | ----------------------------------------------------------------------- | ------- |
| `URLMonitoring` | Monitor visited URLs (`1`/`0`). | Enabled |
| `MonitorTopDomain` | Monitor top- and second-level domain names. Requires `URLMonitoring=1`. | Enabled |
## Application filtering
See [Filtering parameters](/docs/session-monitoring/recording/filtering#application-filtering) for the equivalent Management Tool UI fields.
| Parameter | Description | Default |
| ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- |
| `FilterState` | `disabled` monitors everything; `include` monitors only apps/titles/URLs listed in `FilterAppName`/`FilterAppTitle`; `exclude` monitors everything except those listed. | Disabled |
| `FilterAppName` | Comma-separated application names, OR logic, `LIKE`-style matching. | Empty |
| `FilterAppTitle` | Comma-separated window titles/URLs, OR logic, `LIKE`-style matching. | Empty |
## User filtering
| Parameter | Description | Default |
| ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------- |
| `UserFilterState` | `disabled` monitors every user; `include` monitors only users listed in `UserFilterNames`; `exclude` monitors every user except those listed. | Disabled |
| `UserFilterNames` | Semicolon-separated user names (for example `work\jane;work\john`). OR logic. Asterisk wildcards allowed for name or domain (`*\administrator`, `*\admin*`). | Empty |
## Additional options
| Parameter | Description | Default |
| -------------------------------- | ------------------------------------------------------------------------------------- | ----------- |
| `EnableProtectedMode` | Enable [Protected mode](/docs/administration/clients/parameters/protected-mode) (`1`/`0`). | Disabled |
| `UpdateAutomatically` | Enable automatic Client updates; `0` requires manual updates. | Enabled |
| `DisplayClientIcon` | Show the Client tray icon (`1`/`0`). | Disabled |
| `OfflineClientDetection` | Enable notification when a Client has been offline past a threshold (`1`/`0`). | Disabled |
| `OfflineClientDetectionInterval` | Threshold before a Client is considered disconnected. | `01d00h00m` |
| `OfflineClientNotificationEmail` | Semicolon-separated notification email addresses. | Empty |
## Monitoring time filtering
| Parameter | Description | Default |
| ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
| `MonitorTimeFilterState` | `disabled` records 24/7; `include` records only during `MonitoringDays`/`MonitoringHours`; `exclude` skips recording during those days/hours. | Disabled |
| `MonitoringDays` | Days of the week to apply the filter to, OR logic. | Mon, Tue, Wed, Thu, Fri |
| `MonitoringHours` | Hours of the day to apply the filter to. | `8:00 - 18:00` |
## Remote host IP filtering
| Parameter | Description | Default |
| --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- |
| `IPFilterState` | `disabled` monitors all remote IPs. `includePublic`/`excludePublic` and `includePrivate`/`excludePrivate` include or exclude the addresses in `IPFilterAddresses`, scoped to public or private IPs respectively. | Disabled |
| `IPFilterValue` | Comma-separated IP addresses, OR logic. Asterisk wildcard allowed (for example `10.200.*.*`). | Empty |
## Authentication options
| Parameter | Description | Default |
| --------------------------- | -------------------------------------------------------------------------------------------------------- | -------- |
| `NotificationMessage` | Message displayed to the user on login. | Disabled |
| `EnableNotificationComment` | Require a comment on the login message (`1`/`0`). | Disabled |
| `RequireTicketNumber` | Require a valid ticket number from an integrated ticketing system before the user can proceed (`1`/`0`). | Disabled |
## Two-factor and secondary authentication
| Parameter | Description | Default |
| ----------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- | -------- |
| `EnableForcedAuth` | Require [secondary user authentication](/docs/administration/clients/parameters/secondary-user-authentication) on a shared account (`1`/`0`). | Disabled |
| `EnableOneTimePassword` | Allow requesting a [one-time password](/docs/administration/clients/parameters/one-time-passwords) for temporary access (`1`/`0`). | Disabled |
| `EnableTwoFactorAuth` | Require a time-based one-time password to log in (`1`/`0`). | Disabled |
## Advanced options
| Parameter | Description | Default |
| ------------ | -------------------------------------------------------------------------------------------- | ------------------------------------------ |
| `InstallDir` | Client installation folder. Environment variables like `%appdata%` and `%temp%` are allowed. | `%ProgramFiles%\Ekran System\Ekran System` |
If the custom path defined is inaccessible or write-protected, the Client installs to `\Program Files\Ekran System\Ekran System` instead. This applies whether the path is set during remote installation or when generating the installation package.
\| `LocalCacheLimit` | [Offline cache](/docs/administration/clients/parameters/offline-cache-size) size in MB. | `500` |
\| `TenantKey` | Unique identifier the Client uses to detect which tenant it belongs to. In Multi-Tenant mode, each tenant's key is shown on the Tenants page. | The built-in default tenant's key |
## Related
Full Windows Client installation and configuration reference.
The Management Tool UI equivalent of the filtering parameters above.
Configure `LocalCacheLimit` through the Management Tool instead.
What Protected mode changes about Client operation.