Icon Legend

Icons are used throughout the user interface to indicate a particular type of item, and also to indicate further properties or state of the item.

Often an icon is used by the interface as a handle for dragging an item or as a target for a drag-and-drop action. The table below may be helpful in deciphering the meaning of these icons. Icons that are repeated for the same purpose across windows are not repeated, e.g. Filters are mentioned under Computers and not again under Products, Policies, etc.

Computers Window

	Computers view toggle Located at the top of the thumb/slider between the two main areas of the computers window, clicking here will toggle between the current and the default view (Dedicated + Leased Computers, no leased or excluded, no divisions or filters applied). Clicking again returns to the current view.
	Client — Dedicated Click to the left of this icon to have the main window display include dedicated computers. Such computers have a KeyServer license and will never have their KeyServer license automatically revoked. Double click on the word Dedicated to display all current dedicated clients in a separate window. Also appears in the Filters' Rule column when a rule has been set to grant clients full privileges. Double click the rule to change. In the Last Session column, this icon indicates a given computer is currently designated as Dedicated. Drag a computer onto a different Login type to change.
	Client — Leased Click to the left of this icon to have the main window display include leased computers. Such computers have a KeyServer license which will automatically be revoked if they do not log in to KeyServer for a long time. Double click on the word Leased to display all current basic clients in a separate window. Also appears in the Filters' Rule column when a rule has been set to grant clients leased privileges. Double click the rule to change. In the Last Session column, this icon indicates a given computer is currently designated as Leased. Drag a computer onto a different Login type to change.
	Client — Imported Click to the left of this icon to have the main window display include imported computers. Such computers were created either manually in the Web UI, by CSV import, by way of a script such as Import from InTune, or some other similar programatic method involving script or API. If a client connects and an Imported record has a matching ID, the record is moved to Dedicated or Leased per any applicable Rules. This is a placeholder state that can not be manually moved and does not count against license seat consumption.
	Client — Dormant Click to the left of this icon to have the main window display include dormant computers. Such computers do not currently have a KeyServer license, but if they log back in they will be given a seat as long as there is room, and changed to Leased. Double click on the word Dormant to display all current basic clients in a separate window. In the Last Session column, this icon indicates a given computer is currently designated as Dormant. Drag a computer onto a different Login type to change.
	Client — Excluded Click to the left of this icon to have the main window display include excluded (logon disallowed) computers. Double click on the word Excluded to display all currently blocked computers in a separate window. Also appears in the Filters' Rule column when a rule has been set to exclude clients. Double click the rule to change. Displays in the Last Session column when a given computer has been forbidden access to the KeyServer, either by a system setting or manually by the administrator. When computers display this icon an attempt to log on by anyone at that computer will fail with message KA-200, "The KeyServer [name] has denied [username] permission to logon." Launching a managed program will get a similar denial, with a different message, KA-180: "The network KeyServer, which is required by KeyServer controlled programs, has denied [username] permission to logon." Note that the message claims that the refusal is username-based when in fact it could be either user (authentication) or computer-based, depending. Drag the computer record and drop it on the word Dedicated or Dormant in the upper left of the window to re-enable this computer's access to the KeyServer. If this does not remove the circle-slash icon (change the record to allow access to the KeyServer), it may be that the KeyServer itself is full or the client computer has been prohibited for a computer-based (invalid TCP/IP Location or KeyAccess Version Number) or user-based (Authentication failure) reason.
	Section Draggable item indicating a Section (Administrative concept for Federated Management). Division can be organized into Sections, and Admins can be assigned to Sections. Purchases and Policies can also be specific to a Section, or can be Enterprise wide. Appears in the Division portion of the Computers Window, on the left hand side. Also appears in Policy and Purchase detail windows.
	Section - out of scope This variation of the Section icon appears when the logged in Admin doesn't have Access rights to a Section. For example, a Section Admin would generally only have rights to a single Section, and all other Sections would appear with this icon. Appears in the Division portion of the Computers Window, on the left hand side.
	Division Draggable item indicating a division (means of subdividing computers into discrete categories). Drag a computer onto a division to associate the computer with that division. A given computer is not required to be in a division, but if associated with a division is associated with that division alone. Drag a computer from one divison to another to change its association, or drag it onto Uncategorized to remove its divisional association. Appears in the Filters Rule column when a Filter has been set to associate computers with a division.
	Division — Pink Draggable item indicating that the division contains at least one computer that was placed in that division by a Rule.
	Division — Dimmed Appears in the Filters' Rule column when an Active Filter has not been set to associate a computer with any division. A computer using a rule with this icon will be placed in Uncategorized.
	Anchored Can appear in the Division column of the Computers window, indicating that this Computer is Anchored and will not be moved to a different Division by Rules.
	Filter Contains a set of rules used to limit display the window's contents to a specified subset. Click to the left of the filter to apply, or double click to display the results in a new window. Double click the filter to modify it, or right click in this column's whitespace and select New Filter to create a new one. Place a checkmark in either of the Program Filter Dialog's Rule area to turn this to an Active filter, one that can be used to pre-sort newly discovered items.
	Filter with an Active Rule A filter that has had one or more rules attached to by means of the Rule area of the Computer Filter dialog, and which applies those rules to newly discovered Computers. Click to the left of the icon to apply the filter. Double click the filter to modify it. Right click in the surrounding whitespace to define a new filter. Turn an Active Filter back into a simple filter by double clicking, unchecking both Rule checkboxes, and saving. Also appears in the Folder column of the main Programs window to indicate an unacknowledged program.
	Filter — Dimmed A filter that is stored locally on the machine running KeyConfigure, as opposed to within the KeyServer's memory. Right click and Clear Cached Filters to remove all filters with this icon.
	Client — Dedicated — Dimmed Appears in the Filters' Rule column when an Active Filter has been set to pass along the default login type, and the default is set to Dedicated. Changing the default value for the Discovered filter will change all filters displaying this icon.
	Client — Leased — Dimmed Appears in the Filters' Rule column when an Active Filter has been set to pass along the default login type, and the default is set to Leased Client. Changing the default value for the Discovered filter will change all filters displaying this icon.
	Computer Draggable icon appears in the Computer column and indicates a Computer record.
	Virtual Computer Draggable icon appears in the Computer column and indicates a Computer record for a VM. Note that some VMs may not be noticed by KeyAccess and will still appear with the standard blue computer icon.
	Thin Client Computer Draggable icon appears in the Computer column and indicates a Thin Client Computer record.
	Windows Appears in the Version column to the left of the KeyAccess version number, indicating a Windows computer.
	Macintosh Appears in the Version column to the left of the KeyAccess version number, indicating a Macintosh computer
	Chrome Appears in the Version column to the left of the KeyAccess version number, indicating a ChromeOS computer
	Mobile Appears in the Version column to the left of the KeyAccess version number, indicating an iOS or Android device
	Current User Appears at the left side of the Last User column to indicate that the user with this name is currently logged onto the KeyServer, using this computer.
	Idle User Appears at the left side of the Last User column to indicate that the user with this name is currently logged onto the KeyServer, but has been idle for longer than the Idle setting on the server.
	Available Computer Appears at the left side of the Last User column to indicate that the computer is on and communicating, but no user is currently logged in.
	Categorization (Computer Details Pane) The Categorization pane. Configuration of Login type and Division.
	Information (Computer Details Pane) The Information pane. General computer, audit, and last user information for a given computer.
	Notes (Computer Details Pane) The Notes pane. Text space for admin-entered descriptive text.
	Policies (Computer Details Pane) The Policies pane. Information about any policies granted to this computer at some point in the past.
	Groups (Computer Details Pane) The Groups pane. Information about any/all groups this computer is currently associated with.
	Audit (Computer Details Pane) The Audit pane. Contains both summary and full audit information for a given computer.
	Asset (Computer Details Pane) The Asset pane. Space for manually-entered text-based asset information.
	Devices (Computer Details Pane) The Devices pane. Shows items from the Devices table that are linked to this computer.
	Custom (Computer Details Pane) The Custom fields pane. Shows custom fields that have been defined for computers in the platform.
	Install Codes (Computer Details Pane) The Install Codes pane. Shows items linked from the Install Codes pane of any Purchase records.
	Documents (Computer Details Pane) The Documents pane. Shows files that are linked to this computer record.

Products Window

	Products view toggle Located at the top of the thumb/slider between the two main areas of the Products window clicking here will toggle between the current view and the default view (all products visible). Clicking again returns to the current view.
	Discovered (Status pane) - greenish arrows Also shown in the Status column. Indicates this Product actively appears in the Audit results of at least one Computer.
	Related (Status pane) - gray arrows Also shown in the Status column. Indicates this Product is not installed on any computers per the latest Audit data.
	Ignored (Status pane) Also shown in the Status column. Indicates this Product is being ignored for any possible install counts on computers.
	Product — Automatic Draggable icon appears in the Name column and indicates a Product that has been defined by Sassafras Software and added to your KeyServer data automatically. Also the icon for the Products window.
	Product — Family Product that contains related Automatic Products in a Family bundle, updated by Sassafras. For example, all versions of Photoshop could be in a Photoshop Family for easy Policy use.
	Product — Manual Draggable icon appears in the Name column and indicates a Product that you have defined.
	Product — empty A product record which does not have any associated programs.
	Platform — Windows Seen in the Version column indicating a Windows based Product.
	Platform — Macintosh Seen in the Version column indicating a Macintosh based Product.
	Platform — Multiple Seen in the Version column indicating a cross platform Product.
	Platform — Linux Seen in the Version column indicating a Linux based Product.
	Platform — Mobile Seen in the Version column indicating an iOS or Android Product.
	Platform — Web Seen in the Version column indicating a Web (URL) based Product.
	Platform — Font Seen in the Version column indicating a Font Product.
	Programs (Product Details pane) The programs pane, which shows the programs associated with a given product.
	Contact (Product Details pane) The contact pane for a given product.

Programs Window

	Programs view toggle Located at the top of the thumb/slider between the two main areas of the Programs window clicking here will toggle between the current view and the default view (all programs visible). Clicking again returns to the current view.
	Application Program Appears in the Status column to indicate that a given program is an application component of at least one product. Also indicates the Programs pane of a Product Details window.
	Utility Program Appears in the Status column to indicate that a given program is a utility component of at least one product, but not an application component of any products.
	Ignored Program Appears in the Status column to indicate that a given program is not a component of any products.
	Folder A way to group related programs together in KeyConfigure. Also appears in the Active Filter area and indicates that a given filter's "Set Folder To" checkbox is checked, and a folder has been specified.
	Folder — Pink Indicates that a Folder contains at least one program that was placed in that folder by a Rule.
	Folder — Dimmed Appears in the Active Filter area and indicates that a given Active Filter's "Set Folder To" checkbox is unchecked, or checked and set to Uncategorized.
	Filter A set of rules that limits display of the window's contents to a specified subset of Programs. Click to the left of the filter to apply, or double click to display the results in a new window. Double click the filter to modify, or right click in this column's whitespace and select New Filter to create a new one. Place a checkmark in the Program Filter Window's Rule area and specify a folder to turn this to a Rule filter, one that can be used to pre-sort newly discovered items.
	Filter (Rule) A filter that has an associated rule which applies to newly discovered (pink) programs. Click to the left of the icon to apply the filter. Double click the filter to modify it. Right click in the surrounding whitespace to define a new filter. Turn a Rule Filter back into a simple filter by double clicking, unchecking the Rule checkbox, and saving.
	Macintosh Program Appears in the Name column and indicates a Macintosh Program Variant.
	Windows Program Appears in the Name column and indicates a Windows Program Variant.
all...	All Version Indicator Indicates that the program variant contains more than one known version. These multiple versions can be broken out into separate variants by double-clicking and modifying the Version Mask in the Program Details window.
	Information (Program Details Pane) General summary information about a given program.
	Products (Program Details Pane) The Products pane. Allows you to specify what products a given program variant belongs to.
	Custom Message (Program Details Pane) Allows for entry of a text-based Custom Message to be delivered on launch or deny of a given program.
	Notes (Program Details Pane) Notes pane. Allows the administrator to enter reference or other text related to this program.
	Variant Installs, Version Installs Appears in the Information pane to indicate the Variant and Version Installs buttons, for showing which computers have this program/variant installed.

Policies Window

	Manage Policy A policy manages user/computer access to one or more products. It usually has limits and options associated with it, specifying who has access to its associated products, and when access is allowed. Also indicates the Policies pane of a Product or Computer Details window and any policies listed in those panes. In the former case this icon indicates the policies with which a given product is associated; in the latter, which policies have been granted to the Computer in question.
	Observe Policy Indicates that a given policy is an Observe policy.
	Deny Policy Indicates that a given policy is a Deny policy.
	Policy — Green Dot Vendor Policy. Indicates that a policy was built by means of a vendor-supplied .lic file (text file placed in the KeyServer Data Folder), as opposed to being created by a KeyServer Administrator. Details of a green-dot policy will be partly, or wholly, unmodifiable. Sites having difficulty with policies of this type should first contact the vendor of the program in question.
	Policy — Pale Blue Dot Indicates that a given Manage policy has no products associated with it and therefore will never be granted (requests are for programs, not policies, and if a policy has no products it cannot be associated with any program launch, and will never be used). Drag any appropriate items from the Products window onto this item, and the blue dot will darken. If the policy is no longer needed, delete it via Edit/Cut.
	Policy — Pale Yellow Dot Indicates that a given Observe Policy has no products associated with it and therefore has no effect. Drag any appropriate items from the Products window onto this item, or delete it via Edit/Cut.
	Policy — Pale Red Dot Indicates that a given Deny policy has no products associated with it and therefore has no effect. Drag any appropriate items from the Products window onto this item, or delete it via Edit/Cut.
	Node Policy Indicates that the metric for a given policy is Node. To change, double click and select a different Metric in the Scope & Action pane.
	Lease Policy Indicates that the metric for a given policy is Lease, meaning it will be issued automatically when a program is used, and revoked automatically when the program has not been used for some length of time (the Renewal Period). To change, double click and select a different Metric in the Scope & Action pane.
	Metric (Policy Details Pane) Allows for setting the Manage Policy metric and enabled limit and making group associations for a given policy.
	Information (Policy Details Pane) General information pane for a given policy as well as buttons for viewing current users and computer lists.
	Products (Policy Details Pane) Shows which products are currently associated with a given policy.
	Portable (Policy Details Pane) The Portable pane, for controlling a given Manage Policy's availability off-net.
	Idle (Policy Details Pane) Idle settings pane, allowing for reclaiming a Manage Policy when it has been in the background for longer than a specified length of time.
	Options (Policy Details Pane) Options pane, for controlling various policy-level parameters.
	Custom Message (Policy Details Pane) Custom Message for delivery on grant or denial of a given policy, provided there is not a valid Custom Message also entered at the Program Level (i.e., the Custom Message Pane of the relevant Program Details window). Program-level messaging takes precedence over Policy-level messaging.
	Notes (Policy Details Pane) Notes pane for admin-entered text related to a given policy.

Purchases Window

	Purchases view toggle Located at the top of the thumb/slider between the two main areas of the Purchases window clicking here will toggle between the current view and the default view (all purchases visible). Clicking again returns to the current view.
	Purchase Draggable icon appears in the Purchase column and indicates a Purchase record. Also the icon for the Purchases window.
	Document (Purchase Details pane) Pane where documents associated with a purchase can be stored and accessed.
	Categorization (Purchase Details pane) Properties of a purchase which provide categorization.
	Dependencies (Purchase Details pane) Dependencies between different purchases.

Other Icons

	User A user of KeyServer, appears in the users window
	Group An aggregation of computers, for indicating the scope of policies. Can be defined as a combination of Computer ID, Division membership, and/or network Location (IP Address), or can be defined externally by the authentication module. Groups can be used in multiple policies to limit the scope of the policy. Also indicates the Groups pane of a Computer Details window, showing which groups the computer in question is associated with explicitly (via the node list for the group).
	Time Set A Time Set, which can be used for reporting.
	Arrow Points to selected variant in a Program Details Window.
	Networked Key Appears in the Shadows window and indicates the KeyServer itself.
	Key Appears in the Shadows window and indicates a KeyShadow.
	Red-X key Appears in the Shadows window and indicates a shadow that's been manually disabled via KeyConfigure.
	Double Key The shadows window icon.
	Double S (Section Mark) Keyed Program Icon Appears in the Variant column of the Programs Window and can also appear in any other location where Variant or Version is displayed. Indicates that a program has been keyed, or modified by KeyConfigure so that it must always get KeyServer's permission to run. Keyed program versions are always in their own Variant, separate from the Variants of unkeyed programs.
	Audit in Progress Appears in the Connected Clients Window, and indicates that the computer in question is currently being audited. When the audit completes in some short span of minutes, this icon should always change back to a standard User (profile) Icon.
	Lost Contact Appears in the Connected Clients Window and indicates that KeyServer considers the session to be interrupted. If the session is restored, the icon will change back to standard black-outline. If the connection is lost, the User entry will be removed from the window and the session will be closed.
	Message Queued Appears in the Connected Clients Window. The administrator has sent this user a Bulletin Message but the message has not yet been delivered.
	Message Queued, Lost Contact The administrator has sent this user a Bulletin Message but the message has not yet been delivered, possibly because the session has been lost
	Protocol Appears in the Locations Window. Designates a protocol (AppleTalk, TCP/IP, IPX).
	Location A draggable item that indicates an IP address or range. Drag onto a group in the Groups window to associate the location with that group. Also the menu item for the Locations Window.
	License File Indicates a Licenses File as viewed in the Windows Explorer or Macintosh Finder.
	Report Appears in KeyConfigure's Window menu next to Reports, as well as any open Report windows.
	Sort order ascending Toggle sort between ascending and descending
	Sort order descending Toggle sort between ascending and descending
	Expand window Can appear at the bottom right of a window, and if clicked, will make the window wide enough to see all columns.
	Columns (Report Builder pane) Pane which lets you select what columns will appear in a completed report.
	Target (Report Builder pane) Pane which shows the current target for a report which is about to be run. You can drag items into the list
	Data Source (Report Builder pane) Pane where you can choose to run a report through ODBC
	Search This icon may appear next to some fields where you can drag an object (e.g. a Product). Clicking search will allow you to instead do a text search for the object which you want to enter in the field.
	Change view This icon appears in report windows near the top left. Clicking it will bring up a pop-up menu which allows you to change the current view of the report.
	Remove object When this appears to the right of an object which is associated with the details of some other object, clicking it will remove the association.
	Expand Mac only icon indicating that a group may be expanded to show detail lines. Windows uses the standard “plus” icon instead.
	Collapse Mac only icon indicating that a group may be collapsed to hide detail lines. Windows uses the standard “minus” icon instead.
	Vendor program Program entry for a vendor license.
	Alert Something which requires attention - e.g. a field which should be filled in.
	Refresh Clicking this icon refreshes the window that contains it
	Role A KeyServer Role
	Administrator A KeyServer Administrator