11.2 Visual Perception Settings

Visual Perception settings define permissions for clients with Visual Perception authorization enabled.

Icon Description
Modify icon Modify Visual Perception permissions for the selected computer or user.
Delete icon Delete Visual Perception permissions for the selected computer or user.
Export icon Export or import policy files, or copy the current policy to other clients.

Permissions can be assigned to individual computers and domain users. If a computer or domain user has its own permissions, a small red flag appears at the top right of the icon.

Administrators can configure Visual Perception permissions across the network, computer groups/computers, user groups/users, and policy sets. The priority of permission matching (from highest to lowest) is as follows:

User Policy > User Role Policy > User Group Policy > User Group Role Policy > Computer Policy > Computer Role Policy > Computer Group Policy > Computer Group Role Policy.

Lower-priority policies act as parent group policies for higher-priority ones. For example, for a computer policy, all lower-priority policies—including computer role policies, computer group policies, and computer group role policies—serve as its parent group policies.

Visual Perception permissions can inherit parent group policies.

  • Inheritance disabled: Only the object's own policy applies.
  • Inheritance enabled: The object's policy is combined with parent group policies. If the parent group also has inheritance enabled, the policy continues to propagate upward. If a parent group disables inheritance, only that parent group's policy is inherited.

After setting permissions, administrators can preview the effective permissions for an object. The preview shows the final combined permissions and indicates the source of each permission.

Visual Perception Settings

Setting Description
Policy Inheritance Use the dropdown to choose Inherit Parent Policy or Do Not Inherit Parent Policy. Default: Inherit Parent Policy + Visual Perception settings disabled. Enabling inheritance combines policies from different objects, while disabling inheritance applies only the object's own policy.
Enable Visual Perception Settings Check this option to activate the related Visual Perception permissions below.
Feature Activation Settings Configure the settings for enabling Visual Perception functionality.
Enable Visual Perception Function Specifies whether to enable Visual Perception functionality. Default: Not Set.
  • Not Set: The function follows the parent group's inherited setting. If the parent is enabled, it is enabled; if the parent is disabled, it is disabled.
  • Enable: Activates Visual Perception functionality.
  • Disable: Deactivates Visual Perception functionality.
Function Activation for Devices Without a Camera This setting must be configured; otherwise, the settings cannot be saved.
  • Do Not Force Enable: Visual Perception is enabled only if the client has an available camera; otherwise, it remains disabled.
  • Force Enable for Laptops Only: Visual Perception is forcibly enabled on laptop clients, but not on other types of computers.
  • Force Enable: Visual Perception is enabled unconditionally, regardless of whether a camera is present.
Camera Activation Settings For clients with Visual Perception enabled, the camera must be activated for the feature to function properly. Camera activation settings include:
  • User Consent on First Use: The first time Visual Perception activates the camera, a prompt appears requiring the user to click "Agree" to enable it. Once consented, subsequent activations do not prompt the user.
  • Daily First Use Requires Consent: Each day, the first activation of the camera prompts the user to click "Agree." After consent, no further prompts appear that day. The prompt appears again on the first activation the next day.
  • Direct Activation: The camera is enabled automatically without any user prompt.
Detection Interval The time interval for detecting abnormal behavior, in seconds. Default is 1 second. Must be set as a positive integer.
Activation Condition Sets the conditions under which the camera is enabled. This must be configured; otherwise, settings cannot be saved. Options include:
  • Unconditional Enable: The camera is enabled automatically when the client program starts.
  • Enable When Using Specified Application: The camera is enabled only when the specified application is launched.
Application This setting is applicable only when the activation condition is "Enable When Using Specified Application." Administrators can manually specify applications or select categories from the application classification. Wildcards are supported. If multiple applications are set, activating any one of them will enable the camera.
Show "Close Sensitive Program Notification" This setting is effective only when the activation condition is "Enable When Using Specified Application." When the specified applications are running, the camera is activated. These applications are considered sensitive programs. You can choose whether to display a menu for quickly closing sensitive programs:
  • Show: The client's system tray right-click menu displays "Close Sensitive Program." Clicking it opens a window listing all currently running sensitive programs. Selecting "Close Sensitive Program" will automatically terminate all sensitive programs and stop camera usage.
  • Do Not Show: The system tray menu does not display "Close Sensitive Program."
User Consent Prompt at Startup Editable when Enable Visual Perception is set to Enable and Activation Condition is Unconditional Enable. You can choose Default or Custom text. For custom prompts, both the title and content can be specified.
User Consent Prompt When Launching Application Editable when Enable Visual Perception is set to Enable and Activation Condition is Enable When Using Specified Application. You can choose Default or Custom text. For custom prompts, both the title and content can be specified.
Anti-Photography Detection Settings Settings related to preventing unauthorized photos using mobile devices.
Enable Anti-Photography Detection Specifies whether to enable anti-photography detection. Default: Not Set.
  • Not Set: Follows the parent group's inherited setting. If the parent is enabled, it is enabled; if the parent is disabled, it is disabled.
  • Enable: Activates anti-photography detection.
  • Disable: Deactivates anti-photography detection.
Time Threshold The duration in seconds that consecutive photography behavior must be detected. Default is 1 second.
Alarm Check this option to trigger an alert when photography is detected within the time threshold.
Alarm Level Three levels are available: Low, Important, Severe.
Lock Screen Check this option to lock the screen when photography behavior is detected.
Trigger Duration for Lock The consecutive duration in seconds of detected photography required to lock the screen. Default is 1 second.
Anti-Photography Whitelist In certain scenarios, users may need to use their phones for scanning. To prevent these actions from being detected as photography, scanning application windows can be added to the anti-photography whitelist. When a whitelisted window is in the foreground, any detected photography behavior is ignored. Whitelist settings can include the application, window title, and window type.
Camera Obstruction Detection Settings Settings related to preventing unauthorized camera obstruction.
Enable Camera Obstruction Detection Specifies whether to enable camera obstruction detection. Default: Not Set.
  • Not Set: Follows the parent group's inherited setting. If the parent is enabled, it is enabled; if the parent is disabled, it is disabled.
  • Enable: Activates camera obstruction detection.
  • Disable: Deactivates camera obstruction detection.
Time Threshold The duration in seconds that consecutive camera obstruction behavior must be detected. Default is 1 second.
Alarm Check this option to trigger an alert when camera obstruction is detected within the time threshold.
Alarm Level Three levels are available: Low, Important, Severe.
Lock Screen Check this option to lock the screen when camera obstruction is detected.
Trigger Duration for Lock The consecutive duration in seconds of detected obstruction required to lock the screen. Default is 1 second.
External Monitor Detection Settings Settings related to preventing the use of external monitors to bypass camera monitoring.
Enable External Monitor Detection Specifies whether to enable detection of external monitors. Default: Not Set.
  • Not Set: Follows the parent group's inherited setting. If the parent is enabled, it is enabled; if the parent is disabled, it is disabled.
  • Enable: Activates external monitor detection.
  • Disable: Deactivates external monitor detection.
Action Default: Allow
  • Allow: External monitors are permitted.
  • Disable: External monitors are prohibited.
Alarm Check this option to trigger an alert when an external monitor is detected.
Alarm Level Three levels are available: Low, Important, Severe.
Display Prompt for External Monitor Check this option to show a bubble notification on the client when an external monitor is detected.
Desktop Notification Watermark Settings Configurations related to the system desktop watermark notification box.
Enable Desktop Notification Watermark Specifies whether to enable the desktop notification watermark. Default: Not Set.
  • Not Set: Follows the parent group's inherited setting. If the parent is enabled, it is enabled; if the parent is disabled, it is disabled.
  • Enable: Activates the desktop notification watermark.
  • Disable: Deactivates the desktop notification watermark.
Watermark Content Set the content of the desktop notification watermark. You can choose the default content or customize it. When selecting custom content for the first time, all fields provide default values that can be adjusted as needed. Customizable items include:
  • Watermark title content
  • Watermark title background width
  • Watermark title font size
  • Watermark title font color
  • Watermark body content
  • Watermark body background width
  • Watermark body font size
  • Watermark body font color
Screen and Capture History Settings When the client detects a violation, it saves a record of the current screen and captures an image of the scene in front of the client's camera at the time of the incident. Relevant settings for these recordings can be configured.
Record Screen and Capture Images on Abnormal Behavior Specifies whether to record the screen and capture images when abnormal or violating behavior is detected. Default: Not Set. Currently supported behaviors: mobile photography, camera obstruction.
  • Not Set: Follows the parent group's inherited setting. If the parent is enabled, it is enabled; if the parent is disabled, it is disabled.
  • Enable: Activates screen recording and image capture on abnormal behavior. Once enabled, in the Capture Logs, right-clicking an abnormal behavior entry (e.g., "Mobile Photography") allows viewing the recorded screen and captured images. Note: Screen recording requires the Screen Monitoring module.
  • Disable: Deactivates screen recording and image capture on abnormal behavior.
Record Count The number of times the client records the screen and captures images when abnormal behavior is detected. Default is 10 times.
Record Interval The time interval in seconds between consecutive screen and image recordings. Default is 1 second.
System Unlock Settings Configurations for unlocking the client after a Visual Perception-related lock is triggered.
Unlock Mode Specifies the method for unlocking the client. Default: Not Set.
  • Not Set: Functions the same as Face Unlock; if inheriting a parent group policy, it follows the parent policy.
  • Face Unlock: On the lock screen, click "Unlock" and position the face in the camera view. Once the face is detected, the system unlocks automatically.
  • Unlock by Clicking Button: Click the "Unlock" button on the lock screen to unlock automatically.
  • Automatic Unlock Without Photography/Camera Obstruction: No buttons appear on the lock screen. The system unlocks automatically once no photography or camera obstruction behavior is detected.

When Inherit Parent Group Policy is selected, the object's own policy is combined with the parent group policy. The resulting effect is detailed as follows:

Visual Perception Sub-Functions

Includes: Enable Visual Perception, Enable Anti-Photography Detection, Enable Camera Obstruction Detection, Enable External Monitor Detection, Enable Desktop Notification Watermark, and Record Screen and Capture Images on Abnormal Behavior.

If the object's own policy is "Not Set":

  • Follows the parent group policy.
  • If the parent policy is Enable, the final effect is Enable, and all specific settings are inherited from the parent.
  • If the parent policy is Disable, the final effect is Disable.
  • If the parent policy is Not Set, the final effect is Disabled.

If the object's own policy is "Enable" or "Disable":

The parent group policy is ignored, and the final effect follows the object's own policy.

Unlock Mode

  • If the object's own policy is "Not Set", it follows the parent group policy. If the parent policy is also "Not Set", the final effect defaults to Face Unlock.
  • If the object's own policy is anything other than "Not Set", the parent group policy is ignored, and the final effect follows the object's own policy.

Note:

  • Object's own policy refers to the highest-priority policy based on the policy matching hierarchy.

Don't see what you're looking for?

Visit our knowledge base
Know more about AnySecura
Read latest news
Discover what's happening now
Need assistance?
Contact us now