BukDesk reads a machine policy from the registry. A person cannot turn back on what a policy turned off. The app says on screen that the organization turned it off.

Not yet tried under a real Group Policy. The values have been read from the registry as an administrator set them by hand. There is no administrative template yet: set them with a Registry preference.

The key

HKLM\Software\Policies\BSCALE\BukDesk

The key keeps the name BSCALE. Each value below is a REG_DWORD. 1 turns that part off. 0, or no value, leaves it alone.

ValueWhat stops
DisabledAll of BukDesk: no network, no keyboard or mouse hooks, no sessions
DisableSharingThe mouse and keyboard, and the clipboard with them
DisableClipboardThe clipboard alone
DisableFilesFiles between computers, and BukDesk in the Send to menu
DisableSessionsMessages between AI sessions, and connecting AI tools
DisableTrackingReading the AI tools' status and quota
DisablePairingNew pairings. Computers already paired stay connected
DisableScreenViewSeeing screens, both ways

Example:

reg add "HKLM\Software\Policies\BSCALE\BukDesk" /v Disabled /t REG_DWORD /d 1 /f

The relay

These three are read the other way round: 0 stops, and anything else, or no value, changes nothing.

ValueWith 0
RelayNo connecting or pairing over the internet at all. The local network goes on
RelayOnPublicNetworksNo relay on public networks
RelayControlNo control over the internet, in either direction

Updates

UpdateMode, a REG_SZ on the same key:

UpdateModeWhat it does
autoDownloads and checks by itself, waits 24 hours, and installs at the next start of BukDesk
askWaits for a person to press
offNever looks, and contacts no server

Every install asks for an administrator's approval, because BukDesk installs for the whole computer.

How it behaves

  • The app reads the policy at its start and every 10 seconds. A part that is turned off stops at once. If the pointer is on another computer, it comes back first.
  • With Disabled, the app stays by the clock and does nothing else, so that it can say so.
  • What a person chose stays saved, and comes back when the policy is lifted.
  • A policy that cannot be read turns everything off, and says that it could not be read.

To remove it for good

Uninstall it. BukDesk has no policy against being uninstalled.