Elbacom Embedded Configuration Manager

Also available for your customer devices as ECM2GO version.

Windows IoT Enterprise includes many embedded features to customize your system. But the configuration of the new systems is very hard because the Embedded Lockdown Manager (this tool was included in Windows Embedded 8.1 Industry Pro for example) was not carried over to Windows 10 IoT Enterprise.

That's why we created the Embedded Configuration Manager. The Embedded Configuration Manager has even more functionality than the original Microsoft Embedded Lockdown Manager. The new tool can be used as a central management place for all Embedded related settings. It allows to activate or deactivate features and also to manage and configure them with ease.

The tool is designed to work with the following operating systems:

• Windows Embedded 8 Standard
• Windows Embedded 8.1 Industry Pro
• Windows 10 IoT Enterprise 2015 LTSB
• Windows 10 IoT Enterprise 2016 LTSB
• Windows 10 IoT Enterprise 2019 LTSC
• Windows 10 IoT Enterprise SAC
• Windows 10 IoT Enterprise 2021 LTSC
• Windows 11 IoT Enterprise LTSC 2024

How to start:

To start the Embedded Configuration Manger please insert your received USB device, open your file explorer, go to the USB device directory and start "Embedded Configuration Manager.exe".

How to use:

Please read our manual carefully before using the ECM, do not ignore our warning messages and follow the given instructions.

To find out which embedded lockdown features are available for your Windows installation, just launch the Embedded Configuration Manager. On the first configuration page you will get a complete list of all available features. The tool will list all available features that can be configured on the left side.

Automatic Program Updates:

At first start-up you will be asked if you would like to enable the auto-update function to automatically receive future updates for the ECM. It is also possible to check for updates manually by pressing the "Check for updates" button.

With the Assigned Access configuration you can easily select a modern Universal Windows Platform App that should be the default shell for a specific user. With the "Enable KioskMode" functionality, that is only available through the Embedded Configuration Manager on Windows 10 IoT Enterprise 2016 versions, you can also completely suppress the Windows Desktop to ensure the user cannot exit the app!

These settings allow to easily setup an automatic logon for a specific user and allows you to configure the branding settings. With the branding settings, you can easily suppress the complete Logon UI and hide certain elements, such as the power button or ease of access button from the logon screen!

The Embedded Boot settings allow to easily brand the boot experience. You can disable the boot logo, text and status ring, or block access to the F8 and F10 boot menu. These settings are important if you want to build a completely branded device.

The Keyboard Filter settings allow you to simply block keys or key combinations, such as Ctrl+Alt+Del. These combinations can be selected from a wide range of pre-defined keys, or you can easily add a custom combination that should be blocked.

The keyboard filter allows to block keys based on the key ID. The keyboard filter also allows to change the breakout key or to completely disable it. The breakout key allows a user to break out of an account that is locked down. Per default the breakout key is the Windows key.

The new feature allows you to easily modify the OEM Information of your devices. This information is shown in the System properties and allows the end user to see who the manufacturer of the device is – and where to get support.

The Shell Launcher allows to setup different shells for different users or groups. With the Embedded Configuration Manager the programs that should be used as shell for a specific user can be configured very easily.

With the shell launcher you can configure a default shell for the standard users, so they can use the shell application only but cannot access anything else in the system. Administrators however, can be configured to boot into the regular Windows Explorer shell.

Windows 10 IoT Enterprise contains the Unified Write Filter (UWF) feature to protect the system from unwanted changes. The Embedded Configuration Manger contains a feature that will optimize your system for the Unified Write Filter usage with just one click.

This will reduce the writes of Windows itself to the overlay and allows the usage of UWF again! The tool allows to configure the overlay settings, such as size and type.

NOTE: Enabling or changing settings of the Unified Write Filter requires a reboot!

The USB Device Policy allows you to create blacklists of devices that are not allowed to be connected to the system. Simply select a currently connected device and add it to the blacklist. The filtering can be done based on the device ID or device classes.

Windows Updates: The Embedded Configuration Manger includes a single click solution to disable Windows Updates and Windows Defender updates completely. With this feature you have full control to manage the updates on your system again.

Notifications: With a simple click, the tool can disable toast notifications within Windows, Application Error Dialogs and "Application is not responding" dialogs.

Power Settings: In the power settings, you can change the power profile to "high performance" and configure display and sleep settings.

OneDrive: The tool allows you to easily turn off OneDrive.

Touch Gestures: The tool allows you to disable touch gestures.

You can export all settings now into an XML file. This allows you to create several configuration templates that can easily be imported to other machines.

Add additional value to your devices and ship them together with Embedded Configuration Manager preinstalled.

It is now possible to preinstall Embedded Configuration Manager, so your customers can then easily configure the Lockdown Features and make use of them without needing to be an embedded expert!

Main scenarios:

• Enabling / Disabling Windows Update
• Changing the Unified Write Filter configuration
• Modifying Shell Launcher
• And many more

If you are interested in preinstalling, please contact us for more details!