HP ProBook 4525s HP ProtectTools User Guide - Windows XP, Windows Vista, Windo - Page 81

Setup Procedures, Opening Device Access Manager, Configuring device access

Page 81 highlights

Setup Procedures Opening Device Access Manager To open Device Access Manager, follow these steps: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console. 2. In the left pane, click Device Access Manager. Configuring device access Device Access Manager for HP ProtectTools offers three views: ● The Simple Configuration view is used to allow or deny access to classes of devices for members of the Device Administrators group. ● The Device Class Configuration view is used to grant or deny access to types of devices or specific devices for specific users or groups. ● The User Access Settings view is used to specify which users can view or modify the Simple Configuration and Device Class Configuration information. Device administrators group When Device Access Manager is installed, a Device Administrators group is created. The system administrator can implement a simple device access control policy by denying access to a set of device classes unless a user is classified as trusted (regarding device access). The recommended way to distinguish between "device trusted" users and "not device trusted" users is to make all "device trusted" users a member of the Device Administrators group. Granting members of the Device Administrators group access to devices via the Simple Configuration or Device Configuration views will therefore ensure that "device trusted" users have full access to the specified set of device classes. NOTE: Adding a user to the Device Administrators group does not automatically allow the user to access devices. However, the Simple Configuration view can be used to grant access to the required set of device classes for "device trusted" users. To add users to the Device Administrators group, follow these steps: ● For Windows 7, Vista, or XP Professional, use the standard "Local Users and Groups" MMC snap- in. ● For home versions of Windows 7, Vista®, or XP, from a privileged account, type the following in a command prompt window: c:\> net localgroup "Device Administrators" username /ADD Simple Configuration Administrators and authorized users can use the Simple Configuration view to modify access to the following classes of devices for all non-Device Administrators: Setup Procedures 73

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103

Setup Procedures
Opening Device Access Manager
To open Device Access Manager, follow these steps:
1.
Click
Start
, click
All Programs
, click
HP
, and then click
HP ProtectTools Administrative
Console
.
2.
In the left pane, click
Device Access Manager
.
Configuring device access
Device Access Manager for HP ProtectTools offers three views:
The Simple Configuration view is used to allow or deny access to classes of devices for members
of the Device Administrators group.
The Device Class Configuration view is used to grant or deny access to types of devices or specific
devices for specific users or groups.
The User Access Settings view is used to specify which users can view or modify the Simple
Configuration and Device Class Configuration information.
Device administrators group
When Device Access Manager is installed, a Device Administrators group is created.
The system administrator can implement a simple device access control policy by denying access to a
set of device classes unless a user is classified as trusted (regarding device access). The recommended
way to distinguish between “device trusted” users and “not device trusted” users is to make all “device
trusted” users a member of the Device Administrators group. Granting members of the Device
Administrators group access to devices via the Simple Configuration or Device Configuration views will
therefore ensure that "device trusted" users have full access to the specified set of device classes.
NOTE:
Adding a user to the Device Administrators group does not automatically allow the user to
access devices. However, the Simple Configuration view can be used to grant access to the required
set of device classes for “device trusted” users.
To add users to the Device Administrators group, follow these steps:
For Windows 7, Vista, or XP Professional, use the standard “Local Users and Groups” MMC snap-
in.
For home versions of Windows 7, Vista®, or XP, from a privileged account, type the following in a
command prompt window:
c:\> net localgroup “Device Administrators” username /ADD
Simple Configuration
Administrators and authorized users can use the Simple Configuration view to modify access to the
following classes of devices for all non–Device Administrators:
Setup Procedures
73