Compaq Evo D510 Desktop Management Guide, Compaq Evo Desktop Family - Page 29

Desktop Management Guide DriveLock Applications The most practical use of the DriveLock security feature is in a corporate environment where a system administrator provides users with multibay hard drives for use in some desktop computers. The system administrator would be responsible for configuring the multibay hard drive which would involve, among other things, setting the DriveLock master password. In the event that the user forgets the user password or the equipment is passed on to another employee, the master password can always be used to reset the user password and regain access to the hard drive. Compaq recommends that corporate system administrators who choose to enable DriveLock also establish a corporate policy for setting and maintaing master passwords. This should be done to prevent a situation where an employee intentionally or unintentionally sets both DriveLock passwords before leaving the company. In such a scenario, the hard drive would be rendered unusable and require replacement. Likewise, by not setting a master password, system administrators may find themselves locked out of a hard drive and unable to perform routine checks for unauthorized software, other asset control functions and support. For users with less stringent security requirements, Compaq does not recommend enabling DriveLock. Users in this category include personal users or users who do not maintain sensitive data on their hard drives as a common practice. For these users, the potential loss of a hard drive resulting from forgetting both passwords is much greater than the value of the data DriveLock has been designed to protect. Access to Computer Setup and DriveLock can be restricted through the Setup password. By specifying a Setup password and not giving it to end users, system administrators are able to restrict users from enabling DriveLock. Desktop Management Guide 25