HP Pro 3330 HP ProtectTools Security Software,Version 6.0 User Guide - Page 63

Device Access Manager for HP ProtectTools, Starting background service, Simple configuration

Page 63 highlights

9 Device Access Manager for HP ProtectTools This security tool is available to administrators only. Device Access Manager for HP ProtectTools has the following security features that protect against unauthorized access to devices attached to your computer system: ● Device profiles that are created for each user to define device access ● Device access that can be granted or denied on the basis of group membership NOTE: Device Access Manager uses Windows Local Users and Groups to manage access. Windows Home versions do not support Local Users and Groups, therefore Device Access Manager will not function properly. However, Device Access Manager will work in Microsoft Windows Vista Home version if you use DOS commands for the user setup. Refer to the Device Access Manager help file for instructions. Starting background service For device profiles to be applied, the HP ProtectTools Device Locking/Auditing background service must be running. When you first attempt to apply device profiles, HP ProtectTools Administrative Console opens a dialog box to ask if you would you like to start the background service. Click Yes to start the background service and set it to start automatically whenever the system boots. Simple configuration Device Access Manager creates a new User Group during initialization called Device Administrators for accessing or exploring devices as an administrator. Place users in this group that you want to have administrative access to the devices you control through Device Access Manager Simple Configuration. This feature allows you to deny access to the following classes of devices: ● USB devices for all non-Device Administrators ● All removable media (floppy disks, personal music players, pen drives, etc.) for all non-Device Administrators ● All DVD/CD-ROM drives for all non-Device Administrators ● All serial and parallel ports for all non-Device Administrators To deny access to a class of device for all non-Device Administrators: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console. 2. In the left pane, click Device Access Manager, and then click Simple Configuration. 3. In the right pane, select the check box of a device to deny access. 4. Click the Save icon. ENWW Starting background service 53

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74

9
Device Access Manager for
HP ProtectTools
This security tool is available to administrators only. Device Access Manager for HP ProtectTools has
the following security features that protect against unauthorized access to devices attached to your
computer system:
Device profiles that are created for each user to define device access
Device access that can be granted or denied on the basis of group membership
NOTE:
Device Access Manager uses Windows Local Users and Groups to manage access.
Windows Home versions do not support Local Users and Groups, therefore Device Access Manager
will not function properly. However, Device Access Manager will work in Microsoft Windows Vista
Home version if you use DOS commands for the user setup. Refer to the Device Access Manager
help file for instructions.
Starting background service
For device profiles to be applied, the HP ProtectTools Device Locking/Auditing background service
must be running. When you first attempt to apply device profiles, HP ProtectTools Administrative
Console opens a dialog box to ask if you would you like to start the background service. Click
Yes
to
start the background service and set it to start automatically whenever the system boots.
Simple configuration
Device Access Manager creates a new User Group during initialization called Device Administrators
for accessing or exploring devices as an administrator. Place users in this group that you want to
have administrative access to the devices you control through Device Access Manager Simple
Configuration.
This feature allows you to deny access to the following classes of devices:
USB devices for all non-Device Administrators
All removable media (floppy disks, personal music players, pen drives, etc.) for all non-Device
Administrators
All DVD/CD-ROM drives for all non-Device Administrators
All serial and parallel ports for all non-Device Administrators
To deny access to a class of device for all non-Device Administrators:
1.
Click
Start
, click
All Programs
, click
HP
, and then click
HP ProtectTools Administrative
Console
.
2.
In the left pane, click
Device Access Manager
, and then click
Simple Configuration
.
3.
In the right pane, select the check box of a device to deny access.
4.
Click the
Save
icon.
ENWW
Starting background service
53