HP ProBook 6360b HP ProtectTools Getting Started - Windows 7 and Windows Vista - Page 97

Advanced Settings, Device Administrators group, Device Class Configuration, Simple Configuration

Get HP ProBook 6360b PDF manuals and user guides View all HP ProBook 6360b manuals
Add to My Manuals
Save this manual to your list of manuals

Page 97 highlights

Advanced Settings Advanced Settings provides the following functions: ● Management of the Device Administrators group ● Management of drive letters to which Device Access Manager never denies access. The Device Administrators group is used to exclude trusted users (trusted in terms of device access) from the restrictions imposed by a Device Access Manager policy. Trusted users usually include system administrators. Refer to Device Administrators group on page 89 for more information. The Advanced Settings view also enables the administrator to configure a list of drive letters to which Device Access Manager will not restrict access for any user. NOTE: The Device Access Manager background services must be running when the list of drive letters is configured. To start these services: 1. Apply a Simple Configuration policy, such as denying all non-device administrators access to removable media. - or - Open a command prompt window with Administrator privileges, and then type: sc start flcdlock Press enter. 2. When the services are started, the drive list can be edited. Enter the drive letters of devices that you do not want Device Access Manager to control. The drive letters are displayed for physical hard disks or partitions. NOTE: Whether or not the system drive (typically C) is in this list, access to it will never be denied for any user. Device Administrators group When Device Access Manager is installed, a Device Administrators group is created. The Device Administrators group is used to exclude trusted users (trusted in terms of device access) from the restrictions imposed by a Device Access Manager policy. Trusted users usually include system administrators. NOTE: Adding a user to the Device Administrators group does not automatically allow the user to access devices. In the Device Class Configuration view, if the Users group is denied access to a device, the Device Administrators group must be granted access in order for members of the group to have access to the device. However, the Simple Configuration view can be used to deny access to device classes for all users who are not members of the Device Administrators group. To add users to the Device Administrators group: 1. In the Advanced Settings view, click +. 2. Enter the user name of the trusted user. Advanced Settings 89

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
Advanced Settings
Advanced Settings provides the following functions:
●
Management of the Device Administrators group
●
Management of drive letters to which Device Access Manager never denies access.
The Device Administrators group is used to exclude trusted users (trusted in terms of device access)
from the restrictions imposed by a Device Access Manager policy. Trusted users usually include
system administrators. Refer to
Device Administrators group
on page
89
for more information.
The
Advanced Settings
view also enables the administrator to configure a list of drive letters to
which Device Access Manager will not restrict access for any user.
NOTE:
The Device Access Manager background services must be running when the list of drive
letters is configured.
To start these services:
1.
Apply a Simple Configuration policy, such as denying all non-device administrators access to
removable media.
– or –
Open a command prompt window with Administrator privileges, and then type:
sc start flcdlock
Press
enter
.
2.
When the services are started, the drive list can be edited. Enter the drive letters of devices that
you do not want Device Access Manager to control.
The drive letters are displayed for physical hard disks or partitions.
NOTE:
Whether or not the system drive (typically C) is in this list, access to it will never be
denied for any user.
Device Administrators group
When Device Access Manager is installed, a Device Administrators group is created.
The Device Administrators group is used to exclude trusted users (trusted in terms of device access)
from the restrictions imposed by a Device Access Manager policy. Trusted users usually include
system administrators.
NOTE:
Adding a user to the Device Administrators group does not automatically allow the user to
access devices. In the
Device Class Configuration
view, if the Users group is denied access to a
device, the Device Administrators group must be granted access in order for members of the group to
have access to the device. However, the
Simple Configuration
view can be used to deny access to
device classes for all users who are not members of the Device Administrators group.
To add users to the Device Administrators group:
1.
In the
Advanced Settings
view, click
+
.
2.
Enter the user name of the trusted user.
Advanced Settings
89