Configuring device access, Simple Configuration | HP 2 guide

Setup Procedures

Configuring device access

HP ProtectTools Device Access Manager offers four views:

●Simple Configuration—Allow or deny access to classes of devices, based on membership in the Device Administrators group.

●Device Class Configuration—Allow or deny access to types of devices or specific devices for specific users or groups.

●JITA Configuration—Configure just-in-time authentication (JITA), allowing selected users access to DVD/CD-ROM drives or removable media by authenticating themselves.

●Advanced Settings—Configure a list of drive letters for which Device Access Manager will not restrict access, such as the C or system drive. Membership in the Device Administrators group can also be managed from this view.

Simple Configuration

Administrators can use the Simple Configuration view to allow or deny access to the following classes of devices for all non–device administrators:

●All removable media (diskettes, USB flash drives, and so on)

●All DVD/CD-ROM drives

●All serial and parallel ports

●All Bluetooth® devices

●All modem devices

●All PCMCIA/ExpressCard devices

●All 1394 devices

To allow or deny access to a class of devices for all non-device administrators, follow these steps:

1.In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click Simple Configuration.

2.In the right pane, to deny access, select the check box for a device class or a specific device. Clear the check box to allow access to that device class or specific device.

If a check box is grayed out, values affecting the access scenario have been changed from within the Device Class Configuration view. To reset to the factory settings, click Reset in the Device Class Configuration view.

3.Click Apply.

NOTE: If the background service is not running, a dialog box opens to ask if you would like to start it. Click Yes.

4.Click OK.

Setup Procedures 81

Image 89

HP 2 Base Model manual Configuring device access, Simple Configuration

Contents

HP ProtectTools First Edition January Document Part Number Table of contents HP ProtectTools Security Manager Drive Encryption for HP ProtectTools select models only File Sanitizer for HP ProtectTools 100 112 102107 Introduction to security Application Features Module Key features HP ProtectTools features HP ProtectTools features Drive Encryption for HP ProtectTools Credential Manager for HP ProtectTools File Sanitizer for HP ProtectTools Device Access Manager for HP ProtectTools Embedded Security for HP ProtectTools select models only Privacy Manager for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro Page Protecting against targeted theft Restricting access to sensitive dataAchieving key security objectives Creating strong password policies Assigning security roles Managing HP ProtectTools passwordsAdditional security elements Additional security elements Backing up and restoring HP ProtectTools credentials Creating a secure password Getting started with the Setup Wizard Page HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Security Users Credentials Using Administrative Console Logon Policy Configuring your systemSetting up authentication for your computer Session Policy SettingsManaging users Fingerprints CredentialsSpareKey Face Smart card Updates and Messages Configuring your applicationsGeneral tab Applications tab HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Blue-OK Security Applications StatusHP ProtectTools desktop gadget My Logons Password Manager Adding logons Editing logons Managing your logons Using the Logons menuOrganizing logons into categories Password Manager icon settings Assessing your password strength Click Continue VeriSign Identity Protection VIPClick Add Logon Credential Manager SettingsChanging your Windows password Enrolling your fingerprints Setting up your SpareKey Click the Administration tab Setting up a smart cardUnder Central Management, click Setup Wizard Initializing the smart card Enrolling scenes for face logon Configuring the smart card Click Create PIN Advanced User Settings Click OK HP ProtectTools Security Manager Fingerprint tab Setting your preferencesYour personal ID card Click Back up data Backing up and restoring your dataShow scan quality feedback Click Restore data Drive Encryption for HP ProtectTools select models only Opening Drive Encryption General tasks Click FeaturesActivating Drive Encryption for standard hard drives Activating Drive Encryption for self-encrypting drives Hardware encryption Software encryption Logging in after Drive Encryption is activated Deactivating Drive Encryption USB readers Smart cardsPcmcia readers Protect your data by encrypting your hard drive Click SettingsDisplaying encryption status Under My Data, click Drive Encryption Advanced tasks Managing Drive Encryption administrator task Backing up encryption keys Backup and recovery administrator taskRecovering encryption keys Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Managing Privacy Manager Certificates Setup proceduresRequesting a Privacy Manager Certificate Click Request a Privacy Manager Certificate Importing a third-party certificate Setting up a Privacy Manager Certificate Viewing Privacy Manager Certificate details Setting a default Privacy Manager CertificateRenewing a Privacy Manager Certificate Click Certificate details Restoring a Privacy Manager Certificate Deleting a Privacy Manager CertificateRevoking your Privacy Manager Certificate Click Advanced Adding a Trusted Contact Managing Trusted ContactsAdding Trusted Contacts Adding Trusted Contacts using Microsoft Outlook contacts Checking revocation status for a Trusted Contact Viewing Trusted Contact detailsDeleting a Trusted Contact Signing and sending an e-mail message Using Privacy Manager in Microsoft OutlookConfiguring Privacy Manager for Microsoft Outlook Viewing a sealed e-mail message Using Privacy Manager in a Microsoft Office 2007 documentSealing and sending an e-mail message Signing a Microsoft Office document Configuring Privacy Manager for Microsoft Office Adding a suggested signers signature line Encrypting a Microsoft Office document Viewing a signed Microsoft Office document Removing encryption from a Microsoft Office documentSending an encrypted Microsoft Office document Viewing an encrypted Microsoft Office document Restoring Privacy Manager Certificates and Trusted Contacts Backing up Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer Setting a free space bleaching schedule Setting a shred schedule Selecting a predefined shred profile Selecting or creating a shred profileCustomizing a shred profile High Security Medium Security Low Security Customizing a simple delete profile Page Using a key sequence to initiate shredding Manually shredding all selected items Using the File Sanitizer iconManually shredding one asset Aborting a shred or free space bleaching operation Manually activating free space bleachingViewing the log files Click Bleach Now Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Simple Configuration Configuring device access Starting the background service Device Class ConfigurationPage Device class All devices Individual device Denying access to a user or groupAllowing access for a user or a group Allowing access to a specific device for one user of a group Resetting the configuration Jita ConfigurationRemoving settings for a user or a group Creating an extendable Jita for a user or group Creating a Jita for a user or group Disabling a Jita for a user or group Device Administrators group Advanced Settings Unmanaged Device Classes ESATA SupportPage Go to https//cc.absolute.com Theft recovery Embedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Initializing the embedded security chip Setting up the basic user account Sending and receiving encrypted e-mail Using the personal secure driveEncrypting files and folders Changing the Basic User Key password Backing up and restoring Creating a backup fileRestoring certification data from the backup file Resetting a user password Changing the owner password Migrating keys with the Migration Wizard Localized password exceptions Page Special key handling Bios Bios What to do when a password is rejected Glossary Device access control policy Cryptographic service provider CSPEmergency recovery archive Cryptography Encryption File System EFS Power-on authenticationFingerprint Free space bleaching Restore RebootRevocation password Sata device mode Suggested signer Windows administratorToken Trusted Contact Index Face JitaPage