Device Class Configuration | HP 2 Base Model manual

Starting the background service

The first time a new policy is defined and applied, the HP ProtectTools Device Locking/Auditing background service starts automatically, and it is set to start automatically whenever the system starts.

NOTE: A device profile must be defined before the background service prompt is displayed.

Administrators can also start or stop this service:

1.In Windows 7, click Start, click Control Panel, and then click System and Security.

– or –

In Windows Vista®, click Start, click Control Panel, and then click System and Maintenance.

– or –

In Windows XP, click Start, click Control Panel, and then click Performance and

Maintenance.

2.Click Administrative Tools, and then click Services.

3.Select the HP ProtectTools Device Locking/Auditing service.

4.To start the service, click Start.

– or –

To stop the service if it is running, click Stop.

Stopping the Device Locking/Auditing service does not stop device locking. Two components enforce device locking:

●Device Locking/Auditing service

●DAMDrv.sys driver

Starting the service starts the device driver, but stopping the service does not stop the driver.

To determine whether the background service is running, open a command prompt window, and then type sc query flcdlock.

To determine whether the device driver is running, open a command prompt window, and then type sc query damdrv.

Device Class Configuration

Administrators can view and modify lists of users and groups that are allowed or denied permission to access classes of devices or specific devices.

82 Chapter 8 Device Access Manager for HP ProtectTools (select models only)

Image 90

HP 2 Base Model manual Device Class Configuration, Starting the background service

Contents

HP ProtectTools First Edition January Document Part Number Table of contents HP ProtectTools Security Manager Drive Encryption for HP ProtectTools select models only File Sanitizer for HP ProtectTools 100 102 107112 Application Features Introduction to security HP ProtectTools features Module Key features HP ProtectTools features Credential Manager for HP ProtectTools Drive Encryption for HP ProtectTools Device Access Manager for HP ProtectTools File Sanitizer for HP ProtectTools Privacy Manager for HP ProtectTools Computrace for HP ProtectTools formerly LoJack ProEmbedded Security for HP ProtectTools select models only Page Restricting access to sensitive data Achieving key security objectivesProtecting against targeted theft Creating strong password policies Managing HP ProtectTools passwords Additional security elementsAssigning security roles Additional security elements Creating a secure password Backing up and restoring HP ProtectTools credentials Getting started with the Setup Wizard Page HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Using Administrative Console Security Users Credentials Configuring your system Setting up authentication for your computerLogon Policy Settings Managing usersSession Policy Credentials SpareKeyFingerprints Smart card Face General tab Configuring your applicationsUpdates and Messages Applications tab HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Security Applications Status HP ProtectTools desktop gadgetBlue-OK Password Manager My Logons Adding logons Editing logons Using the Logons menu Organizing logons into categoriesManaging your logons Assessing your password strength Password Manager icon settings VeriSign Identity Protection VIP Click Add LogonClick Continue Settings Changing your Windows passwordCredential Manager Setting up your SpareKey Enrolling your fingerprints Under Central Management, click Setup Wizard Setting up a smart cardClick the Administration tab Initializing the smart card Configuring the smart card Enrolling scenes for face logon Advanced User Settings Click Create PIN Click OK HP ProtectTools Security Manager Setting your preferences Your personal ID cardFingerprint tab Backing up and restoring your data Show scan quality feedbackClick Back up data Click Restore data Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Activating Drive Encryption for standard hard drives Click FeaturesGeneral tasks Activating Drive Encryption for self-encrypting drives Software encryption Hardware encryption Deactivating Drive Encryption Logging in after Drive Encryption is activated Smart cards Pcmcia readersUSB readers Displaying encryption status Click SettingsProtect your data by encrypting your hard drive Under My Data, click Drive Encryption Managing Drive Encryption administrator task Advanced tasks Backup and recovery administrator task Recovering encryption keysBacking up encryption keys Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Requesting a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates Click Request a Privacy Manager Certificate Setting up a Privacy Manager Certificate Importing a third-party certificate Renewing a Privacy Manager Certificate Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details Click Certificate details Revoking your Privacy Manager Certificate Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate Click Advanced Managing Trusted Contacts Adding Trusted ContactsAdding a Trusted Contact Adding Trusted Contacts using Microsoft Outlook contacts Viewing Trusted Contact details Deleting a Trusted ContactChecking revocation status for a Trusted Contact Using Privacy Manager in Microsoft Outlook Configuring Privacy Manager for Microsoft OutlookSigning and sending an e-mail message Using Privacy Manager in a Microsoft Office 2007 document Sealing and sending an e-mail messageViewing a sealed e-mail message Configuring Privacy Manager for Microsoft Office Signing a Microsoft Office document Encrypting a Microsoft Office document Adding a suggested signers signature line Removing encryption from a Microsoft Office document Sending an encrypted Microsoft Office documentViewing a signed Microsoft Office document Viewing an encrypted Microsoft Office document Backing up Privacy Manager Certificates and Trusted Contacts Restoring Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer Setting a shred schedule Setting a free space bleaching schedule Customizing a shred profile Selecting or creating a shred profileSelecting a predefined shred profile High Security Medium Security Low Security Customizing a simple delete profile Page Using a key sequence to initiate shredding Using the File Sanitizer icon Manually shredding one assetManually shredding all selected items Viewing the log files Manually activating free space bleachingAborting a shred or free space bleaching operation Click Bleach Now Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Configuring device access Simple Configuration Device Class Configuration Starting the background servicePage Denying access to a user or group Allowing access for a user or a groupDevice class All devices Individual device Allowing access to a specific device for one user of a group Jita Configuration Removing settings for a user or a groupResetting the configuration Creating a Jita for a user or group Creating an extendable Jita for a user or group Disabling a Jita for a user or group Advanced Settings Device Administrators group ESATA Support Unmanaged Device ClassesPage Theft recovery Go to https//cc.absolute.com Embedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Initializing the embedded security chip Setting up the basic user account Using the personal secure drive Encrypting files and foldersSending and receiving encrypted e-mail Changing the Basic User Key password Creating a backup file Restoring certification data from the backup fileBacking up and restoring Changing the owner password Resetting a user password Migrating keys with the Migration Wizard Localized password exceptions Page Bios Special key handling Bios What to do when a password is rejected Glossary Emergency recovery archive Cryptographic service provider CSPDevice access control policy Cryptography Fingerprint Power-on authenticationEncryption File System EFS Free space bleaching Revocation password RebootRestore Sata device mode Token Windows administratorSuggested signer Trusted Contact Index Jita FacePage