JITA-enabled users will be able to access some devices for which policies created in the Device Class Configuration or Simple Configuration view have been restricted.

●Scenario—A Simple Configuration policy is configured to deny all non-Device Administrators access to the DVD/CD-ROM drive.

●Result—A JITA-enabled user who attempts to access the DVD/CD-ROM drive receives the same “access denied” message as a non-JITA-enabled user. Then a balloon message is displayed, asking if the user would like JITA access. If the balloon is clicked, the authenticate user dialog is displayed. When the user enters credentials successfully, access is granted to the DVD/CD-ROM drive.

The JITA period can be authorized for a set number of minutes or 0 minutes. A JITA period of 0 minutes will not expire. Users will have access to the device from the time they authenticate until the time they log off the system.

The JITA period can also be extended, if configured to do so. In this scenario, 1 minute before the JITA period is about to expire, users can click the prompt to extend their access without having to re- authenticate.

Whether the user is given a limited or unlimited JITA period, as soon as the user logs off the system or another user logs in, the JITA period expires. The next time the user logs in and attempts to access a JITA-enabled device, a prompt to enter credentials is displayed.

JITA is available for the following device classes:

●DVD/CD-ROM drives

●Removable media

Creating a JITA for a user or group

Administrators can allow users or groups to access devices using just-in-time authentication.

1.In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration.

2.From the device’s drop-down menu, select either Removable media or DVD/CD-ROM drives.

3.Click + to add a user or group to the JITA configuration.

4.Select the Enabled check box.

5.Set the JITA period to the required time.

6.Click Apply.

The user must log out and then log on again for the new JITA setting to be applied.

Creating an extendable JITA for a user or group

Administrators can allow user or group access to devices using just-in-time authentication that the user can extend before it expires.

1.In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration.

2.From the device’s drop-down menu, select either removable media or DVD/CD-ROM drives.

3.Click + to add a user or group to the JITA configuration.

4.Select the Enabled check box.

5.Set the JITA period to the required time.

52 Chapter 7 Device Access Manager for HP ProtectTools (select models only)