HP d220 9Device Access Manager for HP ProtectTools

9Device Access Manager for HP ProtectTools

This security tool is available to administrators only. Device Access Manager for HP ProtectTools has the following security features that protect against unauthorized access to devices attached to your computer system:

●Device profiles that are created for each user to define device access

●Device access that can be granted or denied on the basis of group membership

NOTE: Device Access Manager uses Windows Local Users and Groups to manage access. Windows Home versions do not support Local Users and Groups, therefore Device Access Manager will not function properly. However, Device Access Manager will work in Microsoft Windows Vista Home version if you use DOS commands for the user setup. Refer to the Device Access Manager help file for instructions.

Starting background service

For device profiles to be applied, the HP ProtectTools Device Locking/Auditing background service must be running. When you first attempt to apply device profiles, HP ProtectTools Administrative Console opens a dialog box to ask if you would you like to start the background service. Click Yes to start the background service and set it to start automatically whenever the system boots.

Simple configuration

Device Access Manager creates a new User Group during initialization called Device Administrators for accessing or exploring devices as an administrator. Place users in this group that you want to have administrative access to the devices you control through Device Access Manager Simple Configuration.

This feature allows you to deny access to the following classes of devices:

●USB devices for all non-Device Administrators

●All removable media (floppy disks, personal music players, pen drives, etc.) for all non-Device Administrators

●All DVD/CD-ROM drives for all non-Device Administrators

●All serial and parallel ports for all non-Device Administrators

To deny access to a class of device for all non-Device Administrators:

1.Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console.

2.In the left pane, click Device Access Manager, and then click Simple Configuration.

3.In the right pane, select the check box of a device to deny access.

4.Click the Save icon.

ENWW	Starting background service 53

Contents

Page Page About This Book WARNING CAUTION: Page Table of contents Page Page Page Page Page 1 Introduction to security Page Credential Manager (Password Manager) for HP ProtectTools Example 1: Example 2: Embedded Security for HP ProtectTools Drive Encryption for HP ProtectTools File Sanitizer for HP ProtectTools Device Access Manager for HP ProtectTools Privacy Manager for HP ProtectTools Computrace for HP ProtectTools (formerly known as LoJack Pro) HP ProtectTools Administrative Console Protecting against targeted theft Restricting access to sensitive data Preventing unauthorized access from internal or external locations Creating strong password policies Assigning security roles Managing HP ProtectTools passwords Creating a secure password Backing up credentials and settings 2HP ProtectTools Security Manager Administrative Console Management Tools Links Setup Wizard Help About Logon tab Session tab Adding a user Removing a user Checking user status Page 3 HP ProtectTools Security Manager Changing your Windows password Credentials 2.Click Windows Password Current Windows password Change Initializing the Smart Card Configure the use of the smart card Setup a Smart Card 4.Ensure that Initialize the smart card is selected PIN Drive Encryption Encryption Status Device Access Manager Simple Configuration Device Class Configuration Discover More Add Applications Updates and Messages Keep me informed about new applications and updates Check Now Browse Restoring your data 3.Click Restore data Windows user name Choose Picture 4Password Manager for HP ProtectTools ●For a website - select Add [domain name] to Password Manager ●For a program - select Add this logon screen to Password Manager Manage Choose other fields Submit logon data Submit account data Password Manager Add Category All To manage your logons: Add Logon Edit To add an additional logon for a website or program: Add additional logon 5 Drive Encryption for HP ProtectTools Activating a TPM-protectedpassword Encrypting or decrypting individual drives Creating backup keys 6 Privacy Manager for HP ProtectTools Requesting a Privacy Manager Certificate Installing a Privacy Manager Certificate Renewing a Privacy Manager Certificate 3.Click Renew certificate Setting a default Privacy Manager Certificate Set default Deleting a Privacy Manager Certificate Adding Trusted Contacts Adding a Trusted Contact Trusted Contacts Invite Contacts Send Adding Trusted Contacts using your Microsoft Outlook address book Viewing Trusted Contact details Deleting a Trusted Contact Checking revocation status for a Trusted Contact Configuring Privacy Manager in a Microsoft Office document File Sanitizer Shred Now Documents Signing a Microsoft Office document Insert Text Signature Line Privacy Manager Signature Provider Suggested signer Signing a Microsoft Office Document Removing the encryption from a Microsoft Office document Remove Encryption Sending an encrypted Microsoft Office document New Using Privacy Manager in Microsoft Outlook Configuring Privacy Manager for Microsoft Outlook E-mail Privacy Signing and sending an e-mailmessage Exporting Privacy Manager Certificates and Trusted Contacts Importing Privacy Manager Certificates and Trusted Contacts 7 File Sanitizer for HP ProtectTools Setting a free space bleaching schedule Bleaching Activate Scheduler Setting a shred schedule Shred View Details Shred the following Customizing an advanced security shred profile Advanced Security Settings Available shred options Simple Delete Settings Available delete options Delete the following Do not delete the following Using a key sequence to initiate shredding Manually shredding one asset Shred One Open Manually shredding all selected items Manually activating free space bleaching Aborting a shred or free space bleaching operation Stop Viewing the log files 8Embedded Security for HP ProtectTools Setup password New password Verify new password TPM Embedded Security 5.Select Embedded security device state and change to Enable Using the Personal Secure Drive Encrypting files and folders Encrypt ●Apply changes to this folder only ●Apply changes to this folder, subfolders, and files Creating a backup file Restoring certification data from the backup file 9Device Access Manager for HP ProtectTools Adding a user or a group Select Users or Groups Removing a user or a group Denying or allowing access to a user or group User/Groups Scenario: Result: Creating a JITA for a user or group JITA Configuration removable media Extendable Disabling a JITA for a user or group 10 Computrace for HP ProtectTools Glossary Drive Encryption key recovery service Drive Encryption logon screen DriveLock emergency recovery archive Encryption File System (EFS) revocation password seal for trusted contacts security logon method Send Security button shred cycle trusted message Trusted Platform Module (TPM) embedded security chip trusted sender TXT user Index P password R restricting