9Device Access Manager for HP ProtectTools

This security tool is available to administrators only. Device Access Manager for HP ProtectTools has the following security features that protect against unauthorized access to devices attached to your computer system:

Device profiles that are created for each user to define device access

Device access that can be granted or denied on the basis of group membership

NOTE: Device Access Manager uses Windows Local Users and Groups to manage access. Windows Home versions do not support Local Users and Groups, therefore Device Access Manager will not function properly. However, Device Access Manager will work in Microsoft Windows Vista Home version if you use DOS commands for the user setup. Refer to the Device Access Manager help file for instructions.

Starting background service

For device profiles to be applied, the HP ProtectTools Device Locking/Auditing background service must be running. When you first attempt to apply device profiles, HP ProtectTools Administrative Console opens a dialog box to ask if you would you like to start the background service. Click Yes to start the background service and set it to start automatically whenever the system boots.

Simple configuration

Device Access Manager creates a new User Group during initialization called Device Administrators for accessing or exploring devices as an administrator. Place users in this group that you want to have administrative access to the devices you control through Device Access Manager Simple Configuration.

This feature allows you to deny access to the following classes of devices:

USB devices for all non-Device Administrators

All removable media (floppy disks, personal music players, pen drives, etc.) for all non-Device Administrators

All DVD/CD-ROM drives for all non-Device Administrators

All serial and parallel ports for all non-Device Administrators

To deny access to a class of device for all non-Device Administrators:

1.Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console.

2.In the left pane, click Device Access Manager, and then click Simple Configuration.

3.In the right pane, select the check box of a device to deny access.

4.Click the Save icon.

ENWW

Starting background service 53