Trusted devices

This group of settings contains the Configure button. Clicking this button opens the Trusted devices window. In this window, you can add a device to a list of trusted devices by the device ID or by selecting it from the list of devices detected on the client devices.

Device Control settings

This group of settings contains buttons that open windows where you can configure access mode for devices by type and connection buses.

Device name

Name of a trusted device.

Host name

Name of the client device the trusted device is connected to.

Find on hosts

Clicking the button displays the devices found on the connected client devices using the specified ID or mask. The button is available if the Device ID field is not empty.

Comment

The field for entering a comment for the device that you want to add to the list of trusted devices (optional).

Device type

In this drop-down list, you can select the type of connected device to search for (for example, Hard drives or Smart card readers). The All devices option is selected by default.

Find on hosts

When you click this button, the application searches the device with the specified settings. The search results are displayed in the table below.

Access mode

Device access mode. Right-clicking with the mouse opens a context menu where you can select one of the following options:

• Allow: allow access to devices of the selected type.
• Block: prohibit access to devices of the selected type.
• Depends on bus (default value): allow or block access to the devices depending on the access mode for a connection bus.
• By rule – allow or block access to devices, depending on the access rule and schedule.

Device access rules

This table contains access schedules for users and user groups. It consists of the following columns:

• Access schedule – names of existing access schedules. The check box next to the schedule indicates whether this schedule is used by the component.
• Access – access type for the schedule: Allow (grant access to devices of the selected type) or Block (deny access to devices of the selected type).

You can configure schedules only for hard drives, removable drives, floppy disks, and CD/DVD drives. By default, the table contains the Default access schedule, which provides all users with full access to devices (the \Everyone item is selected in the Users and/or user groups list) at any time if access via the connection bus is allowed for this type of device.

You can add, edit, and delete access schedules for selected users. The Default schedule cannot be modified or removed.

User or group name

Name of a local or domain user (without specifying the full name with the domain, if the system allows entering user names in this format, or in the <domain name>\<user name> or <user name>@<domain name>) format, or the name of a group of users to which the rule applies.

Time intervals

The table where you can select time intervals for the schedule (days and hours).

Intervals highlighted in green are included to the schedule.

To exclude an interval from the schedule, click the corresponding cells. Intervals excluded from the schedule are highlighted in gray.

By default, all intervals (24/7) are included to the schedule.

Access mode

Connection bus access mode. Right-clicking opens a context menu where you can select one of the following options:

• Allow (default): provide access to devices connected through this bus.
• Block: deny access to devices connected using this connection bus.