HP Pro 3120 Small Form Factor-PC - Manual (Page 52)

9 Device Access Manager for
HP ProtectTools
This security tool is available to administrators only. Device Access Manager for HP ProtectTools has
the following security features that protect against unauthorized access to devices attached to your
computer system:
● Device profiles that are created for each user to define device access
● Device access that can be granted or denied on the basis of group membership
NOTE: Device Access Manager uses Windows Local Users and Groups to manage access. Windows
Home versions do not support Local Users and Groups, therefore Device Access Manager will not
function properly. However, Device Access Manager will work in Microsoft Windows Vista Home version
if you use DOS commands for the user setup. Refer to the Device Access Manager help file for
instructions.
Starting background service
For device profiles to be applied, the HP ProtectTools Device Locking/Auditing background service must
be running. When you first attempt to apply device profiles, HP ProtectTools Administrative Console
opens a dialog box to ask if you would you like to start the background service. Click Yes to start the
background service and set it to start automatically whenever the system boots.
Simple configuration
Device Access Manager creates a new User Group during initialization called Device Administrators for
accessing or exploring devices as an administrator. Place users in this group that you want to have
administrative access to the devices you control through Device Access Manager Simple Configuration.
This feature allows you to deny access to the following classes of devices:
● USB devices for all non-Device Administrators
● All removable media (floppy disks, personal music players, pen drives, etc.) for all non-Device
Administrators
● All DVD/CD-ROM drives for all non-Device Administrators
● All serial and parallel ports for all non-Device Administrators
44 Chapter 9 Device Access Manager for HP ProtectTools ENWW