H3C Technologies H3C Intelligent Management Center - Manual (Page 89)

73
7. Click OK.
Deleting a hard disk encryption software policy
A hard disk encryption software policy cannot be deleted when it is assigned to a security policy. To
delete the hard disk encryption software policy, first remove it from the security policy. For more
information, see "
Modifying a security policy ."
To delete a hard disk encryption software policy:
1. Click the User tab.
2. From the navigation tree, select User Security Policy > Security Software Policies > Hard Disk
Encryption.
The hard disk encryption software policy list displays all hard disk encryption software policies.
3. Click the Delete icon for the hard disk encryption software policy you want to delete.
A confirmation dialog box appears.
4. Click OK.
Managing PC software control groups
You can enable PC software control in a security policy and specify PC software control groups to be
checked. When an access user is authenticated, the iNode client checks software, processes, services,
and files on the PC according to the configuration in the security policy.
PC software control management allows you to view, add, modify, and delete a PC software control
group. Table 20 describes the check type for each type of PC software control group.
Table 20 PC software control groups and check types
Group type Check types
Software
A software-type PC software control group applies only to Windows operating systems.
It has the following check types:
• Installed Forbidden—Prohibits any software products in the control group from being
installed on the user endpoint.
• Installed Required—Requires all software products in the control group to be
installed on the user endpoint.
• Installed Allowed—Allows only the software products in the control group to be
installed on the user endpoint. Only one control group can be set as Installed
Allowed.
Process
A process-type PC software control group has the following check types:
• Running Forbidden—Prohibits any processes in the control group from running on the
user endpoint.
• Running Required—Requires all processes in the control group to be running on the
user endpoint.
Service
A service-type PC software control group has the following check types:
• Started Forbidden—Prohibits any services in the control group from being started on
the user endpoint.
• Started Required—Requires all services in the control group to be started on the user
endpoint.