Administrators may manage Endpoint Encryption
using only PolicyServer MMC or manage Endpoint Encryption
using Control Manager for policy, user and device
management and PolicyServer MMC for advanced log management and reporting.
The following
tables explain how policies are mapped between PolicyServer MMC and Control Manager. For environments using Control Manager to manage PolicyServer, use PolicyServer MMC
to control any policy not listed in the table.
Full Disk Encryption Policy Mapping
|
Control Manager Label
|
PolicyServer MMC Path
|
|
Encryption
|
|
|
Encrypt endpoint
|
|
|
Client Settings
|
|
|
Bypass Full Disk Encryption
preboot
|
|
|
Users are allowed to access system recovery tools on the
device
|
|
|
Notifications
|
|
|
If the endpoint is found, display the following message
|
|
|
Display Technical Support contact information
|
|
|
Show legal notice
|
|
|
|
|
|
Show legal notice
|
|
File Encryption Policy Mapping
|
Control Manager Label
|
PolicyServer MMC Path
|
|
Folders to Encrypt
|
|
|
Folders to Encrypt text box
|
|
|
Encryption Key Used
|
|
|
Encryption Key Used
|
|
|
Storage Devices
|
|
|
Disable optical drives
|
|
|
Disable USB drives
|
|
|
Encrypt all files and folders on USB drives
|
|
|
Specify the file path to encrypt on USB devices
|
|
|
Notifications
|
|
|
Show legal notice
|
|
|
|
|
|
Show legal notice text box
|
|
Common Policy Mapping
|
Control Manager Label
|
PolicyServer MMC Path
|
|
Allow User to Uninstall
|
|
|
Allow non-administrator accounts to uninstall agent
software
|
|
|
Lockout and Lock Device Actions
|
|
|
Lock account after <number> days
|
|
|
Account lockout action
|
|
|
Failed logon attempts allowed
|
|
|
Full Disk Encryption:
Device locked action
|
|
|
Full Disk Encryption:
Number of minutes to lock device
|
|
|
File Encryption:
Device locked action
|
|
|
File Encryption:
Number of minutes to lock device
|
|
|
Password
|
|
|
User must change password after <number>
days
|
|
|
User cannot reuse the previous <number>
passwords
|
|
|
Number of consecutive characters allowed in a password
|
|
|
Minimum length allowed for passwords
|
|
|
Password Character Requirements
|
|
|
Letters
|
|
|
Lowercase characters
|
|
|
Uppercase characters
|
|
|
Numbers
|
|
|
Symbols
|
|
Remote Help Policy Locations
|
Policy Name
|
PolicyServer MMC Menu Path
|
Control Manager Menu Path
|
|
Account Lockout Action
|
|
|
|
Account Lockout Period
|
|
|
|
Device Locked Action
|
For each agent:
|
For each agent:
|
|
Failed Login Attempts Allowed
|
For each agent:
|
For each agent:
|