Configuring Advanced Permissions

Although you can configure advanced permissions and notifications for a specific storage device on the user interface, the permissions and notifications are actually applied to all storage devices. This means that when you click Advanced permissions and notifications for CD/DVD, you are actually defining permissions and notifications for all storage devices.


For details about advanced permissions and how to correctly define programs with advanced permissions, see Advanced Permissions for Storage Devices.

  1. Click Advanced permissions and notifications.

    A new screen opens.

  2. Below Programs with read and write access to storage devices, type a program path and file name and then click Add.

    Digital Signature Provider is not accepted.

  3. Below Programs on storage devices that are allowed to execute, type the program path and name or the Digital Signature Provider and then click Add.
  4. Select Display a notification message on the endpoint when OfficeScan detects unauthorized device access.
    • Unauthorized device access refers to prohibited device operations. For example, if the device permission is "Read", users will not be able to save, move, delete, or execute a file on the device.

    • You can modify the notification message. For details, see Modifying Device Control Notifications.

  5. Click Back.