Reference Guide

Manage Policies
298
cannot revoke key access.
cannot revoke key access.
Opt-in mode
Opt-in mode - files that Data Guardian swept
• Secure documents folder sweep
• Basic File Protection sweep (additional file types)
• TITUS classification (Windows)
• Content Based Protection (Windows)
Note: Sweeping only applies to internal users. External users'
computers are not swept.
Internal users outside the access group and external users:
Same as above.
Internal users outside the access group a
Same as above.
Opt-in mode files protected through:
• Protected Save As
• Right-click protect
• Basic File Protection - direct save
• Protected messages
Internal users outside the access group and external users:
Same as above.
Internal users outside the access group a
Same as above.
However, if the owner of the new file is r
new user
group, other members still have
New members of the group, or users who
Guardian after the group was c
reated, m
or request access of the file.
Change the owner of a file
After enabling Access Groups, if another user was designated as the owner of a shared, encrypted
document, you can change the owner. See Key Management
.
Return to top
Removable Media Encryption
Removable Media Encryption
A note about Removable Media policies: Mac Media Encryption policies are device-based policies. This
is different behavior than Windows Media Encryption, which are user-based.
Policy descriptions also display in tooltips in the Management Console. In this table, master policies are
in bold font.
Policy Default Setting Description
Windows Media Encryption
This technology works on Windows computers using Dell Encryption External Media to encrypt data on
removable devices, which can be accessed using a user-defined password. These policies allow
configuration of the Encryption External Media password requirements and the removable media
allowed.
Windows Media Encryption Off
This policy must be selected to use all other
removable media policies. Not Selected means
that no encryption of removable media takes
place, regardless of other policy values.
EMS Scan External Media Not Selected
Selected allows removable media to be scanned
every time it is inserted.
When this policy is Not Selected and the Windows
Media Encryption policy is Selected, only new and
changed files are encrypted.
More...
A scan occurs at every inser
tion so that any files