Reference Guide

Security Management Server v10.2.7 AdminHelp
313
Delay Authentication Not Selected
If Selected, users are not prompted to activate or
authenticate to the Dell Server until required, such as to
use media encrypted with Encryption External Media.
No Auth User List Dictionary
Users matching this dictionary are not required to
activate or authenticate to the Dell Server.
Example:
<key>NoAuthenticateUsers</key>
<dict>
<key>dsAttrTypeStandard:AuthenticationAuthority</key>
<string>;Kerberosv5;;@students.school.edu;
students.school.edu</string>
</dict>
FileVault 2 PBA User List Dictionary
Users matching this dictionary are allowed to add
themselves to FileVault Preboot Authentication.
Example:
<key>FV2PBAUsers</key>
<dict>
<key>dsAttrTypeStandard:AuthenticationAuthority</key>
<string>;Kerberosv5;;*@students.school.edu;
students.school.edu*</string>
</dict>
Port Control
Port Control
Policy descriptions also display in tooltips in the Management Console. In this table, master policies are
in bold font.
Policy Default Setting Description
Windows Port Control
This technology allows for control of all the physical ports on a Windows computer
(disable/enable/bypass), and can be customized by port type.
Windows Port Control Disabled
Enable or Disable all Port Control System policies.
If this policy is set to Disable, no Port Control
System policies are applied, regardless of other
Port Control System policies.
All
PCS policies require a reboot before the policy
takes effect.
Port: Express Card Slot Enabled
Enable, Disable, or Bypass ports exposed through
the Express Card Slot.
Port: USB Enabled
Enable, Disable, or Bypass port access to external
USB ports.
USB port
-level blocking and HID class-level
blocking is
only honored if we can identify the
computer chassis as a laptop/
notebook form-
factor. We rely on the computer's BIOS for the
identification of the chassis.
Port: eSATA Enabled
Enable, Disable, or Bypass port access to external
SATA ports.
Class: Storage Enabled
PARENT to the next 3 policies. Set this policy to
Enable
d to use the next 3 Subclass Storage
polices. Setting this policy to Disabled disables all
3 Subclass Storage policies
- no matter what their
value.