Reference Guide

Dell Security Center v10.2.7 AdminHelp
105
When you enable encryption for these files in Windows or Mac, you can also set policies for users to
view the encrypted files in mobile devices or the web portal. See
Set Policies to Protect Office
Documents in Mobile Devices or Set Policies to Protect Documents on the web client.
Set Force-Protected policies for internal users
To set Force-Protected policies for Office and other file types:
1. Log in to the Dell Security Center.
2. In Populations > Enterprise, in the Data Guardian technology group, click the Protected
Office Documents policy group.
3. Set Protected Office Documents to On.
Note: You must enable the policy if you want to use any of the policies in the Protected Office
Documents policy group.
4. At the Enterprise, Endpoint Groups, or Endpoints level, click Show advanced settings and
select the Force Protected Files Only check box.
5. For Mac, in the Data Guardian technology group, click Settings and ensure the Allow Mac Data
Guardian Activation check box is selected.
6. Based on security requirements, set additional policies at the Enterprise, Endpoint Groups, or
Endpoints levels.
For Endpoint Groups or Endpoints, click an option to access the Detail page’s Security Policies
tab.
Determine file types to protect
For Windows and Mac, a sweep of users’ computers encrypts all .docx, .pptx, .xlsx, .docm, .pptm, .xlsm,
or .pdf documents to ensure protection.
This table lists policies required for enabling protected Office documents in Opt-in mode.
If the Protected Office Documents policy is Off, no Office-protected formatting takes place, regardless of
other policies.
Policy Description for Force Protected
Version
availability
Enterprise > Data Guardian > Protected
Office Documents:
Protected Office Documents
> On
Ente
rprise, Endpoint Groups, or Endpoints >
Data Guardian > Protected Office Documents
> advanced:
Force Protected Files Only
> check box
selected
For Mac:
Enterprise > Data Guardian > Protected
Office Documents > Settings:
Allow Mac Data Guardian Activation
> check
box selected
A sweep of users’ computers encrypts all Office documents.
Windows
On Windows, for Data Guardian to sweep the Office documents, the user must
log in and be connected to the network.
Sweep ignores network file share, optical, and removable drives..
Mac
Mac protects files in the Home folder.
Windows and Mac - audit events
• For compliance and monitoring purposes, creates audit events.
Windows
Mac
Protected Office Documents - additional policies for Force-Protected mode