Reference Guide

Security Management Server v10.2.10 AdminHelp
265
policy is for FV2 encryption.
Ignore –
Default behavior, Dell encrypted volumes are
reported as protected if the policy requires FV2
encryption.
Report – Conflicted volumes are reported as
unprotected.
Convert – Dell encrypted volumes are
converted to FV2
volumes and reported as unprotected while conver
ting.
See basic settings
Mac Global Settings
This technology defines Mac encryption behavior, including targeted volumes, polling intervals, and
restart policies.
Max Password Delay 300
0-32400 seconds
Limits the maximum delay in seconds that can be set
in the system preferences “max password delay after
screen saver or sleep” of the Security panel.
Delay Authentication Not Selected
If Selected, users are not prompted to activate or
authenticate to the Dell Server until required, such
as to use media encrypted with Encryption External
Media.
No Auth User List Dictionary
Users matching this dictionary are not required to
activate or authenticate to the Dell Server.
Example:
<key>NoAuthenticateUsers</key>
<dict>
<key>dsAttrTypeStandard:AuthenticationAuthority</key>
<string>;Kerberosv5;;@students.school.edu;
students.school.edu</string>
</dict>
FileVault 2 PBA User List Dictionary
Users matching this dictionary are allowed to add
themselves to FileVault Preboot Authentication.
Example:
<key>FV2PBAUsers</key>
<dict>
<key>dsAttrTypeStandard:AuthenticationAuthority<
/key>
<string>;Kerberosv5;;*@students.school.edu;
students.school.edu*</string>
</dict>
Port Control
Port Control
Policy descriptions also display in tooltips in the Management Console. In this table, master policies are
in bold font.
Policy Default Setting Description
Windows Port Control
This technology allows for control of all the physical ports on a Windows computer
(disable/enable/bypass), and can be customized by port type.
Windows Port Control Disabled
Enable or Disable all Port Control
System policies. If this policy is
set to Disable, no Port Control