Deployment Guide

Policy Aggre
ssive
Protec
tion
for All
Fixed
Drives
and
Extern
al
Drives
PCI
Regula
tion
Data
Breac
h
Regula
tion
HIPAA
Regula
tion
Basic
Protec
tion
for All
Fixed
Drives
and
Ext
Drives
(Defau
lt)
Basic
Protec
tion
for All
Fixed
Drives
Basic
Protec
tion
for
Syste
m
Drive
Only
Basic
Protec
tion
for
Extern
al
Drives
Encry
ption
Disabl
ed
Description
ECMA-167 and is an open
vendor-neutral file system
for computer data storage
for a broad range of media.
This policy has interactions
with PCS. See Encryption
External Media and PCS
Interactions.
Subclass
Storage:
Floppy
Drive
Control
Blocke
d
Read Only Full Access Read
Only
Full
Access
CHILD of Class: Storage.
Class: Storage must be
set to Enabled to use this
policy.
Full Access: Floppy Drive
port does not have read/
write data restrictions
applied
Read Only: Allows read
capability. Write data is
disabled
Blocked: Port is blocked
from read/write capability
This policy is endpoint-
based and cannot be
overridden by user policy.
Class:
Windows
Portable
Device
(WPD)
Enabled PARENT to the next
policy. Set this policy
to Enabled to use
the Subclass Windows
Portable Device (WPD):
Storage policy. Setting this
policy to Disabled disables
the Subclass Windows
Portable Device (WPD):
Storage policy - no matter
what its value.
Control access to all
Windows Portable Devices.
Subclass
Windows
Portable
Device
(WPD):
Storage
Enabled CHILD of Class: Windows
Portable Device (WPD)
Class: Windows Portable
Device (WPD) must be
set to Enabled to use this
policy.
Full Access: Port does
not have read/write data
restrictions applied.
54 Policies and Template Descriptions