Deployment Guide

Policy Aggre
ssive
Protec
tion
for All
Fixed
Drives
and
Extern
al
Drives
PCI
Regula
tion
Data
Breac
h
Regula
tion
HIPAA
Regula
tion
Basic
Protec
tion
for All
Fixed
Drives
and
Ext
Drives
(Defau
lt)
Basic
Protec
tion
for All
Fixed
Drives
Basic
Protec
tion
for
Syste
m
Drive
Only
Basic
Protec
tion
for
Extern
al
Drives
Encry
ption
Disabl
ed
Description
Force
Reboot on
Update
True False Setting the value to True
causes the computer to
immediately reboot to
allow processing of
encryption or updates
related to device-based
policy, such as System
Data Encryption (SDE).
Length of
Each
Reboot
Delay
5 10 20 15 The number of minutes to
delay when the user
chooses to delay reboot
for device-based policy.
Number
of Reboot
Delays
Allowed
1 5 3 The number of times the
user is allowed to delay
reboot for device-based
policy.
Suppress
File
Contentio
n
Notificatio
n
False This policy controls
whether users see
notification pop-ups if an
application attempts to
access a file while the
client is processing it.
Display
Local
Encryptio
n
Processin
g Control
False True False Setting the value to True
allows the user to see a
menu option in the
notification area icon that
allows them to pause/
resume encryption/
decryption (depending on
what Encryption is
currently doing).
Allowing a user to pause
encryption could allow the
user to prevent the
Encryption client from fully
encrypting or decrypting
data per policy.
Allow
Encryptio
n
Processin
g Only
When
Screen is
Locked
False User-Optional False True, False, User-Optional
When True, there is no
encryption or decryption of
data while the user is
actively working. The client
only processes data when
the screen is locked.
User-Optional adds an
option to the notification
60 Policies and Template Descriptions