Reference Guide

Security Management Server Virtual - AdminHelp v9.8
261
5.
• Opt-in mode (allows users the option to choose which Office documents to protect): Toggle
the Protected Office Documents policy to On.
• Force-Protected mode (ensures protection of all Office documents):
• At the Enterprise level, toggle the Protected Office Documents policy to On.
• At the Enterprise, Endpoint Groups, or Endpoints level, click Show advanced
settings and select the Force Protected files only check box.
Note: For Endpoint Groups or Endpoints, click an option to access the Detail page’s Security Policies
tab.
4. Set additional Protected Office Documents policies based on security requirements for Office
documents, for example, Print, Export, and Embargo.
5. To view protected Office documents in mobile devices, see
Set Policies to Protect Office Documents
in Mobile Devices.
Determine Impact on Windows Users for Opt-in or Force Protected Modes
When you set Protected Office Documents policies and the client is activated, the File menu for Office
documents displays additional options and enables/disables some options.
Dell recommends that you test policy updates on a test group of endpoints before applying them on a large
scale.
This table provides an overview of the security impact on the Office File menu options for internal users
based on which policies you activate:
• Protected Office Documents (Opt-in mode - user has the option to choose which Office documents
to protect. Both Save As and Protected Save As are enabled).
• Protected Office Documents and Force Protected files only (Force-Protected mode - higher
security) - The Force Protected policy enables a sweep on the clients' internal fixed drives to
locate unprotected Office files and change them to Protected mode. It disables Save As, the Share
option (Office 2013 and 2016), and Save & Send option (Office 2010). It enables Protected Save As.
For Dell Data Guardian to sweep the Office documents, the user must log in and be connected to the
network. The sweep acquires keys from the server for ten unprotected Office files at a time. If fewer
than ten unprotected Office files require keys, the sweep waits 30 seconds for more files but then
requests the keys.
Note: Sweep ignores network file share, optical, and removable drives.
Note: On the DDG VDisk virtual drive, if the user right-clicks to create an Office document, it is saved
as a .xen file. The user must manually access the File menu option and save the document as
Protected. The Office document retains its extension in the cloud but is encrypted.
Note: For Office-protected documents, users cannot use macro-enabled documents.
File menu
option for
Office
documents
Policy for
Opt-in mode:
Protected Office Documents
Policies for Force
-Protected
mode:
Prote
cted Office Documents
Force Protected files only
Protected Office documents
Unprotected Office documents
All Office documents