Reference Guide

Security Management Server Virtual - AdminHelp v9.8
265
Policy Default Setting
Description
Windows Media Encryption
This technology works on Windows computers using Dell Encryption External Media to encrypt data on
removable devices, which can be accessed using a user-defined password. These
policies allow configuration
of the Encryption External Media password requirements and the removable media allowed.
Windows Media Encryption Off
This policy must be selected to use all other
Removable Storage policies. Not Selected
means that no encrypti
on of removable
storage takes place, regardless of other
policy values.
EMS Scan External Media Not Selected
Selected forces a scan of removable storage
every time it is inserted.
When this policy is Not Selected and the
Windows Media Encryption policy is
Selected,
only new and changed files are encrypted.
More...
A scan occurs at every insertion so that any
files added to the removable storage without
authenticating can be caught. Files can be
added to the removable storage if
authentication is declined,
but encrypted
data cannot be accessed. The files added
will not be encrypted in this case, so the
next time removable media is authenticated
(to work with encrypted data), any files that
may have been added are scanned and
encrypted.
EMS Access to unShielded Media
Read Only
Block, Read Only, Full Access
Note that this policy interacts with the Port
Control System
- Storage Class: External
Drive Control policy. If you intend to set this
policy to Full Access, ensure that Storage
Class: External Drive Contro
l is not set to
Read Only or Blocked.
More...
When this policy is set to Block Access, you
have no access to removable storage unless
it is encrypted.
Choosing either Read
-Only or Full Access
allows you to decide what removable storage
to encrypt.
If you c
hoose not to encrypt removable
storage and this policy is set to Full Access,
you have full read/write access to removable
storage.
If you choose not to encrypt removable
storage and this policy is set to Read
-Only,
you can read or delete existing files on
the
unencrypted removable storage, but files
cannot be edited on, or added to, the
removable storage.
EMS Block Access to UnShieldable Media
Selected
Block access to any external media that is
less than 55 MB and thus has insufficient
storage capacity to
host external media
encryption (such as a 1.44MB floppy disk).
More...
All access is blocked if Windows Media
Encryption and this policy are both Selected.
If Windows Media Encryption is Selected, but
this policy is Not Selected, data can be read