Product guide

Recommended User-Based Policy Settings
The User‑Based Policy controls the parameters for Endpoint Encryption user accounts. For example, it
contains the options for selecting a token type (including password and smartcard) and password
content rules.
You can configure the User Based Policies by navigating through Menu | Policy | Policy Catalog, then
selecting Endpoint Encryption 7.0.1 from the Product drop‑down list.
Select User Based Policies from the Category drop‑down list. Locate the My Default policy and click Edit
Settings. For more information about individual policy setting, see the McAfee Endpoint Encryption
‑ 7.0
Patch 1 Product Guide.
User Based Policies in Endpoint Encryption
A requirement of EEPC 7.0 Patch 1 is that you need to specify which groups of users are allowed or
not to use the Policy Assignment Rules. The allowed users get their required User Based Policies. Users
that are not allowed to use the Policy Assignment Rules inherit the default User Based Policies
assigned to the system.
In EEMac, the User Based Polices are assigned just like Product Setting Policies. A single UBP is
enforced to all the users in EEMac.
Enforce the desired user‑based policy to a user assigned to a client system by enabling the Configure
UBP enforcement option.
It is always better to assign the User Based Policies at the system level or branch level if possible,
rather than assigning using the Policy Assignment Rules. However, you can use the Policy Assignment
Rule option, if required, for assigning different policies to different users.
3
Software configuration and policies
Recommended User-Based Policy Settings
28
McAfee Endpoint Encryption 7.0 Patch 1 Software Best Practices Guide