5. Set the JITA period to the required time.
6. Click the Extendable check box.
7. Click the Apply button.
The selected user can now login, authenticate to Security Manager and access the device. One
minute before the JITA period is about to expire, the user will be prompted to extend their JITA
period.
Disabling a JITA for a user or group
Administrators can disable a users or group access to devices using just-in-time authentication.
1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and
then click JITA configuration.
2. From the devices drop-down menu, select either removable media or DVD/CD-ROM drives.
3. Select the User whose JITA you wish to disable.
4. Click the Enabled check box to clear it.
5. Click the Apply button.
Now when the user logs in and attempts to access the device they will be denied access.
Advanced Settings
The Advanced Setting page provides the following functionality:
●
Management of the Device Administrators group
● Management of drive letters to which the Device Access Manager never denies access.
The Device Administrators group is used to exclude trusted users (trusted in terms of device access)
from the restrictions imposed by a Device Access Manager policy. Suitable users are likely to include
the system Administrators.
The Advanced Settings view also enables the Administrator to configure a list of drive letters to which
Device Access Manager will not restrict access for any user. In order to configure the list of drive
letters, the Device Access Manager background services need to be running. The easiest way to start
these services is to apply a Simple Configuration policy, such as denying all non Device
Administrators access to removable media.
56 Chapter 9 Device Access Manager for HP ProtectTools ENWW
To Next Page
Loading...
