Device control
There are two types of device control, drive-based device control and custom device control.
Drive-based device control
You can use the device control to determine which storage media are permitted for reading and/or writing data on your computer. For example, you can prevent private data from being copied to a USB stick or burned on a CD. In addition, for removable storage media such as USB sticks or external USB hard drives, you can specify exactly which removable storage media you can use to download data. In this way, you can use your own USB hard disk for data backup, but other hard disks have no access.
To use the device control, please tick the checkbox activate device control and then select for which devices you would like to set restrictions for:
-
Removable data carriers (e.g. USB sticks)
-
CD/DVD drives
-
Floppy disk drives
You have the option of defining rules for the individual storage media.
General rules
Here you can specify whether the respective device cannot be used at all (block access), whether only data can be downloaded from it without data also being stored on it (read access) or whether there are no restrictions (full access). This rule then applies to all users of your computer.
Customised rules
If you want only certain users to be granted restricted rights for storage media, you can first select the user name of the co-user registered on your computer in this area, and then restrict access to the respective storage medium as described under General rules. In This way, you can allow yourself full access as administrator and owner of the computer, but restrict the rights of other users.
Select the user here.
If you now click on OK, another dialogue opens in which you can specify which access type is desired for this user and whether the permission for this user is limited to a certain period of time (Validity).
The user-specific rule cancels the general rule. This means that if you generally stipulate that access to USB sticks is not allowed, you can still allow a certain users to use them via a user-specific rule. If a user has been given certain access restrictions via the device control that are limited in time, then after this restriction expires, the general rules for this user apply again. |
Device-specific rules
When using removable data carriers such as USB sticks or external hard disks, you can also specify that only certain removable media may access your computer. To do this, connect the removable data carrier to your computer and then click on the Add button. In the dialogue that now appears, you can select the device.
If you now click on OK, another dialogue opens.
In this dialogue you can specify which type of access is desired for this data carrier, whether the use of this data carrier is limited to a certain time (validity) and whether each user can use this data carrier under his or her user access or not. == Custom Device control :description: Article on user-based device control
You can use the device control to define for your computer which storage media are permitted for reading and/or writing data. For example, you can prevent private data from being copied to a USB stick or burned on a CD. Furthermore, for removable data carriers such as USB sticks or external USB hard disks, you can specify exactly with which removable data storage devices you can download data. For example, you can use your own USB hard disk for data backup, but other hard disks have no access.
In this overview you can see what effects the settings of the device control have for the respective user. Via Edit rules you can adjust the settings for the device and for the user according to your wishes.
USB Keyboard Guard
Our software now also protects you against a new threat: infected USB sticks that can pretend to be a keyboard for your operating system and can thus inject malware.
The software will inform you if your system assumes that a USB device is a new keyboard when it is plugged in and you can confirm that it is or is not by entering a PIN.
The software remembers all keyboards that have already been approved and does not ask again. |