OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
8-14
There is no need to configure advanced permissions and notifications if the
permission for all devices is Full Access.
Note: For details about advanced permissions and how to correctly define programs
with advanced permissions, see Advanced Permissions for Storage Devices on page 8-6.
a. Below Programs with read and write access to storage devices, type a
program path and file name and then click Add. Digital Signature Provider is
not accepted.
b. Below Programs on storage devices that are allowed to execute, type the
program path and name or the Digital Signature Provider and then click Add.
c. Select Display a notification message on the client computer when
OfficeScan detects unauthorized device access.
• Unauthorized device access refers to prohibited device operations. For
example, if the device permission is "Read", users will not be able to save,
move, delete, or execute a file on the device. For a list of prohibited device
operations based on permissions, see Permissions for Storage Devices on page
8-4.
• You can modify the notification message. For details, see Device Control
Notifications on page 8-16.
9. If you selected domain(s) or client(s) in the client tree, click Save. If you clicked the
root domain icon, choose from the following options:
• Apply to All Clients: Applies settings to all existing clients and to any new
client added to an existing/future domain. Future domains are domains not yet
created at the time you configured the settings.
• Apply to Future Domains Only: Applies settings only to clients added to
future domains. This option will not apply settings to new clients added to an
existing domain.