About access rules

Access rules comprise a group of settings that determine which users can access devices that are installed or connected to the computer. You cannot add a device that is outside of Device Control classification. Access to such devices is allowed for all users.

Device Access Rules

The group of settings for an access rule differs depending on the type of device (see the table below).

Access rule settings

Devices

Access (Allow DC_Access_Allow / Block DC_Access_Forbid / Depends on bus DC_Access_to_Bus)

Schedule for access to a device

Assignment of users and/or a group of users

Read/write permission

Hard drives

Removable drives

Printers

–

–

–

Floppy disks

CD/DVD drives

Modems

–

–

–

Tape devices

–

–

–

Multifunctional devices

–

–

–

Smart card readers

–

–

–

Windows CE USB ActiveSync devices

–

–

–

External network adapters

–

–

–

Portable devices (MTP)

Bluetooth

–

–

–

Cameras and scanners

–

–

–

By default, access rules grant all users full access to the devices at all times, if access to the connection buses for the corresponding types of devices is allowed (the DC_Access_to_Bus status).

Access rules for Wi-Fi networks

A Wi-Fi network access rule determines whether the use of Wi-Fi networks is allowed (the DC_Access_Allow status) or forbidden (the DC_Access_Forbid status). You can add a trusted Wi-Fi network (the DC_Access_Restriction status) to a rule. Use of a trusted Wi-Fi network is allowed without limitations. By default, a Wi-Fi network access rule allows access to any Wi-Fi network.

Connection bus access rules

Connection bus access rules determine whether the connection of devices is allowed (the DC_Access_Allow status) or forbidden (the DC_Access_Forbid status). Rules that allow access to buses are created by default for all connection buses that are present in the classification of the Device Control component.

Page top