Device class locking
DriveLock distinguishes between different types of devices. By default, DriveLock does not initially lock any devices (or device classes). If you lock a device class, all devices belonging to this class (or which are connected via the same controller or the same interface) are also locked. Exceptions to this are again defined via whitelist rules.
To enable device locking, open the Lock Settings sub-node in the Devices node in the Policy Editor .
To lock devices via your device class in the DOC, open Security controls -> Devices -> Configuration -> Device classes.
You can set up locking for the following adapters and interfaces:
-
Serial (COM) and parallel (LPT) interface
Please note that the setting for blocking these interfaces must be set manually once you have updated to version 2024.1.
-
Bluetooth adapter
-
Infrared interface
-
USB controller
-
Firewire (1394) controller
-
PCMCIA controller
The following is a list of devices that DriveLock can control and lock:
-
Tape drives
-
Biometric devices
-
Debugging and software protection devices (WinUSB,ADB)
-
Printers
-
Input devices (HID)
-
ePassport readers
-
External graphic adapters
-
IEC 61883 (AVC) bus devices
-
In-circuit emulator devices
-
Media Center Extender Devices
-
Modems
-
Network adapter
-
PCMCIA and flash memory devices
-
Scanners and cameras
-
Secure Digital Host controller
-
SideShow devices
-
Sensor devices
-
Smartcard reader
-
Sound, video and game controllers
-
Portable devices / media players
-
Virtual devices (VM Ware)
The following different smartphones can be locked separately:
-
Android devices
-
Black Berry devices
-
iTunes software restrictions
-
Cell phones
-
Palm OS handhelds and smartphones
- Windows CE handhelds and smartphones
In addition, Bluetooth options can be set.
To configure the default settings, click the corresponding device. The configuration is identical for all device classes except interfaces and Apple and Android devices (treated as drives).