DeviceLock View

You can use the context menu available via a right mouse click on the DeviceLock tree item:

- Undefine entire policy - you can reset all parameters to the unconfigured state in one click. Selecting this has the same effect as resetting each parameter one by one. Available only in DeviceLock Group Policy Manager and DeviceLock Service Settings Editor.

- Undefine ContentLock policy - resets all ContentLock's parameters (all Content-Aware Rules except those based on file types) to the unconfigured state in one click. Available only in DeviceLock Group Policy Manager and DeviceLock Service Settings Editor.

- Undefine NetworkLock policy - resets all NetworkLock's parameters to the unconfigured state in one click. Available only in DeviceLock Group Policy Manager and DeviceLock Service Settings Editor.

- Load Service Settings - loads previously saved settings from the XML file and applies these settings to the currently connected DeviceLock Service. You need to select the file that was created either by DeviceLock Service Settings Editor, DeviceLock Management Console, DeviceLock Group Policy Manager or DeviceLock Service Settings Editor. Since the signature is not validated at this step, it can be either a signed or non-signed file. Available only in DeviceLock Group Policy Manager and DeviceLock Service Settings Editor.

- Save Service Settings - exports all settings from the currently connected DeviceLock Service to an external XML file. Later this file can be loaded via DeviceLock Management Console, DeviceLock Group Policy Manager and/or DeviceLock Service Settings Editor. Also, this file can be sent to users whose computers are not online and thus out-of-reach via management consoles. To avoid unauthorized modification the file should be signed with the DeviceLock Certificate (the private key) using the DeviceLock Signing Tool. Available only in DeviceLock Group Policy Manager and DeviceLock Service Settings Editor.

- Save & Sign Service Settings - exports all settings from the currently connected DeviceLock Service to an external XML file and automatically signs it with the most recent DeviceLock Certificate (the private key). This menu item is disabled when the DeviceLock Signing Tool has no previously loaded private key. Available only in DeviceLock Group Policy Manager and DeviceLock Service Settings Editor.

- Certificate Generation Tool - runs the special tool that allows you to generate DeviceLock Certificates. 

- Create MSI Package - creates the custom Microsoft Software Installer (MSI) package with settings from the currently connected DeviceLock Service.

At the first step you need to select the source MSI package with DeviceLock Service. You may use MSI packages that ship with DeviceLock (such as DeviceLock Service.msi and DeviceLock Service x64.msi).

Then you need to specify the name of the resultant (target) MSI package that will be generated based on the source MSI package (specified at the first step) and settings from the currently connected DeviceLock Service.

Later this custom MSI package can be used to deploy DeviceLock Service instances across the network with predefined policies. 

NOTE: If you use a custom MSI package with defined DeviceLock Service settings to deploy DeviceLock Service using Group Policy, these settings are not applied to client computers if any one of the following conditions is true:

- The default security is disabled on remotely running DeviceLock Services.

- The GPO applied to client computers has the Override Local Policy setting enabled.

Please note that the Create MSI Package menu item is disabled when there is no Microsoft Windows Installer (version 1.0 or later) installed on the local computer.

- DeviceLock Signing Tool - runs the special tool that allows you to grant users temporary access to requested devices and sign XML files with DeviceLock Service settings. 

- About DeviceLock - displays a dialog box with information about the DeviceLock version and your licenses.

• English-to-Russian translation