Setting Permissions

To set permissions for a device type, highlight it (use Ctrl and/or Shift to select several types simultaneously) and select Set Permissions or Set Offline Permissions from the shortcut menu available by a right mouse click. Alternatively, you can click the appropriate button on the toolbar.

Note: You can define different online vs. offline permissions for the same user or sets of users. Online permissions (Regular Profile) apply to client computers that are working online. Offline permissions (Offline Profile) apply to client computers that are working offline. By default, DeviceLock works in offline mode when the network cable is not connected to the client computer. For detailed information on DeviceLock offline policies, see DeviceLock Security Policies (Offline Profile). For information about how to set offline permissions, see Managing Offline Permissions for Devices.

In DeviceLock Group Policy Manager or DeviceLock Service Settings Editor, if you want to reset online (regular) permissions to the unconfigured state, select Undefine from the shortcut menu.

If you want to reset previously set offline permissions to the unconfigured state, select Undefine Offline from the shortcut menu. If offline permissions are undefined, regular permissions are applied to offline client computers.

In DeviceLock Group Policy Manager or DeviceLock Service Settings Editor, if you want to block the inheritance of offline permissions and enforce regular permissions, select Remove Offline from the shortcut menu.

This state shows up, for example, when permissions are set only for the “Everyone” account so that it has full access to the device type.

This state shows up, for example, when the “Everyone” account is explicitly denied any access to the device type, or permissions are not set for any accounts. Note that the denial for the “Everyone” account overrides all permissions for other accounts.