DeviceLock Security Policies (Offline Profile) : Managing Offline Security Policies for Devices : Managing Offline Permissions for Devices : Setting and editing offline permissions
  
Setting and editing offline permissions
To set and edit offline permissions
1. If using DeviceLock Management Console, do the following:
a) Open DeviceLock Management Console and connect it to the computer running DeviceLock Service.
b) In the console tree, expand DeviceLock Service.
If using DeviceLock Service Settings Editor, do the following:
a) Open DeviceLock Service Settings Editor.
b) In the console tree, expand DeviceLock Service.
If using DeviceLock Group Policy Manager, do the following:
a) Open Group Policy Object Editor.
b) In the console tree, expand Computer Configuration, and then expand DeviceLock.
2. Expand Devices.
3. Under Devices, select Permissions.
When you select Permissions in the console tree, in the details pane you can view device types for which you can set permissions. In the details pane, you can also view the current state of offline permissions for each device type in the Offline column.
4. In the details pane, do one of the following:
Right-click the device type for which you want to set or edit permissions, and then click Set Offline Permissions.
- OR -
Select the device type for which you want to set or edit permissions, and then click Set Offline Permissions on the toolbar.
The Permissions (Offline) dialog box appears.
5. In the Permissions (Offline) dialog box, do the following:
To set the default permissions
In the upper-left pane of the dialog box, under Users, click Set Default.
The default permissions are assigned to the Administrators, Everyone, and SYSTEM accounts. For information about which permissions are set for these accounts by default, see Permissions (Regular Profile).
To set permissions for an additional user or group
a) In the upper-left pane of the dialog box, under Users, click Add.
b) In the Select Users or Groups dialog box that appears, in the Enter the object names to select box, type the name of the user or group, and then click OK.
The users and groups that you added are displayed under Users in the upper-left pane of the Permissions (Offline) dialog box.
c) In the upper-left pane of the Permissions (Offline) dialog box, under Users, select the user or group.
You can select multiple users and/ or groups by holding down the SHIFT key or the CTRL key while clicking them.
d) In the lower-left pane of the Permissions (Offline) dialog box, under User’s Rights, select either Allow or Deny to directly allow or deny the appropriate access rights.
In the right pane of the Permissions (Offline) dialog box, you can set day and time restrictions that narrow user access to devices. Use the left mouse button to select days and hours when the selected user or group will have access to devices. Use the right mouse button to mark days and hours when the selected user or group will not have access to devices.
To change permissions for an existing user or group
a) In the upper-left pane of the dialog box, under Users, select the user or group.
b) In the lower-left pane of the dialog box, under User’s Rights, select either Allow or Deny to directly allow or deny the appropriate access rights.
To remove an existing user or group and permissions
In the upper-left pane of the dialog box, under Users, select the user or group, and then click Delete or press the DELETE key.
6. Click OK or Apply.