DriveLock Customer Forum
Information
-
Too many messages, event ID: 129, because of locked devices
Every time a user connects an iPhone or Android phone to a computer, our Drivelock server gets a message that a device has been connected there. This is not allowed by us and the device will be locked, then different
Messages are sent Event ID: 129.
Now my question, is it possible to create a rule in these cases:
That the user always gets a message (bigger message, not only in the systray) to disconnect the device immediately until he disconnects the device? So that always new messages appear, which the user must click away and he is quasi forced…1 vote -
2 Factor Authentification
It is to be examined whether Drivelock can be used to equip USB data carriers (which are to be procured internally via SAP - e.g. Kingston Data Traveler) with 2-factor authentication (2-FA). Or if other USB data carriers (sticks) are available on the market that fulfill a 2FA requirement.
1 voteunder review ·
AdminMark Hartmann
(Senior Director Product Management Technology, DriveLock SE)
responded
Hello,
Two-factor authentication is currently planned within DriveLock only for logging in authorized accounts to DriveLock Management Console (MMC) and DriveLock Operations Center (DOC).
Two-factor authentication for USB drives is not planned.
-
Restart option after agent update
Currently, a reboot before updating the agent can be configured via the option "Reboot to update agent". This causes the users to be logged out first, then DriveLock is updated and then a reboot occurs. If users log off immediately afterwards, they can work for 2-3 minutes before a reboot occurs without further warning.
It would be better for the users if the update would happen in the background without reboot (similar to push install/push update via the DCC). The user should get after successful update a message that he should close all programs because the computer reboots. This reboot…
8 votes -
Support of Azure AD objects (e.g. groups)
We would like to give different users on our InTune managed notebooks access to certain devices based on Azure-AD groups and not to other users.
1 vote -
€ Enable EURO characters for the BitLocker PBA (Unicode/UTF-8 character set)
Integrate the full Unicode/UTF-8 character set for the BitLocker PBA.
Currently the € character is not accepted.
Example: the users log in to the PBA with their Windows data (login name and Windows password). The Windows password contains the special character €. This € symbol is currently not supported, displayed, accepted in the PBA, so this user cannot authenticate in the PBA.1 vote -
Awareness campaign with link
For a campaign via link to the Internet, it should be possible not only to open the link via the DriveLock window, but also via the standard browser. Possibly as an additional setting in the campaign or with a button "Open page in browser" on the campaign window. (or similar solution)
Unfortunately, the standard window does not display the entire content of a web page.1 vote -
DriveLock Operation Center: Filtering for devices that have not yet been assigned to a group
In DriveLock Operation Center you should be able to create a view or widget that maps the DCC help desk function "ConfigID [Computer]" and displays the assigned policy names.
Such a view or widget could be used to filter out and display the devices that do not yet have all the necessary policies.1 vote -
Client update feedback message
It would be good to see if a client performs an update installation after the release or gives a status that something is happening.
Often we have the problem that users unintentionally turn off the devices during the drivelock installation, because they don't know that one is running. A popup or something like that would be nice.1 vote -
Multitenant overview in Management Console policy view (CSP)
With the new version 2020 we lost the ability in DriveLock Management console to have an overview on all defined CSP policies. This function was present in older version and is greatly missed by admins who controll multitenant environment.
Maybe a setting in the database can restore the view?
1 vote -
Agent Updates with Citrix 2016 Desktop
We use Citrix 2016 Desktop as an alternative to software distribution in our agency. With agent updates, the respective end devices should always be rebooted as soon as possible. However, we cannot set this in the update policy because the users cannot see the reboot warnings in the Citrix session, they only appear on the Citrix host. The devices would then just reboot and kick the users out of the Citrix session.
We would need to find a way to make the message visible in the Citrix desktop. Perhaps the reboot warning could also appear in the Windows notifications. We…
2 votes -
Encryption 2 Go auto mount as new drive without driver installation
With an encrypted USB stick with container, it should be possible to get the container automatically mounted as a new drive in Explorer on a foreign device after entering the password. If you are on a business trip etc. and want to give a presentation on a foreign device, it is not a solution to install a driver there if at all possible. The let's call it "FTP window" with download and upload (without installation) is not an option for the end user. First, the data from it can not be opened immediately and secondly, when changes are made, they…
3 votes -
Status not compliant
Status NOT COMPLIANT overwrites Status OK in DCC this is not good because a NOT Compliant Drivelock Agent is stil OK. There should be a separate sub status displayed, many customers turn off the compliant feature so it doesn't happen
2 votes -
Mobile Encryption Application for Linux
We would like to have a tool to decrypt files on a previously enforced encrypted USB drive (encrypted by DriveLock File Protection or Encryption 2-Go) on Autodesk workplaces running on Linux.
1 vote -
EDR new responses definition
actually responses definition include Powershell, Batch, Command line, Awareness and taken picture. It should be extend to E-Mail, SNMP Trap and Web-hook. At least E-Mail should be implement. That way one could decide to send E-Mail based on filtered event.
It is actually possible to send E-Mail for a complete event-type but not to define further condition under which the E-Mail should be sent ( user, folder, computer, etc, ...). Of course it is possible to write script but E-Mail is already there in the solution.
It sould be although possible to restrict the action repetition if one action (f.e…
1 vote -
Additional report period "previous day
In the DCC, regular reports can be generated and distributed to specific recipients per May.
We need to generate reports on a daily basis, which is why a "previous day" report period would be desirable. Currently, the smallest selectable report period is "previous week", which results in each event having six duplicates in reports.2 votes -
USB tethering
Add an option to block connecting to the Internet by using usb tethering on your smartphone (android and apple).
Usb tethering creates a Remote NDIS based Internet Sharing Device.
8 votes -
The Domain field for the PBA login should be able to be preconfigured via the policy
In the policy when configuring the DriveLock PBA for Full Disk Encryption and BitLocker Management, it should be possible to define the domain so that it does not have to be done by the user at the first login. Optimal would be to be able to determine whether this can be changed or not.
9 voteson the roadmap ·AdminMark Hartmann
(Senior Director Product Management Technology, DriveLock SE)
responded
This suggestion is included as a feature request and scheduled for an upcoming release.
-
Security Awareness Calendar
It should be possible that when you create new campaigns, that I create, for example, several user login campaigns and every day / every week a different campaign is displayed, without the need to intervene. A kind of predefined schedule.
So that I can set granular, Monday campaign 1, Wednesday 2, Friday 3 always at user login.
Or even campaign 1 in week X on day Y, campaign 2 in week Z on day A,..........
And of course also for event triggered and for rule based.2 votes -
Security Awarness Viewer
It should be possible to see the offered context via a kind of viewer before setting up a campaign.
This could be a PLAY button in the DOC for security awareness, or similar.4 votes -
improve the deinstallation
The DL Agent uninstallation should be complete.
Deleting all dl registry entries and directories would be nice.4 votes
- Don't see your idea?