DriveLock Customer Forum
Information
28 results found
-
Selective Simulation Mode for each different Device class type
Currently there is only a Global Simulation Mode available and would like the option to be able to select a class type and put that device class type into simulation mode, our environment is already in production and initially we only implemented Drive Policies but would now like to implement more restrictive Device control but this is extremely risky
* Emable simulation Mode (Globally) and we disable our current security posture on Drives
* lock down Devices by Device Class and without simulation first and we risk bringing every device in our estate to a standstill (testing on just a…3 votesThis feature request will be part of the 24.2 release
-
COM Port Management
We would like to control and manage COM Ports (especially Virtual COM Ports, USB-Serial adapters) in the same way per whitelist rules equal to Drives or other devices like Smartphones, HID devices etc.
In short, possibility of User and Computer combination.
2 votespart of 24.1
-
Seperate Permissions to Add / Delete Devices from a Device Collection
Currently in depth Whitelist rules can only be set in the Management Console. In there we mostly work with Device Collection. We set a rule with a certain behavior, people it affects, etc. and then connect it with a Device Collection. After that the main effort is in adding new devices to that Device List.
We would like to split the administrative load and have main administrators that set up rules and policies. And then we would like a seperate user group with limited permissions that can only add or remove devices from existing device collections. It is important for…
2 votesThis feature request will be included in the 24.1 release.
-
Permanently unlock devices directly from within the DOC
With 2021.2 permanently unlocking single drives has become easier than ever before. It would be great to have the same capability for other devices like cameras, smartphones.
Unlocking applications previously blocked by DriveLock application control has been added with 2022.1.1 voteThis feature request will be included in the 24.1 release.
-
Whitelist Regel von USB Geräten mit Bitlocker to go
Die Konfiguration einer Whitelistregel für USB Sticks mit gleichzeitiger Erzwingung der BitLocker to go Verschlüsselung funktioniert nicht im Zusammenhang mit "Allow".
1 voteReleased with DriveLock 2021.2.
We implemented a fix on how enforced encryption is configured. This will set access to “allow for all users” automatically. -
2 Factor Authentification
It is to be examined whether Drivelock can be used to equip USB data carriers (which are to be procured internally via SAP - e.g. Kingston Data Traveler) with 2-factor authentication (2-FA). Or if other USB data carriers (sticks) are available on the market that fulfill a 2FA requirement.
1 voteA two-factor authentication for DOC logon using SAML is already available for our cloud customers.
-
Support of Azure AD objects (e.g. groups)
We would like to give different users on our InTune managed notebooks access to certain devices based on Azure-AD groups and not to other users.
4 votesAzure AD integration was released with DriveLock 2022.1 for all our cloud managed services customers.
-
Whitelist CDROM media (not the device)
We want do have a feature within DriveLock Device control
to whitelist CDROM/DVD media (not the device).
We believe this can be implemented in future with the help
of the DriveLock volume.id feature for SD card readers,
which ignores the real vendor and product of a card reader,
when a proper secure and different volume identification exist.For CD media such an volume identification file can not be
written afterwards to the CD or DVD.But how about to read the "volume label" first few chars to
create a "Vendor String" and create a Hash from the entire
drive for…1 voteThis feature for white labeling CD/DVD content is already part of the product.
-
Share "wireless" screen content via USB
Dear DriveLock Team,
It would be very useful to enable a class of devices that can transfer the desktop screen content via USB (Click2Share in customer meeting rooms). For example, similar to the cell phones. Possibly this can also be released semi-automatically and not wait for the IT release.2 votesIf the device is of a class that can be customized, you can create a custom class for it starting with version 24.1 and treat it like any other device class. DriveLock therefore closes this issue.
-
Citrix Container Mapping > 4GB
As described in KBA00248, no "pass-through" of encrypted containers to USB sticks (Encryption 2-Go) larger than 4GB is possible in the Citrix world.
It would be nice to extend or even remove this limitation.4 votes -
Einstellungen Available end user functions
"Home" page kann nicht aktiviert bleiben, wenn "Unlock agent" und "My network profiles" deaktiviert wurde.
Die Einstellung "Home" page unter "Agent and awareness campaign user interface settings" muss auch ohne Auswahl der untergeordneten Funktionen möglich sein.
1 voteAvailable with 2019.1 since May 2019
-
Deaktivierung von SelfService Groups
In der Policy soll die Möglichkeit gegeben sein SelfService Groups einzeln deaktivieren bzw. auch wieder aktivieren zu können.
1 vote -
Deaktivierung von Assignments
Die Möglichkeit geben ein Assignment nur zu deaktivieren, ohne es gleich zu löschen. Z.B. Rechtsklick - aktivieren oder -deaktivieren.
1 vote -
Reportansicht im DCC soll nur auf berechtigte Organisationseinheiten beschränkt sein
Bei der Nutzung der DCC als "allein-Anwendung" sollen Reports erstellt werden.
Es wurden bestimmte User angelegt, die nur die Berechtigung zur Erstellung von Reports berechtigt wurden.
Diese User sollen aber keine Einsicht auf andere "Abteilungen" bzw "OUs" haben.
Leider werden in der Report Ansicht alle Computer Events aus dem kompletten Unternehmen angezeigt.
Bei der "Helpdesk-Ansicht" funktioniert das dagegen schon wie gewünscht.1 vote -
Die im DCC eingestellten Berechtigungen sollten vom DOC übernommen werden
Die derzeitige Funktionalität der DOC eingeschränkt ist. Die im DCC eingestellten Berechtigungen werden derzeit noch nicht vom DOC übernommen.
Als Idee wird hiermit eingebracht, dass die gesetzten Berechtigungen im DCC auch vom DOC übernommen werden.
Im konkreten Fall geht es um Benutzerberechtigungen:
Bestimmte Nutzerrechte sind im DCC auf die OU beschränkbar. Diese Einstellungen sollen auch vom DOC übernommen werden, siehe im Drivelock SelfService-Portal: INC040901 voteWith 2020.1 DOC and DCC share the same role based access, configured within the DriveLock Operations Center.
Access can be limited to assets from a certain OU only, for any role/user. -
Device control for devices connected via Bluetooth
When using Bluetooth mouse and keyboards, the Bluetooth adapter / dongle must be enabled.
However, it is currently not possible to control the devices that are connected via this Bluetooth adapter / dongle via DriveLock.
If the Bluetooth adapter / dongle is enabled, any Bluetooth device can be connected and used.
It would be desirable here if the approved devices could also be defined in this case.
4 votesReleased with DriveLock 2021.1
-
Text beim Beenden der Freigabe editierbar
Text beim Beenden der Freigabe ist aktuell nicht änderbar. Nach vielen Anfragen, wäre das jedoch hilfreich.
Bei der Anfrage handelt es sich um die PopUp-Meldungen nach dem Beenden der Freigabe1 vote -
Eingabemöglichkeit der Begründung für eine Freischaltung via SelfService-Tool
Für die SB-Freigabe via Freigabetool (dlselfservice.exe) ist es nötig eine Begründung für die Freigabe einzugeben. Aktuell reicht hier die Eingabe nur eines einzigen Zeichens, um die Schnittstellen des Computers freizugeben.
Anfrage:
Es soll via Policy (CSP) möglich sein, die nötige Länge und Qualität der Begründung festzulegen.2 votesavailable with 2020.1 release
-
Laufwerkslisten übersichtlicher gestalten
Laufwerksliste wird ab 25 Einträgen unübersichtlich.
- Fenster bitte vergrößern zulassen
- Suchfilter in Liste einbauen um filtern zu können4 votes -
Prevent duplicate Serial Numbers in Whitelist Rules
When creating a new device whitelist rule e.g. für USB flash drives, there is an option to allow only USB flash drives with specific serial numbers. However, it is possible to add the exact same serial multiple times in the same rule. That makes no sense and therefore should not be possible. DriveLock should check whether or not the serial to add already exists and if so, notify the user and not add the same serial again.
5 votesDriveLock 2021.2 is available now.
- Don't see your idea?