DriveLock Customer Forum
Information
68 results found
-
FDE: Option to remember last used username at PBA
It will be useful to have the possibility in PBA to allow saving/remembering the last used username so that user will only have to type the password. Make this an optional configuration.
3 votes -
Too many messages, event ID: 129, because of locked devices
Every time a user connects an iPhone or Android phone to a computer, our Drivelock server gets a message that a device has been connected there. This is not allowed by us and the device will be locked, then different
Messages are sent Event ID: 129.
Now my question, is it possible to create a rule in these cases:
That the user always gets a message (bigger message, not only in the systray) to disconnect the device immediately until he disconnects the device? So that always new messages appear, which the user must click away and he is quasi forced…2 votes -
Restart option after agent update
Currently, a reboot before updating the agent can be configured via the option "Reboot to update agent". This causes the users to be logged out first, then DriveLock is updated and then a reboot occurs. If users logs on immediately afterwards, they can work for 2-3 minutes before a reboot occurs without further warning.
It would be better for the users if the update would happen in the background without reboot (similar to push install/push update via the DCC). The user should get after successful update a message that he should close all programs because the computer reboots. This reboot…
13 votesI don't see it as particularly important, because a reboot during an update is usually not useful. only FFE and FDE actually need a reboot - but only later when the agent is already running again and not when the msi is finished.
-
€ Enable EURO characters for the BitLocker PBA (Unicode/UTF-8 character set)
Integrate the full Unicode/UTF-8 character set for the BitLocker PBA.
Currently the € character is not accepted.
Example: the users log in to the PBA with their Windows data (login name and Windows password). The Windows password contains the special character €. This € symbol is currently not supported, displayed, accepted in the PBA, so this user cannot authenticate in the PBA.1 voteUefi PBA doesn't have and never had Unicode (UTF8) support. So all non ASCII chars will not work (this includes the EuroSign as well as most of the Keyboard layouts).
Until now such a feature-request is not prioritised.
-
DCC User.config
Es sollte möglich sein den Speicherort der user.config oder Ihren Inhalt anzupassen, um einen DES als Standard für das ControlCenter zu setzen oder die Datei im Roaming Profil zu speichern.
Wir verwenden u.a. Citrix um das DCC zur Verfügung zu stellen. Dadurch müssen die betroffenen Kollegen für die Verwendung des DCC fast täglich den DES eintragen.1 voteNach finaler Prüfung werden wir keine Änderungen mehr am DCC durchführen, welches durch das DOC abgelöst wird und schon heute genutzt werden kann.
Mit der Version 2021.1 wird auch “Scheduled Reporting” zur Verfügung stehen. -
Agent Updates with Citrix 2016 Desktop
We use Citrix 2016 Desktop as an alternative to software distribution in our agency. With agent updates, the respective end devices should always be rebooted as soon as possible. However, we cannot set this in the update policy because the users cannot see the reboot warnings in the Citrix session, they only appear on the Citrix host. The devices would then just reboot and kick the users out of the Citrix session.
We would need to find a way to make the message visible in the Citrix desktop. Perhaps the reboot warning could also appear in the Windows notifications. We…
2 votesPlease use a software distribution that manages the update in a controlled manner. Furthermore, an agent update does not require a reboot in most cases
-
Encryption 2 Go auto mount as new drive without driver installation
With an encrypted USB stick with container, it should be possible to get the container automatically mounted as a new drive in Explorer on a foreign device after entering the password. If you are on a business trip etc. and want to give a presentation on a foreign device, it is not a solution to install a driver there if at all possible. The let's call it "FTP window" with download and upload (without installation) is not an option for the end user. First, the data from it can not be opened immediately and secondly, when changes are made, they…
3 votesWe have finally to decline this request for technical reasons:
As in all previous Windows versions it is still not possible to add/mount new drives without local administrator or system permissions. We have tried to bypass this limitation or find a workaround for this, without success in finding a stable and user friendly solution.We agree, that this would greatly enhance the product’s usability and we’ll continue to have a look at changes in future OS releases that might make this possible.
-
Status not compliant
Status NOT COMPLIANT overwrites Status OK in DCC this is not good because a NOT Compliant Drivelock Agent is stil OK. There should be a separate sub status displayed, many customers turn off the compliant feature so it doesn't happen
3 votesPlease use DOC options
-
Feature Request, Want to be able to boot into the Windows 10 Save Mode directly from the DriveLock PBA.
Today most modern Notebooks and Desktops are too fast booting so it is very hard to catch the blue Windows Save Mode Option SCreen by pressing quickly CTRL+F8
just after the PBA login screen. With our notebook series nearly impossible.
So we want to have a feature enabled within the PBA (enabled by DriveLock policy Settings) that when we press CTRL+F8
within the PBA, the system will authenticate (like pressing enter) but then go into the Windows SaveMode menu instead.1 voteAlthough this is a valid concern and we see the customer value, this is not possible due to technical limitations.
After successful authentication we can only trigger the MS bootloader, there is no option to pass to this function which then could force Windows to boot the Save Mode. We have found no other way to bypass this limitation. -
USB tethering
Add an option to block connecting to the Internet by using usb tethering on your smartphone (android and apple).
Usb tethering creates a Remote NDIS based Internet Sharing Device.
11 votesWorks as designed. This can be solved by controlling network cards and then explicitly blocking this smartphone "network card". This is not a workaround but a solution.
-
Security Awareness Calendar
It should be possible that when you create new campaigns, that I create, for example, several user login campaigns and every day / every week a different campaign is displayed, without the need to intervene. A kind of predefined schedule.
So that I can set granular, Monday campaign 1, Wednesday 2, Friday 3 always at user login.
Or even campaign 1 in week X on day Y, campaign 2 in week Z on day A,..........
And of course also for event triggered and for rule based.5 votesIt is possible to select the start and end of a campaign from the DOC using the calendar selector. For recurring campaigns, we only offer the option of selecting the type of repetition, but not the exact day of the week. This feature is canceled
-
Policy "Export ..." Button, inside of the "Properties..." Popup
Create an easy policy export button inside of the properties popup
1 voteToday you already can export any opened policy easily:
1. Click on the top-most node on the left side in the MMC
2. Click on the “Export policy…” button on the right side -
Change Agent User Interface
Dear DriveLocker,
it would be nice if you could show the self-service unlock as a tile on the agent user interface.2 votesAfter much deliberation, we have decided to respectfully decline this feature request. We will look into this again as part of a new end-user UI.
-
Temporary unlock with scripts
Sometimes a temporary unlock is almost a daily routine I notice with some customers. Example: PCx, 30 minutes free for USB. With input of PC and time, maybe even from-to (the from is not possible yet) would be very nice with a script. I need to be able to trigger this remotely of course.
2 votesAs there have not been any additional votes on this idea, we will not implement such kind of functionality into DriveLock.
Also because it would introduce a way to bypass security features currently available.
-
Power management
Actions under "power management" should have the option for notebooks in docking station or without alternative with ethernet/power supply or without connection. Otherwise, there is a risk that a notebook in the notebook bag performs an action. It would also be good to configure power options with all setting options as under Windows to establish itself as a central device management solution.
2 votesCurrently most customers do not use these settings and so we will probably deprecate this feature in a future release.
Therefor we will not put efforts into further enhancing this capability.
-
DL2GO hidding the original drive letter
After mounting the stick with DL2Go the original letter should be hidden and there should be no windows error, because this is confusing for the user.
4 votesOur development team evaluated possible technical solutions to hide/show drive letters in Windows “on the fly”. Currently (with Windows 10) it is not possible to manually hide existing drive letters (1) in a reliable way, (2) on the fly without any user interaction and (3) without possibly hacking into Windows core features.
Because of these circumstanced we will not be able to deliver the demanded feature, although we understand the customer value for it. -
change icon of Managment Console and Policy Editor
Change the Management Console Icon.
Change the Edit Policy Icon.These are both the same and every demo i do i get asked this question. Can we change it.
3 votesWe will not change the icon of our DMC, it is just another instance and therefor has the same icon.
In the future all policies will be edited in our DriveLock Operations Center anyway. -
Security Education - create your own quiz
The possibility to create your own questionnaire for security awareness content (as you know it from the prefabricated content).
8 votes -
In the Drivelock Management Console it is not possible to set the FQDN like in the DCC
In the Drivelock Management Console it is unfortunately not possible to set the FQDN as in the DCC, this means for our hotline that a manual entry of the device with FQDN (cross-domain) must always be entered in order to connect to the devices from another domain. It would be very helpful to implement this also in the DLMC.
3 votesWe are currently working on reducing the DMC feature set to a policy editor only. All other functionality will be soon available in the DOC completely.
-
DriveLock File Protection: Support for NetApp Fileserver with SMB-Shares
DriveLock should support NetApp file servers in addition to SMB shares from Windows servers for storing centrally managed folders. NetApp products are often used in enterprises as storage solutions.
Currently, a centrally managed folder cannot be used on a NetApp-provided SMB share.4 votes
- Don't see your idea?