DriveLock Product Feedback & Ideas
Share your ideas for DriveLock.
Teilen Sie Ihre Ideen mit DriveLock.
151 results found
-
Split Event 133 by attribute - Access Direction - Read / Write
I’d like to request a feature that allows Event 133 to be split by attribute, separating the Read events (which include numerous files on the USB drive) from the Write events, possibly into 2 different events. The high volume of noise generated by the Read events makes it challenging to parse the data effectively and filter out the unnecessary noise.
2 votesThank you for the feedback and the additional clarification.
Based on the current status, the existing event filtering options appear to address the reported use case, and the additional event filtering is having the desired effect so far.
We will therefore close this idea for now. Should further requirements come up, especially around separate event IDs or additional filtering capabilities for read/write access events, please feel free to submit a new request or provide additional details.
-
Anzeige inaktiver Whitelist-Regeln
Anzeige von Whitelist-Regeln, die über einen längeren Zeitraum nicht genutzt wurden. Dadurch können diese Regeln gezielt überprüft und bei Bedarf deaktiviert oder gelöscht werden. Ziel ist eine bessere Übersicht und einfachere Pflege der Whitelist.
2 votesThis feature was released with 2025.1 already. There is another UserVoice entry: https://drivelock.uservoice.com/forums/913885/suggestions/36036256
Details: The following has been added to the rules display in DOC:
- An optional column showing when an event was last generated by this rule.
- A column in the list of devices/drives for a rule showing when an event was generated for this device/drive in connection with this rule.
- An additional detail view showing all events generated on agents by executing these rules.
Please also refer to https://drivelock.help/versions/2025_1/web/en/complete/content/whatsnew/whatsnew.htm
-
DoC Freigaben in mehreren Regeln anlegen lassen
Es sollte die Möglichkeit bestehen, beim Anlegen von Freigaben im DoC (Laufwerke, Geräte etc.) diese mithilfe eines Multiselects in verschiedenen Regel-„Containern“ gleichzeitig zu erstellen.
Beispiel: Ich erstelle eine Regel für Stick A aus Event 111. Zudem habe ich Regeln für verschiedene Abteilungen in meinem Unternehmen definiert. Stick A soll nun in den Abteilungen 1, 2 und 3 freigeschaltet werden. Derzeit ist es erforderlich, den Stick in jeder dieser drei Regeln einzeln anzulegen. Durch die Einführung einer Multiselect-Option beim Anlegen des Sticks, um die entsprechenden Regeln auszuwählen, könnte dieses Verfahren deutlich vereinfacht werden.
2 votes -
Bitlocker Schutzstatus im DOC
Der Bitlocker Schutzstatus ist im DOC nicht ersichtlich. Für BIOS muss Bitlocker temporär deaktiviert werden, z.B. über den Befehl Suspend-BitLocker -MountPoint "C:" -RebootCount 0. Wenn dann vergessen wird den Schutzstatus wieder zu aktivieren, ist das nicht ersichtlich. Das DOC zeigt zwar die Verschlüsselung bei 100% und TPM aktiv, der Schutzstatus wird aber nicht engezeigt. Dies sollte ersichtlich sein und es sollte eine Aktion zum Aktivieren des Schutzstatus geben.
2 votesPart of 2025.1
-
Richtlinienlöschung nach definierter Offline Zeit
Hallo zusammen,
Jetzt habe ich mit dem Parameter "Globale Einstellungen/Netzwerkprofile/Einstellungen/Regelmässige Online-Tet…" nochmal herumgespielt, um herauszufinden welche Richtlinie gelöscht wird.
Leider wurden ALLE Richtlinien gelöscht. Nicht nur eine unbedeutende LEERE Richtlinie, was ich mir gewünscht habe, weshalb ich diesen Parameter auch extra NUR dort gesetzt habe.
Somit ist der PC jetzt eigentlich absolut UNGESCHÜTZTMeine Frage wäre jetzt, gibt es eine Möglichkeit das löschen auf eine einzelne Richtline zu begrenzen??
Denn die „Default Policy“ sperrt erstmal ALLES, diese Dürfte NIEMALS entfernt werden.
Allerdings wäre es praktisch, wenn man z.B. nach 7 Tagen Offlinezeit die Richtlinie „Freigaben“ löschen könnte.
Indem man den…2 votesPart of 2025.1
-
COM Port Management
We would like to control and manage COM Ports (especially Virtual COM Ports, USB-Serial adapters) in the same way per whitelist rules equal to Drives or other devices like Smartphones, HID devices etc.
In short, possibility of User and Computer combination.
2 votespart of 24.1
-
Enforce maximum temporary unlock time in DOC
it was possible to enforce a maximum duration for temporary unlock set by the mmc through policy settings. This capability is now gone with the DOC and it makes possible for administrators / helpdesk users to set very long time in order to please end users. It should be possible to define a maximum unlock time in order to enforce company policy like it was the case before the DOC.
2 votes2025.2
-
USB-Laufwerke aus Regeln entfernen
Es sollte möglich sein, dass Einträge aus bestehenden Laufwerksregeln (DOC - Sicherheitskontrollen - Laufwerke - Regeln) entfernt werden können, indem man die entsprechenden Laufwerke unter DOC - Inventar - Geräte - Laufwerke vorher selektiert hat.
2 votesreleased with 2025.1
-
Defender management / Send e-mail alert from the server-side
I would like to receive an e-mail alert when a "Severe" Defender-event is fired. This might be possible to be done via SMTP on the agent/client which seems a little odd in 2023.
Such E-Mail-Alerts should be configurable for certain events on the server-side (Web-Interface).
2 votes -
AppControl WhileList rules
New AppControl WhileList rules, created from Events (from DOC Event Report) should not only go
hardcoded into the so called "Permanent unlock policy", but ist should
be also possible to define another (existing) DriveLock Policy as a target for this rule.2 votespart of 24.1
-
Seperate Permissions to Add / Delete Devices from a Device Collection
Currently in depth Whitelist rules can only be set in the Management Console. In there we mostly work with Device Collection. We set a rule with a certain behavior, people it affects, etc. and then connect it with a Device Collection. After that the main effort is in adding new devices to that Device List.
We would like to split the administrative load and have main administrators that set up rules and policies. And then we would like a seperate user group with limited permissions that can only add or remove devices from existing device collections. It is important for…
2 votesThis feature request will be included in the 24.1 release.
-
excel time stamp not displaying time and date
When exporting an event to excel, the timestamp column only displays the date. the column however holds information of both time and date.
we have to manually create a custom catergory in excel for that column.
1) Select the time stamp column right click the "column letter" and select "Format cells" as shown below.
2)select "Custom" under "Category" and create a new format by typing under the "Type:" option
d/mm/yyyy h:mm:ss AM/PMand select "OK"
can we separate the date and time category? or find a way on export to display both time and date of timestamp without extra steps.
2 votesreleased with 2025.1
-
License in use view for cloud customers
We want to have a License in Use view (Cloud) same or similar way as it exist for DriveLock onPrem installations.
2 votesThis feature request will be part of the 24.2 release
-
operating system security should support conditional settings
Conditional settings cannot be used for firewall rules or local user/group configuration. It should be possible to differentiate definitions through conditional settings.
2 votesConfiguration filters are already available also for local users and groups settings as well as for firewall management settings.
-
Add a column for policy order in the computer config details view
Currently there is no option in the computer config details view of the DOC to have a look at the order of how the policies will be applied on a device.
I would suggest to add a column where you can see the order of the applied policies.2 votesWith the release 2022.2 publicly available, the status of this idea is updated to "released".
-
DriveLock Bitlocker with PBA - Autologon without a user
After the DriveLock Bitlocker installation with PBA, the PBA screen also appears if no user has previously logged on.
The DriveLock PBA should be skipped until the first Windows User has logged on.
2 votesWith the release 2022.2 publicly available, the status of this idea is updated to "released".
-
Preinstall DOC Companion for All Users on a computer
Currently the DOC Companion can only be installed, when the user is also local admin on his machine.
But it's a really good security recommendation to separate users internet activities from admin tasks.
So we'd suggest to have an install procedure, that can be started from an admin command line or via a software distribution system.Add a configuration option to prevent the download/start of DOC_Companion.exe.
2 votesWith the release 2022.2 publicly available, the status of this idea is updated to "released".
-
SSO to DOC for legacy AD accounts
Windows with pass-through authentication.
Either using NTLM / Kerberos or SAML / ADFS (SSO)2 votesWith the release 2022.2 publicly available, the status of this idea is updated to "released".
-
set the default Event log to Drivelock instead of the Windows Application Log
set the default Event log always to Drivelock instead of the Windows Application Log
2 votesSince DriveLock 2022.1 all events will be collected within the DriveLock log instead of the Windows application log by default.
-
Powershell support for drivelock.Exe
Please fully support (and document) drivelock.exe command line from PowerShell "Start-Process" command along with "ArgumentList". Current the Arguments from ArgumentList Option are not always accepted, for any available Arg. This is very usefull for example for deployment framework like SCCM or PSAPPDeployToolkit.
2 votesDriveLock 2021.2 is available now.
- Don't see your idea?