Global Automatic Access Action

You can select a global action that defines automatic access to encrypted devices. This has an effect on all Media Encryption & Port Protection rules, unless overridden by a different rule or action.

To enable automatic access:

• Make sure that Removable Media Read Access actions allow access for the specified users or computers.

  Note - Users cannot access encrypted devices by entering a password if read access is not allowed for that user.

• Select or define an action that allows Automatic Access for the logged in user.

Media Encryption & Port Protection comes with these predefined actions:

Action	Description
Encrypted storage devices are fully accessible by all users	All users can read and change all encrypted content.
All users in the organization can read encrypted data, only owners can modify	All users can read encrypted files on storage devices. Only the media owner has can change encrypted content.
Only owners can access encrypted data	Only media owners read and/or change encrypted content.
Access to encrypted data requires password authentication	Users must enter a password to access the device. Automatic access in not allowed.

Custom Automatic Access Action Rules

To create custom action rules:

1. Right-click a Global Automatic Access action and select Edit.

   The Custom Encrypted Media Access Rules window opens. There are two predefined action rules in this window. You cannot delete these rules or change the media owner or media user. But, you can change the access permissions.

   The two predefined actions are defaults that apply when no other custom action rules override them. The Any/Media Owner action rule is first by default and the Any/Any action rule is last by default. We recommend that you do not change the position of these rules.

2. Click Add.
3. In the Encrypted Media Owner field, click the arrow and select one of these options:
   • Any - This action applies to any media owner
   • Choose User/Group/OU from your organization - Select the applicable user, group or OU that this action applies to
4. In the Encrypted Media User field, click the arrow and select one of these options:
   • Any - This action applies to any user
   • Media owner - The media owner is also defined as the user
   • Choose User/Group/OU from your organization - Select the applicable user, group or OU that this action applies to
5. In the Access Allowed field, select one of these permissions:
   • Full Access
   • Read Only
   • No Automatic Access

To delete a custom action rule, select the action and click Remove. To edit an action, simply select the field in the applicable action and change the parameter.