Welcome to Quest Workspace Desktop Authority. My name is Eric Villareal. And I'm a senior technical support engineer at Quest Software.
In this video, we'll demonstrate how to configure a USB port security element and the permission sets. You must be licensed to use USB port security. And the update service must be installed on at least one domain controller. Also, the workstations will require a reboot. To verify if you're licensed to use USB port security, select the Registration button. Here, you'll see maintenance information, as well as the USB port security license.
We'll begin by going to Client Configuration, Profiles, User. And we'll select one of your profiles and browse to your USB port security object. And we'll select the Add button to create a new element.
The Option to Edit Settings tab will now be available. In the Settings tab, there is an Install and Remove button. The Install button will install the client machine with the USB port security agent that will allow or deny access to the client USB ports. The Remove button will uninstall all USB port security files and clients off of the workstation.
Below are two options, Show Desktop Task Bar icon and Show Balloons on Desktop. Both are checked by default. In the lower left section, custom permission sets can be created. The default permission should be left unchanged, as it serves as a base model to build upon. Modifying this permission set may block devices, whether the user runs S Logic or not. Leaving the default permission set to allow all devices will allow devices to be usable to users who not listed in the permission set.
To create a new permission set, click the Add button. The new permission set is listed and can be renamed. By default, only 10 items per page are listed. This number may be increased to view more settings per page, or select the arrows on the left to navigate to the next page.
In the lower right section of the Settings tab, users or groups can be added to the permission sets. When configuring the permission sets is complete, click on the Confirm button to save and complete creating the permission set. To change permissions, select the permission set and select Edit. Press Confirm when finished.
The Login tab provides data collection options for USB port security. Before data can be collected, the data collection element must be enabled in the computer profile. And the Collect USB Port Security Information check box must be selected.
In the USB Device Exceptions, specific devices can be allowed or denied based on its VID and PID. To add an exception, click the Add button. Select the action to deny or allow. And enter information regarding the device. Click Confirm when you are finished.
To look up the VID and PID of a device, go to the device manager. Locate the device in the list of components. Right-click on it. And choose Properties. From the Properties dialog, select the Details tab. The VID and PID can be found in the device instance path or ID.
Select the Administrative Override tab to configure a password for the ability to temporarily override restricted device settings on the client computer. The Enable Override box must be selected to see the Disable Restrictions option on the client workstations. This may be done on the client machine by right-clicking the USB Port Security icon in the system tray and selecting Disable Restrictions from the pop-up menu.
The Override dialog box will appear, asking for administrator password. Enter the password and press OK. A balloon will appear from the system tray, informing that restrictions have been temporarily disabled. From this pop-up menu, the permissions that have been applied to the client machine can be viewed by selecting See My Permissions.
Select the Validation Logic tab to set the validation rules to a user or client machines. Select the Notes tab to provide information regarding this element. To complete the process, select the Save button. Then, select Replicate button in the lower left corner. And select Yes.
When a user logs in, they'll receive a dialog box stating that USB port security is being installed. He will then receive a message stating that the workstation must be rebooted. USB port security will be enabled at the next logon.
This concludes our video. For more information about Quest Workspace Desktop Authority, visit quest.com/desktop-authority. For product support, visit quest.com/support.