The best configuration (Full Version)

All Forums >> [Network Security] >> GFI EndPointSecurity



Message

gcamacho_ec -> The best configuration (15.May2008 12:46:10 PM)

What is the best or recommended configuratin of GFI EPS with Active Directory.

I have created one security global group for each category policy, and use the workstations and laptop group to add my controlled workstations.

Here I have for example:
GFI_ESEC_CdDvdRom_Access with Read Only Access with priority 1
GFI_ESEC_CdDvdRom_FullAccess with Full Access with priority 1[image]http://forums.gfi.com/file:///C:/DOCUME%7E1/gcamacho/LOCALS%7E1/Temp/moz-screenshot-2.jpg[/image][image]http://forums.gfi.com/file:///C:/DOCUME%7E1/gcamacho/LOCALS%7E1/Temp/moz-screenshot-1.jpg[/image]

In the installation manual of the product I see a user with the CdDVD and Flash Access right.

Conclusion, I should make one group access for each category or configure one group with all categories?



LeoSanchez -> RE: The best configuration (21.May2008 11:07:53 AM)

Hello gcamacho_ec,

If your users/groups are members of two groups, one that allows read and the other that allows full access, then the GFI EndPointSecurity agent will apply the most restrictive permissions (in this case the user will only have read access, even though he is a member of the full access group).

The best way to assign permissions is to add the users/groups to the default GFI EndPointSecurity groups based on the type of permission you wish to allow for these users/groups.



Page: [1]