I'm looking at EEFF / Removable Media policies with a view to enforcing intitialisation and encryption of USB devcies before a user can be permitted to write to the device from a corpoerate computer.
At them moment I've configured a pop-up with an explanation, but the end user then has to navigate through; the task bar \ McAfee Agent \ Manage Features \ EndPoint Encryption for File and Folders \ Initialize Media. Is there anyway this can be simplified, so that as soon as the end user inserts an unencrypted USB drive they are prompted to encrypt?
Many thanks for any advice
The product has been designed in such a way that the prompt appears automatically as soon as the end user inserts an unencrypted USB drive. Can you check if the right Removable Media policy is available on the client ?
I do get an informational pop-up which links to a web page when an unencrypted USB is inserted, but this doesn't give the option to encrypt the device. This pop-up text is defined in in the DLP Policy \ Device Management \ Device Rules \ Removable Storage Device Rules area.
Does this sound right?
I think the Removable Media policy is getting delivered to the client because when I change the User Managed optons within EEFF \ Removable Media policy the changes do take effect on my workstation.
The informational pop-up defined in the DLP policy is not in any way related.
By default, the following message should be seen when a removable media device is inserted by the end user.
The end user can choose to encrypt the device by selecting the "Yes" option.
Please note that the below screenshot refers to the Product as "File and Removable Media Protection (FRP)". FRP is the new name for "Endpoint Encryption for Files & Folders (EEFF)".
You have a policy setting "Customize UI text on inserting removable media" under Removable Media policy through which you can customize the pop-up message that EEFF displays when an end user inserts removable media devices.
I can now see the policy setting "Customize UI text on inserting removable media" but this text is not the the message that gets displayed when a user inserts a USB device, which is coming from DLP Policy \ Device Management \ Device Rules \ Removable Storage Device Rules. Could this rule be overriding the Cusomize UI text rule?
Is there anything that would be likely to prevent my EEFF \ Removable Media ""Customize UI text on inserting removable media" text from being issued when the unencryped USB is inserted? It looks like the policy is set up correctly and other than not issuing this prompt is behaving as expected.