Regresar
-
Título
What is a File System Protection Template? -
Descripción
What is a File System Protection Template used for and how do you create one? -
Resolución
A File protection template allows you to prevent any or all of the following actions from being performed on specific files or folders:- Read
- Write
- Create
- Delete
- Rename
- Move
- Dacl Change
- Owner Change
- Sacl Change
- Attribute Change
- CAP Change
- Classification Change
To create a File System Protection template:- Open the Administration Tasks tab
- Click the Protection task button at the bottom of the navigation pane (left-hand pane)
- Select File System under the Protection task list to open the File System Protection page
- Click the Add tool bar button to launch the File System Protection wizard which will step you through the process of creating a File System Protection template
- In the Template Name field, enter a descriptive name for the template
- In the Path field, enter or click the button to specify the file system path to be protected. Click the Add button to move the specified file system path to the selection list
- By default, protection will include the subfolders in the selected file system path. However, to exclude the subfolders, click the arrow control in the Subfolders cell and select No
- By default, the specified system file path will be protected. However, to exclude the selected file system path from protection, click the arrow control in the Protect cell and select No
- By default, protection will be applied to both files and folders in the selected file system path. To protect just files, folders or shares, click the arrow control in the Applies To cell and select one of the following options:
- Files
- Folders
- Files and Folders (default)
- Shares - By default, protection will prevent ‘all’ operations from occurring. However, to protect against specific operations, click the arrow control in the Protection Type cell and select one or more of the following operations:
- [All] (default)
- Read
- Write
- Create
- Delete
- Rename
- Move
- Dacl Change
- Owner Change
- Sacl Change
- Attribute Change
- CAP Change
- Classification Change - Use the File Mask field to optionally specify a file mask to protect a group of files in the selected file system path. Once you have specified a file mask, click the Add button to add it to the list at the bottom of the page
- On the next page of the wizard, use the Browse or Search page to optionally select user or group accounts which will be allowed to make changes to the protected objects selected on the previous page. Click the Add button to add the selected user or group to the Override Account list
NOTE: The Allow option is selected by default indicating that the selected users or groups will be allowed to change the protected objects. However, you can select the Deny option at the top of this page and select individual users or groups that are NOT allowed to change the protected objects. When using the Deny option, you are allowing all users and groups to change the protected objects EXCEPT for those selected on this page - To create the template without assigning it to an agent configuration, click the Finish button. Clicking the Finish button will create the template, close the wizard, and return to the File System Protection page where the newly created template will now be listed
- To create the template and assign it to an agent configuration, expand the Finish button and select Finish and Assign to Agent Configuration. On the Configuration Setup dialog, use one of the following methods to assign this template to an agent configuration:
- Select the newly created template and ‘drag and drop’ it onto a configuration in the Configuration list
- Select a configuration from the Configuration list and ‘drag and drop’ it onto the newly created template
- Select a configuration, then select the newly created template, right-click and select Assign
- Select a configuration, then select the newly created template, click in the corresponding Assigned cell and click Yes - If this configuration is not assigned to any agents, you will need to assign it to one or more installed agents to capture the specified file system events:
- On the Agent Configuration page, select one or more agents from the agent list and click the Assign tool bar button
- On the Agent Assignment dialog, select the configuration definition to be assigned to the selected agent(s) and click the OK button
- On the Agent Configuration page, select the agent(s) assigned to use the modified agent configuration and click the Refresh Configuration tool bar button or right-click command. This will ensure the agent(s) are using the latest configuration
NOTE: If you do not refresh the agent’s configuration, the agent will automatically check for a new agent configuration based on the polling interval setting (located on the System Settings tab of the Configuration Setup dialog). The default is every 15 minutes