Configuring temporary access privileges

GFI EndPointSecurity allows security administrators to grant temporary access to users, enabling them to access portable devices (when such access is normally blocked) on protected computers. You can grant temporary access on a protection policy by policy basis.

The steps required to request and grant temporary access are:

1. A user requests temporary access by generating a request code, using the GFI EndPointSecurity Temporary Access tool located on the protected computer.

2. The user communicates the request code with the security administrator, through email, SMS, or other communication methods.

NOTE: The user also needs to inform the administrator on the device type to be accessed, and for how long will device access be required.

3. The administrator enters the request code in the GFI EndPointSecurity management console.

4. The administrator selects the device categories and connectivity ports to grant temporary access to, and specifies time restrictions.

5. The administrator generates an unlock code.

6. The administrator communicates the unlock code to the user, through email, SMS, or other communication methods.

7. The user enters the unlock code in the GFI EndPointSecurity Temporary Access tool.

Requesting temporary access for a protected computer

To generate the request code:

Screenshot 76 - Temporary access group

1. Launch the GFI EndPointSecurity Temporary Access tool from Start > Settings > Control Panel > Devices Temporary Access.

2. Take note of the request code generated, and communicate the code with your system administrator. Keep the temporary access tool open.

3. When the administrator sends the unlock code, enter it in the appropriate field. Click Unlock to activate temporary access.

Granting temporary access to a protected computer

To grant temporary access:

1. Click on the Configuration tab.

2. Click Protection Policies.

3. From the left pane, select the protection policy that includes the computer on which temporary access will be granted.

4. From the right pane, click Grant temporary access in the Temporary Access section.

Screenshot 77 - Grant temporary access

5. Enter the request code received from the user, in the Request code field. The computer name from which the request was generated is then displayed. Click Next to continue.

Screenshot 78 – Specify categories/port to which to give temporary access

6. Select the device categories and/or connectivity ports to which you will be granting temporary access.

Screenshot 79 – Specify temporary access time restrictions

7. Specify the duration during which access is allowed, and the validity period of the unlock code.

NOTE: An unlock code entered on the protected computer outside the specified validity period will not activate temporary access.

8. Take note of the unlock code generated, and communicate the code with the user requesting temporary access. Click Finish to finalize settings.