AnswerGFI EndPointSecurity manages permissions set on users. Therefore, if a user logs on to a machine which has the updated GFI EndPointSecurity Agent deployed to it, the permissions which are configured on this machine for the user will apply.
Different user based permissions can be configured for different Protection Groups - groups of computers which can be configured in GFI EndPointSecurity. For example, one user can be allowed access to his CD drive on his machine, but will not be allowed access to the CD drive on a server. Another user (Administrator) may be allowed access to the CD drive on both machines.