Job Management Partner 1/Software Distribution Administrator's Guide Volume 1

[Contents][Glossary][Index][Back][Next]

6.2.10 Setup for collecting logs of operations with external media and for suppressing operations with external media

You must set whether or not logs of operations with external media are to be acquired, and whether or not operations with external media are to be suppressed. The default is that all the check boxes in this dialog box are not selected. This setup is applicable to clients whose version is from 08-51 through 09-00.

Figure 6-23 Edit Software Operation Monitoring Policy dialog box (setup for collecting logs of operations with external media and for suppressing operations with external media)

[Figure]

Acquire the log of operations to and from external media
When selected, this option specifies that logs of operations with external media are to be acquired. When this check box is selected, the system acquires logs of connections with and disconnections from (or removals of) USB media, internal CD or DVD drives, IEEE 1394 media, and internal SD card slots. Logs of connections with and disconnections from (or removals of) internal floppy disk drives cannot be acquired. If the client OS is Windows 8, Windows Server 2012, Windows 7, Windows Server 2008 or Windows Vista, logs of USB CD or DVD drive operations and internal CD or DVD drive operation cannot be acquired.

Suppress access to connected USB media
When selected, this option specifies that accesses to media connected via USB are to be suppressed.
Suppress reading and writing
Suppresses read and write operations with media connected via USB. The default is that this option is selected.
Exclude the specified media from suppression
This option is enabled when the Suppress access to connected USB media check box and the Suppress reading and writing radio button are selected.
This option excludes specified USB media from read and write suppression.
Select this check box also if you wish to have a JP1 event issued as an alert when USB media whose operation is suppressed is connected to the client PC.
Display a message on client PCs prohibiting USB media operations
This option is enabled when the Exclude the specified media from suppression check box is selected.
If a suppressed USB media device is connected to the client PC, a message is displayed on the client PC indicating that operations on that USB media are suppressed.
This message might be displayed more than once on occasions such as when new USB media is connected to the client PC and a device driver is installed automatically.
Acquire the connection permission log
This button is enabled when the Exclude the specified media from suppression check box is selected.
This option acquires operation logs of USB media that have been removed as suppression targets.
This function is not supported by JP1/Software Distribution Client 09-00 or earlier.
Acquire the connection suppression log
This button is enabled when the Exclude the specified media from suppression check box is selected.
This option acquires the suppress history of USB media.
This function is not supported by JP1/Software Distribution Client 09-00 or earlier.
Set Exclusion Conditions button
This button is enabled when the Exclude the specified media from suppression check box is selected.
The option specifies USB media that are to be excluded from being suppression targets. For details about how to specify this option, see (1) Setting exclusion conditions (for overriding suppression of access to USB media).
Suppress only writing
Suppresses only write operations with media connected via USB; data on the media can be read. By default, this radio button is cleared.

Suppress writing to an internal CD or DVD
When selected, this option specifies that write operations with a CD or DVD in an internal CD or DVD drive are to be suppressed. Even when this check box is selected, data on a CD or DVD in an internal CD or DVD drive can be read. This setting takes effect only when the client OS is restarted. Note that write operations can be suppressed only when Windows-provided IMAPI is used; write operations by other products cannot be suppressed.

Suppress reading from and writing to an internal floppy disk
When selected, this option specifies that read and write operations with a floppy disk in an internal floppy disk drive are to be suppressed. This setting takes effect when the client OS is restarted.

Suppress reading from and writing to connected IEEE 1394 media
When selected, this option specifies that read and write operations on IEEE1394 media are to be suppressed.

Suppress reading from and writing to an internal SD card
When selected, this option specifies that read and write operations on an SD card in an internal SD card slot are to be suppressed.
Organization of this subsection
(1) Setting exclusion conditions (for overriding suppression of access to USB media)
(2) Creating a CSV file for setting exclusion conditions (for overriding suppression of access to USB media)
(3) Notes about setting exclusion conditions (for overriding suppression of access to USB media)

(1) Setting exclusion conditions (for overriding suppression of access to USB media)

You can use the Exclusion Condition Settings dialog box to set conditions for excluding USB media from being suppression targets. To display this dialog box, click the Set Exclusion Conditions button in the Edit Software Operation Monitoring Policy dialog box.

One of the following methods is used to read the information for the USB media to be suppressed (friendly name or device instance ID) and to set suppression exclusion conditions in the Exclusion Condition Settings dialog box:

If you connect USB media to the managing server, a confirmation dialog box is displayed. The purpose of this dialog box is to check whether or not the information read from the USB media is to be applied to the Exclusion Condition Settings dialog box. It does not set the imported information as exclusion conditions.

When you have finished specifying settings in the Exclusion Condition Settings dialog box, click the Finish button.

Figure 6-24 Exclusion Condition Settings dialog box

[Figure]

Add the following friendly name to the registered conditions
Select this option to use the Friendly name to set exclusion conditions for information imported by connecting USB media to the managing server, or for information that has been entered. By default, this radio button is selected.
If you select this radio button and then click the Add button, all items displayed in Friendly name are displayed in Registered Conditions. Full match is set as the comparison condition.

Friendly name
Displays the friendly names of the USB media whose connection was detected. You can edit a friendly name. You can register a maximum of 100 names.

Add the device instance ID of a disk drive to the registered conditions
Select this option to use the device instance ID of a disk drive to set exclusion conditions for information imported by connecting USB media to the managing server, or for information that has been entered. By default, this radio button is cleared.
If you select this radio button, and then select a comparison condition, and then click the Add button, all items displayed in Device instance ID (disk drive) are displayed in Registered Conditions.

Device instance ID (disk drive)
Displays the device instance ID of a disk drive on which a USB media connection was detected. You can edit a displayed device instance ID.
You can register a maximum of 10,000 device instance IDs (including both disk drives and USB controllers).

Add the device instance ID of a USB controller to the registered conditions
Select this option to use the device instance ID of a USB controller to set exclusion conditions for information imported by connecting USB media to the managing server, or for information that has been entered. By default, this radio button is cleared.
If you select this radio button, and then select a comparison condition, and then click the Add button, all items displayed in Device instance ID (USB controller) are displayed in Registered Conditions.
This function is not supported by JP1/Software Distribution Client 09-00 or earlier.

Device instance ID (USB controller)
Displays the device instance ID of a USB controller for USB media whose connection was detected. You can edit the displayed device instance ID.

Comparison method of device instance ID
Specifies how to compare the specified condition character string and the target USB media when the disk drive or USB controller device instance ID is to be used in specifying the exclusion conditions. You can select the following items:
This function is not supported by JP1/Software Distribution Client 09-00 or earlier.
  • Full match comparison
    Select this radio button to specify an exclusion condition with which the value must match exactly. By default, this radio button is selected.
  • Starts-with comparison
    Select this radio button to specify an exclusion condition with which the value must begin. By default, this radio button is cleared.
  • Ends-with comparison
    Select this radio button to specify an exclusion condition with which the value must end. By default, this radio button is cleared.
  • Contains comparison
    Select this radio button to specify an exclusion condition that must be contained in the value. By default, this radio button is cleared.
  • Starts-with AND comparison
    Select this radio button to change a specified Ends-with exclusion condition to a Starts and ends with exclusion condition by adding a Starts-with exclusion condition. This option is enabled if you select an Ends-with exclusion condition from Registered exclusion conditions. By default, this radio button is cleared.
    For details about how to specify a Starts and ends with exclusion condition, see (a) How to specify a Starts and ends with exclusion condition for device instance IDs.
  • Ends-with AND comparison
    Select this radio button to change a specified Starts-with exclusion condition to a Starts and ends with exclusion condition by adding an Ends-with exclusion condition. This option is enabled if you select a Starts-with exclusion condition from Registered exclusion conditions. By default, this radio button is cleared.
    For details about how to specify a Starts and ends with exclusion condition, see (a) How to specify a Starts and ends with exclusion condition for device instance IDs.
Note that if you select a Starts and ends with exclusion condition that has already been specified, all radio buttons for Comparison method of device instance ID are disabled.

Comment
You can enter any comment of up to a maximum of 64 bytes in length.

Add button
Clicking this button adds the exclusion conditions specified in the left-hand part of the window to Registered Conditions.
If you have specified an exclusion condition by using device instance IDs, you can add a Starts and ends with exclusion condition by using a Starts-with or Ends-with exclusion condition that has already been specified. For details about how to specify a Starts and ends with exclusion condition, see (a) How to specify a Starts and ends with exclusion condition for device instance IDs.

Change button
When you select a condition displayed in Registered Conditions, the contents of the selected condition are displayed in the left-hand part of the window. Any information that had been displayed in that part of the window is deleted.
If you change a condition and then click this button, the change is applied to Registered Conditions.
If you used device instance IDs to specify an exclusion condition, you can change a specified Starts-with or Ends-with exclusion condition to a Starts and ends with exclusion condition. For details about how to specify a Starts and ends with exclusion conditions, see (a) How to specify a Starts and ends with exclusion condition for device instance IDs.

Registered Conditions
Displays information about the USB media that have been specified as exclusion targets, as shown below.
Type
Displays one of the following:
  • Friendly name
  • Device ID
  • Device ID (USB controller)
Comparison condition
Displays one of the following:
  • Full match
  • Starts with
  • Ends with
  • Contains
  • Starts and ends with
Exclusion Condition
Displays the character string specified as the exclusion condition. If the comparison condition is Starts and ends with, the following is displayed:
start-condition NETM_AND end-condition
Comment
Displays any comment.

Add From File button
Use this button if you have created a CSV file.
Clicking this button displays the Input from File dialog box. If you specify a CSV file that contains exclusion conditions and then click the Open button, the contents of that file are added to Registered Conditions.
For details about creating such a CSV file, see (2) Creating a CSV file for setting exclusion conditions (for overriding suppression of access to USB media).

Save To File button
Clicking this button displays the Save As dialog box. If you specify a storage directory and then click the Save button, the conditions displayed in Registered Conditions are output to a CSV file.

Delete button
Selecting a condition from Registered Conditions and then clicking this button deletes the selected condition. You can select and delete multiple conditions at the same time.
(a) How to specify a Starts and ends with exclusion condition for device instance IDs

Starts and ends with is a comparison condition used for excluding device instance IDs that begin and end with specified conditions. The following example excludes device instance IDs that begin with aaa and end with zzz:

aaaUSBSTOR\DISK&VEN_XXXX&PROD_USB_FLASH_DISK& REV_4.70\0741BB312E000B13zzz

To change an exclusion condition from Starts-with to Starts and ends with for disk drive or USB controller device instance IDs:

  1. Specify a Starts-with exclusion condition.
    Change the device instance ID displayed in the left-hand part of the window to a condition character string and then select Starts-with comparison as the comparison condition. After that, click the Add button to set the condition character string as a Starts-with exclusion condition.
  2. From Registered Conditions, select the Starts-with exclusion condition that was specified in step 1.
  3. Specify an Ends-with exclusion condition.
    Change the device instance ID displayed in the left-hand part of the window to a condition character string and then select Ends-with AND comparison as the comparison condition.
  4. Add the Ends-with exclusion condition to the Starts-with exclusion condition (this changes it to a Starts and ends with exclusion condition).
    Click the Change button.
    The existing Starts-with exclusion condition has been changed to a Starts and ends with exclusion condition.

Similarly, you can specify an Ends-with exclusion condition, add a Starts-with exclusion condition, and then change the Ends-with exclusion condition to a Starts and ends with exclusion condition.

If you click the Add button in step 4, the Starts and ends with exclusion condition is added while the existing Starts-with exclusion condition is retained.

(2) Creating a CSV file for setting exclusion conditions (for overriding suppression of access to USB media)

In a CSV file for setting exclusion conditions, you define for each USB media device that is to be excluded a single line that consists of the type of condition, the exclusion condition, and a comment.

Format
condition-type,exclusion-condition,comment

Description
[Figure] condition-type (mandatory)
Specifies one of the following as the condition type:
  • 0:friendly name (exclusion by Full match)
  • 1:device instance ID (exclusion by Full match)
  • 2:device instance ID (exclusion by Starts with)
  • 3:device instance ID (exclusion by Ends-with)
  • 4:device instance ID (exclusion by Contains)
  • 5:device instance ID (exclusion by Starts and ends with)
  • 6:device instance ID (USB controller) (exclusion by Full match)
  • 7:device instance ID (USB controller) (exclusion by Starts with)
  • 8:device instance ID (USB controller) (exclusion by Ends-with)
  • 9:device instance ID (USB controller) (exclusion by Contains)
  • 10:device instance ID (USB controller) (exclusion by Starts and ends with)
[Figure] exclusion-condition (mandatory)
Specifies a friendly name for USB media or device instance IDs (disk drives or USB controllers) that are to be excluded as suppression targets. If you use a partial match comparison condition, such as Starts-with, for the device instance ID, specify the matching character string.
If you specify exclusion by Starts and ends with (the type is 5 or 10), use [Figure]NETM_AND[Figure] between the leading and trailing conditions, where [Figure] indicates a single-byte space.
[Figure] comment
Specifies any optional comment for the exclusion condition, as a maximum of 64 bytes. Specification of a comment is not required.

Example
The following shows an example of a CSV file for setting exclusion conditions:
"0","XXXX USB Flash Disk USB Device","XXXX_2007.01"
"0","XXXX USB Disk USB Device",""
"1","USBSTOR\DISK&VEN_XXXX&PROD_USB_FLASH_DISK& REV_4.70\0741BB312E000B13","Hitachi Taro"
"1","USBSTOR\DISK&VEN_XXXX&PROD_USB_FLASH_DISK& REV_4.70\0741BB312E000B14",""
"2","USBSTOR\DISK&VEN_XXXX&PROD_USB_FLASH_DISK& REV_4.70\0741BB312E000B1","Hitachi Taro"
"2","USBSTOR\DISK&VEN_XXXX&PROD_USB_FLASH_DISK& REV_4.70\0741BB312E000B1",""
"3","0741BB312E000B13","Hitachi Taro"
"3","0741BB312E000B14",""
"4","REV_4.70","Hitachi Taro"
"4","REV_4.70",""
"5","USBSTOR\DISK&VEN_XXXX NETM_AND 0741BB312E000B13","Hitachi Taro"
"5","USBSTOR\DISK&VEN_XXXX NETM_AND 0741BB312E000B13",""
"6","USBSTOR\DISK&VEN_XXXX&PROD_RUF2-HSCW&REV_3.10\070007851A930035&0","Hitachi Taro"
"6","USBSTOR\DISK&VEN_XXXX&PROD_RUF2-HSCW&REV_3.10\070007851A930035&1",""
"7","USBSTOR\DISK&VEN_XXXX&PROD_RUF2-HSCW&REV_3.10\070007851A930035","Hitachi Taro"
"7","USBSTOR\DISK&VEN_XXXX&PROD_RUF2-HSCW&REV_3.10\070007851A930035",""
"8","070007851A930035&0","Hitachi Taro"
"8","070007851A930035&1",""
"9","REV_3.10","Hitachi Taro"
"9","REV_3.10",""
"10","USBSTOR\DISK&VEN_XXXX NETM_AND 070007851A930035&0","Hitachi Taro"
"10","USBSTOR\DISK&VEN_XXXX NETM_AND 070007851A930035&0",""

(3) Notes about setting exclusion conditions (for overriding suppression of access to USB media)

Notes about the dialog box that checks whether or not the settings are to be applied
If you connect a new USB media device to the managing server and the device driver is installed automatically, multiple dialog boxes with different contents may be displayed.
If this happens, check the contents of each dialog box and click the Yes button only if information about the USB media device has been acquired.

Notes about setting exclusion conditions using friendly names
  • A friendly name must be specified as a maximum of 1,024 bytes. A USB media device whose friendly name exceeds this length cannot be excluded from being a suppression target.
  • You can register a maximum of 100 friendly names.
  • To exclude USB media with two or more friendly names from suppression, specify all the friendly names on the USB media.

Notes about setting exclusion conditions using device instance IDs
  • A device instance ID must be specified as a maximum of 2,048 bytes. A USB media device whose device instance ID exceeds this length cannot be excluded from being a suppression target.
  • To exclude USB meda for which multiple device instance IDs have been set from being a suppression target, specify all the applicable device instance IDs. Note that if the client version is 09-50 or later and you use a partial match to compare device instance IDs, it might not be necessary to specify all the device instance IDs.
  • When the OS is Windows 2000 or Windows XP, some USB media have a different device instance ID depending on the USB port to be connected. Such USB media are not supported. Note that if the client version is 09-50 or later and you use a partial match to compare device instance IDs, such USB media might be recognized correctly.
  • Before you set exclusion conditions, you should display the properties dialog box for each USB media device from Device Manager, which can be found from Control Panel by choosing Administrative Tools and then Computer Management. Make sure that CM_DEVCAP_UNIQUEID is displayed in Function on the Details page. Device instance IDs cannot be used to set conditions for USB media for which CM_DEVCAP_UNIQUEID is not displayed.
  • You can register a maximum of 10,000 device instance IDs.
    The number of registered device instance IDs is the sum of the conditions registered for device drives and USB controllers.