4.3.4 Security control prerequisites
To perform security control, an agent must be installed on each of the computers subject to security control. For offline managed computers, acquisition of device information must be completed.
The following describes the prerequisites to use the security control functions.
Prerequisites to manage the application of updated programs:
All the following conditions must be satisfied:
-
A support services contract has been made.
-
MSXML 4.0 Service Pack 2 or MSXML 6.0 is installed.
Prerequisites to determine whether anti-virus products are installed
There are no prerequisites to determine whether anti-virus products are installed.
To check whether anti-virus products are installed, you only have to check whether anti-virus products supported by JP1/IT Desktop Management 2 are installed on the target computer.
- Tip
-
To check whether an anti-virus product not supported byJP1/IT Desktop Management 2 is installed, add that anti-virus product as mandatory software.
Prerequisites for using the suppression functions
|
Function |
Prerequisites |
|---|---|
|
Suppressing startup of the software |
The combined length of the file name and folder name of the target software must be less than 260 characters. |
|
Suppressing printing |
In the properties for each printer, Print and Manage Documents must be allowed for all logged on users.# |
# For the network shared printer, the following prerequisites are added.
-
The table below shows the supported combination of the agent and the print server.
Agent
Print server
Printing restriction
Windows 7 or later
Windows XP/2003
N
Windows 7 or later
Windows Vista or later
Y
Any
Others
N
Legend: Y:Printing can be restricted for this type of printer. N:Printing cannot be restricted for this type of printer.
-
RPC communication must be possible between the print server and the agent PC. If RPC communication is not possible, the problem might be caused by one of the following:
-
The print server is a server based on the Internet Printing Protocol (IPP).
-
A firewall, proxy or NAT is present between the print server and the agent PC.
-
The agent PC's Windows firewall is enabled and File and Printer Sharing is not set to Exceptions.
-
-
The agent PC's File and Printer Sharing for Microsoft Networks must be enabled.
-
The print server must be able to resolve the name of the agent PC.
-
If the agent PC is Windows 7 or later, the agent PC and the print server must join the same domain, or the credential of the print server must be registered on the Credential Manager of the agent PC. The agent PC needs to reboot after registering the credential.
For details about prerequisites for suppressing the use of devices, see (1) Devices whose use can be restricted.
- Important
-
Agents for UNIX and Mac are not subject to security control. Therefore, application management of update programs (OS patches), determination on whether anti-virus products are installed, and use of the suppression functions are not available.
Related Topics: