Test case
Upon compliance with the previously outlined test pre-conditions, non-administrative users are no longer allowed access to any devices or ports connected to the local computer.
To verify that both the device and media are inaccessible to the non-administrative user:
1. Log in to the local computer as the user with no administrative privileges.
2. Insert the CD/DVD disc in the CD/DVD drive.
3. From Windows Explorer locate the CD/DVD drive and confirm that you are unable to view and open the contents stored on the CD/DVD disc.
To assign CD/DVD device access permissions to the user with no administrative privileges:
1. Log in to the local computer as the user with administrative privileges.
2. Launch GFI EndPointSecurity.
3. Click on the Configuration tab.
4. Click on the Protection Policies sub-tab.
5. From the left pane, select the General Control protection policy.
6. Click on the Security sub-node.
7. From the left pane, click the Add permission(s)… hyperlink in the Common tasks section.
8. In the Add permissions… dialog select the Device categories option and click Next to continue.
9. Enable the CD/DVD device category, and click Next.
10. Click Add… and specify the user with no administrative privileges, to have access to the CD/DVD device category specified in this protection policy, and click OK.
11. Enable the Access/Read and Write permissions and click Finish.
To deploy the protection policy updates on to the local computer:
1. From the right pane, click on the top warning message to deploy the protection policy updates. The view should automatically change to Status > Deployment.
2. From the Deployment History area, confirm the successful completion of the update onto the local computer.
Upon the assignment of user permissions, the specified user with no administrative privileges should now be allowed to access CD/DVD discs through CD/DVD drives connected to the local computer.
To verify that both the device and media are now accessible to the non-administrative user:
1. Log in to the local computer as the user with no administrative privileges.
2. Insert the same CD/DVD disc in the CD/DVD drive.
3. From Windows Explorer locate the CD/DVD drive and confirm that you are now able to view and open the contents stored on the CD/DVD disc.