Common Notes for All Media Types
When the log saving folder that is set during the installation of the client (CT) is not in the C drive, do not set export prohibition for the drive where the folder for the saving logs is located.
The target device of export prohibition can be a fixed hard disk, floppy disk, MO, memory storage, DVD/CD, removable hard disk (connecting through USB, IEEE1394, or PCMCIA), network folders, or devices identified as removable drives by the OS.
The target facilities of the reading prohibition can be floppy disks, MO, flash memories, DVDs/CDs, removable hard disks (connected through USB, IEEE1394, or PCMCIA), network folder, or device identified as removable drive by the OS.
The drive for which the export prohibition has been set is read only.
When a folder is copied from a drive under export prohibition, only the folder will be copied but the files in the folder will not be copied.
A drive under export prohibition cannot be formatted through Windows Explorer (but can be formatted using Export Utility).
When the file on is shared on a network and the folder is accessed through UNC path, the network access prohibition will be effective and the access will be disabled.
Though network access prohibition can be set in the File export/read of Management Console, the drive letter of the drive under writing prohibition cannot be set. Therefore, when setting the writing prohibition function, make sure to select the Network in the drive type.
If a folder is set to be an excluded folder and its upper-level folder is allocated as a network drive, access to the excluded folder may be disabled or files cannot be copied from or created in the excluded folder, even though this excluded folder can be displayed under the network drive. In this case, access the excluded folder through the UNC path.
A maximum of 50 excluded folders or 500 characters for all paths of excluded folders can be registered. However, after a large number of excluded folders have been registered, terminal performance will be reduced. Therefore, it is recommended to reduce the number of registered excluded folders if possible.
In the structure of shared folders as follows, the shared folder B will not be excluded when the shared folder A is set as an excluded folder.
Example: If a shared folder exists under the shared folder A.
When excluding the shared folder B, set both shared folder A and B to excluded folders.
If export prohibition is enabled for the drive of the recycle bin, files cannot be deleted to the recycle bin. In this case, disable the export prohibition for the drive or press Shift+Delete to permanently delete files.
Example: the recycle bin is in D drive and is under export prohibition.
When the PEINT command in the Command Prompt window is used to print via the network printer, access prohibition may occur. In this case, print after registering the network printer to an excluded folder.
Example of specifying an excluded folder: \\192.168.1.1\printer01
In Citrix XenDesktop and VMware View/VMware Horizon View/VMware Horizon, the mapped drive is the network drive. Reading and writing prohibitions for the network drive can be set, but the excluded folder for network drive access prohibition setting will not be applied.
Notes on DVD/CD/BD Media Types
Since this product has the driver that is similar to that of burning software installed on the client (CT), when other burning software or packet writing software are installed at the same time, they may run abnormally. If these burning software or packet writing software are used frequently, it is recommended to verify whether the software can run normally in advance.
Sometimes, export prohibition may fail due to the burning software.
For the burning software (Example: Drag'on Drop) that writes to the drive of direct path (IDE/USB)
Perform startup prohibition for the burning software by registering the program name of the burning software in the application startup prohibition.
(Example: Specify to DragDrop in the case of Drag'on Drop)
The drive types, connection methods, media types, and burning software that support CD/DVD export prohibition are as follows:
Drive connection methods
ATAPI
USB 1.1/2.0
IEEE1394
Media
CD-R/RW
DVD-R/RW
DVD-R Dual Layer
DVD+R/RW
DVD+R Dual Layer
DVD-RAM (unless it is identified as a removable disk)
BD-R
BD-RE
Burning software
B's Recorder GOLD 9
Win CDR 9
Record Now! Version 7
Easy Media Creator 8
Nero 7
Burning a CD by using Windows Explorer
DVD-RAM media is likely to be identified as a removable disk by the OS. At this time, it must be prohibited as a removable disk.
HD DVD is not supported. (When writing to an HD-DVD drive under writing prohibition, the written media may be damaged.)
Set Access to CD-ROM is restricted to local logon user only of Windows security policy to Disable. If Access to CD-ROM is restricted to local logon user only is set to Enable, Systemwalker Desktop Keeper will not be able to control the DVD/CD drive. Therefore, even if export prohibition has been set for DVD/CD, burning software can be used for writing.
During DVD/CD/BD writing or reading prohibition, the information of media device cannot be obtained with other software.
During DVD/CD/BD writing or reading prohibition, files in the media cannot be deleted.
During DVD/CD/BD writing or reading prohibition, the DVD/CD/BD media cannot be ejected. In this case, eject again after canceling the DVD/CD/BD writing or reading prohibition.
During DVD/CD/BD writing or reading prohibition, the DVD/CD/BD device cannot be deleted. In this case, delete again after canceling DVD/CD/BD writing or reading prohibition.
When you enable DVD and CD writing prohibition in Windows Explorer and then apply the policy, the drive will be hidden as of the next logon.
If you immediately update the policy and cancel the prohibition setting for the DVD or CD drive for which reading prohibition was set, the drive will be visible as of the next logon.
If you have selected Use for Individual Identification in the File export/read window V15.0.1 or earlier and then upgrade to V15.1.0 or later, DVD and CD devices will also be identified individually in V15.1.0 or later. As a result, Export Utility will not be able to write to DVD or CD devices until you register DVD and CD devices connected via USB as allowed devices.
If you want to select Use for Individual Identification in the File export/read window and use a DVD or CD device, register the DVD or CD device as an allowed device. DVD and CD devices that are not connected via USB cannot be registered as allowed devices, so writing to those devices is not possible.
About Export to a USB Device with Locking Function
If export prohibition and reading prohibition have been set for a USB device with locking function, locking, unlocking, or ejection of the USB device may fail. In this case, lock, unlock, or eject again.
In addition, when reading prohibition has been set, since the following USB device with locking function cannot be unlocked, it cannot be used as well (neither can it be used through the Export Utility).
It is identified as two removable drives: one allows read-only access and the other is the device ejected before authentication.
Notes on adding a volume on a hard disk
Export prohibition setting is not enabled for an added volume until the client (CT) is restarted.
