Deployment Guide › Client Agents: File and Print › Deploy the CFSA › Configure the User Policy › Access Denied Message Subfolder

Access Denied Message Subfolder

Find this subfolder in the \Extensions\Client File System Agent folder. It contains settings that define the message seen by users when they open files from a prohibited device or network location. This message typically warns users that they are barred from saving file changes to removable devices or certain network folders.

• Frequency; Title; Message

  Use Title and Message settings to provide a notification message for users, explaining that they will be unable to save changes to the current file.

  The Frequency setting determines how often this message is shown. You can set the message to never display, or to display:

  • Once per login: A user only sees the message once in a Windows session. This happens the first time they open a file from a prohibited device or network location.
  • Once per volume mount: A user sees the message if they plug in a prohibited device such as a USB drive and then open a file from that device. The message is only shown the first time they open a file from that device.
  • Once per application: A user sees the message when they open a file from a prohibited source. The message is only shown once per application per Windows session. For example, the message is shown if they open a Microsoft Word document stored on a prohibited USB device. If they then restart Word and open the document again, the message is not shown.
  • Once per application instance: A user sees the message each time they open a file from a prohibited source. As above, the message is shown if they open a Microsoft Word document stored on a prohibited USB device. But now if they restart Word and open the document once more, the message is shown again.

  Note: A prohibited source is any removable device or network location to which write access is denied. Write access may be denied by settings in the local machine policy or by Data In Motion triggers in the user's policy.