Platform Deployment Guide › Before You Start using CA DLP › Configure Your CMS Machine Policy to Handle New Accounts

Configure Your CMS Machine Policy to Handle New Accounts

A machine policy governs how CA DLP machines operate, communicate with each other, and protect confidential data. The machine policy on the CMS uses some extra settings to control account handling for unknown users or machines and database management.

When you use CA DLP for the first time after installation, you must edit the CMS policy to determine how it handles new machine accounts. It can either create new accounts automatically, or it can require an administrator to manually add new machines in the Administration console.

To configure CMS policy

1. In the Administration console, expand the Machine Administration branch.
2. Select the CMS and click Edit Policy or right‑click and choose Edit Policy.
3. In the Machine Policy Editor, browse to the Central Management Server folder.

   

4. New user accounts: Configure how the CMS handles new users. In the right-hand pane, double-click the setting Account Handling for New Users and set it to:

   Create New Account

   CA DLP creates a new user account automatically. User names for the new accounts are generated automatically based on Microsoft Windows authentication and include a domain prefix, for example, UNIPRAXIS\srimmel.

   Ignore

   A new account is not created but the user is permitted to continue using their browser and email application.

   Disable Internet applications

   A new account is not created and the user is blocked from using their browser and email application.

5. New machine accounts: Configure how the CMS handles new client machines. In the right-hand pane, double-click the setting Account Handling for New Client Machines and set it to:

   Create New Account

   CA DLP creates a new machine account automatically.

   Ignore

   A new account is not created but users on the machine are permitted to continue using their browser and email application.

   Disable Internet applications

   A new account is not created and users on the machine are blocked from using their browser and email application.