When you install a CMS, the following user accounts are created automatically in the top-level Users group:
This is the CA DLP account you created when you installed the CMS. This account has full administrative privileges and full management group coverage. The privileges and management group assigned to the Primary Administrator can never be changed. This means it is not possible to withdraw a privilege from this account, or to assign a management group that excludes some groups or users.
This account has no management or administrative privileges; its sole purpose is as a conduit to enable policy engines to apply policy to internal emails from unrecognized senders.
When you install a CMS, the Unknown Internal Sender setting in the machine policy defaults to this UnknownInternalSender user account.
This account has no management or administrative privileges; its sole purpose is as a conduit to enable policy engines to apply policy to external emails.
When you install a CMS, the External Sender setting in the machine policy defaults to this ExternalSender user account.
This account has no management or administrative privileges; its sole purpose is as a conduit to enable policy engines to apply policy to scanned, captured or imported files if no other means are available to determine the policy participant.
When you install a CMS, the Default Policy for Files setting in the machine policy defaults to this DefaultFileUser user account.
This account is similar to the DefaultFileUser account. The account is used solely by the Client File System Agent (CFSA) when scanning local workstations. The CFSA uses this account to apply the same policy to scanned files across all workstations.
When you install a CMS, the Default Policy for Data At Rest setting in the machine policy defaults to this DefaultClientFileUser user account.
This account is used solely by the Content Classification Service (CCS) when classifying documents forwarded to CA DLP by external applications. The CCS uses this account to apply the same policy to all documents that require classification.
When you install the CCS, the Default Policy for Classification setting in the machine policy defaults to this DefaultClassificationUser account.
This account is used by policy engines running as LocalSystem when logging on to the CMS. CA DLP creates this account automatically to streamline the installation process.
|
Copyright © 2012 CA.
All rights reserved.
|
|