Last modified:	Monday, Mar 26, 2007	Article ID:	721
Related products:	Xcalibur Global Management Software

---

Objectives

This document teaches how to use Xcalibur Global to configure external storage security.

The method taught is based on the following steps:

1. Select the OU containing the target device
2. Create an Xcalibur Policy that is linked to the selected OU
3. Configure the Xcalibur Policy to set external storage security

Applicable Product Version

• Xcalibur Global Version 1.1 Rev. 2
• 2007 Resource Kit v.2 + SP4
• Chip PC Thin Client Firmware version 6.5.5

Procedure

Select the OU Containing the Target Device

• The OU in our example is: Berlin
• The Domain in our example is: net8.qa8

1. Launch the Xcalibur Global Management Console.
   From the Task Bar select:
   Start \ Programs \ Xcalibur Global 1.1 \ Management Console
2. Expand the folders containing the target OU.
   In this example expand:
   Xcalibur Directory Manager \ net8.qa8 \ Chip PC \ Thin Clients
   
   
   
3. Select the OU Berlin.

Create an Xcalibur Policy that is Linked to the Selected OU

1. Right-click on the target OU (In this example Berlin) to display the following drop-down menu:
   
   
   
2. Select Properties from the drop-down menu to display the OU properties screen.
3. A screen titled <OU Name> Properties appears:
   
   
   
4. Select the Xcalibur Policy tab.
5. The following screen appears:
   
   
   
6. Click the New button to open the following drop-down menu:
   
   
   
7. From the drop-down menu, select TC Policy to create a New Xcalibur Policy Object that will appear in the Xcalibur Policy Object Links column.
8. The following screen appears:
   
   
   
9. Enter the name of the new policy and press Enter.

• In our example the policy name is: Device – storage security options.

Configure the Xcalibur Policy to Set External Storage Security

1. Select the Xcalibur Policy.
   
   
   
2. Click Edit to open the Policy Editor screen.
   
   
   
3. Expand the following Policy Branch:
   <Policy name> \ Device Configuration \ 2007 Resource Kit v.2b
   \ Security
   
   
   
4. Click Storage Security.
5. In the right pane, double-click Mass Storage Security Options.
   
   
   
6. The Mass Storage Security Options screen appears.
   
   
   
7. Select Enabled.
8. Select the desired security options from among the following:

• Copy from Storage – Permits files/directories on the storage device to be copied to the session.
• Copy to Storage – Permits files/directories from the session to be copied to the storage device.
• Delete File / Directory from Storage – Permits files/directories on the storage device to be deleted from within a session.
• List Folder Contents – Permits files/folders contained on the storage device to be listed from within a session. This option must always be selected; disabling this option will prevent all access to and from the storage device.

Note:
The Full Control option can be used to enable/disable all of the security options as one.

1.  Click the OK button to confirm selections and to return to the Policy Editor screen.
2. Close the Policy Editor Screen to return to the <OU Name> Properties screen
3. Click Close to return to the Xcalibur Global Management Console screen.

Process Outcome:

• Xcalibur Global now has a policy that will set external storage security for a thin client.
• The policy is linked to the OU that was selected.
• The policy will affect all devices within the OU and any child OUs (as long a there are no restrictions on policy inheritance).

Important:

Please take note that the Mass Storage Security Options may not affect files smaller than 4 Kbytes in size.

Movie: