Enhanced Access Control Policy on Windows

This ability has control over files and directories permissions to users based on sessions. An administrator can specify a list of paths and each one has access control such as; Read, Write, Delete capabilities.

NOTE:Non-English characters are not supported with Enhanced Access Control on Windows.

Procedure to Create EAC Policy in Windows:

  1. Click Access Control > Configuration > Enhanced Access Control > New Policy.

  2. Specify the Name

  3. (Optional) Specify the Description

  4. Select the List Type as Windows.

  5. Click Create.

  6. Click Add Path: Create a path in the target machine. Modify this path rule to create appropriate permissions for file and associate this with the necessary risk score if you want.

  7. Click Save.

  8. Create Resource Pool. For more information see, Section 6.2.2, Configuring Resource Pools.

  9. Create User Role. For more information, see Section 6.2.3, Configuring User Roles.

  10. Associate the Resource Pool and User Role with an assignment by clicking permissions for the Enhanced Access Control.

  11. Click Add > Add EAC Policy. The Windows policy is displayed.

  12. Select the Policy and click Add.

  13. Click Finish. The permission is created.

  14. Log into a Windows machine and navigate to the created folder. You can verify that the permissions you had created are successfully configured.

You can view the risk details in Reports > All Sessions Details > Keystrokes.