H3C Technologies H3C Intelligent Management Center - Manual (Page 50)

34
Share Control area
The share control check takes effect only on Windows PCs.
• Check Share—Indicates whether to check the share directories on the user endpoint.
The following parameters appear only when the Check Share option is selected:
• Share Control—Name of the share control policy used in the security policy.
• Failure Notification—Message that the iNode client displays when an access user fails the share
check.
Asset Registration Status Check area
The asset registration status check takes effect only on Windows PCs.
• Check Asset Registration Status—Indicates whether to check the asset registration status of the user
endpoint.
• Failure Notification—Message that the iNode client displays when an access user fails the asset
registration status check. This parameter appears only when the Check Asset Registration Status
option is selected.
Windows System Restore area
This area has the following parameters:
• Check Windows System Restore—Indicates whether to check the Windows system restore settings
of the user endpoint.
• Failure Notification—Message that the iNode client displays when an access user fails the
Windows system restore settings check. This parameter appears only when the Check Windows
System Restore option is selected.
Periodic Check area
After a user comes online, the iNode client checks the endpoint of the user at regular intervals. The
periodic check monitors the traffic and OS password settings on Windows PCs.
• Traffic Control—Name of the traffic control policy used in the security policy. It determines whether
traffic processed by the endpoint is reasonable.
• Check Operating System Password—Indicates whether to periodically check the operating system
password for the user endpoint.
The following parameters appear only when the Check Operating System Password option is selected:
• Check All Local Users—Select this option to check the operating system passwords of all local user
accounts for the endpoint. If this option is not selected, EAD checks the password of the current login
user only.
An endpoint fails the security check if the operating system password of the user is included in the
IMC password dictionary or meets the built-in password rules on the iNode client.
• Check Dictionary File Only for IMC—Select this option to consult only the IMC password dictionary
for password checking. If this option is not selected, EAD consults both IMC password dictionary
and iNode client password rules for password checking.
• Add to Security Check—Select this option to check the operating system password of at the user
login and during the periodic check. If this option is not selected, the iNode client checks the
operating system password during the periodic check.
When the IMC password dictionary contains large number of entries, the security check will take
a long time period.