apm policy agent endpoint-windows-protected-workspace

apm policy agent endpoapm-policyGagentMendpoint-windows-protected-workspace(1)



NAME
       endpoint-windows-protected-workspace - Manages an Endpoint Windows
       Protected Workspace agent.

MODULE
       apm policy agent

SYNTAX
       Configure the endpoint-windows-protected-workspace component within the
       policy agent module using the following syntax.

   CREATE/MODIFY
	create endpoint-windows-protected-workspace [name]
	modify endpoint-windows-protected-workspace [name]
	  options:
	    allow-burn-cid [true | false]
	    allow-printer-use [true | false]
	    allow-user-switch [true | false]
	    allowed-network-shares [add | delete | modify | replace-all-with] {
	      [[string]]
	    }
	    app-service [[string] | none]
	    close-google-desktop-search [true | false]
	    usb-flash-access [all | ironkey | none]

	edit endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    non-default-properties

   DISPLAY
	list endpoint-windows-protected-workspace
	list endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
	show running-config endpoint-windows-protected-workspace
	show running-config endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    non-default-properties
	    partition

	show endpoint-windows-protected-workspace
	show endpoint-windows-protected-workspace [name]

   DELETE
	delete endpoint-windows-protected-workspace [name]

DESCRIPTION
       You can use the endpoint-windows-protected-workspace component to
       create and manage an agent that enables an administrator to impose
       limitations on applications running on Windows client machines.

OPTIONS
       allow-burn-cid
	    Specifies that the user can burn CDs from within protected
	    workspace. The default is false.

       allow-printer-use
	    Specifies whether a user can print inside a protected workspace.
	    The default is true.

       allow-user-switch
	    Specifies whether a user can temporarily switch from a protected
	    workspace. The default is true.

       allowed-network-shares
	    Specifies a list of Windows network shares to which user has Write
	    access. The default is none.

       app-service
	    Specifies the name of the application service to which the object
	    belongs. The default value is none. Note: If the strict-updates
	    option is enabled on the application service that owns the object,
	    you cannot modify or delete the object. Only the application
	    service can modify or delete the object.

       [name]
	    Specifies the name of the Endpoint Windows Protected Workspace
	    agent. This option is required.

       partition
	    Displays the partition within which the component resides.

       usb-flash-access
	    Specifies whether a user has access to a USB port. The default is
	    false.

SEE ALSO
       endpoint-check-software, endpoint-linux-check-file, endpoint-linux-
       check-process, endpoint-mac-check-file, endpoint-mac-check-process,
       endpoint-windows-browser-cache-cleaner, endpoint-windows-check-file,
       endpoint-check-machine-cert, endpoint-windows-check-process, endpoint-
       windows-check-registry, endpoint-windows-info-os, endpoint-machine-info

COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or
       by any means, electronic or mechanical, including photocopying,
       recording, or information storage and retrieval systems, for any
       purpose other than the purchaser's personal use, without the express
       written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2011-2013. All rights reserved.



BIG-IP		      apm policy agent-endpoint-windows-protected-workspace(1)