apm policy agent endpoint-windows-protected-workspace
apm policy agent endpoapm-policyGagentMendpoint-windows-protected-workspace(1)
NAME
endpoint-windows-protected-workspace - Manages an Endpoint Windows
Protected Workspace agent.
MODULE
apm policy agent
SYNTAX
Configure the endpoint-windows-protected-workspace component within the
policy agent module using the following syntax.
CREATE/MODIFY
create endpoint-windows-protected-workspace [name]
modify endpoint-windows-protected-workspace [name]
options:
allow-burn-cid [true | false]
allow-printer-use [true | false]
allow-user-switch [true | false]
allowed-network-shares [add | delete | modify | replace-all-with] {
[[string]]
}
app-service [[string] | none]
close-google-desktop-search [true | false]
usb-flash-access [all | ironkey | none]
edit endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list endpoint-windows-protected-workspace
list endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
show running-config endpoint-windows-protected-workspace
show running-config endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
partition
show endpoint-windows-protected-workspace
show endpoint-windows-protected-workspace [name]
DELETE
delete endpoint-windows-protected-workspace [name]
DESCRIPTION
You can use the endpoint-windows-protected-workspace component to
create and manage an agent that enables an administrator to impose
limitations on applications running on Windows client machines.
OPTIONS
allow-burn-cid
Specifies that the user can burn CDs from within protected
workspace. The default is false.
allow-printer-use
Specifies whether a user can print inside a protected workspace.
The default is true.
allow-user-switch
Specifies whether a user can temporarily switch from a protected
workspace. The default is true.
allowed-network-shares
Specifies a list of Windows network shares to which user has Write
access. The default is none.
app-service
Specifies the name of the application service to which the object
belongs. The default value is none. Note: If the strict-updates
option is enabled on the application service that owns the object,
you cannot modify or delete the object. Only the application
service can modify or delete the object.
[name]
Specifies the name of the Endpoint Windows Protected Workspace
agent. This option is required.
partition
Displays the partition within which the component resides.
usb-flash-access
Specifies whether a user has access to a USB port. The default is
false.
SEE ALSO
endpoint-check-software, endpoint-linux-check-file, endpoint-linux-
check-process, endpoint-mac-check-file, endpoint-mac-check-process,
endpoint-windows-browser-cache-cleaner, endpoint-windows-check-file,
endpoint-check-machine-cert, endpoint-windows-check-process, endpoint-
windows-check-registry, endpoint-windows-info-os, endpoint-machine-info
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2011-2013. All rights reserved.
BIG-IP apm policy agent-endpoint-windows-protected-workspace(1)