apm policy agent endpoint-windows-protected-workspace
apm policy agent endpoint-windows-protected-workspBIG-IP TMSHapmnpolicy agent endpoint-windows-protected-workspace(1)
NAME
endpoint-windows-protected-workspace - Manages an Endpoint Windows Protected Workspace agent.
MODULE
apm policy agent
SYNTAX
Configure the endpoint-windows-protected-workspace component within the policy agent module using the
following syntax.
CREATE/MODIFY
create endpoint-windows-protected-workspace [name]
modify endpoint-windows-protected-workspace [name]
options:
allow-burn-cid [true | false]
allow-printer-use [true | false]
allow-user-switch [true | false]
allowed-network-shares [add | delete | modify | replace-all-with] {
[[string]]
}
app-service [[string] | none]
close-google-desktop-search [true | false]
usb-flash-access [all | ironkey | none]
edit endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list endpoint-windows-protected-workspace
list endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
show running-config endpoint-windows-protected-workspace
show running-config endpoint-windows-protected-workspace [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
partition
show endpoint-windows-protected-workspace
show endpoint-windows-protected-workspace [name]
DELETE
delete endpoint-windows-protected-workspace [name]
DESCRIPTION
You can use the endpoint-windows-protected-workspace component to create and manage an agent that enables an
administrator to impose limitations on applications running on Windows client machines.
OPTIONS
allow-burn-cid
Specifies that the user can burn CDs from within protected workspace. The default is false.
allow-printer-use
Specifies whether a user can print inside a protected workspace. The default is true.
allow-user-switch
Specifies whether a user can temporarily switch from a protected workspace. The default is true.
allowed-network-shares
Specifies a list of Windows network shares to which user has Write access. The default is none.
app-service
Specifies the name of the application service to which the object belongs. The default value is none.
Note: If the strict-updates option is enabled on the application service that owns the object, you cannot
modify or delete the object. Only the application service can modify or delete the object.
[name]
Specifies the name of the Endpoint Windows Protected Workspace agent. This option is required.
partition
Displays the partition within which the component resides.
usb-flash-access
Specifies whether a user has access to a USB port. The default is false.
SEE ALSO
endpoint-check-software, endpoint-linux-check-file, endpoint-linux-check-process, endpoint-mac-check-file,
endpoint-mac-check-process, endpoint-windows-browser-cache-cleaner, endpoint-windows-check-file, endpoint-
check-machine-cert, endpoint-windows-check-process, endpoint-windows-check-registry, endpoint-windows-info-os,
endpoint-machine-info
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2011-2013. All rights reserved.
BIG-IP 2014-04apm policy agent endpoint-windows-protected-workspace(1)