McAfee DTP-1650-MGRA - Network DLP Manager 1650 Appliance Installation Manual page 56

5
Installing McAfee DLP Endpoint
Repository folders
In the Permissions tab of the Advanced Security Settings for evidence dialog box, deselect Allow inheritable
4
permissions.
A confirmation message explains the effect this change will have on the folder.
Click Remove. The Permissions tab on the Advanced Security Settings dialog box shows all
5
permissions eliminated except administrators.
Double‑click Administrators entry to open the Permission Entry dialog box. Change the Apply onto option to
6
This folder, subfolders and files. Click OK.
Click Add to select an object type.
7
In the Enter the object name to select field, type Domain Computers, then click OK to display the Permission
8
Entry dialog box.
In the Allow column, select:
9
• Create Files/Write Data and Create Folders/Append Data for the evidence folder
• List Folder/Read Data for the whitelist folder
Verify that the Apply onto option says This folder, subfolders and files, then click OK.
The Advanced Security Settings dialog box now includes Domain Computers.
10 Click OK twice to close the dialog box.
Configure folders on Windows Server 2008
Configuration of the repository folders on Windows Server 2008 requires specific security settings.
Before you begin
Create the evidence and whitelist folders, as described in Before you install the extension.
Both folders are configured in the same manner. Repeat this task for each folder.
Task
Right‑click the evidence / whitelist folder and select Properties.
1
Click the Sharing tab, then click Advanced sharing. Select the Share this folder option.
2
Modify Share name to evidence$ / whitelist$. Click OK.
3
Click the Security tab, then click Advanced.
4
In the Permissions tab, deselect the Include inheritable permissions from the object's parent option.
5
A confirmation message explains the effect this change will have on the folder.
Click Remove.
6
The Permissions tab in the Advanced Security Settings window shows all permissions eliminated.
Click Add to select an object type.
7
56 McAfee Data Loss Prevention 9.2.1
Setting permissions for administrators is required for the whitelist folder. It is optional for the
evidence folder, but can be added as a security precaution. Alternately, you can add permissions
only for those administrators who deploy policies.
The $ ensures that the share is hidden.
Installation Guide