15.11 Proxy Administrator

When an administrator grants a client Proxy Administrator access, the client can log into the proxy console on that machine to approve desktop security management requests.

15.11.1 Login

If a computer or user has any application item set to Allowed in the console under Desktop Application → Application Approval Permission Settings or Desktop Application → Self-Approval Permission Settings, they can log into the proxy console. Right-click the client icon in the system tray, select Approval Management Platform, and enter an administrator account and password. The proxy console supports automatic startup.

When logging into the proxy console, selecting Auto Start will make the proxy console launch automatically and display the login dialog the next time the client starts and connects to the server. This setting can also be configured via Application Management → Options in the proxy console, under Basic Settings → Login Settings by checking Auto Start.

If both Auto Start and Auto Login are selected and a valid administrator account and password are entered, the proxy console will automatically log in in the background the next time the client starts and connects to the server. The main console interface will not appear, but the user can access it from the client’s system tray icon menu.

15.11.2 Approval Management

The proxy console’s approval management functions are the same as the main console: it allows viewing desktop security management requests, approving applications, importing and exporting approval files, and managing delegated approval permissions.

15.11.3 Locking

To prevent others from approving requests via the proxy console, administrators can lock it when stepping away. While locked, the proxy console will still receive notifications for decryption and outbound requests, but a password is required to approve them. There are three locking methods: immediate lock, lock upon leaving, and lock when minimized.

Immediate Lock:

Select Operations → Lock from the menu to lock the console instantly.

Lock on Away:

Go to Request Management → Options, check Automatically lock when user is away, and set the delay in minutes before locking. The default is 15 minutes.

Lock on Minimize:

Go to Request Management → Options, and check Lock when minimized to tray.