Disable DLP

[Prez]

Hi, 

A misconfiguration of DLP has cause some of our machines to BSOD. We cannot get into the machines since the configuration was ment to disable USB SCSI drives, however by mistake we added SCSI drives and some older machines that have raid cards have failed to boot now that DLP is blocking those SCSI drives. Is there a way we can disable DLP momentarily whether its booting into safe mode or using Windows2Go image? Is there a way to reset the DLP configuration on the client itself so we can get the machines to boot? 

[TrellixSuggest]

DLP Help Desk has the feature to establish a Client Bypass Key for temporary disabling DLP, although if you cannot login to the system, this would not work.

What I would suggest, try to see if you can configure the system with RAID to boot from one RAID disk in AHCI mode, not sure if this works but in the system BIOS there is usually such a function to switch from RAID to AHCI mode.

[Fotunba]

Hi,

This is a very complicated issue. 1. Check the reaction option of the policy/Ruleset that applies to those endpoint, check computer disconnected from the corporate network option if it's set to "React the same way as connected system" . If this is the enabled options, you need to get the system to communicate with your epo to disable the option.