Device Control Settings

Last Updated On: 23 Jul 2026|

5 minutes read |

Configure device and file auditing, report retention and archiving, and email alerts for blocked devices and temporary-access requests.

Auditing

Configure audit monitoring

Choose the device types and file actions to track, then define how long activity logs remain available.

Open Audit Settings

Navigate to Settings → Audit Settings to configure event tracking for monitoring and compliance.

Device Audit Report

The Device Audit Report records recently connected devices and blocked devices that attempted access. Configure the retention period and select the device types to monitor.

Select monitored device types and configure device-log retention.

Note

Selected device types are audited even when no policy is deployed, so monitoring does not depend on policy deployment.

Warning

When this option is disabled, audit data is retained for only one day, and all recorded data is erased automatically at the end of each day.

File Audit Report

The File Audit Report contains file-tracing details, including the accessed file, username, computers, and devices. Configure the retention period and select the file actions to monitor.

Choose monitored file actions and configure file-log retention.

Warning

When this option is disabled, audit data is retained for only one day, and all recorded data is erased automatically at the end of each day.

Retention

Retain shadow and archive reports

Control how long shadow-copy records remain available and move selected audit reports into file-based archives.

File Shadow Report

The File Shadow Report includes shadow-copy details, the network share path, username, computers, and devices. Configure how long the report records should be retained.

Configure retention for file-shadow records.

Warning

When this option is disabled, audit data is retained for only one day, and all recorded data is erased automatically at the end of each day.

File Archive Report

Enable the File Archive Report to retain selected reports for an additional specified period beyond their individually configured retention periods.

Archived reports are removed from the database server and stored at the configured file path for the defined period. Enter the archive retention period and storage path.

File Archive Report settings in Device Control Plus

Set the archive location and report-retention period.

Alerts

Configure email notifications

Notify administrators about blocked-device connections and temporary-access requests.

Add alert recipients

Alert settings send emails when a blocked device connects to a managed computer or when a temporary-access request is submitted.

Alert Settings for Device Control email notifications

Configure the administrators who receive Device Control alerts.

Navigate to Settings → Alert Settings.
Enter the administrators' email addresses, then select Save.

Related