Managing User Access

Overview

Depending on the circumstances, you have several options for keeping users from accessing, backing up and restoring with CrashPlan.

All these actions can be reversed, but in cases where loss of data results, the loss of data is not reversible. Only the ability to reinstate the object is possible. Reinstating does not restore an archive that has been removed.

Restricting Access

As this table illustrates, each option that prevents user access has different consequences. Choose the option that best fits your situation.

Reinstating Access

Use the following table to reinstate users whose access you have prevented.

Deauthorize

Deauthorize computers to prevent unauthorized access to the CrashPlan desktop (including access to Restore), especially in configurations where the client's security settings do not require the account password for access to the CrashPlan Desktop. Deauthorize may also be used for troubleshooting to force the user to log into the CrashPlan desktop. Deauthorization of a computer results in the following:

• Logs the user out of the CrashPlan desktop on that particular client.
• CrashPlan desktop displays the login screen when it is launched.
• No backup occurs.

How To Deauthorize a Computer from the CrashPlan Desktop

Issue the deauthorize client command:

1. Open PRO Client and double-click on the logo in the upper right corner.
   
   A text input area appears at the bottom of the application window.
   
2. In the input area, type deauthorize and press enter.
   The current user is logged out.

How To Deauthorize a Computer from the PRO Server

1. Navigate to or search for the computer you'd like to deauthorize.
2. From the navigation menu, click Deauthorize Computer.

How To Reauthorize a Computer

A computer must be reauthorized from the CrashPlan desktop. To do so, log into the CrashPlan Desktop.

Deactivate

You can deactivate computers and/or users. Deactivation of any object is a potentially destructive operation. Always treat deactivation as a destructive operation and use with care.

Deactivate Computer

Deactivate a computer when a computer is reassigned, decommissioned, lost or stolen. Deactivating a computer results in the following:

• Computer is instructed to permanently disconnect from PRO Server and stops backing up.
  If the computer is not connected at time of deactivation, the computer receives the disconnect instruction immediately upon reconnection.
• CrashPlan desktop displays the Login screen.
• Backup archives stored on PRO Server destinations are removed based on the PRO Server's data retention settings.
• Backup archives stored on PRO Client or local folder destinations are removed immediately.
• The PRO Client seat license is freed for use elsewhere.

Other computers in the user's account are unaffected by deactivation of another computer. Deactivated computers are able to be reactivated. However, if any backup archives were removed during deactivation, the archive(s) are not recoverable by reactivation.

How To Deactivate a Computer

1. Click the Organizations tab.
2. Click the user whose computer you want to deactivate.
3. On the user's page, click the computer that you want to deactivate.
   
4. From the navigation menu, click Deactivate Computer.
5. Click OK in the message box to confirm that you want to deactivate this user's computer.
   

How to Reactivate a Computer from the PRO Server

1. Click the Organizations tab.
2. Click the user whose computer you want to reactivate.
3. With the user's page displayed, from the navigation menu, click Show Deactivated Computers.
   
4. Click the computer you want to reactivate.
5. From the navigation menu, click Activate Computer.
6. Click the Use? check box under Backup Destinations to re-enable backup.
7. Click Save.
   

How To Reactivate a Computer from the CrashPlan Desktop

1. Launch the CrashPlan desktop
2. Select Existing Account
3. Enter the user's credentials and log in

In order to reactivate a computer from the CrashPlan desktop, the user must be active.

Deactivate User

Use the Deactivate User option to remove a user's access to CrashPlan globally (for example, when an employee has left the company). Whne you deactivate a user:

• All the user's computers are deactivated. See Deactivate Computer above.
• The user's available backup destinations for all computers are completely removed.
• The user is no longer allowed to:
  • Log into existing computers
  • Add new computers
  • Log in via the web console to perform web restores

How To Deactivate a User

1. Click the Organizations tab.
2. Click the user you want to deactivate.
3. From the navigation menu, click Deactivate User.
4. Confirm that you'd like to move forward with deactivation.

How To Reactivate a User

1. Search for the user you'd like to reactivate.
2. From the navigation menu, click Reactivate User.
3. If you'd like to additionally reactivate the user's computers, see How To Reactivate a Computer above.

Blocking

Blocking a user works exactly as deactivating a user and and should be treated as a destructive operation. When you block a user:

• All the user's computers are deactivated. See Deactivate Computer above.
• The user's available backup destinations for all computers are completely removed.
• The user is no longer allowed to:
  • Log into existing computers
  • Add new computers
  • Log in via the web console to perform web restores

How To Block a User

1. Search for the user you'd like to block
2. From the navigation menu, click Block User.

How To Unblock a User

1. Search for the user you'd like to block.
2. From the navigation menu, click Unblock User.
3. If you'd like to additionally reactivate the user's computers, see How To Reactivate a Computer above.