Set Team Defaults

Places a watermark on files are viewed with View Only permissions.

The watermark consists of the user's full name and email address. This only applies to converted files, not images or videos. Refer to File conversion limits for more information on which file types are converted.

Remotely erase all data synced via the Workplace service from the user's devices when their account is disabled.

If this policy is enabled, the Disable and Wipe Devices option is selected by default when you disable a user.

When a device is wiped, it is also purged.

NOTE  If Active Directory integration is enabled and a user is disabled via Active Directory, the synced data in the Workplace Folderwill be automatically wiped from all their devices.

Remotely erase all data synced via the Workplace service from the user's devices when their account is deleted.

When this policy is enabled and a user account is deleted, the default Don’t Wipe option next to each device is changed to Wipe.

When a device is wiped, it is also purged.

NOTE  If Active Directory integration is enabled and a user is deleted via Active Directory, the synced data in the Workplace Folder will be automatically wiped from all their devices.

This policy is enabled by default, with a setting of 3 months since last connection before a device is disabled, and 12 months in a disabled state before the device is recycled. If no action is taken, recycled devices will be purged after 90 days.

An email notification will be sent to team administrators, Workplace Manager alert recipients, and the device owner whenever a device status changes due to this policy.

Use two-factor authentication in the login process.

Select the check box

Toggle the switch to On. Then click the Manage link for this policy to set the default location for the Workplace folder on the Manage Workplace Location page, described below.

Manage Workplace Location

1. Select a drive letter (Windows only).

NOTE  If the drive letter you select is already in use when Workplace is installed, the next available letter in the alphabet will be used.

2. Enter a name for the volume that will be used to access Workplace on users' Windows and Mac devices. The default name for the volume is Datto Workplace.

NOTE  If the drive letter you select is already in use when Workplace is installed, the next available letter in the alphabet will be used.

3. Click Save.

Specifies the location in which v10 stores files, and the maximum amount of storage that can be used by the automatic sync process when a user opens a file.

Files that are opened on the device will automatically be retained in this cache and will be available while offline until the cache is full. Files opened the longest time ago will be automatically cleared from the cache.

NOTE  All files are stored in the cache location. Files that have been synced to the device to make them available offline are not included in the cache size.

Toggle the switch to On.

Then, for cache size, enter a value of 10 GB or greater in the corresponding field.

To manage the cache location, click the Manage Location link. This will open the Manage Cache Location page, described below.

Manage Cache Location

1. Enter an absolute path.

NOTE  Please use only internal drives. Unexpected unmount of external drives can cause issues.

2. When your path is complete, click Add.

NOTE  You may add only one path.

3. Click Save. Your path will be added to the list.

Important path considerations

IMPORTANT  When adding a new path, please use only internal drives. Unexpected unmount of external drives can cause issues if they're used as cache locations.

• You can change the cache location from the default by creating one additional path.

• If you change the cache location from the default, the system will attempt to place it in the new location. If that is not possible, the cache will be placed in the default location.

• The path(s) are validated by Workplace. If the path(s) are found to be invalid, the default cache location will be used.
• The default location for the Workplace cache cannot be changed. If no other valid path is provided, the cache will reside in the user profile.
• In order for an alternative path to be valid:
  • The OS user under which Workplace for Windows and Mac is installed must have full permissions to the path.
  • The final folder in the path must not exist or be empty.
• Users will still be able to change their own cache location unless you have also enabled the Lock Settings policy for them.

NOTE  Throttle control settings apply to Workplace Desktop 7.2 and later only. These settings do not affect Workplace Server.

Manage Backup Folders

1. Select Absolute Path or a predefined path from the dropdown list.

• For Windows, optionally click a token to add it to the path. If you're unsure of what the tokens mean, hover for a tooltip.

• For Mac, use ~ to represent the user's folder.

2. When your path is complete, click Add.

NOTE  You may add multiple paths.

3. Click Save.

All updates will require manual installation or remote deployment.

For Workplace for Windows and Mac v10 or later, the auto-update mechanism will be disabled.

For Workplace v8.x or earlier, update notifications will be disabled. If, however, the installed version is no longer supported, it will still be updated automatically. This safeguard is in place to ensure that users always enjoy a functional Workplace experience.

IMPORTANT  While we encourage you to use Silent installation, we recommend that you allow Datto to maintain user versions through the auto-update mechanism. This will ensure that users always have an up-to-date version of our Workplace app. Please do not enable this policy unless you have an exceptionally good reason.

Toggle the switch to On.

Toggle the switch to On, then select the type of authentication required, and the timeout period. Passcode is a user-created 4 digit code. Password is the user's Workplace account password. Password is more secure.

If passcode is selected, the users will have to use authentication, but can select between passcode, password or (Workplace Mobile for iOS only) TouchID. If password is selected, the users must enter their password to access their account via Workplace Mobile.

Select the number of failed authentication attempts allowed before all Workplace data on the device is wiped.

If this field is set to None, after 10 attempts, access to the account will be disabled for 10 minutes.