Strengths: Full integration with Active Directory and many policy settings.
Weaknesses: Can be costly on an ongoing basis.
Verdict: Solid performance and feature set, but can get pricey.
DriveLock from CenterTools provides a full set of endpoint security features. With this product, from one single platform administrators can deploy policy that includes control over removable media, applications and devices, encryption and anti-virus. This solution features granular policy controls that can be applied directly through Microsoft Active Directory Group Policy, which ensures the flexibility needs for almost any type of organization looking to deploy comprehensive endpoint security.
We found this solution to be quite easy to set up and deploy. We simply installed the server component on a Microsoft Windows Server on our network and were pretty much up and running. The server install took only a few minutes and was guided by an easy-to-follow setup wizard. Once the installation was complete and we configured the product for use with our Active Directory infrastructure, we were able to easily manage settings and policy directly in the Active Directory Group Policy Editor. The documentation says, "Be secure in less than four hours," and we would agree that this offering can be set up with a solid base configuration in about that time. Overall, we had an easy time with installation and management of the product during our lab deployment.
While working inside the DriveLock Group Policy Editor, we found a multitude of configurable options that can be deployed directly from Active Directory. Many of these choices could be activated by simply opening a properties dialog box in the management console and checking a box to turn the policy object on. We found DriveLock to be highly flexible and to contain a fairly comprehensive default policy. We were able to tweak the default policy setting to meet the needs of our environment without much trouble. On top of the granular policy settings, this tool allows policy to be assigned at granular levels as well. Policies can be assigned to users, groups or computers in Active Directory, and policies can also be scheduled with times they should be active.
Documentation included several PDF manuals and guides. A quick-start guide detailed basic installation and setup quite well with step-by-step instructions and screen shots. We found all of the documentation to be well-organized and to include an excellent amount of detail by way of clear configuration instructions and many screen shots and examples.
CenterTools offers eight-hours-a-day/five-days-a-week phone- and email-based technical support to customers through an annual subscription. Customers can also find a large amount of resources on the vendor website, including technical documentation, video tutorials, a FAQ section, a knowledge base and user forum.
At a price starting at around $70 per client for the license and around $14 per client per year for maintenance and support, we found this solution to be an average value for the money. While DriveLock does offer a strong feature set with good integration to the already existing Active Directory structure, it can be a little costly on an ongoing basis for some organizations.