Managing User Access

Depending on the circumstances, you have several options for keeping users from accessing, backing up and restoring with CrashPlan.

All these actions can be reversed, but in cases where loss of data results, the loss of data is not reversible. Only the ability to reinstate the object is possible. Reinstating does not restore an archive that has been removed.

As this table illustrates, each option that prevents user access has different consequences. Choose the option that best fits your situation.

Use the follow table to reinstate users whose access you have prevented.

Deauthorize computers to prevent unauthorized access to the CrashPlan desktop (including access to Restore), especially in configurations where the client's security settings do not require the account password for access to the CrashPlan Desktop. Deauthorize may also be used for troubleshooting to force the user to log into the CrashPlan desktop. Deauthorization of a computer results in the following:

• Logs the user out of the CrashPlan desktop on that particular client.
• CrashPlan desktop displays the login screen when it is launched.
• No backup occurs.

Issue the deauthorize client command.

1. Navigate to or search for the computer you'd like to deauthorize.
2. From the navigation menu, click Deauthorize Computer.

A computer must be reauthorized from the CrashPlan desktop. To do so, log into the CrashPlan desktop.

You can deactivate computers, users or orgs. Deactivation of any object is a potentially destructive operation. Always treat deactivation as a destructive operations and use with care.

Deactivate a computer when a computer is reassigned, decommissioned, lost or stolen. Deactivating a computer results in the following:

• Computer is instructed to permanently disconnect from PRO Server and stops backing up.
  If the computer is not connected at time of deactivation, the computer receives the disconnect instruction immediately upon reconnection.
• CrashPlan desktop displays the Login screen.
• Backup archives stored on PRO Server destinations are removed based on the PRO Server's data retention settings.
• Backup archives stored on PRO Client or local folder destinations are removed immediately.
• The PRO Client seat license is freed for use elsewhere.

Other computers in the user's account are unaffected by deactivation of another computer. Deactivated computers are able to be reactivated. However, if any backup archives were removed during deactivation, the archive(s) are not recoverable by reactivation.

1. Click the Organizations tab.
2. Click the user whose computer you want to deactivate.
3. On the user's page, click the computer that you want to deactivate.
   
4. From the navigation menu, click Deactivate Computer.
5. Click OK in the message box to confirm that you want to deactivate this user's computer.
   

1. Click the Organizations tab.
2. Click the user whose computer you want to reactivate.
3. With the user's page displayed, from the navigation menu, click Show Deactivated Computers.
   
4. Click the computer that you want to reactivate.
5. From the navigation menu, click Activate Computer.
6. Click the Use? check box under Backup Destinations to re-enable backup.
7. Click Save.
   

1. Launch the CrashPlan desktop
2. Select Existing Account
3. Enter the user's credenials and log in

In order to reactivate a computer from the CrashPlan desktop, the user must be active.

Use the Deactivate User option to remove a user's access to CrashPlan globally (for example, when an employee has left the company). When you deactivate a user:

• All the user's computers are deactivated. See Deactivate Computer.
• The user's available backup destinations for all computers are completely removed.
• The user is no longer alowed to:
  • Log into existing computers
  • Add new computers
  • Log in via the web console to perform web restores

1. Click the Organizations tab.
2. Click the user you want to deactivate.
3. From the navigation menu, click Deactivate User.
4. Confirm that you'd like to move forward with deactivation.

1. Search for the user you'd like to reactivate.
2. From the navigation menu, click Reactivate User.
3. If you'd like to additionaly reactivate the user's computers, see How To Reactivate a Computer.

Deactivate an org to remove an org you are no longer using. When you deactivate an org, all active users and computers within the org are also deactivated. See Deactivate User and Deactivate Computer.

Blocking a user works exactly as deactivating a user and should be treated as a destructive operation. When you block a user:

• All the user's computers are deactivated. See Deactivate Computer.
• The user's available backup destinations for all computers are completely removed.
• The user is no longer alowed to:
  • Log into existing computers
  • Add new computers
  • Log in via the web console to perform web restores

1. Search for the user you'd like to block.
2. From the navigation menu, click Block User.

1. Search for the user you'd like to block.
2. From the navigation menu, click Unblock User.
3. If you'd like to additionally reactivate the user's computers, see How To Reactivate a Computer.