Update configuration only after all protective mechanisms are active on the agent

If you enable this setting, the DriveLock Agent starts with the last known configuration from the cache. This is recommended if neither Active Directory nor DriveLock Enterprise Service (DES) are accessible.

With this setting you can

  • ensure that a DriveLock Agent updates the configuration only after all protection measures (e.g. drive and application control) have been activated and

  • increase the starting speed of the agent.

This setting prevents the agent from starting with the current policy.