Quantcast
Channel:
Viewing all articles
Browse latest Browse all 120649

Forum Post: RE: Add AD user to every POA enabled machine?

$
0
0
If you are using a Safeguard Enterprise solution - then yes you can. You assign the user account to a machine and make sure that it has a user certificate generated - test this by making sure that you can log into that machine through the POA with that account and password. Once a user has a certificate, you can assign that user to any machine in your environment by clicking on the machine then on the users tab in the middle section. You can assign the user here. The machine will download the assignment and that user's certificate the next time it contacts the SGN server. See User Machine Assignment in the manual: www.sophos.com/.../sgn_7_h_eng_admin_help.pdf However, this isn't a very good idea. This would mean that this one user would have complete access to all encrypted data on those machines. Also, you would need to manage that user account's password carefully. Instead, use our built in account type called POAUser - these are special built accounts that you define and assign out to POAs in your environment. They don't change unless you alter them (ie., passwords don't expire) and are more secure. Please see this KBA: www.sophos.com/.../114273.aspx Also, this is detailed in the administration guide on page 113: www.sophos.com/.../sgn_7_h_eng_admin_help.pdf This is the version 7 guide.

Viewing all articles
Browse latest Browse all 120649

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>