Reference Guide
Security Management Server v10.2.10 AdminHelp
61
Console, ensure that all three names are properly defined for the user in the enterprise
directory server.
6. Click Search. Depending on the size, this may take a few minutes to populate.
If the query is too large, a dialog prompts you to revise the query.
7. Select users from the directory user list to add to the Domain. The user names are
added to the field below the list.
8. Click X to remove the user name or click Add.
Remove Users
In general, a user cannot be removed in the Management Console. Instead, you must remove the user
from Active Directory.
Find Users
1. In the left pane, click Populations > Users.
2. Do one of these:
• Enter the user name or a filter in Search and click .
• Enter Common Name, Universal Principal Name, or sAMAccountName. The wildcard
character is supported.
• Scroll through the user name list.
3. Click a link in the user name column.
The User Detail page opens, displaying the Security Policies tab.
Deactivate/Suspend Users
If the user to deactivate is no longer associated with your organization, be sure the Current Shield State
policy is set to a value other than Activate, and ensure that the policy commit is complete and
successful prior to your enterprise directory server. The user does not need to be in your enterprise
directory server, but the policy does need to delivered to be their device for it to take effect.
Best Practice - Deleting users from the enterprise directory server is not recommended. If a user
leaves the organization, the account should be moved to a disabled group. With that said, if a deletion
occurs, the user is simply marked “removed”, rather than deleted. The user does not display in the
Management Console, but their encryption keys and other information are still available in the Dell
Server database.
1. In the left pane, click Populations > Users.
2. Click a user name link or enter a filter to search for available users.
Enter Common Name, Universal Principal Name, or sAMAccountName. The wildcard character
(*) is supported. On the User Detail > Security Policies tab in the Windows Encryption technology
group, click the Policy-Based Encryption policy group.
3. Click Show advanced settings.
4. Change the Current Shield State policy to Suspend.
5. Click Save.
6. Commit Policies
.