Deployment Guide

22 Configuration Guide
Slotted Activation is enabled and configured through the Shield installer or through the Shield workstation.
For users requiring activation through VPN, a slotted activation configuration for the Shield may be required to delay
initial activation for long enough to allow time for the VPN client software to establish a network connection.
CAUTION: Configure Slotted Activation only with the assistance of Customer Support. Improper time slotting configuration could result in
large numbers of clients attempting to activate at once, creating potentially severe performance issues.
The following Registry Keys are used to configure Slotted Activation. Changes to these Registry Keys require a restart of
the Shield workstation in order for the updates to take effect.
• HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SlottedActivation
This setting enables or disables the Slotted Activation feature. 
Disabled=0 (default) 
Enabled=1
• HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\ActivationSlot\CalRepeat
The time period in seconds that your activation slot interval will occur. You can use this property to override the time
period in seconds during which your activation slot interval will occur. 25200 seconds are available for slotting activations
during a seven hour period. The default setting is 86400 seconds, which represents a daily repeat.
• HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\ActivationSlot\SlotIntervals
The interval within the repeat, ACTIVATION_SLOT_CALREPEAT, when all activation time slots occur. Only one
interval is allowed. This setting should be 0,<CalRepeat>. An offset from 0 could yield unexpected results. The default
setting is 0,86400. To set a seven hour repeat, use the setting 0,25200. CALREPEAT is activated when a Shield user logs
in.
• HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\ActivationSlot\MissThreshold
The number of activation slots that can be missed before the computer attempts to activate upon the next login of the
user whose activation has been slotted. If activation fails during this immediate attempt, the Shield resumes slotted
activation attempts. If activation fails due to network failure, activation is attempted upon network reconnection, even if
the value in MISSTHRESHOLD has not been exceeded. If a user logs out before the activation slot time is reached, a
new slot is assigned upon next login.
• HKCU/Software/CREDANT/ActivationSlot (per user data)
Deferred time to attempt the slotted activation, which is set when the user logs onto the network for the first time after
Slotted Activation is enabled. The activation slot is recalculated for each activation attempt.
•HKCU/Software/CREDANT/SlotAttemptCount (per-user data)
Number of failed or missed attempts, when the time slot arrives and activation is attempted but fails. When this number
reaches the value set in ACTIVATION_SLOT_MISSTHRESHOLD, the computer attempts one immediate activation
upon connecting to the network.
To enable Slotted Activation through the command line, use a command similar to the following:
setup.exe /v"SLOTTEDACTIVATION=1 CALREPEAT=25200 SLOTINTERVALS=0,25200 <other parameters>"
NOTE: Be sure to enclose a value that contains one or more special characters, such as a blank space, in escaped quotation marks.
Forced Poll
Use the following registry setting to have the Shield poll the Server for a forced policy update.
Create or modify the registry setting as follows:
HKLM\SOFTWARE\Credant\CMGShield\Notify
PingProxy (DWORD value)=1