Deployment Guide

Configure Advanced Permissions

1. Click Advanced to modify advanced end user options. Under Advanced, you can optionally allow users to self-enroll credentials,

optionally allow users to modify their enrolled credentials, and enable one step logon.

2. Select or clear the check boxes:

Allow users to enroll credentials - By default, the check box is selected. Users are permitted to enroll credentials without

intervention by an administrator. If you clear the check box, credentials must be enrolled by the administrator.

Allow user to modify enrolled credentials - By default, the check box is selected. When selected, users are permitted to modify or

delete their enrolled credentials without intervention by an administrator. If you clear the check box, credentials cannot be modified or

deleted by a regular user but must be modified or deleted by the administrator.

NOTE:

To enroll a user's credentials, go to the

Users

page of the Administrator Settings tool, select a user and click

Enroll.

Allow one step logon - One step logon is Single Sign-on (SSO). By default, the check box is selected. When this feature is enabled,

users must enter their credentials only at the Preboot Authentication screen. Users are automatically logged on to Windows. If you

clear the check box, the user may be required to log on multiple times.

Configuration Tasks for Administrators