Deployment Guide

NOTE: This option cannot be selected unless the Allow users to enroll credentials setting is also selected.
3. Click Apply when finished.
Smart Card and Biometric Services (Optional)
If you do not want Security Tools to change the services associated with smart cards and biometric devices to a startup type of
"automatic," the service startup feature can be disabled.
When disabled, Security Tools will not attempt to start these three services:
• SCardSvr - Manages access to smart cards read by the computer. If this service is stopped, this computer will be unable to read smart
cards. If this service is disabled, any services that explicitly depend on it will fail to start.
• SCPolicySvc - Allows the system to be configured to lock the user desktop upon smart card removal.
• WbioSrvc - The Windows biometric service gives client applications the ability to capture, compare, manipulate, and store biometric
data without gaining direct access to any biometric hardware or samples. The service is hosted in a privileged SVCHOST process.
Disabling this feature also suppresses warnings associated with the required services not running.
Disable the Automatic Service Startup
By default, if the registry key does not exist or the value is set to 0, this feature is enabled.
1. Run Regedit.
2. Locate the following registry entry:
[HKEY_LOCAL_MACHINE\SOFTWARE\DELL\Dell Data Protection]
SmartCardServiceCheck=REG_DWORD:0
Set to 0 to Enable. Set to 1 to Disable.
Manage Users' Authentication
The controls on the Administrator Settings Authentication tab let you set user logon options and customize the settings for each.
To manage user authentication:
1. As an administrator, click the Administrator Settings tile.
2. Click the Users tab to manage users and view user enrollment status. From this tab, you can:
• Enroll new users
• Add or change credentials
• Remove a user's credentials
Configuration Tasks for Administrators
31