Configuring Windows Authentication And Authorization - McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC Product Manual

7 Configuring advanced server settings
Configuring Active Directory user login
If you need to assign special permissions to an individual user, you can do so by creating an Active
Directory group that contains only that user.

Configuring Windows authentication and authorization

Use these tasks to set up Active Directory User Login.
Tasks
• Enabling Windows authentication in ePO Server on page 56
Before more advanced Windows authentication can be used, the server must be prepared.
• Configuring Windows authentication on page 56
There are multiple ways to allow users to use existing Windows account credentials within
ePolicy Orchestrator.
• Configuring Windows authorization on page 57
Users attempting to log on to an ePolicy Orchestrator server using Windows authentication
need a permission set assigned to one of their Active Directory groups to log on
successfully.
Enabling Windows authentication in ePO Server
Before more advanced Windows authentication can be used, the server must be prepared.
To activate the Windows Authentication page in the server settings, you must first stop the ePolicy
Orchestrator service. This task must be performed on the McAfee ePO server itself.
Task
For option definitions, click ? in the interface.
1 From the server console, select Start | Settings | Control Panel | Administrative Tools
2 Select Services.
3 In the Services window, right-click McAfee ePolicy Orchestrator Applications Server and select Stop.
Rename Winauth.dll to Winauth.bak.
4
In a default installation, this file is found in C:\Program Files\McAfee\ePolicy Orchestrator
\Server\bin.
Restart the server.
5
When you next open the Server Settings page, a Windows Authentication option appears.
Configuring Windows authentication
There are multiple ways to allow users to use existing Windows account credentials within ePolicy
Orchestrator.
Before you begin
You must have first prepared your server for Windows authentication. See Enabling
Windows authentication in ePO server.
How you configure these settings depends on several issues:
®
56 McAfee ePolicy Orchestrator
®
4.6.0 Software Product Guide