Remote Help Permissions - Check Point HARMONY R81 Administration Manual

Remote Help Permissions

Remote Help lets users access to their Full Disk Encryption protected computers if they are
locked out. The user calls the designated Endpoint Security administrator and does the
Remote Help procedure. Expand the Advanced section in the OneCheck User Settings rule to
configure this.
There are two types of Full Disk Encryption Remote Help:
n One Time Login - One Time Login allows access as an assumed identity for one
session, without resetting the password.
If users lose their Smart Cards, they must use this option.
n Remote password change - This option is for users who use fixed passwords and have
forgotten them.
For devices protected by Media Encryption & Port Protection policies, only remote password
change is available.
To let users work with Remote Help:
1. Make sure Allow remote help is selected in OneCheck User Settings rule> Advanced >
Allow remote help.
2. Optional: Edit the properties to allow only one type of Remote Help.
Option
Allow
account to
receive
remote
password
change help
Allow
account to
receive
One-Time
Logon help
Description
Let users get help from an administrator to reset the account
password (for example, if the user forgets the password).
Let the user get help from an administrator to log on, one time. One-
time logon is for users who have lost their dynamic tokens, USB
tokens, or Check Point Smart Card. It is also useful if the user made
too many failed attempts but does not want to change the password.
R81 Harmony Endpoint Server Administration Guide | 237
Remote Help Permissions