Creating Pre-Boot Users - Check Point HARMONY R81 Administration Manual

Creating Pre-boot Users

Pre-boot users can be within a node or not assigned to a node.
To create new online Pre-boot user:
1. in the Users and Computers tab, right-click on an OU under Directories or Other
Users/Computers.
2. Select User Authentication (OneCheck) > Authorize Pre-boot Users.
3. Click New.
The Add new Pre-boot user window opens.
4. Enter a Logon Name
5. In the Authentication credentials area, select Password or Dynamic Token.
n A password must contain at least five characters
n If you select an token as the authentication method, make sure you select an
existing token
6. To set more granular account controls, open Account Details.
n Do not use device information for Full Disk Encryption remote help - Enables
user-bound remote help for the pre-boot user
n Lock user for preboot - Locks the user for preboot
n Require change password after first logon - Applies only to password
authentication. Select this option to force users to change their password after the
first Pre-boot logon.
7. To set an account expiration date, open the Expiration Settings.
a. Select The user will be revoked after option.
b. Select a date.
Note - The default expiration setting is: Never
To unlink a Windows user from the logged on Pre-boot account:
1. From an Endpoint Security client, open the client Overview and click on the Full Disk
Encryption Blade icon.
2. Click Unlink.
3. Enter the password of the logged on Pre-boot account.
Managing Authorized Pre-boot Users and Nodes
R81 Harmony Endpoint Server Administration Guide | 239