Ad Groups For Pre-Boot Authentication - Check Point HARMONY R81 Administration Manual

4. Click Unlink.
A new link is created with a different Windows account at the next Windows log in.

AD Groups for Pre-boot Authentication

You can add Active Directory users and groups to devices, OUs, or groups for Pre-boot
authentication. In SmartEndpoint, groups have an option of Authorize Pre-boot nodes in
addition to Authorize Pre-boot users.
After you add a group to a device, group or OU, users in the group are directly assigned to the
entity and do not need to go through user acquisition. If you add more users to the group after it
was assigned to an entity, the new users are automatically directly assigned also.
The maximum amount of users in a group that can be assigned to a device, group, or OU for
Pre-boot is 1000.
To add a group or user to a device and see authorized users:
1. In the Users and Computers tab of SmartEndpoint, right-click a group or user. Select
OneCheck User Settings > Authorize Pre-boot users.
The Authorized Pre-boot users window opens. From here you can:
n See all users that are already assigned. The total number of users is shown in the
bottom left corner.
n Add and Remove users.
n Search the results.
n Click Show all users to toggle between showing all individual users in the group
and showing included groups.
2. Click Add to add new users or group.
3. Select a device, OU, or group.
4. Click OK.
5. If a user does not have configured credentials, a User Logon Pre-boot Settings window
opens. Configure credentials in the window. Click OK. You can configure any supported
authentication method for the user in this window.
You can add groups that contain users without configured credentials to a device, OU, or
group, but the individual users without credentials are not assigned to the device. If
credentials are configured for them, they will be assigned automatically based on the
order in which they were added.
If you try to add an entity that will bring the total number of users over 1000, the operation
is blocked.
Managing Authorized Pre-boot Users and Nodes
R81 Harmony Endpoint Server Administration Guide | 240