McAfee EPOLICY ORCHESTRATOR 4.5 Product Manual page 38

Configuring ePolicy Orchestrator
Managing ePolicy Orchestrator users with Active Directory
By default, users can authenticate using Windows credentials for the domain that the ePO server
is joined to. If you have multiple domains, or your ePO server is not located in the same domain
as your users, you must configure Windows authentication
Before you begin
To access the Windows Authentication page in the server settings, you must stop the ePolicy
Orchestrator application service using these steps:
1 From the server console, click Start | Settings | Control Panel | Administrative
Tools | Services. The Services window opens.
2 Right-click McAfee ePolicy Orchestrator Applications Server and select Stop.
3 Rename the WinAuth.dll file to WinAuth.bak.
NOTE: In default installations, this file's location is
Orchestrator\Server\bin
4 Restart the server.
Task
For option definitions, click ? in the interface.
1 Click Menu | Configuration | Server Settings, then select Windows Authentication
from the Settings Categories list.
2 Click Edit. The Edit Windows Authentication page opens.
3 Specify whether to use Domain controllers or WINS server, using the DNS host name.
NOTE: You can specify multiple domain controllers, but only one WINS server. Click + to
add additional domain controllers to the list.
4 Click Save.
Configuring Windows authorization
Use this task to configure the Windows authorization settings that are used with your Active
Directory servers. This is required to enable:
• Dynamic assignment of permission sets
• Automatic user account creation
Before you begin
You must register an LDAP server with your ePO server.
Task
For option definitions, click ? in the interface.
1 Click Menu | Configuration | Server Settings, click Windows Authorization, then
click Edit. The Edit Windows Authorization page opens.
2 Select the Default Active Directory Server from the list.
3 Specify the NetBIOS Domain Name for your LDAP server, and select your Active
Directory Server from the list, then click Save.
NOTE: You can add or remove multiple domains using + or -.
38 McAfee ePolicy Orchestrator 4.5 Product Guide
.
C:\Program Files\McAfee\ePolicy