SafeGuard Enterprise endpoint changes. Then only Windows credentials are necessary to log on to the computer, to reactivate the SafeGuard POA and to be added as the new owner.
26.1.1 Block User
If you select the check box in the Block User column, the user is no longer allowed to log on to the relevant computer. If the relevant user is logged on when the policy with this setting becomes active on the computer, the user is logged off.
26.1.2 Groups
In the SafeGuard Management Center, computer groups can be assigned to a user (account) and/or user groups can be assigned to a computer.
To create a group: In Users and Computers, right-click the relevant object node where you want to create the group and select New, Create new group. In Create new group, in Full name, enter the name of the group and optionally a description. Click OK.
Example: Maintenance account
It is for example possible to use a single maintenance account to service a large number of computers. For this purpose the computers concerned must be in a single group. This group is then assigned to a maintenance account (user). The owner of the maintenance account can log on to all computers within this group
Also, by assigning a group containing different users, these users can log on to a specific computer in a single step.
26.2 Assignment of user and computer groups
In Users and Computers, to view the assignment of user and computer groups you need at least
Read only access rights for one of the objects (user or computer group) involved. To define or change the assignment, you need Full access rights for both of the objects involved. The UMA display showing available users/machines is filtered according to your access rights.
Note: You can assign individual users to a computer or vice versa using the same process as for groups.
1. Click Users and Computers.
2. To assign a group of computers to single user, select the user.
3. Click the Computer tab in the action area.
All computers and computer groups are displayed under Available computers.
4. Drag the selected groups from the Available Groups list into the action area.
5. A dialog is displayed asking whether the user should be the owner of all computers.
If there is no specified owner in the SafeGuard Management Center, the first user to log on to this computer is automatically entered as the owner. The user is the entitled to allow other users to access this computer. The condition is that the user Can Become Owner.
■
If you answer Yes, the first user to log on to this computer becomes the owner and can allow access to other users.
200
Administrator help
■
If you answer No, the user is not the owner of this computer.
It is not generally necessary for a service account owner to be the owner of the computer. This setting can be changed after initial assignment.
All computers from the assigned group are displayed in the action area.
The user can log on to all computers assigned in this way.
A user group can be assigned to a single computer in the same way.
201
