McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Product Manual

Page: 53 / 328

7
Configuring advanced server settings
Advanced server settings enable and control the behavior of your server's advanced features. These
features allow, and often require, configuration and tuning of multiple server settings to operate
correctly in your managed environment.
Contents
Configuring Active Directory user login
Authenticating with certificates
Configuring Rogue System Detection server settings
Managing security keys
Configuring source and fallback sites
Configuring Active Directory user login
When you have many users accessing your ePolicy Orchestrator server, managing user accounts
manually can be overwhelming. You can reduce the overhead of managing user accounts and access
by configuring Active Directory user login.
Contents
Managing ePolicy Orchestrator users with Active Directory
Configuring Windows authentication and authorization
Managing ePolicy Orchestrator users with Active Directory
ePolicy Orchestrator offers the ability to dynamically create McAfee ePO users and assign permission
sets to them by automatically creating users based on Windows authenticated user credentials.
This process is accomplished by mapping McAfee ePO permission sets to Active Directory groups in
your environment. This feature can reduce the management overhead when you have a large number
of McAfee ePO users in your organization. To complete the configuration, you must work though the
following process:
1 Configure user authentication.
2 Register LDAP servers.
3 Assign permission sets to the Active Directory group.
User authentication
ePolicy Orchestrator users can be authenticated with McAfee ePO password authentication or Windows
authentication. If you use Windows authentication, you can specify whether users authenticate:
7
McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide 53