McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Product Manual

Page: 56 / 328

If you need to assign special permissions to an individual user, you can do so by creating an Active
Directory group that contains only that user.
Configuring Windows authentication and authorization
Use these tasks to set up Active Directory User Login.
Tasks
• Enabling Windows authentication in ePO Server on page 56
Before more advanced Windows authentication can be used, the server must be prepared.
• Configuring Windows authentication on page 56
There are multiple ways to allow users to use existing Windows account credentials within
ePolicy Orchestrator.
• Configuring Windows authorization on page 57
Users attempting to log on to an ePolicy Orchestrator server using Windows authentication
need a permission set assigned to one of their Active Directory groups to log on
successfully.
Enabling Windows authentication in ePO Server
Before more advanced Windows authentication can be used, the server must be prepared.
To activate the Windows Authentication page in the server settings, you must first stop the ePolicy
Orchestrator service. This task must be performed on the McAfee ePO server itself.
Task
For option definitions, click
?
in the interface.
1 From the server console, select
Start
|
Settings
|
Control Panel
|
Administrative Tools
2
Select
Services
.
3 In the
Services
window, right-click
McAfee ePolicy Orchestrator Applications Server
and select
Stop
.
4
Rename
Winauth.dll
to
Winauth.bak
.
In a default installation, this file is found in
C:\Program Files\McAfee\ePolicy Orchestrator
\Server\bin
.
5
Restart the server.
When you next open the
Server Settings
page, a
Windows Authentication
option appears.
Configuring Windows authentication
There are multiple ways to allow users to use existing Windows account credentials within ePolicy
Orchestrator.
Before you begin
You must have first prepared your server for Windows authentication. See Enabling
Windows authentication in ePO server.
How you configure these settings depends on several issues:
7 Configuring advanced server settings
Configuring Active Directory user login
56 McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide