Editing Pre-boot Users
To edit offline Pre-boot accounts:
-
From the Users and Computers tab, expand an Offline Group to see the users .
-
Right-click the user and select User Authentication (OneCheck) > Pre-boot Authentication method.
-
Select an Authentication Method.
-
Click Change Password or User Certificates to create a new password or upload certificates, as required for the authentication method.
-
Click OK.
To edit a deployment Pre-boot account:
-
From the Users and Computers tab, open Offline Groups.
-
Select the preboot user account
-
Select Deployment Pre-boot User Details and click Edit.
To create offline Pre-boot users
-
From the Users and Computers tab, select an offline group.
-
In Group Details, click Edit.
The Group Details window opens.
-
Click Pre-boot Users.
The Pre-boot Users Details window opens.
-
In the Authorized Preboot Users area, click New.
The Add new preboot user window opens.
-
Enter a Logon Name
-
In the Authentication credentials area, select Password or Dynamic Token.
-
A password must contain at least five characters
-
If you select a token as the authentication method, make sure you select an existing token
-
-
To set more granular account controls, open Account Details.
In Account Details you can configure the type of use and expirations settings.
-
Regular User (default)
-
Do not use device information for Full Disk Encryption remote help - Enables user-bound remote help for the pre-boot
Authentication before the Operating System loads. user
-
Lock user for preboot - Locks the user for preboot
-
Require change password after first logon - Applies only to password authentication. Select this option to force users to change their password after the first pre-boot logon.
-
-
Deployment User
-
Allow creating X Pre-boot accounts from this account - You can use this account to create new offline Pre-boot accounts. After it creates the maximum numbers of accounts allowed, the account expires.
-
-
Expiration Settings:
-
The user will expire after X logins to Pre-boot
-
The user will be revoked after the selected date.
-