Editing Pre-boot Users

To edit offline Pre-boot accounts:

  1. From the Users and Computers tab, expand an Offline Group to see the users .

  2. Right-click the user and select User Authentication (OneCheck) > Pre-boot Authentication method.

  3. Select an Authentication Method.

  4. Click Change Password or User Certificates to create a new password or upload certificates, as required for the authentication method.

  5. Click OK.

To edit a deployment Pre-boot account:

  1. From the Users and Computers tab, open Offline Groups.

  2. Select the preboot user account

  3. Select Deployment Pre-boot User Details and click Edit.

To create offline Pre-boot users

  1. From the Users and Computers tab, select an offline group.

  2. In Group Details, click Edit.

    The Group Details window opens.

  3. Click Pre-boot Users.

    The Pre-boot Users Details window opens.

  4. In the Authorized Preboot Users area, click New.

    The Add new preboot user window opens.

  5. Enter a Logon Name

  6. In the Authentication credentials area, select Password or Dynamic Token.

    • A password must contain at least five characters

    • If you select a token as the authentication method, make sure you select an existing token

  7. To set more granular account controls, open Account Details.

In Account Details you can configure the type of use and expirations settings.

  • Regular User (default)

    • Do not use device information for Full Disk Encryption remote help - Enables user-bound remote help for the pre-boot user

    • Lock user for preboot - Locks the user for preboot

    • Require change password after first logon - Applies only to password authentication. Select this option to force users to change their password after the first pre-boot logon.

  • Deployment User

    • Allow creating X Pre-boot accounts from this account - You can use this account to create new offline Pre-boot accounts. After it creates the maximum numbers of accounts allowed, the account expires.

  • Expiration Settings:

    • The user will expire after X logins to Pre-boot

    • The user will be revoked after the selected date.