Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Autologon at boot with SGE 5.50.8

We are very confused by the new version of SGE (having used the old versions for years with no problem).

We ,the IT dept, install & configure all laptops; the users don't do any admin.  After installing SGE 5.50.8 (Pre-install,install,policy), the laptop boots & bypasses the SGE logon screen; it pops up momentarily and says it is auto-logging on, then starts Windows & the Windos logon screen.  I eventually worked out by reading on this forum that this was because I only had one account, the administrator account, on the laptop.  After I logged into Windows with the user account and re-booted I then get the SGE boot login screen.  However, this is where the problem arises.  It will only login with the administrator user name and password.  Obviously I cannot give this to the user so am a bit stuck at the moment. I understand from what I have read that SGE now takes the first user logon and makes that the boot logon.  Can someone explain why this is so ?  It seems extremely insecure to have the boot username & password the same as Windows as anybody only needs to get hold of one set of credentials to get in.  With the previous versions of SGE you could set a separate boot password that was entirely different from the Windows user accounts.

The only way I can see at the moment to solve this is to uninstall SGE, create a 'dummy' Windows user account, re-install SGE and login first with that dummy account to set that as the boot account.  Is this the only way to make SGE operate with boot authentication credentials that are different from the Windows logon credentials ?

:19093


This thread was automatically locked due to age.
Parents
  • Hi Carina,

    thank you very much for posting and bringing up this question.

    As already mentioned the design between SafeGuard Easy 4.x and SafeGuard 5.x has changed. SafeGuard Easy 5.x is using the technology of SafeGuard Enterprise now. In SafeGuard Enterprise the design has been changed from an independent account at Power On Authentication (POA) level to a linked account.

    At this point it is unfortunately not possible to activate the POA with an "unlinked" account at this point. However, once the POA is active you can use a POA Account to access the machine.

    Detailed information how to create a POA user and about the differences between a POA user and a Service Account user can be found in the manual as well in our knowledge base.

    http://www.sophos.com/support/knowledgebase/article/110080.html

    http://www.sophos.com/support/knowledgebase/article/114273.html

    Regards

    Dan

    :19363
Reply
  • Hi Carina,

    thank you very much for posting and bringing up this question.

    As already mentioned the design between SafeGuard Easy 4.x and SafeGuard 5.x has changed. SafeGuard Easy 5.x is using the technology of SafeGuard Enterprise now. In SafeGuard Enterprise the design has been changed from an independent account at Power On Authentication (POA) level to a linked account.

    At this point it is unfortunately not possible to activate the POA with an "unlinked" account at this point. However, once the POA is active you can use a POA Account to access the machine.

    Detailed information how to create a POA user and about the differences between a POA user and a Service Account user can be found in the manual as well in our knowledge base.

    http://www.sophos.com/support/knowledgebase/article/110080.html

    http://www.sophos.com/support/knowledgebase/article/114273.html

    Regards

    Dan

    :19363
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?