McAfee EPOCDE-AA-BA Product Guide - Page 53

7 Configuring advanced server settings Advanced server settings enable and control the behavior of your server's advanced features. These features allow, and often require, configuration and tuning of multiple server settings to operate correctly in your managed environment. Contents Configuring Active Directory user login Authenticating with certificates Configuring Rogue System Detection server settings Managing security keys Configuring source and fallback sites Configuring Active Directory user login When you have many users accessing your ePolicy Orchestrator server, managing user accounts manually can be overwhelming. You can reduce the overhead of managing user accounts and access by configuring Active Directory user login. Contents Managing ePolicy Orchestrator users with Active Directory Configuring Windows authentication and authorization Managing ePolicy Orchestrator users with Active Directory ePolicy Orchestrator offers the ability to dynamically create McAfee ePO users and assign permission sets to them by automatically creating users based on Windows authenticated user credentials. This process is accomplished by mapping McAfee ePO permission sets to Active Directory groups in your environment. This feature can reduce the management overhead when you have a large number of McAfee ePO users in your organization. To complete the configuration, you must work though the following process: 1 Configure user authentication. 2 Register LDAP servers. 3 Assign permission sets to the Active Directory group. User authentication ePolicy Orchestrator users can be authenticated with McAfee ePO password authentication or Windows authentication. If you use Windows authentication, you can specify whether users authenticate: McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 53