Defender 5.11 - Administration Guide

Removing a license

You can remove licenses whose validity period has expired.

To remove a license

1. On the computer where the Defender Administration Console is installed, open the Active Directory Users and Computers tool (dsa.msc).
2. In the left pane (console tree), expand the appropriate domain node, and click to select the Defender container.
3. On the menu bar, select Defender | License.
4. In the Added licenses list, click to select the license you want to remove.
5. Below the Added licenses list, click the Remove License button.

   When prompted, confirm that you want to remove the license.

Managing Defender objects in Active Directory

• Managing user objects
• Managing security token objects
• Managing Defender Security Policies
• Managing Access Nodes
• Managing Defender Security Servers
• Creating a RADIUS payload object

Managing user objects

You can use the properties of a user object in Active Directory to perform Defender-related tasks. For example, you can manage and view information about tokens assigned to the user and Security Policies and RADIUS payloads that apply to the user.

• Managing tokens for a user
• Resetting passphrase for a user
• Managing Defender Security Policy for a user
• Managing RADIUS payload for a user

Managing tokens for a user

To manage tokens for a user

1. On the computer where the Defender Administration Console is installed, open the Active Directory Users and Computers tool (dsa.msc).
2. In the left pane (console tree), expand the appropriate domain node to select the container that holds the user for whom you want manage tokens (typically, this is the Users container).
3. In the right pane, double-click the user.
4. In the dialog box that opens, click the Defender tab.
5. Use the following areas to make changes or view information as necessary:
   • Tokens  This list allows you to manage tokens for the user. This list shows the tokens that are currently assigned to the user. For each token in the list, you can view the token type, serial number, and whether PIN is enabled. For more information, see Tokens list buttons.
   • Authentication Details  Allows you to specify a Defender ID for the user. Also you can view violation count, reset count, and last logon date and time for the user. Optionally, you can reset the violation count. For more information, see Authentication Details area elements.
6. When you are finished, click OK to close the dialog box.