Defender 6.1 - Administration Guide

Set up a list of the Defender Security Servers you want Defender Desktop Login to use; specify the shared secret that has been configured on the Access Node to be used for authentication requests.

You can use the following elements:

• Add  Adds a new Defender Security Server entry to the list. In the dialog box that opens, type the server IP address or DNS name and communication port.
• Edit  Allows you to edit the selected list entry.
• Remove  Removes the selected list entry.
• Up  Moves the selected list entry up.
• Down  Moves the selected list entry down.
• If Defender Desktop Login is configured by using Group Policy, this tab also provides the Group Policy Settings (read only) list that shows the Defender Security Servers used by Defender Desktop Login.

Configure which users or groups are required to authenticate via Defender.

You can use the following elements:

• Require domain users to log on using Defender. Specifies that all domain users who log on to a computer that has Defender Desktop Login installed must authenticate via Defender.
• Allow specified users to bypass Defender authentication. Specifies that users in groups added to the Groups list do not have to authenticate via Defender when logging on to computers that have Defender Desktop Login installed.
• Require specified users to log on using Defender. Specifies that users in groups added to the Groups list must authenticate via Defender when logging on to computers that have Defender Desktop Login installed.

If you want local users always to be able to log on to a computer that has Defender Desktop Login installed without authenticating via Defender, select the Always allow local users to bypass Defender authentication check box.

If Defender Desktop Login is configured by using Group Policy, you can click the Group Policy (read-only) tab to view a list of groups whose users must or do not have to authenticate via Defender Desktop Login.

Configure how to handle users’ logon attempts when all the Defender Security Servers installed in your environment are unavailable.

• Logins without the Defender Security Server are disabled  Users cannot log on if all the Defender Security Servers are unavailable.
• Users may login for a set number of days after the previous login against the Defender Security Server  Users can only log on for a specified number of days from the moment when all Defender Security Servers become unavailable.
• Users have a set number of logins after the previous login against the Defender Security Server  Users can only log on a specified number of times from the moment when all the Defender Security Servers become unavailable
• Notify user when offline data is downloaded  When this check box is selected, each time an offline logon occurs, the user is provided with information about the remaining number of offline logons or the remaining number of days when the offline logon will be available.

Configure additional settings for Defender Desktop Login. You can use the following options:

• Remember user's passwords  With this option selected users Active Directory (AD) passwords will be remembered and the user will not need to enter this during the logon process. Only Defender authentication is required. (The user will be prompted for the AD password on first use).
• Automatically change user's password as required  Causes Defender to automatically change user’s password when it expires.
• Time to wait for workstation service to be ready (seconds)  
• Credential Provider Filter  Provides a filter that allows you to display only specific credentials providers.