Endpoint Encryption

 View Only
  • 1.  Can Client Administrator be a Domain Account

    Posted Mar 16, 2016 11:03 AM

    Hello,

    I am wondering if the client administrators can be setup as an active directory account using an active directory password instead of creating a standalone client administrator account. 

    When looking under the Client Adminstrators section on the Group Policy Object, it appears it can only be a stand alone account.

     

    Thank you,



  • 2.  RE: Can Client Administrator be a Domain Account
    Best Answer

    Broadcom Employee
    Posted Mar 17, 2016 05:11 AM

    hi,

    it is standalone, local account. You will not be able to use AD password for it. This is what is written about Client Administrator in the guide (https://support.symantec.com/en_US/article.DOC9133.html) on page 41:

    Provides the local support to Symantec Endpoint Encryption registered users. You create client administrators for Drive Encryption. Client administrators cannot change their own passwords or use any password-recovery methods.

    However, what you can do is to use the same Client Administrator credentials for other packages you create (you can export clients administrators to csv, import from csv or load client administrators from installation - msi file). This is described on page 76 of the same guide.



  • 3.  RE: Can Client Administrator be a Domain Account

    Posted Mar 22, 2016 10:27 AM

    Okay that is what I thought.

     

    Thank you for your time!