Endpoint Encryption

 View Only
Expand all | Collapse all

Installing Group Policy Snap-in Without Installing Entire SEE Manager Server

  • 1.  Installing Group Policy Snap-in Without Installing Entire SEE Manager Server

    Posted Aug 09, 2012 07:31 PM

    Hi,

    We would like to install the SEE Group Policy on a Windows 2008 Server that is not running SEE Manager Server.  We have dedicated AD Operations that would not need access to the SEE Manager Server.   Their role would be to edit the existing SEE GPOs.   For reasons of security, we can't grant them remote access to the SEE Manager Server (segregation of duties); they have access only to their servers.

     

    Thanks,

    Roland Thomas

     



  • 2.  RE: Installing Group Policy Snap-in Without Installing Entire SEE Manager Server

    Posted Aug 10, 2012 04:14 AM

    We're running SEE 8.2.1 and I am able to see/amend the SEE client related GPO policy options from a machine that does not have the SEE Manager Console installed.  The only difference is that you have to rummage around the Administrative Templates -> Classic Administrative Templates for the the SEE options (Win2k8R2).

    Please be aware that there are User Configuration GPO options to restict access to certain parts of the SEE Manager Console (though these are probably not going to be much help in this case, as a GPO admin could just give themselves access).