The Logon Shield configuration is controlled by the common configuration component. A customized user interface, called the Logon Shield configuration view, lets you set and modify the data in a configuration policy.
When starting the Logon Shield configuration view from the DSM Explorer, the Logon Shield configuration dialog is displayed.
You can select the mode of operation for the Logon Shield, which determines the log on conditions under which Software Delivery jobs (SD jobs) are executed and the installation status of the Logon Shield.
The modes of operation for the Logon Shield include:
Indicates, that in a Windows Vista operating environment, the Logon Shield credential provider and filter COM modules are unregistered. In a non-Windows Vista environment, the sxpgina.dll is uninstalled.
Determines that the Logon Shield is not activated when an SD job executes.
Determines that the user is forced to log off when an SD job is waiting to be executed. The Logon Shield is activated during job execution.
Determines that the option "Prevent user from being logged on when job executes", which has been selected by the administrator during set-up of the SD job, is applied. When the Apply job-defined condition mode of operation is selected, the user is forced to log off when the job is waiting to be executed and the Logon Shield is activated during job execution.
Determines that the user is not asked to log off when an SD job is pending. However, the job is executed only after the user has logged off. The Logon Shield is active during job execution.
Specifies that pending SD jobs are executed only when a user is logged on.
To avoid a permanent blocking of a system in case of malfunction, you can specify a period of time after which the system will be unblocked. The maximum blocking time defines the maximum time, in minutes, for which logon will be prevented. This parameter has already been remotely managed in previous releases.
In Windows Vista and newer operating environments, we strongly recommend that you run the Logon Shield with specific Windows security options. The Logon Shield applies the Windows security options every time it is activated, provided Apply Windows security options is set to Enabled in the Logon Shield configuration dialog. The Apply Windows security options feature of the Logon Shield does not apply to pre-Windows Vista operating environments.
To select the specific Windows security options click the Settings button on the Logon Shield configuration dialog. The Windows security options dialog opens where you can enable (or disable) the following Windows policies:
This Windows policy determines whether pressing Ctrl+Alt+Del is required before a user can log on. If this policy is disabled, any user must press Ctrl+Alt+Del before logging on to Windows.
We strongly recommend to disable this policy when using the Logon Shield.
This Windows policy determines whether a computer can be shut down without having to log on to Windows. If this policy is disabled, any user must log on to Windows before shutting down the computer.
We strongly recommend to disable this policy when using the Logon Shield.
|
Copyright © 2013 CA.
All rights reserved.
|
|