Check Point HARMONY R81 - Logon Settings

Logon Settings
R81 Harmony Endpoint Server Administration Guide|236
Logon Settings
OneCheck User Settings Logon Settings define additional settings for how users can access
computers. Expand the Advanced section in the OneCheck User Settings rule to configure
this.
Option Description
Allow logon
to system
hibernated
by another
user
Lets a different user than the logged on user authenticate in Pre-boot to a
system in hibernate mode.
Allow use of
recovery
media
Let user authenticate to use recovery media to recover and decrypt data
from an encrypted system.
Note: In E80.20 and higher, if this is not selected, users can still access
recovery media that is created with a temporary user and password.
Allow user to
change his
credentials
from the
endpoint
client
Let users change the password on an endpoint client during the Pre-boot.
Allow Single
Sign-On use
Let users use Single Sign On to log on to Pre-boot and Windows when
OneCheck Logon is disabled. Single Sign on applies only to Pre-boot and
Windows and not to different components, such as VPN or Media
Encryption. Users are always allowed to use Single Sign On when
OneCheck Logon is running.