Add AD user to every POA enabled machine?

Question

I'd like to add an AD Admin account to be able to login through POA on every machine in my environment. Is there a way I can do this in one go? Or do I have to go to every machine and add the account as a user.

This thread was automatically locked due to age.

FormerMember · Accepted Answer

If you are using a Safeguard Enterprise solution - then yes you can. 
You assign the user account to a machine and make sure that it has a user certificate generated - test this by making sure that you can log into that machine through the POA with that account and password. 
 
Once a user has a certificate, you can assign that user to any machine in your environment by clicking on the machine then on the users tab in the middle section. You can assign the user here. The machine will download the assignment and that user's certificate the next time it contacts the SGN server. 
 
See User Machine Assignment in the manual: www.sophos.com/.../sgn_7_h_eng_admin_help.pdf 
 
However, this isn't a very good idea. This would mean that this one user would have complete access to all encrypted data on those machines. Also, you would need to manage that user account's password carefully. 
 
Instead, use our built in account type called POAUser - these are special built accounts that you define and assign out to POAs in your environment. They don't change unless you alter them (ie., passwords don't expire) and are more secure. Please see this KBA: www.sophos.com/.../114273.aspx 
 
Also, this is detailed in the administration guide on page 113: www.sophos.com/.../sgn_7_h_eng_admin_help.pdf 
 
This is the version 7 guide.

FormerMember · Answer

At POA Disable pass-through to Windows 
At Windows switch user to "SafeGuard Other" 
Login as a Domain Admin