Can't add a second user to a SafeGuard Easy client

Question

I'm not sure if this has been asked before but I can't find the answer anywhere so thought I'd try here.

I have SafeGuard Easy. I've set up a policy with a POA user. All fine so far.

I've installed the policy on the client PC and rebooted.

Then as far as I know the first user I log on as is the owner.

According to the instructions to add a second user I

1: Reboot the machine.

2: Remove the tick in the box to pass the password to Windows.

3: Log on as the owner at the SafeGuard logon screen.

4: At the Windows logon log on as the second user.

So when I do all that and reboot I try logging on to the SafeGuard client as the second user.

The username / password / domain are absolutely correct but SafeGuard pops up saying the password is incorrect.

I've tried this on several machines. My laptops can be used my multiple users so I need this to work. At the moment all I can do is create a policy with no POA but this isn't satisfactory.

I'm probably doing something daft. Would anybody have any ideas?

This thread was automatically locked due to age.

FormerMember · Answer

Hello, 
 
To allow another user to logon to a SafeGuard Easy client you will need to do the following:: 
 
1. Switch on the computer. 
The POA logon dialog is displayed. The second Windows user cannot log on at the POA because 
they do not have the necessary keys and certificates. 
2. For the second user to log on at the POA, the computer's owner must allow it. 
Note: The default setting specifies that the first user to log on after installation is registered as 
the owner of the computer. The security officer can also define the owner of a computer with 
a policy setting. 
3. In the POA logon dialog, click Options and clear the Pass through Windows check box. 
The Windows logon dialog is displayed, prompting the second user to log on. 
4. The second user enters their Windows credentials. 
5. An entry for the second user is created in the Sophos SafeGuard system core. 
The next time the computer is started, the second user can log on at the Power-on Authentication.

FormerMember · Answer

Create the new user account > In the Policy Editor open the Machine Settings policy and look for a setting called "Enable registration of SGN Windows Users" > Create the new configuration package and install it on the Client machine > Reboot > The new user should now be able to logon at Windows > Check the status and they should be showing as "SGN user". Any problems just let me know.

FormerMember · Answer

Hi Wayne, 
 It's slightly different in SafeGuard Easy - but if you just need to rename the current user you can do this in AD. 
 If the machine is BitLocker you can just reboot afterwards, if you're using Full Disk Encryption your user might need a new certificate. They may also need to logon at POA via the new username if POA is in use