Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 7 replies
  • Subscribers 6 subscribers
  • Views 15279 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSO Safeguard 8

Matt Salinas

 Hello,

 

I have setup Sophos Safeguard successfully and having issues setting up Single Sign On. The clients workstations are Windows 10 with Bitlocker enabled. Is there a way to allow SSO without having to enter Bitlocker password at boot?



This thread was automatically locked due to age.
Parents
  • +1

    Hi Matt,

    You have to make the required changes in the following Group Policy, either in Active Directory or locally on computers:

    1. Require additional authentication at startup

    2. Allow BitLocker without a compatible TPM

    Please go to these Group Policy objects and you can enable or disable the settings according to your requirement. Let me know if this helps resolve your issue.

    Haridoss Sreenivasan
    Technical Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to Haridoss Sreenivasan

    Sorry for the late response. I will give this a try in Group Policy. Also I am having an issue when installing Safeguard clients using a default policy, some machines are grabbing the correct policy and others are not. All computers are in the same OU in AD and I have the Management Console to sync. Any ideas?

  • 0 in reply to Matt Salinas

    Hi Matt,

    Please help me the following questions:

    1. What is the Operating System on the machines?

    2. Do you see all the machines report to the Management Console?

    Haridoss Sreenivasan
    Technical Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to Haridoss Sreenivasan

    1. Windows 10 Pro 64bit

     

    2. I now see the machines responding to the Management Console. What I did was made changes to the policy and re-create a new Machine Client install. Once I installed the updated .msi All PC's were communicating and receiving the correct policy. 

     

    Will I have to re-create a new manged client .msi everytime I make changes to the polices?

  • 0 in reply to Matt Salinas

    No you don't need to, I push out policy changes frequently and if the client is effectively communicating with the server it will receive and action the changes. I would suspect the previous managed MSI wasn't configured properly.

Reply Children
No Data
Unfiltered HTML