Kaspersky Endpoint Security 10 Service Pack 2 for Windows

Adding an Authentication Agent account editing command

To add a command for editing an Authentication Agent account:

1. In the Settings section of the Properties: <name of the Authentication Agent account management task> window, open the context menu of the Add button and select the Account editing command item.

   The Edit user account window opens.

2. In the Windows account field within the Edit user account window, specify the name of the Microsoft Windows user account that was used to create the Authentication Agent account that you want to edit. To do so, type the account name manually or click the Select button.
3. If you manually entered the name of a Microsoft Windows user account, click the Allow button to determine the security identifier (SID) of the user account.

   If you choose not to determine the security identifier (SID) by clicking the Allow button, it will be determined when the task is performed on the computer.

   Determining the SID of the Microsoft Windows user account when adding an Authentication Agent account editing command is a convenient way to make sure the manually entered Microsoft Windows user account name is correct. If the Microsoft Windows user account entered does not exist or belongs to an untrusted domain, the group task for managing Authentication Agent accounts ends with an error.

4. Select the Change user name check box and enter a new name for the Authentication Agent account if you want Kaspersky Endpoint Security to change the user name for all Authentication Agent accounts created using the Microsoft Windows account with the name indicated in the Windows account field to the name typed in the field below.
5. Select the Modify password-based authentication settings check box to make password-based authentication settings editable.
6. Select the Allow password-based authentication check box if you want the application to prompt the user to enter the Authentication Agent account password during authentication for accessing encrypted hard drives.
7. If you selected the Allow password-based authentication check box during the previous step:
   1. In the Password field, enter the new password of the Authentication Agent account.
   2. In the Confirm password field, confirm the password entered at the previous step.
8. Select the Edit the rule of password change upon authentication in Authentication Agent check box if you want Kaspersky Endpoint Security to change the value of the password change setting for all Authentication Agent accounts created using the Microsoft Windows account with the name indicated in the Windows account field to the setting value specified below.
9. Specify the value of the password change setting upon authentication in Authentication Agent.
10. Select the Modify certificate-based authentication settings check box to make settings of authentication based on the electronic certificate of a token or smart card editable.
11. Select the Allow certificate-based authentication check box if you want the application to prompt the user to enter the password to the token or smart card connected to the computer during the authentication process in order to access encrypted hard drives.
12. If you selected the Allow certificate-based authentication check box during the previous step, click the Browse button and select the file of the token or smart card electronic certificate in the Select certificate file window.
13. Select the Edit command description check box and edit the command description if you want Kaspersky Endpoint Security to change the command description for all Authentication Agent accounts created using the Microsoft Windows account with the name indicated in the Windows account field.
14. Select the Edit the rule of access to authentication in Authentication Agent check box if you want Kaspersky Endpoint Security to change the rule for user access to the authentication dialog in Authentication Agent to the value specified below for all Authentication Agent accounts created using the Microsoft Windows account with the name indicated in the Windows account field.
15. Specify the rule for accessing the authentication dialog in Authentication Agent.
16. In the Edit user account window, click OK.