Offline Activation

[Former Member]

I have an offline system for a disabled user that will never connect to an EPO server.  I need PBA to beep when performing any action in PBA.  In the policy (ePO_Policy), I checked "Enable Accessibility" and "Always enable pre-boot USB support".  When I export this policy to offline encryption and encrypt the system, it encrypts, but doesn't beep at PBA.  When testing this same policy on a system connected to EPO, it beeps in PBA.  Any ideas why it doesn't work for offline activation?  Thanks

[jappell]

One thing you could do is to look at the policy you are using for the offline system and open it up in notepad.

Scroll down near the bottom for a section LogonEndpointEncryption. Look for accessability and see if it is True.

- <Section name="LogOnEndPointEncryption">
  <Setting name="AddLocalDomainUsers" value="false" />
  <Setting name="AlwaysDisplayOnScreenKeyboard" value="false" />
  <Setting name="AutomaticBootExpirationDate" value="0" />
  <Setting name="AutomaticBootTPMUsage" value="0" />
  <Setting name="AutomaticBootingEnabled" value="false" />
  <Setting name="AutomaticBootingUseUTC" value="false" />
  <Setting name="DoNotDisplayPreviousUserNameAtLogOn" value="false" />
  <Setting name="EnableAccessibility" value="true" />
  <Setting name="EnableOnScreenKeyboardSupport" value="false" />
  <Setting name="GetUsernameFromToken" value="false" />
  <Setting name="HideUsernameDuringAuthentication" value="false" />
  <Setting name="InactivityTimeoutMins" value="0" />
  <Setting name="LogOnMessage" value="" />
  <Setting name="LogonManagedAutoBootEnabled" value="false" />
  <Setting name="LogonManagedAutoBootLogonAttempts" value="2" />
  <Setting name="MatchUsernameUpToAtSign" value="false" />
  <Setting name="OnlyAddLoggedOnLocalDomainUsers" value="false" />
  <Setting name="SyncExpiryDays" value="0" />
  <Setting name="UseTPM" value="0" />
  <Setting name="UsernameFieldName" value="SubjectDN" />

[Former Member]

EnableAccessibility is set to True

[Former Member]

Also since this feature didn't work they wanted to decrypt the system and put PGP on it.  I can decrypt it with DETECH, but how do you remove DEagent & DEwindows?  You can't install another product with the software still on it.

[jappell]

1. When you move your mouse from one field to another, do you hear a beep?

Did you look at the option: Always enable pre-boot USB support?  The pre-boot USB support
Forces the Drive Encryption Pre-Boot code to always initialize the USB stack. Then the USB audio functionality allows the visually impaired users to listen to an audio signal (spoken word) as a guidance when the user moves the cursor from one field to the next, in the Pre-Boot environment. The USB speakers and headphones can be used to listen to the audio signal.

Thoughts?

[Former Member]

I have both EnableAccessibility & AlwaysEnablePrebootUSBSupport enabled (true).  There are no beeps at pre boot.

[jappell]

I reread your posts and missed the answer to the question I posed. I would open a ticket and let them engage you further. Sorry I couldnt add anything for you.

Jay

[Former Member]

No worries, thank you for your time

[Former Member]

One more question (I promise).  Since this feature didn't work they wanted to decrypt the system and put PGP on it.  I can decrypt it with DETECH, but how do you remove DEagent & DEwindows?  You can't install another product with the software still on it.

[jappell]

Since it has a McAfee Agent on it  but on an island, detech it or use the standalone recovery tools and when you get it back to the desktop, join it back into the domain. It will join your ePO server. Place it in an isolated group and remove the software. Make sure the policy on that container is all encryption OFF with a taks to remove the software.

That help?