![]() Choose a 2-factor authentication policy options:ġ- Forces ALL users to log in with 2FA method (use Emergengy login or SafeMode boot to login in case of 2FA method is not available)Ģ- 2FA is enforced for a listed users. Turns off all LOG files that can be produced by Rohos Logon Key program. Welcome screen text notice (small text under the clock) Options that can be changed via command line (in msiexec.exe): It does not install program shortcuts into Start menu.This prevents users from change of program settings via Windows registry or Rohos Center. It sets up restricted access rights to registry settings installed by Rohos Logon Key.MSI package public options (see Chapter 4.9) can be changed using msiexec command line or MST file It is specially designed, so you can set up program settings during installation.In this example Rohos will stop sync “USBKeyDllName” option (the kind of 2FA means) this will allow to use a custom 2FA method on selected set of workstations. NoTextLabels=10 – (default 0) Hide Rohos icon from Windows logon screen ĭisableCredUI=1 – (default 0) Hide Rohos icon from UAC credentials prompt dialog box (RunAs Admin command) ĪDmode=2 (default 0) prevent Rohos to verify\connect to AD LDAP.ĪDAPSkipSetting = “USBKeyDllName” (default “”) prevent Rohos to sync some kind of option from domain-wide settings list. ![]() Onlyusbkeylogin =1 – (default 0) Choose a 2-factor authentication policy options (see USB_KEY_LOGIN_ONLY) ĭisableui=1 (default 0) disable access to Rohos main window and also doesnt creates start menu shortcuts to Rohos Logon Key application ![]() Usbdev – (default “”) the type of authentication key, see below the list of 2FA means Usbkeyremoval = 2 – (default 0) logoff after authentication key unplug ![]() Rohos_welcome.exe /VERYSILENT /usbkeyremoval=2 /regkey=XXXXXXXXXXXXX /usbdev=rohos_pkcs.dll /onlyusbkeylogin=3 /disableui=1 /NoTextLabels=10 /DisableCredUI=1 Rohos Logon Key Setup command line options: ![]() Please note, when Rohos is running in a Network mode (connected to Active Directory domain wide settings by LDAP database) then these settings maybe overwritten by the domain-wide settings. To install Rohos Logon Key on network workstations you can use MSI package, regular EXE setup package with command line support or Compact installation package (without Start Menu shortcuts and UI). ![]()
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |