Configure Local Self Help

If you use role-based administration:

For more information, see About roles and sub-estates.

With Local Self Help, users who have forgotten their password can log on to their computers without the assistance of a help desk. Users log on by answering predefined questions in the Power-on Authentication.

To configure Local Self Help:

  1. Check which full disk encryption policy is used by the group or groups of computers you want to configure.
  2. In the Policies pane, double-click Full disk encryption. Then double-click the policy you want to change.
    The Full Disk Encryption dialog box is displayed.
  3. Under Power-on Authentication (POA), make sure that the Enable Power-on Authentication field is selected.
  4. Under Logon recovery methods, select Local Self Help (without help desk) and click OK.
  5. To configure further settings for Local Self Help, click Global Encryption Settings.
    The Global Encryption Settings dialog box is displayed.
  6. Under Local Self Help, configure the following settings:
    1. In the The user has to answer: drop-down list, select how many questions users must answer correctly to log on.
    2. To allow users to define their own questions, select Allow users to define their own questions.
  7. Click OK.