Add New User Options

The Endpoint Encryption Users widget provides user management capability directly from the Control Manager dashboard. Use the Endpoint Encryption Users widget to add or remove Endpoint Encryption user accounts, reset passwords, change permissions, configure policy group priority, import from Active Directory, and search for specific user accounts.


For information about adding existing Endpoint Encryption users to a policy, see Configuring Endpoint Encryption Users Rules.




Select which users to display: all users in the Enterprise, or users in a specific policy.

Search ()

Click the icon to filter which Endpoint Encryption users appear in the table. Use the search field to specify parameters to search against.

Settings ()

Right-click a user

Click the icon to view user attributes or to perform actions on any selected user.

Add users ()

Click the icon to add individual users, import users from a CSV file, or import users from Active Directory LDAP.

Number of users

View the total number of users in the entire Enterprise, selected policy, or specified search.

Add New User Options

The following table explains the options available when adding a new Endpoint Encryption user.

Table 1. Add New User Options



User name

Specify the account user name that the user uses to authenticate.

First name

Specify the user's first name.

Last name

Specify the user's last name.

Employee ID

Specify the user's employee ID (optional).

Email address

Specify user's email address (optional).


Select Yes to temporarily lock the account. A locked account cannot log on to Endpoint Encryption devices.

User type

Select User, Authenticator, or Administrator.

For more information about user roles, see Users.

One group

Select Yes to only allow the user to belong to one policy at a time. The user may not be added to any other policy groups.

If you set this option to Yes and set the User type to Authenticator or Administrator, the user will be a group authenticator or group administrator respectively.

Authentication method

Select the authentication method available to the user.

Policy Membership

The following table explains how to understand Endpoint Encryption user policy membership.


Encryption Management for Apple FileVault and Encryption Management for Microsoft BitLocker do not require authentication and are not affected by authentication policies. Client, login, password, and authentication policies, or allowing the user to uninstall the Endpoint Encryption agent software only affects the Full Disk Encryption and File Encryption agents.





1, 2. 3

Shows the order that Endpoint Encryption applies policies. When a policy is triggered that affects a user, Endpoint Encryption takes the action, and then no other policies affect the user for that event.

Policy Name


Shows the name of all policies that the user is currently assigned.


Temporary employees policy.

Shows the description of the policy.

Allow Install

Yes, No

Shows whether the user can install new Endpoint Encryption devices.

Importing Users from a CSV File

Format each line in the CSV file as follows:

<User ID (required)>, <first name>, <last name>, <employee ID>, <email address>

For fields with no data, use a comma as a placeholder. The following is an example CSV entry:

example_id, name,,,

  1. From the Endpoint Encryption Users widget, click Add User and then select Import Users from a File.

    The Import Users from a File screen appears.

  2. Click Choose File to select the CSV file.

    The Open CSV File window appears.

  3. Select the file and then click Open.
  4. Click Add.

    The users in the CSV file are imported.

Importing Active Directory Users

PolicyServer maintains a user directory separate from the Active Directory database. This allows PolicyServer absolute security over access to all Endpoint Encryption devices, user rights, and authentication methods.

Use the Endpoint Encryption Users widget in Control Manager to import Active Directory users. For more information about managing users with the Endpoint Encryption Users widget, see Endpoint Encryption Users.

  1. Log on to Control Manager.
  2. Go to the Endpoint Encryption Users widget.
  3. Click the icon.
  4. Select Import Users from Active Directory.

    The Import Users from Active Directory screen appears.

  5. Specify your credentials for the Active Directory LDAP server.

    For Port, the value "0" specifies the default port. The default port is 389.

  6. Click Next.
  7. Wait for the specified Active Directory domain to populate.

    The Active Directory tree for the specified domain appears in the left pane.

  8. From the left pane, use the navigation tree to select the container from which to add users.

    The available users populate in the right pane.

  9. Do one of the following:
    • Select individual users, then click Import Selected Users.
    • Click Import Everyone in this Container.
  10. Click OK to add the users to the specified location.

    A confirmation window appears.

  11. Click OK to confirm.

    An import status message displays.

  12. Click Close to finish, or repeat the procedure to select more users to import.