This section explains how to get started with the PolicyServer MMC groups and users. First define the users and groups, and then assign users to groups. It is also possible to add new users directly to a group. At least one Top Group is required.
User and group recommendations:
Follow the Active Directory structure.
Create a new group whenever there is a policy difference between groups of users. If one group requires domain authentication and another requires fixed password, then two separate groups are required.
Create multiple groups to minimize access. All members of a group are allowed access to any Endpoint Encryption device in that group.