The Self-recovery option allows the user to reset a forgotten password by answering a set of security questions. A list of security questions is set by the administrator using McAfee ePO. If the answers from the user match what has been stored with their self-recovery information, they can proceed through the recovery process.
A list of security questions is set by the administrator using McAfee ePO. If the answers from the user match what is stored with their self recovery information, they can proceed through the recovery process.
Use McAfee ePO to enable or disable the self-recovery functionality in the client computer
Task For details about product features, usage, and best practices, click ? or Help. 1 Click Menu | Systems | System Tree, then select a group from the System Tree. 2 Select a system, then click Actions | Agent | Modify Policies on a Single System to open the Policy Assignment page for that system. 3 From the Product drop-down list, select Drive Encryption 7.2. The policy categories under Drive Encryption display the system's assigned policy. 4 Locate a User Based Policies policy category, then click Edit Assignments to open the User Based Policies page. 5 If the policy is inherited, select Break inheritance and assign the policy and settings below next to Inherit from. 6 Select a policy from the Assigned policy drop-down list, then click Edit Policy to open the Policy Settings page. From this page, you can edit the selected policy, or create a new policy.
7 On the Self-recovery tab, enable or disable the self-recovery functionality for the specified user or user group. 8 Select Invalidate self-recovery after no. of attempts and type the number of attempts.
The self-recovery token is invalidated if the user types invalid answers for more than the number of attempts specified in the policy.
9 Type the number of Questions to be answered to perform the self-recovery. The client user is prompted with these questions when trying to recover the user account at the client system. 10 Type the number of Logons before forcing user to set answers to determine how many times a user can log on without setting their self-recovery questions and answers. 11 Click + to create a new question, then select the question Language and type the Min answer length for the answer to this question.
Once these options are enabled in ePO, users will be prompted with the questions when they try to login for the first time