cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 10
Report Inappropriate Content
Message 1 of 5

Encryption user not able to log in to preboot

ePO 5.10, DE 7.2.5

We have setup a new PC and the policy to encrypt the drive kicked off.  Logging out of our local account and logging in to our Domain account, I can see the user for the new machine in the list of Encrypted Users in EPO.  At the PC, reboot and the domain user cannot log in to the preboot screen.  Logged in as local, logged into windows as domain, locked the screen and unlocked, opened agent status monitor and C&P and send events, see in EPO it has updated, still see the domain user in Encrypted Users, and still the domain user cannot log in to preboot.  Checked the Orion log and see "No preferred registered server for domain=".  Went into EPO > registered servers > my LDAP, verified the settings, did a successful test connect.  I am not sure where to go to register the server for our domain.

This was all working before our EPO upgrade to 5.10  Feels like I am missing something simple.

4 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Encryption user not able to log in to preboot

When you go into registered servers, even if you don't make a change, re-save that registration for the ldap server.  Check also the server log on epo to see if there are any errors sending user policy to the system.  Otherwise, I am going to transfer this to the encryption team since that is more their expertise.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
Level 10
Report Inappropriate Content
Message 3 of 5

Re: Encryption user not able to log in to preboot

what would that error look like? which server log? 

I checked in the orion log and do not see "policy or send".

watching the logs on the client, I am geting the impression the policies and tasks are working.

I saved the LDAP settings again and no change there.

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Encryption user not able to log in to preboot

In the install directory for epo, under db\logs, you will see a server_servername.log file.  It would show lookup failed for ldap user.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
Level 10
Report Inappropriate Content
Message 5 of 5

Re: Encryption user not able to log in to preboot

Not seeing any errors, mostly just a bunch of http:// calls.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community