Windows Login - Set up Preferred Machine Configuration for Windows Login

​

Introduction

The Preferred Machines setting allows you to specify which Windows devices can use a domain shared credential. When creating a domain shared credential in the Tenant Admin Portal, you can select one or more preferred machines to restrict usage. This enhances security by ensuring the credential can only be used on designated devices. The Windows Login app supports this feature, enabling login only on assigned Windows systems. You can enable preferred machine login in the following ways:

• When creating shared Windows credentials in the Tenant Admin Portal
• When creating shared Windows credentials in the Supervisor App

​

Set Up a Preferred Machine in the Tenant Admin Portal

1. Pair the Endpoint You must pair the endpoint before it can be used with preferred machine login. Choose one of the following methods:
   • Using Auto-Pair Configuration File: If the endpoint is paired using an auto-pair config file through the Supervisor App, you must manually enable the Enable Only Preferred Machine Login setting from the Tenant Admin Portal.
   • Using Supervisor App (Pair as Supervisor): If the endpoint is paired using the Supervisor App (Pair as Supervisor option), the Enable Only Preferred Machine Login setting is automatically enabled in the Tenant Admin Portal.
   • Download and Pair from Tenant Admin Portal: If you download the endpoint config file from the Tenant Admin Portal and pair it using the Supervisor App, the Enable Only Preferred Machine Login setting is also automatically enabled in the Tenant Admin Portal.
     Note: After enabling the preferred machine login setting, click Save to apply the configuration. For detailed instructions, see How to enable Preferred Machine Users in Shared Credentials
2. Create the Shared Domain Credential
   • Go to Tenant Admin Portal > Users > Shared Credentials > Windows Password.
   • Select Create Password.
   • Select Windows Domain User as Password type.
   • Under Preferred Machine(s), select one or more Windows endpoints from the list.
   • Save the credential. For detailed instructions, see How to create shared credentials for Windows login
3. Assign the Credential
   • After Windows Shared Password is created, the created password can be assigned to users from the details page. For detailed instructions, see How to associate users with shared credentials OR
   • Under User detail page, assign the Windows password to the selected user. For detailed instructions, see How to assign shared credential to user
   • From the Endpoints section, assign the created shared credential to the desired endpoint. For detailed instructions, seeHow to assign shared credentials to an endpoint through the oloid platform

​

Set up a Preferred Machine while creating shared Windows credentials in the Supervisor App

1. Pair the Endpoint You must pair the endpoint before it can be used with preferred machine login. Choose one of the following methods:
   • Using Auto-Pair Configuration File: If the endpoint is paired using an auto-pair configuration file through the Supervisor App, you must manually enable the Enable Only Preferred Machine Login setting from the Tenant Admin Portal.
   • Using Supervisor App (Pair as Supervisor): If the endpoint is paired using the Supervisor App (Pair as Supervisor option), the Enable Only Preferred Machine Login setting is automatically enabled in the Tenant Admin Portal.
   • Download and Pair from Tenant Admin Portal: If you download the endpoint from the Tenant Admin Portal and pair it using the Supervisor App, the Enable Only Preferred Machine Login setting is also automatically enabled in the Tenant Admin Portal.
     Note: After enabling the preferred machine login setting, click Save to apply the configuration.
2. Create the Shared Domain Credential
   • Open the Supervisor App.
   • Go to Shared Credential > Create Shared Password.
   • Choose Domain Shared Credential.
   • Select the endpoint under Preferred Machine.
   • Save the credential. For detailed instructions, see How to create Shared Credentials using the Supervisor App
3. Assign the Credential
   • After Windows Shared Password is created, the created password can be assigned to users from the details page. For detailed instructions, see How to view and edit Shared Credential details in Supervisor App OR
   • Under User Management, assign the Windows password to the selected user. For detailed instructions, see Supervisor App: Assign Shared Credential