> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Login - Set up Preferred Machine Configuration for Windows Login

> The Preferred Machines setting allows you to specify which Windows devices can use a domain shared credential. When creating a domain shared credential in the...

## Introduction

The Preferred Machines setting allows you to specify which Windows devices can use a domain shared credential. When creating a domain shared credential in the Tenant Admin Portal, you can select one or more preferred machines to restrict usage.

This enhances security by ensuring the credential can only be used on designated devices. The Windows Login app supports this feature, enabling login only on assigned Windows systems.

You can enable preferred machine login in the following ways:

* When creating shared Windows credentials in the **Tenant Admin Portal**
* When creating shared Windows credentials in the **Supervisor App**

### Set Up a Preferred Machine in the Tenant Admin Portal

1. **Pair the Endpoint**
   You must pair the endpoint before it can be used with preferred machine login. Choose one of the following methods:
   * **Using Auto-Pair Configuration File**:
     If the endpoint is paired using an auto-pair config file through the **Supervisor App**, you must manually enable the **Enable Only Preferred Machine Login** setting from the **Tenant Admin Portal**.
   * **Using Supervisor App (Pair as Supervisor)**:
     If the endpoint is paired using the **Supervisor App** (Pair as Supervisor option), the **Enable Only Preferred Machine Login** setting is automatically enabled in the **Tenant Admin Portal**.
   * **Download and Pair from Tenant Admin Portal**:
     If you download the endpoint config file from the **Tenant Admin Portal** and pair it using the **Supervisor App**, the **Enable Only Preferred Machine Login** setting is also automatically enabled in the **Tenant Admin Portal**.

     > [!NOTE]
     >
     > **Note:** After enabling the preferred machine login setting, click **Save** to apply the configuration. For detailed instructions, see [How to enable Preferred Machine Users in Shared Credentials](https://oloid.help/en/articles/8906511-how-to-enable-preferred-machine-users-in-shared-credentials)

2. **Create the Shared Domain Credential**
   * Go to **Tenant Admin Portal** > **Users** > **Shared Credentials** > **Windows Password**.
   * Select **Create Password**.
   * Select **Windows Domain User** as Password type.
   * Under **Preferred Machine(s)**, select one or more Windows endpoints from the list.
   * **Save** the credential.
     For detailed instructions, see [How to create shared credentials for Windows login](https://oloid.help/en/articles/8472794-how-to-create-shared-credentials-for-windows-login#h_cd8b8fcb5e)

3. **Assign the Credential**
   * After Windows Shared Password is created, the created password can be assigned to users from the details page.
     For detailed instructions, see [How to associate users with shared credentials](https://oloid.help/en/articles/8543917-how-to-associate-users-with-shared-credentials)
     OR
   * Under User detail page, assign the Windows password to the selected user.
     For detailed instructions, see [How to assign shared credential to user](https://oloid.help/en/articles/8504427-how-to-assign-shared-credential-to-user)
   * From the **Endpoints** section, assign the created shared credential to the desired endpoint. For detailed instructions, see[How to assign shared credentials to an endpoint through the oloid platform](https://oloid.help/en/articles/8717165-how-to-assign-shared-credentials-to-an-endpoint-through-the-oloid-platform)

### Set up a Preferred Machine while creating shared Windows credentials in the Supervisor App

1. **Pair the Endpoint**
   You must pair the endpoint before it can be used with preferred machine login. Choose one of the following methods:
   * **Using Auto-Pair Configuration File**:
     If the endpoint is paired using an auto-pair configuration file through the **Supervisor App**, you must manually enable the **Enable Only Preferred Machine Login** setting from the **Tenant Admin Portal**.
   * **Using Supervisor App (Pair as Supervisor)**:
     If the endpoint is paired using the **Supervisor App** (Pair as Supervisor option), the **Enable Only Preferred Machine Login** setting is automatically enabled in the **Tenant Admin Portal**.
   * **Download and Pair from Tenant Admin Portal**:
     If you download the endpoint from the **Tenant Admin Portal** and pair it using the **Supervisor App**, the **Enable Only Preferred Machine Login** setting is also automatically enabled in the **Tenant Admin Portal**.

     > [!NOTE]
     >
     > **Note:** After enabling the preferred machine login setting, click **Save** to apply the configuration.

2. **Create the Shared Domain Credential**
   * Open the **Supervisor App**.
   * Go to **Shared Credential** > **Create Shared Password**.
   * Choose **Domain Shared Credential**.
   * Select the endpoint under **Preferred Machine**.
   * Save the credential.
     For detailed instructions, see [How to create Shared Credentials using the Supervisor App](https://oloid.help/en/articles/9045726-how-to-create-shared-credentials-using-the-supervisor-app#h_ef767a6a50)

3. **Assign the Credential**
   * After Windows Shared Password is created, the created password can be assigned to users from the details page.
     For detailed instructions, see [How to view and edit Shared Credential details in Supervisor App](https://oloid.help/en/articles/9196014-how-to-view-and-edit-shared-credential-details-in-supervisor-app#h_34a2cf7044)
     OR
   * Under **User Management**, assign the Windows password to the selected user. For detailed instructions, see [Supervisor App: Assign Shared Credential](https://oloid.help/en/articles/9207046-supervisor-app-assign-shared-credential)