4.2 Setting Properties on a Single Workstation after Installation

802.1X Authentication: Enables or disables the use of 802.1X authentication during login. For more information, see Section 8.9, Configuring 802.1X Authentication.

Advanced Authentication: Enables or disables the use of Advanced Authentication when performing eDirectory login.

Advanced Button: Specifies whether the Advanced button on the Login dialog box is enabled. This button leads to various tabs that help you to specify advanced login parameters.

Allow Dots in Network Username: If this setting is On, any periods entered in the network user name are treated as part of the name, rather than as eDirectory context delimiters. The user cannot enter the context as part of the username, but must enter it separately. This makes it possible for the user to log in with a user name such as John.Smith to both OES and Windows.

Allow Roaming User Profile Paths to non-Windows servers: Enables or disables the Windows Do not check for user ownership of Roaming Profile Folders policy. By default, Windows attempts to enhance profile security by checking the permissions on a remote roaming profile directory. But the check is performed in a Windows-specific manner, and this fails when the roaming profile path is to an Open Enterprise Server (OES) volume or other non-Windows-compatible resource. Setting this parameter to On allows roaming profile paths to OES volumes and other non-Windows server by disabling this Windows-specific security check. Note this policy is defined and controlled by Windows and not the Client for Open Enterprise Server, so group policies and other Windows management tools may also set or change this policy (CompatibleRUPSecurity).

Clear Connections: Specifies whether the Clear Connections check box appears in the Login dialog box. The check box allows you to clear all previous connections when you create a new connection to the network.

Client Logon: Enables the Client Logon option to provide Open Enterprise Server logon options when logging into Windows on this computer. When it is set to On, Client for Open Enterprise Server Credential Provider provides the logon experience.

Computer Only Logon: Specifies whether the Computer Only Logon option is shown when the Network Logon option is presented by the Welcome screen. The Computer Only Logon option is used to log in to the Windows workstation without logging in to the Open Enterprise Server network.

Computer Only Logon after failed Network Logon: Determines whether or not Computer Only Logon is offered when a Network Logon attempt fails. Automatic means a Computer Only Logon will be offered unless the administrator has hidden the ‘Computer Only Logon’ option. Always and Never indicate how the Computer Only Logon should be offered regardless of whether the Computer Only Logon option is hidden.

Computer Only Logon Default: Determines whether the Client will default to the Computer Only Logon mode. Automatic means the Client will remember when Computer Only Logon was the mode previously selected, and will continue defaulting to Computer Only Logon until Logon mode is interactively selected again. Always means the Computer Only Logon will always be the default mode presented, even if Network Logon was the previous mode used. Never means that Logon will always be the default mode presented, even if Computer Only Logon was the previous mode used.

Context Box: Specifies whether the Context field is displayed on the Login dialog box.

Context Browse Button: Specifies whether the Contexts browse button is displayed in the Login dialog box.

Default bitmap for Client Login dialog: Specifies the path and filename for a bitmap that will be used on the Client Login dialog in place of the default Client bitmap. Custom bitmap sizes can be used, but will affect the overall size of the Client Login dialog.

Default bitmap for Welcome screen tiles: Specifies the path and filename for a bitmap that will be used on the Welcome screen tiles whenever a user-specific bitmap is not yet known. Note that Windows imposes the size limit on any bitmap used for a Welcome screen tile, and will stretch / deform the bitmap provided to conform to that limit as needed.

Enable Sigle Sign-On: Enables use of NMAS-based Single Sign-On for automatically providing the Windows account password during an otherwise non-password-based NetIQ eDirectory login using NMAS. This setting is only available on machines where the installed version of the NMAS client supports Single Sign-On capabilities. For more details on SSO, see Section 8.12, Setting Up Single Sign-On (SSO).

Force Early Password Expiration Period: Specifies the number of days by which the password expiration mechanism is preempted, before the actual eDirectory password expiration occurs. For example, if the eDirectory password expiration is set to occur in 5 days, and "Force Early Password Expiration Period" is set to 5, Client will preempt the password expiration process 5 days in advance.

Force Grace Login Password Change: This setting forces users to change their passwords at the last grace login. With this setting activated, when the password expires, the password must be changed in order to successfully log in.

Forgotten Password Prompt: Specifies whether the Did you forget your password? prompt is displayed in the Login dialog box. This prompt provides an option to recover from a forgotten password based on an administrator-defined password policy. See Section 6.3, Using Forgotten Password Self-Service for more information.

Last Logged On User: Specifies whether the last logged on user is displayed along with the Network Logon when logging on to the computer. Note this does not override the fact that the last logged on user is not displayed on Windows Server 2012 when Terminal Services are installed.

Last Logged On User Default User: Forces the "Last Logged On User" presented by Client to always be the user that is specified, regardless of which user has logged in last. If no value is specified, the default behavior is to specify the previously logged in user. The default value of this parameter is blank.

Last Logged On User Default Profile: Indicates which Client Login Profile should be used in conjunction with the "Last Logged On User Default User”. If no value is specified, the default behavior is to use the Client Login Profile that was previously selected for the user, if more than one Client Login Profile is available.

Login Profile List: Specifies whether the Login Profiles drop-down list on the Client Login dialog box is enabled.

Login Windows password synchronization option default: This is the default state of the Change your Windows password to match your Network password functionality that occurs during login to both eDirectory and Windows when the password are not already synchronized. This setting controls the default synchronization behavior that will occur, regardless of whether the "Show login Windows password synchronization option" is allow the checkbox to be shown to the user or not.

Login With Third-Party Credential Provider: This setting controls whether an OES login will still be attempted after the Windows logon, in cases where the Client's credential provider was not used during the Windows logon.

Make Script Tab Read Only During Login: Disables all the fields in the Script tab during login to prevent users from overriding any of the Script tab settings.

NMAS Authentication: If this setting is On, Novell Modular Authentication Services (NMAS) is enabled during login. NMAS authentication adds additional security to the network. However, if your network does not use NMAS, login might take additional time and you might want to disable NMAS authentication by changing this setting to Off.

Password Expiry Warning: Enables or disables the presentation of password expiration alerts before the actual password expiration occurs. When disabled, no alerts are presented until the password expiration occurs, and the user must change their password before exhausting the available grace logins. This is the normal eDirectory password expiration behavior.

Password Expiry Warning Period: Specifies the number of days before the password expiration that the user starts receiving password expiration alerts. If the number of days is set to "0", Client will default to using the number of days specified by the Microsoft-defined "Prompt user to change password before expiration" policy, such that both Windows and Client will begin prompting at the same number of days before expiration. This parameter is set to 0 by default and has a valid range of 0 to 120 days.

Prompt for Network login during Windows AutoAdminLogon: If the Client Login parameter is enabled, and Windows is configured to perform a Windows-only AutoAdminLogon as a specific user account, enabling this setting causes a Client login to interactively prompt for eDirectory login information to be used in addition to the AutoAdminLogon-defined Windows login.

Server Connection Retries: This parameter controls the number of times that Login tries to establish a connection to a server. If Login tries to connect to a server and fails, it waits 1 second and then tries to connect again. It continues to do this until the number of retries has been reached. It is recommended that this setting be no higher than 20.

Show login Windows password synchronization option: Specifies whether the Change your Windows password to match your Network password option is shown when logging in to both eDirectory and Windows when the passwords are not already synchronized.

Show Suppress Single Sign-On checkbox: Specifies whether the "Suppress Single Sign-On for this login" check box appears in the "Windows" tab of the Show Advanced Options dialog. This setting to optionally show the suppression check box is only available when the "Enable Single Sign-On" setting is enabled. Selecting this check box during a logon attempt allows you to disable the use of Single Sign-On for the current login attempt only; the check box will automatically reset back to the de-selected state for the next login attempt. For more details on SSO, see Section 8.12, Setting Up Single Sign-On (SSO) .

Suppress NMAS ID Plugin support: When enabled, the Client will suppress the features provided by an NMAS Identity Plug-In (ID Plug-In), even though the ID Plug-In is registered and configured for use with NMAS. This option is intended for use by an administrator who needs to temporarily suppress the ID Plug-In related behaviors in the course of setup or troubleshooting. ID Plug-Ins provide various NMAS method-specific behaviors such as certificate lookup in eDirectory for certificates found on a smart card or token device, automatic entry of the Novell eDirectory identity in the Client login interface, user interface overrides such as hiding the 'Username' and 'Password' fields, or other behaviors which are specific to the NMAS method or hardware device being used.

Suppress NMAS Support for Computer Only Logon: When enabled, the Client will suppress the features related to performing Computer Only Logon using NMAS, even though the required NMAS components and configuration may be available on the local machine. This option is intended for use by an administrator who needs to temporarily suppress this NMAS behavior in the course of setup or troubleshooting. This setting will not be available on machines where the required NMAS components and configuration are not present. For more information, see Section 8.13, Setting Up NMAS Based Windows Logon.

Tree Box: Specifies whether the Tree field is displayed on the Login dialog box.

Tree Browse Button: Specifies whether the Trees browse button is displayed on the Login dialog box.

Unlock Workstation Credentials: Specifies the types of credentials that are accepted during workstation unlock, terminal session reconnect, and switch user operations. The Automatic option allows the user to provide either eDirectory or Windows credentials. The eDirectory if available option defines that eDirectory credentials are required if the logged-on user session is logged into eDirectory. The Windows only option defines that Windows credentials must always be used. The eDirectory only option defines that only eDirectory credentials are permitted, and unlock will not be allowed to use any other credential type.

Use NMAS for Windows Logon Default: Determines the initial state of the 'Use NMAS for Windows Logon' check box. 'Automatic' means the Client will select this check box by default if the NMAS has been configured to enforce use of NMAS for Windows logons. If NESCM is not configured to be enforced, the behavior of 'Automatic' will be the same as 'Last Used'. 'Last Used' means the Client will remember the previously used state of the 'Use NMAS for Windows Logon' check box. 'Never' means the 'Use NMAS for Windows Logon' check box will be initially de-selected by default. 'Always' means the 'Use NMAS for Windows Logon' check box will be initially selected by default. For more information, see Section 8.13, Setting Up NMAS Based Windows Logon.

Variables Button: Specifies whether the Variables button in the Login dialog box is enabled. The button allows you to enter login script variables to be used when the user logs in.

Windows Password Synchronization: With this feature enabled, the user can change the Network password, and the Windows password is set to the same value. Turning it off leaves the passwords separate unless they are synchronized through some other means (for example, Novell Identity Manager).

Enable Automatic Update Agent: Select this check box to enable the automatic update agent, then use the Update Agent launch interval option to set the interval (in days) that the Client Update Agent will check for a new version of the Client for Open Enterprise Server.

Update Source(s): Select the Update Location check box to enable the Client Update Agent to look for a new version of the Client in the designated update location.

Latest Client Properties File: Displays the name, date, and time of the most recent Client properties file used to apply Client settings on this workstation. For more information, see Section 2.2.1, Creating the Client Properties File.

Use Administrator Privileges: If this option is selected, the Update Agent uses the Client Update Agent service to install the Client. The service runs with elevated privileges required for a non-administrator to install the Client. If this setting is not selected, the user must be able to elevate to an administrator user to complete the Client installation.

Scope List: A list of scope names to be reported to SLP applications on a workstation. Multiple scope names are allowed. The list order reflects the preference order. Scopes can also be configured via DHCP or discovered dynamically from Directory Agents.

Directory Agent List: A list of SLP Directory Agent addresses. Multiple Directory Agent addresses are allowed. Each address is a fully qualified domain name (DNS), or a dotted decimal IP address. Directory Agents can also be configured via DHCP, or discovered dynamically.

Auto Reconnect: Enables or disables Client auto reconnect.

Auto Reconnect Interval: Specifies the delay in seconds between Client reconnect attempts.

Bad Address Cache: Enables or disables use of the Bad Address Cache. You can set this value to “ON” or “OFF” to enable or disable Bad Address Cache. This parameter is set to “ON” by default.

Bad Address Cache Timeout: Determines the number of seconds a Bad Address will remain in the Bad Address Cache. If the Client is unable to establish a TCP-level connection to a particular IP address, it stores that address in the Bad Address Cache for the number of seconds specified in this parameter. The timeout can be set from 30 to 21600 seconds and the default value is set to 300 seconds.

Cache Page Size: Specifies the size of a cache page in kilobytes. This setting multiplied by the Cache Pages is the amount of physical memory consumed by the cache. It is the largest read-ahead or write-behind that will be performed.

Cache Pages: Specifies the number of available cache pages. This setting multiplied by the Cache Page Size is the amount of physical memory consumed by the cache.

Cipher Strength: Specifies the strength of cipher suites that is used in establishing an encrypted connection between the server and the client. This setting is related to NCP encryption feature and it determines the strength of the algorithm used for encryption and decryption between the server and the client. You can set this value to “Low”, “Medium”, or “High”. This parameter is set to “Medium” by default.

File Caching: Controls whether the Client caches files locally or not. Setting this value to Read only caches the data read by the applications from the network and the data written by the applications is sent to the network immediately. Setting this value to Read and Write returns the control to the application during data write and the data is written to the network in the background.

File Caching Operational Threshold: Establishes the threshold, in kilobytes, for which application read and write requests should be cached. Application read and write requests which are smaller than this value will be cached. Typically it is more efficient to send applications that read or write a large amount of data as a single request directly to the network, rather than utilizing the cache. Recommended and default value is 128KB.

File Commit: Controls whether buffers flushed by an application are committed to disk on the server. Setting this value to On ensures data integrity at the expense of performance by ensuring that file buffers are committed to disk on the server when an application flushes its file buffers.

First Network Drive: Defines which Windows drive letter the Client will start with in response to eDirectory login script commands such as “MAP *1” and “MAP NEXT”, which are expecting to utilize drive letters relative to a First Network Drive setting which may be unique to each machine where the eDirectory login script executes.

Lazy Close: Delays the file close on the network, allowing the file to be reopened without accessing the network. This parameter is turned “OFF” by default.

Lazy Close Directory Timeout: Determines the time, in milliseconds, that Lazy Close will delay before closing a directory or volume handle.This parameter is set by default to 2000 milliseconds and has a valid range of 100-15000 milliseconds.

Lazy Close File Timeout: Determines the time, in milliseconds, that Lazy Close will delay before closing a file handle.This parameter is set by default to 500 milliseconds and has a valid range of 100-15000 milliseconds.

Maximum Delayed Writes: Controls the maximum amount of data, in megabytes, that will be allowed to queue for background writing when File Caching parameter is set to Read and Write. It is recommended to use a smaller value because setting larger values may impact available Windows kernel mode memory. Default value is set as 4MB.

NCP Encryption: Determines the encryption capabilities between the server and the client. If this parameter is set to “Encryption preferred” and connected OES server supports encryption, then the Client establishes an encrypted connection with the OES server for all communications. If this parameter is set to “Non-encryption preferred”, then the Client establishes a non-encrypted connection with the OES server for all its file communications unless the OES Server enforces encryption to all connected clients.

Receive Broadcast Messages: Tells the client which broadcast message, if any, to receive. You can choose one of the following settings: All (receive all broadcast messages), Server Only (receives broadcast messages sent by the server only), or None (do not receive any broadcast messages).

Server Time Zone Configuration Cache Timeout: Determines the time interval (in minutes) for which Client will cache the server time zone configuration for an NCP connection. After this time interval is over, Client queries the server again to determine the current time zone configuration. This refresh of the server's time zone configuration helps the Client workstation respond to Daylight Savings Time events or other time zone configuration changes that occur on the server. This parameter is set by default to 60 minutes and has a valid range of 1 to 720 minutes.

Signature Level: Determines the level of enhanced security support. Enhanced security includes the use of a message digest algorithm and a per connection/per request session state. The values are as follows: 0 = disabled, 1 = Enabled but not preferred, 2 = Preferred, 3 = Required. Setting the value of this parameter to 2 or 3 increases security but decreases performance.

SLP Broadcast Only: Enables or disables a broadcast only network for this SLP agent. If this option is set to On, the SLP agent must send only broadcast messages (in other words, it forces broadcasts to be used instead of multicasts). If this option is set to Off, the SLP agent can send multicast messages.

SLP Maximum Results: Specifies the maximum number of results to accumulate and return for a synchronous request before the timeout, or the maximum number of results to return through a callback if the request results are reported asynchronously.

UNC Path Filter: Enables or disables the UNC Path Filter. Filters requests for UNC path resolution sent to the Client for Microsoft Networks (Microsoft redirector). When enabled, UNC path queries sent to the Microsoft redirector will first be filtered by the Client to determine if the server name is known to be a OES resource. If it is determined to be a OES resource, the UNC path request will not be allowed to proceed to the Microsoft redirector. This can help avoid unnecessary delays caused by repeated failing attempts to access the OES resources as though it might be a Windows server.

Change Password: Enables or disables the ability of users to change their passwords. The Change Password button is found in the Client Password Administration dialog box. See Enable Password Administration for more information on this dialog box.

Display DFS Junction Information Page: Display or hide the DFS Junction Information tab. The DFS Junction Information tab is found by selecting Properties from the context menu of a DFS Junction on a OES server.

Display Directory Map Object Page: Display or hide the Directory Map Object page. The Directory Map Object page is accessed by selecting Properties from the context menu of the selected Directory Map Object icon in the Network folder.

Display OES Information Page: Display or hide the OES Information tab. The OES Information tab is found by selecting Properties from the context menu of a volume, directory, or file on a OES server.

Display OES Rights Page: Display or hide the OES Rights tab. The OES Rights tab is found by selecting Properties from the context menu of a volume, directory, or file on a OES server.

Display OES Volume Information Page: Display or hide the OES Volume Information tab. The OES Volume Information tab is found by selecting Properties from the context menu of a volume.

Display OES Volume Statistics Page: Display or hide the OES Volume Statistics tab. The OES Volume Statistics tab is found by selecting Properties from the context menu of a volume.

Enable Authenticate to Server: Enables or disables authenticating to a server. The Authenticate menu item is displayed in the context menu of a server.

Enable Authenticate to Tree: Enables or disables authentication to a tree. The Authenticate menu item is displayed in the context menu of a tree.

Enable Browse To Dialog: Enables or disables the Browse To dialog box. This menu item is displayed in the context menu of the Client Tray icon.

Enable Challenge/Response Administration: Enables or disables the Challenge/Response Administration item in the User Administration menu. For more information, see Configuring Challenge/Response Settings.

Enable Change Context Dialog: Enables or disables the Change Context dialog box. This menu item is found in the context menu of the selected container in the Network folder.

Enable Group Membership Dialog: Enables or disables the Group Membership item in the User Administration menu. See Configuring Your User Account in the Client for Open Enterprise Server User Guide for more information on this menu.

Enable Inherited Rights Dialog: Enables or disables the Inherited Rights dialog box. This dialog box can be reached from a menu item in the context menu of a volume or directory or under the OES Utilities menu item in the Client Application Tray menu.

Enable Login Account Information: Enables or disables the Login Account Information item in the User Administration menu. See Configuring Your User Account in the Client for Open Enterprise Server User Guide for more information on this menu.

Enable Login Dialog: Enables or disables the Login dialog box. This menu item is displayed in the context menu of the Client Tray icon and in the context menu of the Network folder.

Enable Login to Server: Enables or disables logging in to a server. The Login to Server menu item is displayed in the context menu of the selected server.

Enable Logout of Server: Enables or disables logging out of a server. The Logout menu item is displayed in the context menu of a server. Subsequently, the Detach button when a server is selected in OES Connections is also enabled or disabled according to this parameter.

Enable Logout of Tree: Enables or disables logging out of a tree. The Logout menu item is displayed in the context menu of a tree. Subsequently, the Detach button when a tree is selected in OES Connections is also enabled or disabled according to this parameter.

Enable Map Dialog: Enables or disables the Network Drive Mapping dialog box.

Enable Mapped Drive Disconnect Dialog: Enables or disables the Disconnect dialog box.

Enable Modify Container Script: Enables or disables the Modify Container Script menu item. This item is displayed in the context menu of the selected container.

Enable NDS Mailing Information: Enables or disables the Mailing Information item in the User Administration menu. See Configuring Your User Account in the Client for Open Enterprise Server User Guide for more information on this menu.

Enable NDS Personal Information: Enables or disables the Personal Information item in the User Administration menu. See Configuring Your User Account in the Client for Open Enterprise Server User Guide for more information on this menu.

Enable NDS Work Information: Enables or disables the Work Information item in the User Administration menu. See Configuring Your User Account in the Client for Open Enterprise Server User Guide for more information on this menu.

Enable Client Help: Enable or disables the Client help. This menu item is displayed in the context menu of the Client Tray icon.

Enable Client Properties: Enables or disables viewing the Client property pages. This menu item is displayed in the context menu of the Client Tray icon.

Enable OES Connections Dialog: Enables or disables the OES Connections dialog box. This menu item is displayed in the context menu of the Client Tray icon and in the context menu of the Network folder.

Enable Novell Copy Dialog: Enables or disables the Novell File Copy dialog box. This menu item is displayed in the context menu of the selected directory or file.

Enable OES Utilities: Enables or disables the OES Utilities. This menu item is displayed in the context menu of the Client Tray icon.

Enable Object Properties Dialog: Enables or disables the Object Properties dialog box. This menu item is displayed in the OES Utilities menu. See Using OES Utilities in the Client for Open Enterprise Server User Guide for more information on this menu.

Enable Password Administration: Enables or disables password administration.

Enable Purge Dialog: Enables or disables the Purge Files dialog box. This menu item is displayed in the context menu of the selected volume or directory on a server.

Enable Salvage Dialog: Enables or disables the Salvage dialog box. This menu item is displayed in the context menu of the selected volume or directory on a server.

Enable Send Message: Specifies whether the Send Message function is enabled. This function is accessed from the Context menu for the selected server in Network Neighborhood.

Enable Send Message to Server Dialog: Enable/disable the send message to server dialog. This menu item is displayed within the server context menu item Send Message. See the Enable Send Message Dialog setting for further information on this menu.

Enable Send Message to User Dialog: Enable/disable the send message to user dialog. This menu item is displayed within the server context menu item Send Message. See the Enable Send Message Dialog setting for further information on this menu.

Enable Systray Config Dialog: Enables or disables the Configure System Tray dialog box. This menu item (Configure System Tray Icon) is displayed on the Client Application Tray menu in the notification area of the taskbar.

Enable Trustee Rights Dialog: Enables or disables the Trustee Rights dialog box. This dialog box can be reached from a menu item in the context menu of a volume or directory or under the OES Utilities submenu on the Client Tray icon.

Enable Update Client: Enables or disables the Update Client menu item. This menu item is displayed in the context menu of the Client Tray icon.

Filter User List: Enables or disables showing only users objects in the Send Message dialog box.

Show Current Connections: Shows or hides the current connections displayed in the OES Resource Browser and in the Network folder.

Show Edit Login Script Item: Specifies whether the Edit Login Script item is available in the User Administration menu. See Configuring Your User Account in the Client for Open Enterprise Server User Guide for more information on this menu.

Show Client System Tray Icon: If this parameter is enabled, the Client Tray icon appears in the notification area of the taskbar, located in the bottom right portion of the Windows screen. Right-click the Client Tray icon to select from a list of Client options.

Show User Administration Menu: Enables or disables the menu item for user administration. This menu item is displayed in the context menu of the selected server or tree in the Network folder.

Enable LDAP Treeless Login: To enable treeless login, select this check box. Treeless login makes it possible to log in to the network without specifying a tree.

Enable LDAP Contextless Login: To enable LDAP contextless login, select this check box. You must have LDAP Services for eDirectory installed on your corporate server hosting the corporate tree to take advantage of LDAP contextless login.

Enable LDAP Context Search Scope: Use this option to limit the search scope to a specific context or to a specific context and subtree.

Trees: Lists the eDirectory trees running LDAP Services that will be searched during login.

Servers: Lists the servers associated with the tree running LDAP Services.

Settings: Opens the LDAP Contextless Login Parameters dialog box. Select the parameter you want, then use the Settings option to configure the parameter. For most parameters, this consists of simply turning it On or Off. Some parameters give you other configuration options. A short description of each parameter is available in the Description field when you select the parameter.