Introduction
The Windows Login Endpoint Template in the Tenant Admin Portal allows Admins to create and manage configuration templates for Windows Login endpoints. It allows defining key settings such as authentication preferences, user access policies, proxy configurations, update schedules, and health alerts.
Prerequisite
You must have a Tenant Admin account.
Steps to create Windows Login endpoint template:
Log in to the Tenant Admin Portal.
On the homepage, select Endpoint from the left menu panel.
The Endpoints page is displayed.
Click Endpoint Templates from the top right.
The Endpoint Templates page is displayed.
Click Create Template.
The Create New Template pop-up box is displayed.
Do the following on the pop-up box:
Enter Template Name.
Select Passwordless as Application type from the dropdown list.
Select Windows Login as Endpoint Type from the dropdown list.
Click Create.
The Windows Login Endpoint Template is created successfully.
Steps to configure Windows Login endpoint Template
Click the preferred Endpoint template name to configure.
The Endpoint template details page is displayed.
Do the following:
Configure Details tab
Edit Template Name if required.
Enter Template Description. (Optional)
Enter Name Endpoint As. (Optional)
Note: Once the template is selected while pairing an endpoint on the device, the name provided in the Name Endpoint As field will be displayed for the endpoint.
Select Time Zone from the dropdown. (Optional)
Click Save.
Edit Configure tab
Go to configure tab and do the following:
Endpoint Settings
Turn on Enable Only Preferred Machine Login toggle to allow domain credentials to be used only in preferred machine to log in to windows system.
Turn on Allow any individual with Domain Credentials toggle to allow individuals to log in to the machine using domain credential.
Set User Cache Validity duration for which the user data will be saved on the machine as cache.
Turn on Show on-screen Keyboard toggle to show an on-screen keyboard during logging in for devices which do not have physical keyboard, like tablets.
Turn on Allow Individual Passkey Generation to allow users to generate individual Windows passkeys for themselves.
Turn on Allow Shared Passkey Generation toggle to allow Admins and Supervisors who are passkey owners to generate and assign shared Windows passkeys.
Turn on Allow Bulk - Individual Passkey Generation toggle to allow admins and supervisors to bulk-generate individual passkeys for the users they manage.
Turn on Allow Bulk - Shared Passkey Generation to allow admins and supervisors to bulk-generate and assign shared passkeys to users under their management.
Turn on Override Application Proxy Configuration toggle to prevent the endpoint from inheriting the application's proxy settings and disable proxy at the endpoint level.
Select Enable Proxy Configuration option to enable secure network communication through a proxy server.
Enter Proxy URL in the text field.
Enter Port in the text field.
Enter Username in the text field.
Enter Password in the text field.
Click Save.
Groups
Select Groups option from left menu panel > click Add Group.
The Add Group pop-up box is displayed.
Select Group(s) from the dropdown list.
Click Add.
Auto Update
Select Auto-update from the left menu panel and do one of the following:
Inherited from Application (Default): This option allows the endpoint to inherit the auto-update configuration defined at the application level.
OR
Disable Updates for this endpoint: This option disables auto-updates for this specific endpoint.
OR
Custom Schedule: This option allows you to configure a dedicated auto-update schedule for a specific endpoint. This option provides control versioning, custom source, and timing independent of the application-level settings.
Note: This option overrides the default or inherited auto-update behavior for the selected endpoint.
Custom Schedule
For Custom Schedule do one the following:
Latest Version: Automatically applies the latest available update version from the default application source.
OR
Select Version: Manually select a specific update version from the available dropdown list.
OR
Custom Source: Allows selection of a custom update source, which may not be available at the application level.
Start Time (Required): Defines when the update window begins. Auto-updates will only be attempted after this time.
End Time (Required): Defines when the update window ends. Auto-updates will stop attempting after this time even if incomplete.
Retry Frequency: Specifies how many times the system should retry the update within the defined time window if an update attempt fails.
Default: 5 times
Retry Interval: Specifies the minimum time interval (in minutes) between retry attempts.
Default: 30 minutes
Note: The endpoint will attempt to update only within the defined time window. If an update fails, the retry logic is applied based on the frequency and interval specified.
Click Save.
Health Setup
Select Health Setup from the left menu panel and do the following:
Turn on Health Alerts toggle.
Add recipient email ID.
Note: You can add multiple email ID's separated by comma.
Set the alert email frequency.
Click Save.
Enter Server Name.
Enter Server URL.
Click Add.
Configure Windows Alert tab
You can configure the Windows Alert tab by following the onscreen instructions.
For more details refer How to configure Windows Alert for presence detection.
Keywords
| Windows Login Endpoint Template | Configure Windows Login Template | Create Endpoint Template Tenant Admin Portal | Windows Login configuration guide