Hi Yostie___, Currently the method to unlock a user would be to leverage the command of "Remove Users" within the Dell Security Management Server for that endpoint. in the image below, you can see the option highlighted (it's wayyyyy at the bottom of a specific endpoint's "Details & Actions" options under "PBA Device Control / Cloud Device Control" (PBA is an acronym for Pre-Boot Authentication environment) , or formerly "SED Device Control" in older servers. once you have clicked this command, if you noticed the green highlight shows that this command has been prepped. As the endpoint in question enters the PBA, if it can reach the Dell Security Management Server, this command will be picked up, and the "Received" and "State" column will populate. by Default, the Pre-Boot Authentication environment for Dell Encryption will only collect commands initially during the boot of the PBA. There is an endpoint-based policy (can be set at the "Enterprise", "Endpoint Group", and "Endpoint" levels) under "Authentication" -> "Pre-Boot Authentication" within the "Show advanced settings" section called "Enable Client Check For PBA Commands", which once consumed by the endpoint causes the PBA to check for commands every 5 minutes as it sits within the PBA. [IMAGE]   I hope that helps get you moving forward!
Hi, We are testing using DDS for management of SEDs for a system operating in a Workgroup environment.  At the moment 20 failed logons is the maximum that can be set before a user is locked out within the PBA.  My issue is that there seems to be no way to unlock that user in the PBA through the DDS server.  The unlock command sent from the DDS server, seems to only work for when the whole SED is locked out, and not a individual user. The only work around I have at the moment is to send a command to bypass the PBA, then send a command to remove all users from the PBA, then let the local accounts sync again with the PBA on next logon. Any help would be greatly appreciated.
Unable to unlock, locked cached PBA user