Chapter 3: Active Directory Management
Assigning tokens to users
51
5
If the Delete PIN message appears, click
Yes
to delete the PIN associated
with this token, or click
No
to leave the PIN assigned to the user from whom
this token is being disassociated.
Note: Deleting a token PIN gives that user the option to add a new PIN when
receiving the new token. If you do not delete the PIN from a user’s Properties,
that user will need to use the assigned PIN even when receiving a new token.
6
Click
OK
.
7
Open the Properties window for the user to whom you are reassigning the
token, assign the same serial number using the Wizard, or enter the token’s
serial number into the
Token serial number
field.
8
Click
OK
.
You have now created a new association between this user and the token
records, and may give the token to its new user.
Deleting token records from the database
There are situations when you will need to delete token records from the
database. If a token is lost, stolen, or broken, its token records are obsolete
since you will not be able to reassign the token to another user. You should
delete obsolete token records from your database. Deleting them provides
space to add new token records when your organization purchases additional
SafeWord tokens.
1
In ADUC, expand the
SafeWord
node in the left pane, and select the
Tokens
icon.
2
From the Token serial number
list on the right side of the window, select
one or more tokens to delete and right-click the selection, and select
Delete
.
If the token is already assigned to a user, the Token Assigned message
appears to confirm that you really want to delete the token record.
Important: If you delete tokens at this point, and then restore the database, all
token user associations will be lost.
Tip: Multiple token records can be selected and deleted simultaneously. You
can also highlight a token and use the
Delete
button on the toolbar to delete
token records.
3
Click
Yes
.
4
The token records are deleted from the database. If you want to unassign
the token without removing the records from the database, see
“Reassigning Hardware and Messaging tokens” on page 50.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
