¶ Offline Capability
As with regular logins, you can log on to your computer when it is not connected to its domain, for example when it is in a remote location.
SystoLOCK supports three offline login scenarios, some require SystoLOCK Companion to be used, others do not. If SystoLOCK Companion is used and the worksation has Bluetooth capabilities, a push-like experience with zero typing can be used.
All scenraios assume the user has at least once sucessfully legged in into the workstation in question while being online, i.e. being fully connected to the domain. For Offline Logins involving SystoLOCK Companion, at least one successful oline login via QR code or push is required.
¶ Comparison of Offline Login Scenarios
| Feature | Regular Offline | Autonomous Offline | Legacy Offline |
|---|---|---|---|
| Companion App required | Yes | Yes | No |
| Companion App must be online | Yes | No | N/A |
| Bluetooth login supported | Yes | Yes | N/A |
| PIN/OTP entry on login screen | No | No | Yes |
| Internet required on workstation | No | No | Yes |
| SystoLOCK Endpoints published to internet | Yes | No | Yes |
¶ Regular Offline Login
This feature requires SystoLOCK Companion to be involved
In order to configure this feature, it must be enabled on each computer that can go offline. By default, this capability is not enabled.
You can enable offline login by checking the box on the computer's properties page in the SystoLOCK Management Console:
Alternatively, you can add the computers in question to the special AD groups SystoLock Offline Computers, or use PowerShell to achieve the same results.
¶ Autonomous Offline Login
This feature requires SystoLOCK Companion to be involved
If you want the computer to support Offline Login without SystoLOCK Companion being online, also tick the Allow Autonomous Login checkbox on the computer's properties page.
Alternatively, you can add the computers in question to the special AD group SystoLock Autonomous Offline Computers, or use PowerShell to achieve the same results.
¶ Legacy Offline Login
Legacy Offline Login does not require the SystoLOCK Companion app. Instead, the user enters their PIN/OTP directly on the Windows login screen. For this to work, the SystoLOCK Endpoints must be published to the internet and accessible by the workstations being logged in.
If you want the computer to support Legacy Offline Login, tick the Allow Legacy Login checkbox on the computer's properties page.
Alternatively, you can add the computers in question to the special AD group SystoLock Legacy Offline Computers, or use PowerShell to achieve the same results.
¶ Enrolment
Once the target computers have enrolled with the Server(s), their offline enrolment status will change from Enabled to Ready. From this point on, you can login to these computers while they are offline.