To prepare the SAP front end for SSO when using Microsoft Kerberos, you choose between the following approaches:
You configure each machine where the SAP front end is running.
You define a Group Policy for a Windows domain. This policy causes the wizard for configuring SSO to be started automatically in the background the next time any member of the domain logs on to an SAP front end.
These approaches are described below.
Configuring SAP Front Ends Individually
The wizard SAP Single Sign-On Support for Windows 2000 automatically starts and configures the SAP front end for SSO.
Configuring SAP Front Ends Automatically
The dialog box Active Directory Users and Computers appears.
The dialog box <Domain_Name> Properties appears.
The dialog box for creating a new policy object appears.
The Deploy Software dialog box appears.
The Open dialog box appears.
You have now created a new Group Policy.
The next time any user logs on to the domain with the SAP front end, the wizard SAP Single Sign-On Support for Windows automatically starts and configures the front end for SSO.