To support IT/OT environments, you can configure the Nymi Enterprise Server(NES) permissions. NES permissions restrict NES to perform Nymi Band enrollments only, Nymi Band registrations only, or both Nymi Band enrollment and registrations.

1. Log in to the NES Administrator Console with an account that is an NES Administrator.
2. From the navigation bar, select Policies.
   The Policies page appears with a table that displays a list of existing group and individual policies.
3. In the Policies window, select the active policy.
4. From the Enrollment / Registration Permissions list, select one of the following options:
   • Enrollment only—Select this option to assign NES as the server on which users enroll their Nymi Bands.
   • Registration only—Select this option to assign NES as the server on which users register their Nymi Bands.
     Note: When you select Registration only, you cannot change Nymi Band-related policy settings and they appear greyed out in the Edit Group window.
   • Enrollment and Registration—Select this option when user accounts are only in the same domain as NES. For example, when there is one instance of an IT domain on which all sites connect.
5. Click Save.
   The following figure provides an example of the Group policies page when you select Registration only.

   Figure 1. Registration Only Group Policy Example