This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Challenge Response

Hello we are noticing on Sophos Safeguard Easy 6.0 something that we do not think is right. When doing a challenge response the user is only logged in past Sophos. They are then stopped at Windows to log in. Since the user can not remember their password they are not able to log into Windows. Also since they are not being asked to change their password they are not able to go any further. It seems like we are missing a setting either in Windows or Sophos just not sure what it might be. Any help would be appreciated.

:28985


This thread was automatically locked due to age.
Parents
  • Hi ia-hawk-fan07,

    well in case that an offline Windows User has forgotten his password, there is also no other possibility to get him logged on to the Operating System but providing him with another Windows account - maybe that is the reason for the "hint" in the recovery online help ... but could you please tell me exactly where I can find the section with the Admin login account hand out? I can't find it in the help file (SafeGuard Easy 6.0 Policy Editor).

    With SafeGuard Easy you have the possibility to instruct your users to enable Local Self Help and get around the forgotten password issue (as mentioned above they are able to see their forgotten password after answering the questions). They just need to answer the questions.

    With SafeGuard Enterprise, you would have additional recovery procedures, like the possibility to perform a Challenge/Response operation with the option to route the user not only through POA but also through Windows GINA/Credential Provider right to their desktop - for the case that Local Self Help was not enabled by the User.

    :29221
Reply
  • Hi ia-hawk-fan07,

    well in case that an offline Windows User has forgotten his password, there is also no other possibility to get him logged on to the Operating System but providing him with another Windows account - maybe that is the reason for the "hint" in the recovery online help ... but could you please tell me exactly where I can find the section with the Admin login account hand out? I can't find it in the help file (SafeGuard Easy 6.0 Policy Editor).

    With SafeGuard Easy you have the possibility to instruct your users to enable Local Self Help and get around the forgotten password issue (as mentioned above they are able to see their forgotten password after answering the questions). They just need to answer the questions.

    With SafeGuard Enterprise, you would have additional recovery procedures, like the possibility to perform a Challenge/Response operation with the option to route the user not only through POA but also through Windows GINA/Credential Provider right to their desktop - for the case that Local Self Help was not enabled by the User.

    :29221
Children
No Data