Safeguard - Autologon.exe

Hi FB -

Because Sophos SG doesn't know this user it will through up this authentication window. What you need to do is manually tell Sophos that this account is an authorised user.

I don't think autologin is officially supported by Sophos though - it's a bit of a security risk to be honest but I can understand why you'd want to do it!

You may find that because you've not logged in with the Sophos cog (the Sophos credential provider) that Sophos will never be quite happy but it may be worth trying this?

On your console you'll have a container  ".Unconfirmed Users" for each "directory" (you may have set up workgroups or AD - both have this container) I'd assume the . is to make it appear right near the top!

Open this container and find your unrecognised user. Right click it and select Confirm user.

Refresh policies on the client and in theory I think that will make your unknown/unconfirmed user known and confirmed!

I hope that helps? I can do screenshots if needed (I have v8)

I have tried that but it does not work.  It seems the password is not getting passed.  I am not sure if this is true or not but it seems the dialog box will only take a key press event for a password.

I'm guessing then that you're using the Windows cred provider with the autologin and not the Sophos cog?

I've not looked into a way around this yet, but Sophos does need you to log in with the cog!

I have set to only use Sophos cred provider.  Same results, the creds are not getting passed the account is not getting locked out and the PC is just sitting at the login screen.

A test Ive done is enter the wrong password to see if the account is getting locked out.  it does not get locked.

How have you set that? Removed the other providers?

I used GPO to assign a default cred provider and GPO to disable other cred providers

Odd - But as I said, I suspect unsupported by Sophos.

Have you looked into adding your user into the SAL (Service Account List)  and see if that works?

Is the user local or domained?

Odd - But as I said, I suspect unsupported by Sophos.

Have you looked into adding your user into the SAL (Service Account List)  and see if that works?

Is the user local or domained?

domain account and service account is on my list, I have set a policy for a service account and it failed but I am not sure I did the service account correct. I will be looking at that today