Lenovo ThinkVantage (Hardware Password Manager Deployment Instrukcja Użytkownika Pobierz pdf (Strona 52)

Problemdescription:Singlesign-ontoWindowswillnotworkiftheWindowspolicysettingisenabled

thatrequirestheusertoPressCtrl+Alt+Deltologin.Thissecuritysettingdetermineswhetherpressing

Ctrl+Alt+Delisrequiredbeforeausercanlogin.Whenthispolicyisenabledonacomputer,auserisnot

requiredtopressCtrl+Alt+Deltologin.Ifthispolicyisdisabled,anyuserisrequiredtopressCtrl+Alt+Del

beforeloggingontoWindows(unlesstheyareusingasmartcardforWindowslogon)

Thedefaultondomain-computersisDisabled.Thedefaultonstand-alonecomputersisEnabled.

Solution:EnabletheDonotrequireCtrl+Alt+DelWindowspolicy.

•Symptom:YoureceiveAntivirusmessagesduringclientinstallation.

Problemdescription:TheclientagentmustbeinstalledwithAntivirusandFirewallsdisabled.Afterbeing

installed,thesecanbere-enabled.ThisisdocumentedintheLANDeskUser'sGuideasaninstallation

requirement.

Solution:DisableAntivirusandFirewallprotectionduringclientagentinstallation.

•Symptom:Allharddrivepasswords(HDPs)arethesamewithinaregistered

HardwarePasswordManager

system.However,thepasswordswilldifferbetweensystemswherepolicyissetfortheHardware

PasswordManagerservertogeneratethepasswords(forexample,non-commonHDPs).

Problemdescription:TheHardwarePasswordManagerserverwillgeneratethesameHDPsforallhard

disksattachedtoamachineduringregistration(inordertocomplywithdesktopBIOScapabilities).

Note:TheMHDPandUHDPmaydifferforadrive,butallMHDPswillbethesameandallUHDPwillbe

thesameacrossattacheddriveswithinasystem.

Solution:None

•Symptom:WhenchangingyourWindowspasswordtoablankpasswordafterregisteringinHardware

PasswordManager,theclientapplicationdoesnotthinktheuserisregisteredandpromptstheuserto

enrollagain.

Problemdescription:BlankpasswordscauseproblemsontheWindowsVistaoperatingsystemdueto

limitationswiththeCAPIimplementationontheWindowsVistaoperatingsystem.Oncethisproblem

occurs,eveniftheusertriestochangetheirpasswordbacktoanon-blankvalue,thesituationdoesnot

repairitself(userwillstillbepromptedtoenroll).Theusermustderegister(viaBIOSsetup)andreregister.

Solution:SetWindowspolicytoNOTallowblankWindowspasswords.Ifthereisastrongdesiretoallow

blankWindowspasswords,VistaSP2includesaxthatresolvesthisproblem.

•Symptom:Ausercanperformanintranetloginandchoosetoderegister(removehardwarepasswords)a

systeminwhichtheyarenotenrolled.

Problemdescription:Whenasystemisregisteredviatheone-touchregistrationprocess(onlyan

emergencyadminaccountiscreated),theusercanperformanintranetloginandseetheDeregisterPC

option.Ideally,thisoptionwouldnotbevisiblebydefaultasitallowsasecuredPCtobederegistered

beforeanyusersenroll.

Solution:AdministratorcandisabletheDeregisterPCfromtheBIOSmenuasapolicysettinginthe

AdminConsole.DoingthiswillpreventtheuserfromseeingtheDeregisterPCoption.

•Symptom:WhenpolicydictatesthatHardwareAccountandWindowscredentialsaretobekeptinsync,

achangetotheVaultpasswordviatheintranetloginmenuisnotdetectedbytheClientapplication.

Problemdescription:TheClientPortalcannotupdatetheWindowspasswordasaresultofchangesto

theVaultpassword.ThisisbecausetheClientPortalcannotaccuratelyorsecurelymonitorchangesto

theVaultpasswordafterWindowsstarts(forexample,theclientcanonlyknowifapasswordchange

occurred,butnotwhatthepasswordchangeactuallyis).

Note:IftheuserchangestheirWindowspassword,theClientapplicationwillprompttheusertoupdate

theirVaultpasswordonthenextWindowslogin.

Solution:AdministratorscanpreventthisfromhappeningiftheydisabletheChangeHardwareAccount

passwordpolicysetting(BIOSmenusetting).

44HardwarePasswordManagerDeploymentGuide

1 2 ... 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Komentarze do niniejszej Instrukcji

Brak uwag

Lenovo ThinkVantage (Hardware Password Manager Deployment Instrukcja Użytkownika Strona 52

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Notatniki Lenovo ThinkVantage (Hardware Password Manager Deployment