cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
zaphod
Level 9
Report Inappropriate Content
Message 1 of 6

Temporarily disable EE Windows auto-login

Jump to solution

McAfee Endpoint Encryption version 5.2.4.1.  Configured to have McAfee handle automatic Windows login too.

Basic question is that I need a way to temporarily disable McAfee taking over Windows login so that a separate auto-login configured through the normal HKLM\Software\Microsoft\WindowsNT\Winlogon registry settings can work.  We do have the sbadmcl.exe on the PC.  This also needs to be able to be done on the local PC without it being connected to the network (i.e., can't require a connection to the management server, although if it can be done and that's the ONLY way to do, I'll have to consider it, but would greatly perfer not to have to connect to the management server because this might be needed remotely and they'd have to connect to the company VPN to connect to the management server).

Details...

We have a piece of software that when installing needs to reboot a few times.  It handles this by creating a special local user account on the PC and configuring Windows to auto-login using the appropriate registry keys in the above mentioned registry section, adding a command to run the setup program again to the RunOnce registry key, then forcing the reboot.

Of course the McAfee Endpoint Encryption does its autologin with the user's actual Windows account overriding the special acount auto-login that the software install created.

The software setup does kick off again within the user's login, but it refuses to complete properly.  It MUST log in with the special account to get the installer to complete properly.

So what I'm hoping is that I can create a .vbs script or something that uses sbadmcl.exe to disable the McAfee autologin, then run this software installer, and reenable McAfee autologin when finished.

We have zero control over the software installer so suggestions of having the vendor modify it are out.

Also, upgrading the McAfee client at this time is not an option.  (We are looking at upgrading to 6 but this is a ways off yet and also not under my personal control or influence.)

Thank you.

1 Solution

Accepted Solutions
zaphod
Level 9
Report Inappropriate Content
Message 6 of 6

Re: Temporarily disable EE Windows auto-login

Jump to solution

Got it.  This article I mentioned in my previous post wasn't the exact answer but it got me on the right track.

http://www.howtogeek.com/64927/cleanup-your-windows-7-login-screen-and-remove-un wanted-logon-items/

Just adding the Disabled value to the provider entry as the article suggests didn't work.  I ended up entirely deleting the appropriate GUID key for the SbCredProv provider under both the Credential Provders and Credential Provider Filters keys (after exporting that section so I could add them back after the software setup finishes).

The user still has to log in to McAfee Encryption on the reboot, but after that Windows will auto-login using the special account that the software install created.

View solution in original post

5 Replies
SafeBoot
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 6

Re: Temporarily disable EE Windows auto-login

Jump to solution

You don't say what OS, so it's hard to be exact, but all you need to do is change the registry to switch EEPC out of the GINA/Credential Provider chain.

there's no "supported" mechanism to do this though.

zaphod
Level 9
Report Inappropriate Content
Message 3 of 6

Re: Temporarily disable EE Windows auto-login

Jump to solution

Sorry.  Windows 7.  Can you point me in the right direction of what specific registry setting?  I'm fine with writing a .vbs script to modify the registry.

SafeBoot
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 4 of 6

Re: Temporarily disable EE Windows auto-login

Jump to solution

I'm not that familiar with the credential provider architecture, or the repercussions of changing it - I think the Microsoft documentation might be more relevant?

The only supported way of doing this would be to change the parameters in EEM and sync. I'm not sure that's going to help you though.

zaphod
Level 9
Report Inappropriate Content
Message 5 of 6

Re: Temporarily disable EE Windows auto-login

Jump to solution

I did a Google search and found this article.  I will give this a try.

http://www.howtogeek.com/64927/cleanup-your-windows-7-login-screen-and-remove-unwanted-logon-items/

zaphod
Level 9
Report Inappropriate Content
Message 6 of 6

Re: Temporarily disable EE Windows auto-login

Jump to solution

Got it.  This article I mentioned in my previous post wasn't the exact answer but it got me on the right track.

http://www.howtogeek.com/64927/cleanup-your-windows-7-login-screen-and-remove-un wanted-logon-items/

Just adding the Disabled value to the provider entry as the article suggests didn't work.  I ended up entirely deleting the appropriate GUID key for the SbCredProv provider under both the Credential Provders and Credential Provider Filters keys (after exporting that section so I could add them back after the software setup finishes).

The user still has to log in to McAfee Encryption on the reboot, but after that Windows will auto-login using the special account that the software install created.

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community