This content has been marked as final. Show 14 replies
your problem most likely lies in the fact theat Safeboot replaces the boot gina. usually this will be msgina, but in your case it may be the cisco Gina? If not it may been causing the problem with passing signle sign on
You are not alone..
I've been struggling with this issue for a couple of weeks as well
However, I get the error, click OK.. Then cancel the logon prompt. Press Ctrl+Alt+Delete again...
This time the client loads correctly and can be used to log in successfully and repeatedly.
(Assuming you go through the procedure each time)
You might like to try this, it works for me but I desperately want to get rid of the error.
Anyone give us a clue on achieving this?
(losing hair rapidly)
It's your lucky day, I got the bottom of this in the end. It's all down the the smartcard reader on your laptops, you have to upgrade your client to 5.1.6 B5400.
Goto the SafeBoot FTP for the latest build.
I suppose SmartCard drivers does make vague sort of sense..
now rummaging about to get hold of the upgraded client.
How easy/difficult is it to upgrade? You don't have to decrypt the hard drive, then use the new client to encrypt the hard drive do you?
Personally, I don't have a vast amount of experience with the software, we've been presented with is as an install it and make it work project!
It was pretty straight forward, theres a migration document on the latest build archive.
The clients update themselves after you select the newly installed 5.1.6 file group.
Don't worry, I'm in the same boat as you, you'll get the hang of it. How many clients do you have?
I've probably retraced your path today..
I'm now 100% convinced that it's the O2Micro smartcard reader drivers that are the problem. I've even let windows update install some Microsoft generic drivers, but they upset the VPN software as well.
I don't manage the server end, just the laptop/desktop builds, currently about 150 out there and growing slowly.
Thanks for the post by the way, saved me a few grey hairs and a lot of time.
Now I only need a foolproof method of deploying it in a Ghost image.
Don't waste time messing with the smartcard drivers, I tried that on our Dells.
If you can't get the server guys to upgrade SafeBoot then no probs. If you don't use smartcards, then just disable the smartcard service on your laptops as a workaround.
I'm glad it's helped someone, I've wasted weeks on this!!
I'm not sure if you can include SafeBoot on an image, even decrypted as it needs to have a unique machine name, but don't quote me on that!
The Cisco VPN client must be configured to start prior to login. Then you can run this reg script to fix the ordering problem. This can also cause winlogon crashes or SAS errors when booting up, if it is not loaded right.
Basically, you tell Windows to load SBGINA.DLL as first logon component. SBGINA then passes this control to CSGina.dll, which should then pass it to MSGina.dll. If you do not have any third party GINA components, set SB-OrigGinaDLL to blank.
If the machine will not boot in normal mode, perform the registry changes in Safe Mode.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Cisco Systems\VPN Client]
I am just coming across a similar problem but just with a different third party software using safeboot v4.2. We will be upgrading to v5, but not for a while.
Just wondered if you could post a copy of your sbgina.ini? I have tried to edit mine to try to change the gina boot series, but so far, without any positive results...