This content has been marked as final. Show 20 replies
turn off the windows login options in the machine policy, then we won't take over the windows login.
its your policy which is putting the gina in place - just clear all the options and it won't do it any more.
Thanks for the reply.
When I do this, I am no longer able to change my password on Windows and have it synchronize with Safeboot.
Is there any setting/way to maintain password synchronization without having safeboot trigger a logon (ctrl-alt-del) at start up?
Still looking for assistance on this. Is anyone else experiencing this?
After the suggestion above and some more testing, the problem comes down to this:
With Safeboot 5.1, when I install the client and enable the option to keep my windows password and safeboot password synchronized, safeboot replaces the gina with SBGINA.DLL. This would work fine, except for 1 issue which I'm surprised no-1 else has ran into...
When the machine boots up, rather than going into the ctrl-alt-del screen, it goes straight into the legal notice as if the machine triggered a ctrl-alt-del command by itself. Only way to stop this for us so far has been do disable to windows login synch option, but then we lose that ability.
Anyone have any other suggestions?
it's normal - if your security message was disabled we'd log in for the user (no need to press ctrl-alt-del).
that's what Windows login is all about - reduce the number of steps the user has to go through to one login.
why do you want the ctrl-alt-del prompt? The user just went through the pre-boot login so we know they are sitting there. Seems odd to make them perform other steps.
We're using SmartCards for authentication into Windows and for internal security reasons, we are unable to use them through Safeboot. So, by triggering ctrl-alt-del, the users have to exit out onto the normal previous screen to insert the smartcard to trigger the pin request.
So I suppose the question would be, is there any way to maintain windows password synchronization with Safeboot without having Safeboot trying to log on?
Thanks for the responses.
You really need to go in the regedit and rename sbgina to msgina.
I THINK thats what you are asking
That will fix it temporarily until the policy synchronizes again. To be a bit more specific "Automatically logon as boot user" is NOT checked, the options selected currently for my test machines are:
Set SafeBoot password to Windows password
Must match Windows user name
But the ctrl-alt-del still triggers.
From my experience, this is most liekly always going to happen for security reasons and what have you.
I would just leave it like that.
Thanks, but considering that "Automatically logon as boot user" is NOT checked, I don't believe a logon should be getting triggered by SafeBoot.
Anyone else have any ideas?