Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Autologon at boot with SGE 5.50.8

We are very confused by the new version of SGE (having used the old versions for years with no problem).

We ,the IT dept, install & configure all laptops; the users don't do any admin.  After installing SGE 5.50.8 (Pre-install,install,policy), the laptop boots & bypasses the SGE logon screen; it pops up momentarily and says it is auto-logging on, then starts Windows & the Windos logon screen.  I eventually worked out by reading on this forum that this was because I only had one account, the administrator account, on the laptop.  After I logged into Windows with the user account and re-booted I then get the SGE boot login screen.  However, this is where the problem arises.  It will only login with the administrator user name and password.  Obviously I cannot give this to the user so am a bit stuck at the moment. I understand from what I have read that SGE now takes the first user logon and makes that the boot logon.  Can someone explain why this is so ?  It seems extremely insecure to have the boot username & password the same as Windows as anybody only needs to get hold of one set of credentials to get in.  With the previous versions of SGE you could set a separate boot password that was entirely different from the Windows user accounts.

The only way I can see at the moment to solve this is to uninstall SGE, create a 'dummy' Windows user account, re-install SGE and login first with that dummy account to set that as the boot account.  Is this the only way to make SGE operate with boot authentication credentials that are different from the Windows logon credentials ?

:19093


This thread was automatically locked due to age.
  • Hi Carina,

    thank you very much for posting and bringing up this question.

    As already mentioned the design between SafeGuard Easy 4.x and SafeGuard 5.x has changed. SafeGuard Easy 5.x is using the technology of SafeGuard Enterprise now. In SafeGuard Enterprise the design has been changed from an independent account at Power On Authentication (POA) level to a linked account.

    At this point it is unfortunately not possible to activate the POA with an "unlinked" account at this point. However, once the POA is active you can use a POA Account to access the machine.

    Detailed information how to create a POA user and about the differences between a POA user and a Service Account user can be found in the manual as well in our knowledge base.

    http://www.sophos.com/support/knowledgebase/article/110080.html

    http://www.sophos.com/support/knowledgebase/article/114273.html

    Regards

    Dan

    :19363
  • Hello,

    I'm currently stuck with the same problem. What me confuses:

    As the first user I get a Login-Screen in POA similar to windows (username, password, domain). For the first registrered user I can use the login with domain.

    I tried to logon with another user, I first registered the user as SGN user (logged in to windows, checked via tray icon status of this user -> SGN user). But I can't logon with username, password and domain.

    What I can do is creating a POA user (by selecting <POA> for domain) and booting with this user.

    I also checked 'autologon to windows' and 'change password on next login', both with no result.

    Any help would be really appreciate!

    Best regards

    Stefan

    :20821
  • Hi Stefan,

    thank you very much posting and welcome to the forum. With regards to your question:

    Did you try to register a 2nd user on the machine - if so please ensure that you log on at POA level with the owner of the machine and disable automatic logon to windows

    Please check this KBA for further info: http://www.sophos.com/support/knowledgebase/article/107857.html

    What happens once the user is registered? Is the POA loaded? What user account can you use to log on?

    Regards

    Dan

    :20831
  • Hi Dan,

    I did how described in the kb article. Logged on via 'Administrator' (initial user = owner) in POA without logging on to windows automatically. I used another user to login to windows, then did a reboot. Still I can't login to POA with the new user.

    We're using Safeguard Easy, so I can't see/set attributes in the server, just with the policy editor.

    Thanks and best regards

    Stefan

    :20835
  • HI Stefan,

    please check the authentication policy that was assigned to the machine (if there wasn't one then create a new one) > make sure that you set "Add new user allowed" to everyone. Create a new Client Config Package and include the policy. Apply that policy to the machine and check out what happens please ;)

    It should then work

    Regards

    Dan

    :20837
  • Hi Dan,

    I'm sorry. I can't find a field " Add new user allowed" in the authentication tab.

    Am I missing something ?

    Thanks and best regards

    Stefan

    :20841
  • Hi Stefan,

    sry I mixed up the policies ;)

    > Specific Machine Settings Policy > Import Of new Users allowed for > everyone

    Regards

    Dan

    :20845
  • Hi Dan,

    still in the tab I can't fnd this point:

    Thanks and best regards

    Stefan

    :20849
  • Hi Stefan,

    in that case I'm running out of quick ideas unfortunately..

    Can you please be so kind and open a new support call since we need to further analyze this. When doing so please add a trace level 0 of an attempt to add a new user to the machine.

    To enable trace level 0 perform these actions: http://www.sophos.com/support/knowledgebase/article/108081.html

    Last but not least when enabling a new user to the machine do not ".\" when specifying the machine name in case of a local log on

    Regards

    Dan

    :20853
  • Hi Dan,

    just to give you more information about the setup:

    the machine I'm trying with is Windows XP SP3, it's an upgraded Version of Safeguard Easy 4.50.2 to Safeguard Easy 5.60.1.7.

    Best regards

    Stefan

    :20855
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?