Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

1 fingerswipe locked out for more then 4 hours......

We are using Safeguard easy 5.50.1.17 with Lenovo T510's. We have the fingerprint reader working for POA. I had a user yesterday boot their laptop for the day, swipe their finger then had multipal flashes on the screen that said "Log-on failed" and then had to wait for the next attempt to log-in for more then 4 hours...I am not sure exactly how long because they were booting their machine for the fist time in the afternoon and the lock cleared over night while I was not here. I have never seen this behavior before and I was wondering if anyone else had? and if so had any thoughts on why it would happen?

Thanks in advance!

:5202


This thread was automatically locked due to age.
  • I've got an engineer thats experiencing the same problem on a Lenovo W510 using all the supported versions of both SGN (5.50.17) and ThinkVantage fingerprint software 5.85.6014 on a UPEK biometric chip).

    Although my machine which is an identical machine is every aspect. Apart from the obvious machine name etc, has no problems whatsoever.

    When this user leaves their machine unused for a while, its locks due to th screensaver policy, then all of a sudden the screen flashes with the same "Log-on failed" error message, then when they actually try and logon they get a "workstation locked" message. Thats when we have to perform a challenge response.

    Sophos tech support copt out with a "sorry but the Lenovo W510 range is unsupported. End of case."

    The sad thing is that your T510 might get the same response from Sophos... http://www.sophos.com/support/knowledgebase/article/108789.html

    :5216
  • RL thanks for your help! and thanks for pointing me towards that link. I am currently contacting our Account Manager to see if the T 510 was left off for some reason.

    I did finally get my person so they have no more problems logging in. What I ended up doing was clearing the fingerprint data out of BIOS, logging into POA with their password, clearing all fingerprint data out of the Lenovo software, re-enrolling their fingerprints, then logging off Windows, then logging back into Windows with the fingerprint data and then rebooting and using the fingerprint data to get thru POA.

    My person stated they had never been able to just swipe their finger once and get a good read that would log them in. So possibly in this case it is just some really bad fingerprint data, but still seems odd that it would register multiple log in denied's.

    :5229
  • Didn't work for us. In the end we removed the Fp software from this machine and the user is using Pwd authentication.

    However I have also posted another thread in this column asking about the supported versions of the Lenovo fingerprint software. Seems like there is some inconsistency between Sophos and Lenovo.

    :5312