Hi,
We use SG Enterprise Standalone 5.4 to secure our laptops with a generic pre-specified POA login (we also have an override account we use) we give out to the user. Passthrough to Windows login is disabled.
I understand the certificate for login is created once the user logs in locally. In this case they login to a domain and the profile is then cached locally onto the HD of the computer. If a user forgets their domain Active Directory password, we can reset it for them, but once they login to the SafeGuard-protected computer, it also asks them for the "old" password (that was cached the last time a successful login was made to Windows) ...
...is there any harm in hitting "cancel" and having SafeGuard generate a new certificate to match their updated AD password to allow local login? I am assuming there should be no ill effects if they don't use this AD domain login to login to the POA. This is in a situation where the user has completely forgotten their previous password and can't type it into SafeGuard.
This thread was automatically locked due to age.
