Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Fast User Switching Not Working (Immediately Signs Off)

Hi,

Whenever I try to 'Switch User' on my Windows 7 computer it start to log in, however immediately after succeeding it signs off, returns to the login screen.

Some debugging showed that disabling the SGNAuthService solves the problem. So I was wondering what the SGNAuthService exactly does, and whether there is another solution to get the user switching to work.

Thanks,

Jelmer Hoogendoorn

:18751


This thread was automatically locked due to age.
Parents
  • Hi guys,

    on Windows XP, Fast User Switching (FUS) gets disabled when a 3rd party GINA (like the SGGINA.dll of SafeGuard Enterprise) is installed on the system. On Operating Systems that are using a Credential Provider instead of a GINA (Windows Vista, W7,..) FUS is prevented by the Authentication Service of SGN (SGNAuthService).

    Why has this been implemented that way?

    A consequent cryptographic separation between the key-material of different users is one of the paradigms of SafeGuard Enterprise. By allowing more than one logged on user at a time, this would not be possible and a separation could just be access right based and with that, less secure.

    Therefore, it is not possible to enable or use Fast User Switching (FUS) on a SafeGuard Enterprise Client.

    Regards,

    Chris

    :45377
Reply
  • Hi guys,

    on Windows XP, Fast User Switching (FUS) gets disabled when a 3rd party GINA (like the SGGINA.dll of SafeGuard Enterprise) is installed on the system. On Operating Systems that are using a Credential Provider instead of a GINA (Windows Vista, W7,..) FUS is prevented by the Authentication Service of SGN (SGNAuthService).

    Why has this been implemented that way?

    A consequent cryptographic separation between the key-material of different users is one of the paradigms of SafeGuard Enterprise. By allowing more than one logged on user at a time, this would not be possible and a separation could just be access right based and with that, less secure.

    Therefore, it is not possible to enable or use Fast User Switching (FUS) on a SafeGuard Enterprise Client.

    Regards,

    Chris

    :45377
Children
No Data