How to setup vWorkspace deferred authentication, useful when other password reset options are not available to the users.
Deferred Authentication
An optional mode to retrieve published applications and desktops through AppPortal and Web Access, even by users whose passwords have expired or need to be changed. This feature was first present in the vWorkspace 7.1 release.
PasswordExpiredPassthruMode – When enabled, if LogonUser() returns the error code ERROR_PASSWORD_EXPIRED (1330) and ERROR_PASSWORD_MUST_CHANGE (1907), the broker will enumerate the groups and OUs for the user and return ERROR_SUCCESS (0). This allows the user to open the Windows logon screen to change the expired password. This feature is controlled through the following registry key (defaults to 0=disabled):
Note: The registry key needs to be set on every Connection Broker in the vWorkspace Farm.
x86: HKLM\SOFTWARE\Provision Networks\Common\ Load and License Manager
x64: HKLM\SOFTWARE\WOW6432NodeProvision Networks\Common\ Load and License Manager
PasswordExpiredPassthruMode REG_DWORD (0=disabled 1=enabled)
AccountLockedPassthruMode – When enabled, if LogonUser() returns the error code ERROR_ACCOUNT_LOCKED_OUT (1909) the broker will enumerate the groups and OUs for the user and return ERROR_SUCCESS (0). This allows the user to open the Windows logon screen to unlock the account. You must have a third party password reset application to use this setting. This feature is controlled through the following registry key (defaults to 0=disabled):
Note: The registry key needs to be set on every Connection Broker in the vWorkspace Farm.
x86: HKLM\SOFTWARE\Provision Networks\Common\ Load and License Manager
x64: HKLM\SOFTWARE\WOW6432NodeProvision Networks\Common\ Load and License Manager
AccountLockedPassthruMode REG_DWORD (0=disabled 1=enabled)
Please make sure to install at least PNtools 7.2MR1 on VDI machines. It prevents a defect on Windows 7 machines that logs out users trying to change an expired password.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center