000018132 - Roaming profiles do not save when rebooting

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000018132
Applies ToRSA ACE/Agent for Windows
Microsoft Windows NT 4.0
Network Access Protection (NAP)
Sub-Auth Protection (same as Network Access Protection)
IssueRoaming profiles do not save when rebooting
When performing a shutdown or reboot, a user with a roaming profile on an NT domain protected by NAP (Sub-Auth) may be unable to save changes made to the roaming profile.
CauseOn the Windows NT logout routine, the network connections  allow ACE/Agent to open a secure connection to exchange certificates, thus allowing the roaming profile to save.

When performing a shutdown or restart, Windows NT does not allow such connections to be opened. After the shutdown procedure issues a stop to network services, no additional network connections can take place.  If the roaming profile save does not occur before this, it will not be saved.  

This by no means occurs on ALL domains. If  the profile save request is issued BEFORE the network services are brought down, the save will occur normally.

This occurs in all versions of ACE/Agent using NAP.
ResolutionUse the NT logout routine instead of a shutdown or a reboot.
Legacy Article ID6.0.1376301.2748551