Determine the challenge mode of RSA Authentication Agent 7.x for Windows from Windows registry
3 years ago
Originally Published: 2016-01-11
Article Number
000062946
Applies To
RSA Product Set : SecurID
RSA Product/Service Type : RSA Authentication Agent
RSA Version/Condition: 7.x
Issue
This article explains how to check the challenge mode set for an RSA Authentication Agent 7.x for Windows.
Tasks
Check the status of challenge mode for an installed RSA Authentication Agent for Windows through the RSA Control Center by navigating to Advanced Tools > Challenge Users. ALternatively, if the administrator has access to the registry, check the following:
 
[HKEY_LOCAL_MACHINE\SOFTWARE\RSA\RSA Desktop Preferences\Local Authentication Settings]
"ChallengeMode"=dword:00000000
"ChallengeGroup"=""
 
Dword ValueChallenge
0None
1Users in group
2All users
3All users except in <group>
The ChallengeGroup will contain the name of the group associated with the challenge mode.
Notes
RSA Group Policy Object (GPO) templates can be used with an RSA Authentication Agent for Windows where the supported Microsoft Windows platform hosting the authentication agent is a member of a Windows domain. 
Don't see what you're looking for?