Agent for Windows locks my logon

[AleksMarfunenko]

Hi,

i have a Windows Server 2012 R2. There i just installed RSA SecurID Authentication Agent for Microsoft Windows.
Now i can't login with my domain credentials because there is no this possibility.
How i can fix it? i didn't configure any settings in Agent or Authentication Manager but why it locks a normal logon?

[AleksMarfunenko]

yes i confirm. this user was added from Identity Source which is based on Active Directory:

[AleksMarfunenko]

Please also try to login with the windows password on the login screen instead of the passcode and advise us back about the output. So kindly check and advise us back if there is any assistance needed from our side.

Yes, this is works. i can log in!

i disabled GPO and still can login with Windows Password...

But why RSA SecurID doesn't want to work? 

[HusseinElBaz · Accepted solution]

Hello Aleks,

So that means that the challenge settings are not working, so please try to change that from RSA Control Center where the RSA Windows Agent installed, and then go for Advanced Settings -> Challenge settings, and change that so we can challenge the user that we wants to authenticate with.

So kindly check and advise us back if there is any assistance needed from our side.

Best Regards,

[AleksMarfunenko]

thank very much Hussein!

i set up "Challenge settings", add domain group, add my account into this group - now SecurID works.
I have to enter my Passcode, then i have to enter my password:

And i see all logs!

[SyedHassan]

I have run into exactly the same situation. I installed the RSA Authentication agent on Windows 12, this was really only intended to be used to get SiteMinder /SecureID authentication to work. Didn't configure anything and now I am lock out of the server. Please help how I need to get rid of this software so I can move forward.

[EdwardDavis]

You need to open a support case if an agent is locking you out, we should be able to fix this.

You need physical access to the machine boot up, and be able to get into safe mode.