- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Windows 7 VM not using Dual factor
I installed RSA Agent 7.2.1.93 on a windows 7 x64 VM
Users are not being prompted for passcode VIA RDP even though I set the agent to Challange all.
When logging in at the console two icons appear, RSA and OTHER, RSA work as is should, OTHER only asks for Windows Creds and bypasses Dual Factor.
Thank you for your help
- Tags:
- Agent
- Agents
- Auth Agent
- Authentication Agent
- Community Thread
- Discussion
- Forum Thread
- RSA SecurID
- RSA SecurID Access
- SecurID
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Glenn,
You want to disable the 'Other' Credential Provider, which is the Windows Password Credential Provider, and leave only the RSA Credential Provider so users have to login with a Passcode and cannot sneak in with just a Password.
Disabling a Credential Provider so it does not show is done in the Registry or through a GPO.
If you search at the top of Link, for "Disable Credential Provider" the top hit is an old KB from Ramana here in Support. It is actually how to disable the Smart Card Credential Provider, but you can look at the registry and figure out how to substitute Windows Password for Smart Card Credential Provider. It's either disabled or exclude, here's what Ramana wrote:
HKEY_LOCAL_MACHINE\SOFTWARE \Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{8fd7e19c-3bf7-489b-a72c-846ab3678c96}
2. Verify that the default value is @="Smartcard Credential Provider"
3. Add the following DWORD value: "Disabled"=dword:00000001
Credential Providers are kind of the 64-bit equivalent to a Gina in the old 32-bit Windows world
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Glenn,
You want to disable the 'Other' Credential Provider, which is the Windows Password Credential Provider, and leave only the RSA Credential Provider so users have to login with a Passcode and cannot sneak in with just a Password.
Disabling a Credential Provider so it does not show is done in the Registry or through a GPO.
If you search at the top of Link, for "Disable Credential Provider" the top hit is an old KB from Ramana here in Support. It is actually how to disable the Smart Card Credential Provider, but you can look at the registry and figure out how to substitute Windows Password for Smart Card Credential Provider. It's either disabled or exclude, here's what Ramana wrote:
HKEY_LOCAL_MACHINE\SOFTWARE \Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{8fd7e19c-3bf7-489b-a72c-846ab3678c96}
2. Verify that the default value is @="Smartcard Credential Provider"
3. Add the following DWORD value: "Disabled"=dword:00000001
Credential Providers are kind of the 64-bit equivalent to a Gina in the old 32-bit Windows world
