I have GPO to Unlock computer with windows password and have set the Pinlifetime setting to 75 minutes however once screen lock is enabled on Windows 2016 Server it asks for RSA SecurID Pin instead of Windows Password.
Note: It behavior happens intermittently. Sometimes Quick Password Unlock screen stays for upto 75 mins as set in GPO but most of the time unlock screen prompts for RSA SecurID Token PIN. We use RSA Authentication Agent ver 7.4
UNCLASSIFIED
HI Ed,
Wher do i change the timer from "session" timer to "passcode" timer??
Please advice.
Cheers
In RSA agent build 7.3.3.114 and up, there is this setting in the 'Unlock with' GPO.
UNCLASSIFIED
HI Ed,
Thanks for the reply, so to confirm below should be my GPO setting?
Select the unlock method you want to enable
Unlock computer with: Windows Password
Select the event that will begin the time-out period
Start the time-out on: RSA SecurID Password Authentication
Specify the time-out: 75 minutes
Question: When does that 75 mins timer starts?? Does 75 mins timer starts every time the session gets locked due to inactivity? Our aim is to use windows password for session unlock on each occasion where the locked session time is less than 75 mins.
I look forward to hear from you
Many Thanks,
Jaspalsingh Chhabra
Try setting to not enabled, that should always be windows password....
or
Try setting the timer from 'session' timer (the moment screen is locked timer starts) to 'passcode' timer (the last time a passcode was used the timer starts) as the session timer relies on Microsoft SENS service and that has proven to be unreliable in certain setups (due to a problem with SENS and not the RSA agent code).