Passive login Fails after VDI devices are updated to 11.3

  • 7015076
  • 19-May-2014
  • 19-May-2014

Environment

Novell ZENworks Configuration Management 11.3 Authentication

Situation

VMware Virtual Desktop Infrastructure (VDI) devices or physical workstations fail to perform passive login after a successful update to 11.3

Resolution

The order in which the Authentication providers are triggered on a managed device during a login process is defined via Registry Keys, so  it is important to ensure that the managed device has the right registry keys defined with the right values. These values need to ensure that the Authentication Provider named ZENCasa is triggered first so Passive Login works as expected.
 
Below are the registry key values required on Windows 7 machines to ensure proper passive login functionality. The syntax of the text below is compliant with .reg format files so such text can be copied and saved as a .reg file in order to successfully import it to a managed device.
 
Registry keys required on Windows 7 64 bit
 
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZenCredManager\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files (x86)\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LCredMgr\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ZenCredManager]
"Asynchronous"=dword:00000001
"DLLName"="ZenCredManager.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LCredMgr]
"Asynchronous"=dword:00000001
"DLLName"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Network Provider\Credential Managers]
"ZCMPwdSyncHandler"="C:\\Program Files (x86)\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
 
Registry keys required on Windows 7 32 bit devices:
 
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZenCredManager\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LCredMgr\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ZenCredManager]
"Asynchronous"=dword:00000001
"DLLName"="ZenCredManager.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LCredMgr]
"Asynchronous"=dword:00000001
"DLLName"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Network Provider\Credential Managers]
"ZCMPwdSyncHandler"="C:\\Program Files\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"

Additional Information

ZENworks Adaptive Agent version 11.3 contains a new Version of CASA named ZENCasa which improves login performance and speed so it is necessary for the registry keys related to Authentication Providers to be properly defined in order for this ZENCasa to be used during passive login