Environment
Novell ZENworks Configuration Management 11.3 Authentication
Situation
VMware Virtual Desktop Infrastructure (VDI)
devices or physical workstations fail to perform passive login after a successful update to 11.3Resolution
The order in which the Authentication providers are triggered on a managed device during a login process is defined via Registry Keys, so it is important to ensure that the managed device has the right registry keys defined with the right values. These values need to ensure that the Authentication Provider named ZENCasa is triggered first so Passive Login works as expected.
Below are the registry key values required on Windows 7 machines to ensure proper passive login functionality. The syntax of the text below is compliant with .reg format files so such text can be copied and saved as a .reg file in order to successfully import it to a managed device.
Registry keys required on Windows 7 64 bit
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZenCredManager\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files (x86)\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files (x86)\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LCredMgr\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ZenCredManager]
"Asynchronous"=dword:00000001
"DLLName"="ZenCredManager.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
"Asynchronous"=dword:00000001
"DLLName"="ZenCredManager.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LCredMgr]
"Asynchronous"=dword:00000001
"DLLName"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
"Asynchronous"=dword:00000001
"DLLName"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Network Provider\Credential Managers]
"ZCMPwdSyncHandler"="C:\\Program Files (x86)\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
"ZCMPwdSyncHandler"="C:\\Program Files (x86)\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
Registry keys required on Windows 7 32 bit devices:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZenCredManager\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LCredMgr\networkprovider]
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Class"=dword:00000002
"Name"="LoginCapture Credential Provider"
"ProviderPath"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ZenCredManager]
"Asynchronous"=dword:00000001
"DLLName"="ZenCredManager.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
"Asynchronous"=dword:00000001
"DLLName"="ZenCredManager.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LCredMgr]
"Asynchronous"=dword:00000001
"DLLName"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
"Asynchronous"=dword:00000001
"DLLName"="C:\\Program Files\\Novell\\CASA\\bin\\lcredmgr.dll"
"Impersonate"=dword:00000001
"Logoff"="NPLogoff"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Network Provider\Credential Managers]
"ZCMPwdSyncHandler"="C:\\Program Files\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
"ZCMPwdSyncHandler"="C:\\Program Files\\Novell\\ZENworks\\bin\\ZenCredManager.dll"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder]
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
"ProviderOrder"="ZenCredManager,LCredMgr,RDPNP,LanmanWorkstation,webclient,PBACredMan"
Additional Information
ZENworks Adaptive Agent version 11.3 contains a new Version of CASA named ZENCasa which improves login performance and speed so it is necessary for the registry keys related to Authentication Providers to be properly defined in order for this ZENCasa to be used during passive login