eDirectory Login Fails After Windows Upgrade to Windows 10 RS3

  • 7021904
  • 28-Sep-2017
  • 30-Oct-2018

Environment

Client for Open Enterprise Server 2 SP4 (IR6)
Windows 10 Fall Creators Update (Build 1709)
Automatic Restart Sign On (ARSO)

Situation

When you upgrade a device to Windows 10 RS3 ("Fall Creators Update") with Client for Open Enterprise Server SP4 (IR6) or earlier already installed, the eDirectory login scripts fail to run and NCP connections fail to establish after Windows logon.

Resolution

Fixed in Client for Open Enterprise Server 2 SP4 (IR7).

Cause

When you upgrade a device to Windows 10 RS3 without Client for Open Enterprise Server installed, the first login after installing Client for Open Enterprise Server on the upgraded device logs into both eDirectory and Windows successfully. But the issue of eDirectory login scripts failing to run and missing NCP connections is observed on the second and subsequent logins with the same credentials used for first login.

The problem occurs as a result of the new "Automatic Restart Sign-On" (ARSO) feature introduced in Windows 10 RS3. This feature creates a Windows-only logon session automatically on behalf of the previously logged-on user, and you are reconnected to this Windows-only logon session even after you provide your credentials to login to eDirectory and Windows again through the interactive credential provider.

To resolve this issue and perform eDirectory login along with Windows logon, disable the existing Windows Update group policy for ‘Automatic Restart Sign On’. The feature can be disabled by creating a registry key DisableAutomaticRestartSignOn of type DWORD under [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] and set the value to 0x1. 

NOTE: Installing or Upgrading to Client for Open Enterprise Server SP4 (IR7) or later by default disables this feature by setting the group policy for Automatic Restart Sign On.

Additional Information

See TID 7022379 for the related issue with ZENworks Passive Mode login.