ZENworks Passive Mode login fails after reboot or shutdown/restart on Windows 10 1709 (or Later) due to ARSO changes

  • Document ID:7022379
  • Creation Date:28-Nov-2017
  • Modified Date:12-Jul-2019
    • Micro Focus Products:
      ZENworks Configuration Management

Environment

ZENworks Configuration Management 11.4
ZENworks Configuration Management 2017

Situation

On Windows 10 Build 1709 (or later) managed devices, users will not be logged in passively after reboot or shutdown and restart of the device due to Winlogon Automatic Restart Sign-On (ARSO) set as default for user startup.
NOTE:  This TID is about ARSO issue.  For failure to login passively after Windows OS upgrade due to provider registry keys removed, unrelated to ARSO, see also http://novell.com/support/kb/doc.php?id=7022478

Resolution

Workaround:  Disable ARSO via registry or group policy.  If not using a policy, a registry bundle can be made to set the registry and assigned to devices.

Policy location: 

Computer Configuration > Administrative Templates > Windows Components > Windows Logon Option

Policy Name: Sign-in last interactive user automatically after a system-initiated restart

need to set "Disabled"

Registry Location: 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Registry Name: DisableAutomaticRestartSignOn

Type: DWORD  set to 1




Cause

ARSO bypasses the third party credential providers by design.  

Status

Reported to Engineering

Additional Information

For more information see https://social.technet.microsoft.com/Forums/en-US/efc99b56-8f1f-4364-b081-0b6db46e9dda/global-policy-for-new-use-my-signin-info-to-automatically-finish-setting-up-my-device-after-an?forum=WindowsInsiderPreview
 
 
The Information Below is provided as courtesy.
Information Posted on the "Cool Solutions Site" and the Support Forums are not officially supported.

 
The Windows 1709 Feature Update can be deployed by a ZCM Bundle.  (Note: ZPM is not required and the Content-Repo can be used in lieu of installing from a share if desired.)
See - https://www.novell.com/communities/coolsolutions/deploying-windows-10-feature-updates-via-zenworks-patch-management/
 
 
A /PostOOBE switch can be added to the upgrade command to allow for the import of the specified settings.