Zenworks Passive Mode login stops working after upgrade to Windows v1709, v1803, or v1809

  • 7022478
  • 19-Dec-2017
  • 12-Dec-2018

Environment

ZENworks Configuration Management 11.4
ZENworks Configuration Management 2017

Situation

After upgrading the device to Windows 10 v1709 (Fall Creator Update) through Windows 10 v1809 (April 2018 Update) Passive Mode login to Zenworks no longer occurs. 

The ZENworks Credential Provider Registry Keys will be removed from the following locations during the upgrade as well as the associated DLLs unregistered.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order\
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZenCredManager\networkprovider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify\ZenCredManager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LCredMgr\networkprovider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LCredMgr

The Windows Upgrade removes these intentionally during the OS Upgrade and normally restores them while finalizing the OS upgrade.
The restoration of the registry keys and DLL registration is not always done successfully.
The latest versions of Windows tend to be more reliable than prior versions in restoring the keys and registrations but MS still has an open issue to fully resolve the issue in the Windows upgrade code.

Resolution

1. Use Zenworks Control Center to uninstall and reinstall the User management spoke for the affected devices.

2. Reinstall the User Management MSI for the Agent Manually. 
(example for a 17.1 device)
msiexec /fvam <PATH>\novell-zenworks-usermanagement-17.1.0.1342.x86_64.msi
to re-populate the needed registry keys
Please note that 1. the msi must correspond with the installed ZCM version, 2. the msi must be copied first to the device, 3. the msiexec command has to be run as 'Administrator' and 4. a reboot is required for the change to take effect.

Cause

Network provider settings are removed during an in-place upgrade to Windows 10 Version 1607
https://support.microsoft.com/en-in/help/4013822/network-provider-settings-are-removed-during-an-in-place-upgrade-to-wi

Status

Reported to Engineering

Additional Information

The exact conditions on when it may or may not occur are not fully known since it is the Windows Update, not ZENworks Code, that is removing these keys.
 
The Information Below is provided as courtesy.
Information Posted on the "Cool Solutions Site" and the Support Forums are not officially supported.

 
The Windows 1709 Feature Update can be deployed by a ZCM Bundle.  (Note: ZPM is not required and the Content-Repo can be used in lieu of installing from a share if desired.)
See - https://www.novell.com/communities/coolsolutions/deploying-windows-10-feature-updates-via-zenworks-patch-management/
 
 
A /PostOOBE switch can be added to the upgrade command to allow for the import of the specified settings.