Single Sign-On (SSO) and network password
And SSO-enabled user cannot log in after their network password has been changed. Access Denied appears on their pre-boot login screen.
If a Single Sign-On (SSO) enabled user cannot log in after their network password has been changed, the user´s password has been changed on their Windows account externally. This can happen for several reasons:
•A user changed their password on another workstation.
•A user had their password changed on a server, such as when using Active Directory on the Domain server.
•A user attempted to change their password but has not been authenticated at the FDE login screen.
|
TheESET Endpoint Encryption Full Disk Encryption login page is a pre-operating system and will not receive the change until the user has successfully logs in to their Windows account. When the user has successfully logged in to their Windows account, SSO will automatically re-sync during the Windows login process. The user changing their password must be successfully authenticated to start the workstation at the FDE login screen. The user must also have used their credentials to boot the machine. |
Solution
At the pre-start login screen you should type your previous password. When you start Windows, you must log in to Windows manually, as SSO will not work. When you log into Windows, SSO will automatically re-sync, and you can use the new password on the next restart.
If you change your Windows account, the pre-boot login will be automatically updated, so SSO will still work.