Single Sign-On fails when computer is connected to network

Products

• Symantec Products

Issue/Introduction

 

Issue

After changing your Windows password, when the computer is connected to the network, the system does not log in to Windows when using the PGP WDE Single Sign-On feature. The user is required to use their old passphrase to authenticate with the PGP BootGuard and then use their new Windows password to log in to Windows.

This can occur when a authenticated user group does not have the proper modify permissions for the PGPWDE01 file on the system. If the user group does not have the proper permissions for the file, when a user changes their Windows password PGP Tray fails to update the PGPWDE01 file. Thereby causing the Single Sign-On feature to fail.

 

Note: This article applies to PGP Whole Disk Encryption 9.5 and above.

 

Resolution

 

Resolution

To resolve this issue, add the authenticated user group with Modify permissions to the PGPWDE01 file on the root of the C: drive. Logging off and then logging back in to Windows should cause PGP Tray to properly update the PGPWDE01 file. After rebooting the system, Single Sign-On should work correctly.

Changing the password for Windows rebooting the system should update the PGPWDE01 file to correct the SSO issue.

 

1. Open Windows Explorer or double-click My Computer.
   
   

   Note: For Windows Vista, open Windows Explorer, if the Advanced menu is not displayed, press ALT and the Advanced menu bar appears. Windows Vista may prompt your for your permission to continue.

   
    
2. Click Tools then select Folder Options.
3. Click the View tab.
4. Scroll down and remove the checkmark next to Hide protected operating system files (Recommended)
5. Click Yes when prompted with the warning then click OK to apply the change.
6. Browse to the C: drive and locate the PGPWDE01 file.
7. Right-click the PGPWDE01 file and select Properties.
8. Click the Security tab and add Authenticated Users with Modify permissions if needed.