Cannot login with Defender Desktop Login. Locked out of the system. (4235386)

Cannot login with Defender Desktop Login. Locked out of the system.

Defender Desktop Login will not allow users to login and there is no other way to login to the system.

Desktop Login has not been configured correct, or it cannot access the Security Server to authenticate the login.

To resolve this, you will need to boot the system into Windows Safe Mode.


Either restart the system, or force power off the system and then power it on again.

Press F8 during the boot sequence to bring up the boot menu screen. Select "Safe Mode with Networking"

When you get to the Windows Login screen, you should be able to login to the system with normal Windows authentication.

Once you are logged in to Safe Mode, there are 2 options for how to proceed:


1. Configure the GinaConfig settings. 

The default location is C:\Program Files\One Identity\Defender\Desktop Login and then double click GinaConfig

Fill in the correct settings so that it can contact the Security Server and allow users to login.

More information can be found in the Defender Admin Guide, under the section "Defender Desktop Login Configuration tool reference"


2. Uninstall Desktop Login from the system.

Open the Windows Control Panel and go to Programs & Features.

Select Defender Desktop Login in the application list and click the Uninstall button.

If you receive the error, "Error 1084: The service cannot be started in safe mode", you will need to enable the Windows Installer, which is disabled in Safe Mode by default.

To allow software to be uninstalled in Safe Mode, you will need to modify a registry entry and then start the Windows Installer Service.

Open and Administrator Command Prompt and type the following command:

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer" /VE /T REG_SZ /F /D "Service"

Press enter and it should say, "The operation has completed successfully"

Next, type:  net start msiserver

Press enter and it should say, "The Windows Installer service was started successfully"

You should now be able to go back to Programs & Features and try uninstalling again.


After you have completed one of the options above, reboot the computer into the standard Windows mode. If you selected option 1 above, you can try logging in with your Defender Token again. If you selected option 2, you should be presented with the standard Windows Login screen and can login with Windows credentials.

 

 

One Identity does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry” at Microsoft Support.