You uninstall Secure Password Extension from end-user computers by removing the appropriate installation packages assigned through Group Policy. Uninstalling Secure Password Extension makes the Self-Service Site no longer available from the Windows logon screen.
To remove an assigned MSI package
-
Start the Group Policy Management snap-in. To do this, click Start, point to Programs, point to Administrative Tools, then click Group Policy Management.
-
In the console tree, click the group policy object with which you deployed the package, and then click Edit.
-
Expand the Software Settings container that contains the Software installation item with which you deployed the package.
-
Click the Software installation container that contains the package.
-
In the right pane of the Group Policy window, right-click the package name, point to All Tasks, and then click Remove.
-
Click Immediately uninstall the software from users and computers, and then click OK.
-
Quit the Group Policy Object Editor snap-in, and then quit the Group Policy Management snap-in.
For diagnostic purposes you can turn on logging in Secure Password Extension. The log file can contain the following information: exceptions and errors, debug messages and functions’ returns, and so on. You can use this diagnostic data to identify issues with Secure Password Extension.
|
|
Caution: This section describes how to modify the Registry. However, incorrectly modifying the Registry may severely damage the system. Therefore, you should follow the steps carefully. It is also recommended to back up the Registry before you modify it. |
To enable logging in Secure Password Extension
-
On a computer where Secure Password Extension is installed, click the Start button, click Run, and type regedit. Click OK.
-
In the Registry tree (the left tab), create the following key: HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Password Manager\Logging.
-
Add a new string value to the HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Password Manager\Logging registry key. To do it, click the HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Password Manager\Logging registry key. On the Edit menu, select New, then click String Value.
-
Type LogLevel and then press ENTER to name the string value.
-
Right-click the LogLevel value and select Modify.
-
In the Edit String dialog, type All under Value data. Click OK.
-
Add a new string value to the HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Password Manager\Logging registry key. To do it, click the HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Password Manager\Logging registry key. On the Edit menu, select New, then click String Value.
-
Type LogFolder and then press ENTER to name the string value.
-
Right-click the LogFolder value and select Modify.
-
In the Edit String dialog, type the path to the log file under Value data. For example, C:\Logs. Click OK.
-
Exit the Registry Editor.
-
Restart the computer.
To disable logging in Secure Password Extension
-
On a computer where Secure Password Extension is installed, click the Start button, click Run, and type regedit. Click OK.
-
In the HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Password Manager\Logging registry key, select the LogLevel value.
-
Right-click the LogLevel value and select Modify.
-
In the Value data box, type Off, and click OK.
You can use Password Manager to create password policies that define which passwords to reject or accept. Password policy settings are stored in Group Policy objects (GPOs). A GPO is applied by linking the GPOs to a target container defined in Active Directory, such as an Organizational Unit or a group.
Group Policy Objects from parent containers are inherited by default. When multiple Group Policy Objects are applied, the policy settings are aggregated.
For information on how to apply a password policy and change policy link order, see Managing Password Policy scope.
