How to reduce LDAP Traffic after installing the Secure Password Extension (SPE) (4271649)

After installing the SPE on client computers the SPE then contacts a Domain Controller requesting the contents of the QPM Storage Container. It then uses this information to determine

1. If the “Remind user to Create/Update Profile” user notification has been enabled in the PMAdmin site.
2. If it has been enabled it then checks if notification via the SPE also enabled
3. If notification via SPE is also enabled, the SPE then determines if it should notify the user by means of a pop up on the client computer.

.

By default these actions occur every 5 minutes, regardless of whether the user notification is enabled or not, and may impact bandwidth, especially if there are many users on a VPN.

This cannot currently be disabled but the frequency with which the SPE contacts the DC can be pushed out by configuring the “Refresh Interval” group policy setting and applying it to the clients hosting the SPE. By doing this the amount of traffic can be dramatically reduced.

Workaround:

1. Open an existing or create a new Group Policy Object.
2. Navigate to Computer Configuration > Policies > Administrative Templates > Gone Identity Password Manager > Generic Settings

.

3. Open the “Refresh Interval” policy setting
4. Enable it and enter a refresh interval value in minutes.

i.e.          1440 minutes = 24 hours

.

5. Save and apply the policy to the client computers.