Chat now with support
Chat with Support

Identity Manager 8.1.5 - Secure Password Extension Administration Guide

Configuring Secure Password Extension

This section describes how to override automatic location of the Password Reset Portal and customize Secure Password Extension.

Detailed information about this topic

Specifying the Password Reset Portal location

You must manually specify the URL path of the Password Reset Portal.

To specify the Password Reset Portal location on a computer running Windows Server 2008 R2 or later

  1. In Windows, click Start and open the Run application.

  2. In the Run dialog, enter mmc and click OK.

  3. In the Console window in the File menu, click Add/Remove Snap-in.

  4. In the Add or Remove Snap-ins dialog in the list of available snap-ins, double-click Group Policy Management Editor.

  5. In the Group Policy Wizard window, click Browse, select Default Domain Policy, and click OK.

  6. Click Finish.

  7. In the Add or Remove Snap-ins dialog, click OK.

  8. In the Console window in the left pane, expand Default Domain Policy | Computer Configuration.

  9. Right-click the Administrative Templates node and select Add/Remove Templates.

  10. In the Add/Remove Templates dialog, click Add.

  11. In the file browser, browse for the prm_gina.adm or prm_gina.admx file, select it, and then click Open.

  12. In the Add/Remove Templates dialog, click Close.

  13. Perform one of the following actions:

    • If you used the prm_gina.admx file: In the Console window under Computer Configuration, select the Administrative Templates node and then, on the right pane, double-click the One Identity Password Manager template.

    • If you used the prm_gina.adm file: In the Console window under Computer Configuration, select the Classic Administrative Templates (ADM) node and then, on the right pane, double-click the One Identity Password Manager template.

  14. Double-click Generic Settings.

  15. Double-click Specify URL path to the Self-Service site.

  16. In the Specify URL path to the Self-Service site window in the Settings tab, select the Enabled option.

  17. In the field, enter the URL path to the Password Reset Portal.

  18. Click OK.

  19. Double-click Override URL path to the Self-Service site.

  20. In the Settings tab, select the Enabled option.

  21. Click OK.

  22. Apply the updated policy to the computers in the managed domain.

NOTE: Application of the updated policy to the computers in the managed domain may take some time to complete.

Customizing the logo for Secure Password Extension

You can change the logo for Secure Password Extension that is displayed on end-user computers.

To deploy a custom logo for Secure Password Extension on end-user computers

  1. Create a startup script to deploy your logo image.

    TIP: See the sample script following this procedure.

  2. Create your logo image file and place it on a network share that is accessible to all network hosts on which the script is run.

  3. In Windows, click Start and open the Run application.

  4. In the Run dialog, enter gpmc.msc and click OK.

  5. In the Group Policy Management Editor window, open the GPO that includes the prm_gina.adm administrative template.

  6. Expand Computer Configuration | Administrative Templates | One IdentityPassword Manager | Pre-Windows Vista Settings and click Secure Password Extension Logo.

  7. Enable the Set dialogue background image policy setting by specifying a local path to the logo image file on end-user computers.

    NOTE: The local path you specify in these policy settings must be the same as in the startup script specified later in this section.

  8. Expand Computer configuration | Windows Settings and click Scripts (Startup/Shutdown).

  9. In the right pane, double-click Startup.

  10. In the Startup Properties window, click Add.

  11. In the Add a Script dialog, click Browse and browse for the script file you have created in step 1.

  12. Specify the script parameters.

  13. Click OK.

The following example startup script is a batch file that runs on end-user computers during the system startup, and copies the custom logo image from the network share to a local folder:

IMPORTANT:[SharedDir] is a shared domain directory that must be available during startup.

The script lines containing target paths must be entered as a single line. The lines are wrapped in this article only for readability purposes.

@echo off
rem "SPE startup script"
rem *Check target directory existence*
if exist "c:\Program Files\One Identity\Secure Password Extension"
goto :COPY_FILE
md "c:\Program Files\One Identity\Secure Password Extension"
rem *Copy BMP image - %1*
:COPY_FILE
copy [SharedDir]\%1 "c:\Program Files\One Identity\Secure Password Extension\"
rem pause
:out
@echo off
rem "SPE startup script"
rem *Check target directory existence*
if exist "c:\Program Files\One Identity\Secure Password Extension"
goto :COPY_FILE
md "c:\Program Files\One Identity\Secure Password Extension"
rem *Copy BMP image - %1*
:COPY_FILE
copy [SharedDir]\%1 "c:\Program Files\One Identity\Secure Password Extension\"
rem pause
:out

Customizing position of the Secure Password Extension window

You can specify the position of the Secure Password Extension window on the login screen of end-user computers.

To change the position of the Secure Password Extension window on end-user computers

  1. In Windows, click Start and open the Run application.

  2. In the Run dialog, enter gpmc.msc and click OK.

  3. In the Group Policy Management Editor window, open the GPO that includes the prm_gina.adm administrative template.

  4. Expand Computer Configuration | Administrative Templates | One IdentityPassword Manager | Pre-Windows Vista Settings | Secure Password Extension Window Settings and enable the Set Secure Password Extension Window Position policy by specifying the position of the Secure Password Extension window on the Windows login screen of end-user computers.

  5. Click OK.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating