Chat now with support
Chat with Support

Enterprise Single Sign-On 8.0.6 - Advanced Login for Windows User Guide

1 Overview 2 Logging on to Windows 3 Locking/Unlocking Your Windows Session 4 Switching Users Without Logging Off Windows (Fast User Switching) 5 Displaying Session Information (Windows XP/2003 only) 6 Shutting Down Your Workstation (Windows XP/2003 only) 7 Managing Your Password or PIN 8 Managing the Unblocking of Your Smart Card 9 Managing Your Windows Session Accounts 10 Managing Primary Accounts on Your Smart Card 11 Renewing your Smart Card Certificate(s) 12 Managing a Cluster from Your Workstation 13 Managing Session Delegation 14 Deleting Your Roaming Session 15 Logging on as an Administrator on a User Session Appendix A: Advanced Login Registry Keys Appendix B: Integrating Quest ESSO with Prim'X Cryhod

1.4 Welcome Screen

•
For the Windows XP/2003 welcome screen, see the Windows XP/2003 section below.
•
For the Windows 7/2008 welcome screen, see the Windows 7/2008 section below.
Windows XP/2003
The Advanced Login welcome screen is displayed at workstation start-up. It shows the logon methods that are allowed and installed on the workstation.
Advanced Login provides the following authentication methods:
•
User name/password authentication
Press Ctrl+Alt+Del to connect using your user name/password, as explained in 2.1 Logging on to Windows with Your User Name and Password.
•
Smart card authentication
Insert your smart card or USB key (if any), as explained in 2.2 Logging on to Windows with Your Smart Card.
•
Biometric authentication
Place your finger on the scanner (if any), as explained in 2.3 Logging on to Windows with Your Fingers.
•
RFID authentication
Use your RFID badge (if any), as explained in 2.4 Logging on to Windows with Your RFID Badge.
•
OTP authentication
Use your OTP (if any), as explained in 2.5 Logging on to Windows with Your OTP (One Time Password).
Advanced Login respects the Ctrl+Alt+Del key combination that you can configure in Windows.
Windows 7/2008
The initial authentication screen appears when you press Ctrl+Alt+Del at workstation startup, or when you want to switch users.
The initial authentication screen shows several tiles corresponding to the log on-methods (credential providers) which are allowed and installed on the workstation, and to the users logged on the workstation.
Several users can be logged at the same time on a workstation, but only one session can be active on the workstation.
Advanced Login provides the following authentication methods:
•
User name/password authentication
Several users can be logged at the same time on the workstation. The screen shows one tile for each logged user, or if no user is logged, it shows one tile with the name of the last logged user. The "Other User" tile allows another user to open a session.
See 2.1 Logging on to Windows with Your User Name and Password.
•
Smart card authentication
The initial authentication screen shows as many tiles as accounts stored on the smart card.
See 2.2 Logging on to Windows with Your Smart Card
•
Biometric authentication
See 2.3 Logging on to Windows with Your Fingers
•
RFID authentication
See 2.4 Logging on to Windows with Your RFID Badge
•
OTP authentication
See 2.5 Logging on to Windows with Your OTP (One Time Password)
•
Password forgotten
See 2.6 Logging on to Windows by Answering Questions
You can also use the Windows Remote Desktop Connection to open a Windows session remotely. When you authenticate yourself on a workstation, your credentials are transmitted to the remote workstation (Pass Through method) when authenticating on it.
When you open a Windows session with your smart card and then open another connection remotely, this new session is opened in password mode only. This limitation is a Microsoft limitation as Windows 7/2008 only send the login and password to the remote session.

2 Logging on to Windows

In this chapter:
•
2.1 Logging on to Windows with Your User Name and Password
•
2.2 Logging on to Windows with Your Smart Card
•
2.3 Logging on to Windows with Your Fingers
•
2.4 Logging on to Windows with Your RFID Badge
•
2.5 Logging on to Windows with Your OTP (One Time Password)
•
2.6 Logging on to Windows by Answering Questions
•
2.8 Logging on a Workstation Locked by Someone Else (Windows 7/2008 only)
•
2.9 Logging on to Windows using Autologon
•
2.10 Forcing Cache Update at Logon

2.1 Logging on to Windows with Your User Name and Password

Subject
This section explains how to connect to Windows with your user name and password through Active Directory or any other supported directories.
•
For the Windows XP/2003 procedure, see the Windows XP/2003 section below.
•
For the Windows 7/2008 procedure, see the Windows 7/2008 section below.
Windows XP/2003
Procedure
1.
In the Welcome window, press Ctrl+Alt+Del.
The authentication window appears.
If an RFID badge or a smart card is detected by the workstation, the RFID or smart card authentication window appears by default. In this case, press the Esc (Escape) key to open the login/password authentication window.
2.
Enter the following information and click OK.
a)
User: type your user name.
b)
Password: type your password.
c)
Connected to: select your domain (Active Directory), or Root (any other directory) or local session.
If you open a local session, you will not be protected by the advanced features of Quest ESSO.
 
For more information on the cache, see 2.10 Forcing Cache Update at Logon.
If you have a number of accounts in one or more domains, and/or if none of them is known to the Quest ESSO services, the following window prompts you to select the account to be used.
The Windows domain definition can be done with the Enterprise SSO Studio component of SSOWatch: define an application with a Windows application model. For more information on SSOWatch, see SSOWatch Administrator Guide.
3.
Select an account and click OK.
If the account is unknown, an error message appears, informing you that the system needs to collect your authentication data (login/password) and the data collection window appears.
Windows 7/2008
Procedure
1.
Press Ctrl+Alt+Del.
The initial authentication screen appears.
2.
If any, click the tile corresponding to your name, or if no tile shows your name, click the Other User tile.
The authentication screen appears. The following example window shows the Other User authentication tile.
3.
Do one of the following:
•
To log on to the domain displayed on screen, type you user name and password.
•
To log on to another domain than the one displayed on the screen, type <domain name>\<user name>.
If you need to open a local session (you will not be protected by the advanced features of Quest ESSO), type <workstation name>\<user name>.
4.
Click .
The Windows session opens.

2.2 Logging on to Windows with Your Smart Card

•
2.2.1 Logging on with a Smart Card Containing Account Data
•
2.2.2 Logging on with a Blank Smart Card
•
2.2.3 Logging on Through Prim’X Cryhod (Windows 7/2008 only)
•
2.2.4 Enrolling a New Account on a Smart Card (Windows 7/2008 Only)
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating