Chat now with support
Chat with Support

Enterprise Single Sign-On 8.0.6 - Advanced Login for Windows User Guide

1 Overview 2 Logging on to Windows 3 Locking/Unlocking Your Windows Session 4 Switching Users Without Logging Off Windows (Fast User Switching) 5 Displaying Session Information (Windows XP/2003 only) 6 Shutting Down Your Workstation (Windows XP/2003 only) 7 Managing Your Password or PIN 8 Managing the Unblocking of Your Smart Card 9 Managing Your Windows Session Accounts 10 Managing Primary Accounts on Your Smart Card 11 Renewing your Smart Card Certificate(s) 12 Managing a Cluster from Your Workstation 13 Managing Session Delegation 14 Deleting Your Roaming Session 15 Logging on as an Administrator on a User Session Appendix A: Advanced Login Registry Keys Appendix B: Integrating Quest ESSO with Prim'X Cryhod

3.1 Locking Your Session

Subject
The Lock state enables you to prevent anybody from accessing your session when you are away. This section describes the possible means to lock a session that is on its own or in a cluster.
Procedure
To lock the computer, do one of the following:
•
Press the Windows+L keys.
•
This either locks the:
•
Keyboard and mouse.
•
Keyboard and mouse with a logo displayed in the middle and at the top of the screen:
In case of multiple screens, the logo is displayed only on the main screen.
•
Workstation.
•
If you have authenticated with a smart card, remove the smart card from the reader (or a USB key from its port):
•
Windows XP/2003: do not take any action for 10 seconds.
•
Windows 7/2008: your session is locked automatically.
The administrator can modify the default workstation behavior when a token is removed, from Quest ESSO Console. If the session is not locked at token removal, it means that your administrator has modified this option.
•
If you have authenticated with an RFID badge, place the RFID badge outside the visibility area (lock area).
•
Put the computer into a sleep state.

3.2 Unlocking Your Session

To unlock your session, you must re-authenticate at session opening. The authentication method does not necessarily need to be the same as for opening the main session.
If you have authenticated yourself with an RFID badge and locked the session by moving outside the unlock area, the session is automatically unlocked if you come back with your RFID badge in the unlock area before the grace period (which has been set by your administrator).
A workstation can only be unlocked by the user who has locked it (unless it is unlocked using the Fast User Switching option).
A user with administration rights on the workstation can force the closure of a locked administration session.
Also in this chapter:
•
3.2.1 Standard Unlocking
•
3.2.2 Transparent Unlocking

3.2.1 Standard Unlocking

Procedure
To unlock the session, do one of the following:
•
User name and password authentication: log on as described in 2.1, "Logging on to Windows with Your User Name and Password".
•
Smart card authentication: go to step 2 of 2.2.1, "Logging on with a Smart Card Containing Account Data". If you do not have your smart card with you, press the Ctrl+Alt+Del keys and log on using your Windows password. Refer to Quest ESSO Installation Guide to insert the corresponding registry keys.
•
Biometric authentication: log on as in 2.3.2, "Everyday Log on".
•
RFID authentication: place your RFID badge inside the unlock area. If the grace period has:
•
Exceeded, log on as described in 2.4.3, "Everyday Log on".
•
Not exceeded, the session is automatically unlocked.
The grace period is set by your administrator
•
OTP authentication: enter your OTP: see 2.5, "Logging on to Windows with Your OTP (One Time Password)".

3.2.2 Transparent Unlocking

Procedure
To unlock the session, do one of the following:
•
User name and password authentication; depending on your Windows version, do one of the following:
•
Windows XP/2003: log on as described in section 2.1, "Logging on to Windows with Your User Name and Password".
•
Windows 7/2008: Press the Windows+L keys and go to step 2 of section 2.1, "Logging on to Windows with Your User Name and Password".
•
Smart card authentication: insert your smart card (if any) and go to step 2 of 2.2.1, "Logging on with a Smart Card Containing Account Data". If you do not have your smart card with you, press the Windows+L keys and log on using your Windows password. Refer to Quest ESSO Installation Guide to insert the corresponding registry keys.
•
Biometric authentication: depending on your Windows version, do one of the following:
•
Windows XP/2003: log on as described in 2.3.2, "Everyday Log on".
•
Windows 7/2008: Press the Windows+L keys and go to 2.3.2, "Everyday Log on".
•
RFID authentication: place your RFID badge inside the unlock area. If the grace period has:
•
Exceeded, log on as described in 2.4, "Logging on to Windows with Your RFID Badge".
•
Not exceeded, the session is automatically unlocked.
The grace period is set by your administrator
•
OTP authentication: enter your OTP: see 2.5, "Logging on to Windows with Your OTP (One Time Password)".
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating