返回
-
标题
Defender Desktop Login user has lost token and cannot login to laptop when offline -
说明
When generating a temporary response for a user that has lost their token, the user receives the error, “Invalid Synchronous Response. Enter Synchronous Response" when attempting to login to their laptop, when the laptop is offline.A user needs offline access to their system but has lost their assigned token. A helpdesk token has been assigned, but it is not working. Is there any solution in this scenario?
-
原因
The "Helpdesk" option generates a unique temporary response, and updates the data stored in AD along with details on the validity period, and allowed uses. The Defender desktop login caches this information from AD on a online login (or if offline when network connectivity is restored. ). Without network connectivity the Desktop Login client does not know the response, temporary responses will not work when Desktop Login is in offline mode.
Assigning a helpdesk token in this case won't help. If the hardware token has been lost a new one will need to be assigned to the user, and the user will need to log back into the system while it's online to rebuild the offline cache.
-
解决办法
Connect the laptop to the network to restore communication with the Defender Security Server and Active Directory.
The user should login when connected to the network, Defender will create an offline cache for all assigned tokens to ensure they will allow for authentication when in offline mode.
If users losing their assigned tokens is a potential issue, it may be a good idea to assign multiple tokens so that the user has a backup.
If local administrators are listed on the "Exclusions" tab for Desktop Login, they can log in locally and bypass the Defender authentication.