HP ProLiant xw2x220c Remote Graphics Software 5.3.0 User Guide - Page 62

Setting the local security policy, Disabling Single Sign-on

Page 62 highlights

4. Set the value of the GinaDLL key to the text "hprgina.dll". Confirm the spelling before closing. Figure 3-14 shows the registry key contents. Figure 3-14 Addition of the GinaDLL key to the registry 5. Add the GinaDllMode registry key if does not already exist. This can be done through the use of regedit as well. Create the key as type RGS_SZ (a string type). The full path of the key is: HKEY_LOCAL_MACHINE\Software\Hewlett-Packard\Remote Graphics Sender\GinaDllMode 6. To actually enable Single Sign-on, set the value of the GinaDllMode key to the text "HprSso". Confirm the spelling before closing. Figure 3-15 shows the registry key contents. Figure 3-15 Addition of the GinaDllMode key to the registry 7. Restart the computer. The hprgina.dll module will be loaded by WinLogon when started. Summary-If the GinaDLL key does not currently exist in the registry, Microsoft's default GINA DLL (msgina.dll) is loaded by WinLogon. Adding the GinaDLL registry key, and setting its value to hprgina.dll, informs WinLogon to load hprgina.dll instead of the default msgina.dll. Setting the local security policy The local security policy "Interactive logon: Do not require CTRL-ALT-DEL" must be disabled to support Single Signon. This can be set in the Windows "Local Security Settings" under "Security Options." The RGS Diagnostics Tool programmatically detects if this local security policy is set correctly. See the section "Using the RGS Diagnostics Tool on Windows" for information on this tool. NOTE: Creating the GinaDLL registry key disables Window's "Fast User Switching" and "Welcome Screen" features. Disabling Single Sign-on There are two methods to disable Single Sign-on: 1. Using the rgadmin tool to disable Single Sign-on The rgadmin tool shown in Figure 3-13 can be used to disable Single Sign-on. Using the rgadmin tool to disable Single Sign-on is preferred over the manual method, described next. 2. Manually disabling Single Sign-on To disable Single Sign-on without using the rgadmin tool, delete or rename the value of the GinaDLL registry key. If there is no other custom GINA module on the computer, simply removing the GinaDLL key definition from the registry entry below disables Single Sign-on. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL CAUTION: If the value of the GinaDLL key contains the name of a custom GINA DLL, and the file does not exist in C:\WINDOWS\system32, the computer will not start correctly after the next reboot. The computer will then require a complete re-installation of the operating system. The GinaDLL key is removed using regedit, the Windows Registry Editor. Be sure to actually remove the key by selecting the GinaDLL key in regedit, and select the Delete entry in the Edit menu. Once the key is Installing RGS 62

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196

Installing RGS 62
4.
Set the value of the
GinaDLL
key to the text "
hprgina.dll"
. Confirm the spelling before closing. Figure
3-14 shows the registry key contents.
Figure 3-14
Addition of the GinaDLL key to the registry
5.
Add the
GinaDllMode
registry key if does not already exist. This can be done through the use of
regedit
as well. Create the key as type
RGS_SZ
(a string type). The full path of the key is:
HKEY_LOCAL_MACHINE\Software\Hewlett-Packard\Remote Graphics Sender\GinaDllMode
6.
To actually enable Single Sign-on, set the value of the
GinaDllMode
key to the text "
HprSso"
. Confirm the
spelling before closing. Figure 3-15 shows the registry key contents.
Figure 3-15
Addition of the GinaDllMode key to the registry
7.
Restart the computer. The
hprgina.dll
module will be loaded by
WinLogon
when started.
Summary
—If the
GinaDLL
key does not currently exist in the registry, Microsoft's default GINA DLL
(
msgina.dll
) is loaded by
WinLogon
. Adding the
GinaDLL
registry key, and setting its value to
hprgina.dll,
informs
WinLogon
to load
hprgina.dll
instead of the default
msgina.dll
.
Setting the local security policy
The local security policy "
Interactive logon: Do not require CTRL-ALT-DEL
" must be
disabled
to support Single Sign-
on. This can be set in the Windows "Local Security Settings" under "Security Options." The RGS Diagnostics Tool
programmatically detects if this local security policy is set correctly. See the section “
Using the RGS Diagnostics
Tool on Windows
” for information on this tool.
NOTE:
Creating the
GinaDLL
registry key disables Window's "Fast User Switching" and "Welcome Screen"
features.
Disabling Single Sign-on
There are two methods to disable Single Sign-on:
1. Using the
rgadmin
tool to disable Single Sign-on
The
rgadmin
tool shown in Figure 3-13 can be used to disable Single Sign-on. Using the
rgadmin
tool to
disable Single Sign-on is preferred over the manual method, described next.
2. Manually disabling Single Sign-on
To disable Single Sign-on without using the
rgadmin
tool, delete or rename the value of the
GinaDLL
registry
key. If there is no other custom GINA module on the computer, simply removing the
GinaDLL
key definition from
the registry entry below disables Single Sign-on.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL
The
GinaDLL
key is removed using
regedit
, the Windows Registry Editor. Be sure to actually remove the key by
selecting the
GinaDLL
key in
regedit,
and select the
Delete
entry in the
Edit
menu. Once the key is
CAUTION:
If the value of the
GinaDLL
key contains the name of a custom GINA DLL, and the file does not
exist in
C:\WINDOWS\system32
, the computer will not start correctly after the next reboot. The computer will
then require a complete re-installation of the operating system.